last executing test programs: 3m4.725452128s ago: executing program 1 (id=1949): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast1, @initdev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@deltfilter={0x1848, 0x2d, 0x0, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x3}, {0x2, 0xf}, {0x5, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x3ff}, @TCA_RATE={0x6, 0x5, {0xf8, 0x9}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xf}}]}}, @TCA_CHAIN={0x0, 0xb, 0x100}, @TCA_CHAIN={0x8}, @TCA_RATE={0x0, 0x5, {0x9, 0xe}}]}, 0x1848}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xffb) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xa, 0x418880) ioctl$USBDEVFS_BULK(r7, 0xc0105502, &(0x7f00000002c0)={{{0x8}}, 0x7d, 0x0, &(0x7f0000000240)="76a07fdfd91b3d6c1e06ed6d6c6cbc7c42f4f31cab2b0b4df73634389e26a297361b4e35037720025761a7c06670188e3fcb5e74d5e5042549e7691b24d2f3bb72c36f77db78b53dbaf7aed8aa5a445495f54faf2d8fbe6ea4becb868b21af64b4c43dd6c2fc3a0f3b6690f28d785e8302631152c209235abc7045c65c"}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="ad4300000000009c260821"], 0x14}}, 0x0) ppoll(&(0x7f0000000200)=[{r3, 0x100}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x4, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x30, 0x1, 0x0, 0xffffffffffffff9c, 0x0, 'syz1\x00', 0x0}) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x4001) socket$netlink(0x10, 0x3, 0x7) 3m3.657435744s ago: executing program 1 (id=1953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000180)) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xeeef0000, 0x1000, &(0x7f0000004000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) capget(&(0x7f0000feaff9)={0x20071026}, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="0f8c4d7d0f38cae866b9800000c00f326635000400000f30660f2c0c839c993d550f01c80f01cf0000baf80c66b83c199b8766efbafc0c66eddad2", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m3.336731876s ago: executing program 1 (id=1954): openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') syz_open_dev$cec(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000001c80)='.\x00', 0x0) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m2.497648576s ago: executing program 1 (id=1959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x113, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf, 0xff}, [@RTA_NH_ID={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r2, &(0x7f00000000c0)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x8914, 0x20000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) close(r1) 3m2.463247647s ago: executing program 1 (id=1960): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_io_uring_setup(0x2955, &(0x7f0000000400)={0x0, 0xfffffffe, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8045}, 0x40000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000864000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x118, &(0x7f00000000c0)=0x3ff, 0x0, 0x4) write$binfmt_script(r7, 0x0, 0x0) close_range(r6, r7, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000000)={0x2, 0xeeee0000, 0x9, 0xe26622ba09e29e9e, 0x400}) 3m2.146981223s ago: executing program 1 (id=1964): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r2, 0x120, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x14}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x8040040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) 3m2.096920823s ago: executing program 32 (id=1964): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r2, 0x120, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x14}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x8040040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) 7.024689915s ago: executing program 4 (id=2740): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @remote, 0xb27}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x40, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xd}}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0x9e0) r6 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000300000001"], 0x31) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, 0x0, 0x20000081) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0', @ANYRES16=r7, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0a00340002020202020200000400cc0004001501"], 0x30}}, 0x0) 5.74505381s ago: executing program 4 (id=2746): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) unshare(0x44040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB]) r2 = syz_open_dev$amidi(0x0, 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) lseek(r3, 0x1003ff, 0x4) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000000)={0x0, 0x3e, ""/62}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 5.273740341s ago: executing program 2 (id=2747): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, &(0x7f00000000c0)=0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x3fff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@remote, @empty, r2}, 0xc) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_sctp(0x2, 0x1, 0x84) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4.585850103s ago: executing program 0 (id=2749): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="032e000000000000500012800e0001006970366772657461700000003c000280060011004e22000014000700feffffff0000000000000000000000010400120008000c000300000006001800000000000800", @ANYRES8, @ANYBLOB='\b\x00\n'], 0x80}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = io_uring_setup(0x344f, 0x0) r2 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r5}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0x3}, {0x5, 0x7}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4002}, 0x4000004) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, 0x0}) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x0, r7}) connect$netrom(r7, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800), 0x0) 4.289598309s ago: executing program 2 (id=2758): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4, 0x0, 0x1}, 0x18) lsm_list_modules(0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, 0x0) lremovexattr(0x0, 0x0) 4.218393944s ago: executing program 4 (id=2751): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @remote, 0xb27}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x40, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xd}}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0x9e0) r6 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000300000001"], 0x31) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, 0x0, 0x20000081) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0', @ANYRES16=r7, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0a00340002020202020200000400cc0004001501"], 0x30}}, 0x0) 3.23423119s ago: executing program 2 (id=2752): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0xfff, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x3, 0x5, 0x2, 0x401, 0x9, 0x2, 0x1]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x201, 0x0) getegid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}]}}, @TCA_RATE={0x6}]}, 0x40}}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3.233858558s ago: executing program 0 (id=2753): syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x20c00) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x3a, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) msgsnd(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x54, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) 3.21050271s ago: executing program 3 (id=2754): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0) 3.151020413s ago: executing program 0 (id=2755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc786", 0x4b, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f00000004c0)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000480)=@secondary) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8) 2.963440131s ago: executing program 4 (id=2756): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000140), 0x12f801, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000180)={0x0, 0x0, {0x7, 0x4, 0x3, 0x8}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_setup(0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendfile(r3, 0xffffffffffffffff, 0x0, 0x1000) creat(0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x102) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x16) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$ttyprintk(0xffffff9c, &(0x7f0000000200), 0x20000, 0x0) close(r6) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000080)={0x25, 0x39, 0x8, 0x7, 0xa, 0x80, 0x4, 0xf, 0xffffffffffffffff}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000121401000000001e0000000008004f000000000008004b0013000f0008000300000000010800150000000000080001284d126bc74413864e517e9c1891cb1230582affac362695f9e9bce91494d8ed7799539f4139992914f50063d1ccff7e78987492da9bb1d4a0eef78c301c893af363f7bdb610f2389bddcb53cf5c304b90fa76452074f88f9bce8cfaace47b9bb7bd50f039ebd24e1b2edce1ae82025a3db690567a165d26c36f088813d6e3adb57ff9ec6f57da8fb6ed527c580de9b25e23f634a3d0b25e4715ef1c4bb82be2acf1167fd975c33322532a9b9ce9107528940351b6eb842f2937b8e21499d2f22b357550b3cf60e658344ee4357cc30fc0858bbcfde395c66193891170be9adbe49f6a1d7ef54f811600508967e75d7d5d8b"], 0x38}}, 0x10) 2.14161784s ago: executing program 3 (id=2757): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800010000000000000000001d01080008"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) personality(0x400000b) pselect6(0x0, 0x0, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x90000, 0x4}, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x3, 0x2) splice(r4, 0x0, r3, 0x0, 0x100000004, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000003c0)=0x8, 0x4) 2.136524115s ago: executing program 0 (id=2766): syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r1}, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.034992382s ago: executing program 2 (id=2759): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x1a, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x7fff, 0x2, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x6}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x3300}) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x2f, {}, {}, @raw32}, {0x0, 0x2, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) r4 = openat$dsp(0xffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000300)=0x401) 2.026796256s ago: executing program 0 (id=2768): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r2, 0x120, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x14}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x8040040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) 1.848415607s ago: executing program 4 (id=2760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$autofs(0xffffff9c, 0x0, 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a000000000000000000000000000014000000060a0000000000000000000008000000140000001100010000000000000000000000000a"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x4b0}}, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x3000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.265321811s ago: executing program 3 (id=2761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x20000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="76ea092000000000009bb5606c1e", 0x0, 0x2f00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000040000000000000000079120cde0000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0x1, {0x0, 0x1}, {0x48, 0xfbff}, @rumble={0xf, 0xff}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'veth0_to_bridge\x00'}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) set_thread_area(&(0x7f00000001c0)={0x2, 0x20000800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a4, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3dc, 0xffffffff, 0xffffffff, 0x3dc, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x1b8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @private1, [], [], 'pimreg1\x00', 'wlan1\x00'}, 0x0, 0x1bc, 0x224, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x500) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r9, 0x80404518, &(0x7f00000012c0)=""/198) 1.183005205s ago: executing program 3 (id=2762): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="032e000000000000500012800e0001006970366772657461700000003c000280060011004e22000014000700feffffff0000000000000000000000010400120008000c000300000006001800000000000800", @ANYRES8, @ANYBLOB='\b\x00\n'], 0x80}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = io_uring_setup(0x344f, 0x0) r2 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r5}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0x3}, {0x5, 0x7}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4002}, 0x4000004) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, 0x0}) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x0, r7}) connect$netrom(r7, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800), 0x0) 965.237428ms ago: executing program 0 (id=2763): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4, 0x0, 0x1}, 0x18) lsm_list_modules(0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, 0x0) lremovexattr(0x0, 0x0) 964.886592ms ago: executing program 2 (id=2764): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r2, 0x120, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x14}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x8040040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) 761.083972ms ago: executing program 4 (id=2765): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @remote, 0xb27}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x40, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xd}}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0x9e0) r6 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000300000001"], 0x31) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, 0x0, 0x20000081) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0', @ANYRES16=r7, @ANYBLOB="050000000000000000002e000000080003006e995f7333bd64", @ANYRES32=r5, @ANYBLOB="0a00340002020202020200000400cc0004001501"], 0x30}}, 0x0) 275.102843ms ago: executing program 3 (id=2767): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, &(0x7f00000000c0)=0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x3fff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@remote, @empty, r2}, 0xc) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_sctp(0x2, 0x1, 0x84) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 639.168µs ago: executing program 3 (id=2769): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0xfff, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x3, 0x5, 0x2, 0x401, 0x9, 0x2, 0x1]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x201, 0x0) getegid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}]}}, @TCA_RATE={0x6}]}, 0x40}}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) 0s ago: executing program 2 (id=2770): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x3}, 0xfffffffffffffcc1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) cachestat(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r5, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) r6 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x20, 0x961c0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0xb0601) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)='2', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): i_hcd vhci_hcd.0: Device attached [ 557.526987][T14616] block nbd2: shutting down sockets [ 557.605939][ T6062] vhci_hcd: vhci_device speed not set [ 557.675626][ T6062] usb 37-1: new full-speed USB device number 31 using vhci_hcd [ 557.695562][ T62] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 557.856894][ T62] usb 5-1: config 0 has no interfaces? [ 557.858461][ T62] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 557.860744][T14630] block nbd2: shutting down sockets [ 557.860877][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.872325][ T62] usb 5-1: config 0 descriptor?? [ 558.079082][T14622] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 33 [ 558.082342][ T62] usb 5-1: USB disconnect, device number 85 [ 558.104840][ T1213] vhci_hcd: stop threads [ 558.106773][ T1213] vhci_hcd: release socket [ 558.108868][ T1213] vhci_hcd: disconnect device [ 558.351691][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 558.351707][ T39] audit: type=1326 audit(1734391651.687:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.4.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 558.364846][ T39] audit: type=1326 audit(1734391651.687:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.4.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 558.370912][ T39] audit: type=1326 audit(1734391651.687:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.4.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 558.376637][ T39] audit: type=1326 audit(1734391651.687:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.4.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 558.382223][ T39] audit: type=1326 audit(1734391651.687:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.4.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 558.387913][ T39] audit: type=1326 audit(1734391651.687:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.4.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 558.393465][ T39] audit: type=1326 audit(1734391651.687:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.4.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 558.399089][ T39] audit: type=1326 audit(1734391651.687:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.4.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 558.405537][ T39] audit: type=1326 audit(1734391651.687:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.4.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 558.411866][ T39] audit: type=1326 audit(1734391651.687:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz.4.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 558.825540][ T1451] vhci_hcd: vhci_device speed not set [ 559.625586][ T62] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 559.698662][T14678] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2119'. [ 559.746747][T14678] binder: 14676:14678 ioctl c0306201 20000400 returned -14 [ 559.787541][ T62] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 559.790149][ T62] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 559.793731][ T62] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 559.797584][ T62] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 559.801293][ T62] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 559.807716][ T62] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 559.810778][ T62] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 559.813162][ T62] usb 9-1: Product: syz [ 559.814304][ T62] usb 9-1: Manufacturer: syz [ 559.827127][ T62] cdc_wdm 9-1:1.0: skipping garbage [ 559.829002][ T62] cdc_wdm 9-1:1.0: skipping garbage [ 559.833351][ T62] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 559.835042][ T62] cdc_wdm 9-1:1.0: Unknown control protocol [ 560.080057][T14701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.083327][T14701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.087985][ C2] wdm_int_callback: 25 callbacks suppressed [ 560.088005][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 560.091138][ T56] usb 9-1: USB disconnect, device number 3 [ 560.092523][ C2] wdm_int_callback: 25 callbacks suppressed [ 560.092539][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 560.092560][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 560.199525][T14708] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 560.201195][T14708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 560.203654][T14708] vhci_hcd vhci_hcd.0: Device attached [ 560.385848][ T1451] vhci_hcd: vhci_device speed not set [ 560.445606][ T1451] usb 43-1: new full-speed USB device number 34 using vhci_hcd [ 562.503508][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 562.735529][ T56] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 562.825643][ T6062] vhci_hcd: vhci_device speed not set [ 562.915354][ T56] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 562.917987][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.920591][ T56] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 562.922914][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.968988][ T56] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 562.972020][ T56] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 562.974726][ T56] usb 5-1: Product: syz [ 562.976687][ T56] usb 5-1: Manufacturer: syz [ 562.980801][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 562.982508][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 562.984821][ T56] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 562.986887][ T56] cdc_wdm 5-1:1.0: Unknown control protocol [ 563.320065][T14709] vhci_hcd: connection reset by peer [ 563.324508][ T1213] vhci_hcd: stop threads [ 563.329738][ T1213] vhci_hcd: release socket [ 563.331544][ T1213] vhci_hcd: disconnect device [ 564.235599][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2135'. [ 565.086282][T14790] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 565.088752][T14790] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 565.091597][T14790] vhci_hcd vhci_hcd.0: Device attached [ 565.480551][ T6888] usb 5-1: USB disconnect, device number 86 [ 568.011790][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 568.090656][T14791] vhci_hcd: connection reset by peer [ 568.093238][ T215] vhci_hcd: stop threads [ 568.094474][ T215] vhci_hcd: release socket [ 568.105257][ T215] vhci_hcd: disconnect device [ 568.165565][ T1451] vhci_hcd: vhci_device speed not set [ 568.315578][ T56] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 568.393185][T14833] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 568.475675][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 568.479483][ T56] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 568.482160][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 568.486791][ T56] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 568.490762][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 568.494466][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 568.499100][ T56] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 568.501042][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 568.504102][ T56] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 568.507993][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 568.511817][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 568.517152][ T56] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 568.519620][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 568.522735][ T56] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 568.527434][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 568.530977][ T56] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 568.538501][ T56] usb 5-1: string descriptor 0 read error: -22 [ 568.540769][ T56] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 568.543915][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.551103][ T56] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 568.756328][ T25] usb 5-1: USB disconnect, device number 87 [ 569.721393][T14861] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 569.723117][T14861] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 569.725325][T14861] vhci_hcd vhci_hcd.0: Device attached [ 569.905909][ T63] vhci_hcd: vhci_device speed not set [ 569.975574][ T1017] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 569.995955][ T63] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 570.137579][ T1017] usb 9-1: config 0 has no interfaces? [ 570.139048][ T1017] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 570.141317][ T1017] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.145144][ T1017] usb 9-1: config 0 descriptor?? [ 570.349440][T14862] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 570.354480][ T1017] usb 9-1: USB disconnect, device number 4 [ 570.355256][ T1213] vhci_hcd: stop threads [ 570.357943][ T1213] vhci_hcd: release socket [ 570.359469][ T1213] vhci_hcd: disconnect device [ 570.707124][T14867] syz.0.2161: attempt to access beyond end of device [ 570.707124][T14867] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 570.711520][T14867] syz.0.2161: attempt to access beyond end of device [ 570.711520][T14867] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 570.715002][T14867] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 570.719023][T14867] syz.0.2161: attempt to access beyond end of device [ 570.719023][T14867] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 570.723060][T14867] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 570.727324][T14867] syz.0.2161: attempt to access beyond end of device [ 570.727324][T14867] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 570.730951][T14867] syz.0.2161: attempt to access beyond end of device [ 570.730951][T14867] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 570.735180][T14867] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 570.739183][T14867] syz.0.2161: attempt to access beyond end of device [ 570.739183][T14867] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 570.742527][T14867] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 570.745099][T14867] syz.0.2161: attempt to access beyond end of device [ 570.745099][T14867] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 570.751446][T14867] syz.0.2161: attempt to access beyond end of device [ 570.751446][T14867] nbd0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 570.755795][T14867] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 570.758804][T14867] syz.0.2161: attempt to access beyond end of device [ 570.758804][T14867] nbd0: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 570.762288][T14867] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 570.764986][T14867] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 575.145573][ T63] vhci_hcd: vhci_device speed not set [ 576.264238][T14974] 9pnet_virtio: no channels available for device syz [ 576.431352][T14980] snd_dummy snd_dummy.0: control 6:0:0:syz0:0 is already present [ 576.821280][T14990] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 576.823073][T14990] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 576.826676][T14990] vhci_hcd vhci_hcd.0: Device attached [ 577.015556][ T5981] vhci_hcd: vhci_device speed not set [ 577.075518][ T5981] usb 37-1: new full-speed USB device number 32 using vhci_hcd [ 577.077596][ T1017] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 577.236999][ T1017] usb 5-1: config 0 has no interfaces? [ 577.238500][ T1017] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 577.240855][ T1017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.246863][ T1017] usb 5-1: config 0 descriptor?? [ 577.452832][T14991] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 34 [ 577.454496][ T1017] usb 5-1: USB disconnect, device number 88 [ 577.456683][ T215] vhci_hcd: stop threads [ 577.457900][ T215] vhci_hcd: release socket [ 577.459114][ T215] vhci_hcd: disconnect device [ 577.957889][T15012] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2194'. [ 578.058502][T15012] binder: 15010:15012 ioctl c0306201 20000400 returned -14 [ 578.266045][T15015] 9pnet_virtio: no channels available for device syz [ 580.645704][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 580.895540][T15072] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 580.897375][T15072] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 580.899400][T15072] vhci_hcd vhci_hcd.0: Device attached [ 581.075835][ T56] vhci_hcd: vhci_device speed not set [ 581.135617][ T1320] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 581.138269][ T56] usb 45-1: new full-speed USB device number 4 using vhci_hcd [ 581.328121][ T1320] usb 9-1: config 0 has no interfaces? [ 581.329619][ T1320] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 581.332041][ T1320] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.336543][ T1320] usb 9-1: config 0 descriptor?? [ 581.542080][T15073] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 581.543417][ T1017] usb 9-1: USB disconnect, device number 5 [ 581.546448][ T45] vhci_hcd: stop threads [ 581.547665][ T45] vhci_hcd: release socket [ 581.550000][ T45] vhci_hcd: disconnect device [ 582.127280][T15096] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2209'. [ 582.129741][T15096] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2209'. [ 582.132628][T15096] unsupported nlmsg_type 40 [ 582.175583][ T5981] vhci_hcd: vhci_device speed not set [ 582.407668][T15110] workqueue: name exceeds WQ_NAME_LEN. Truncating to: þÜ»}ÆÓž»räءÑV§ïj×ì·Pbô [ 583.352869][T15141] binder: 15134:15141 ioctl c0306201 0 returned -14 [ 584.106811][T15150] syz.4.2216: attempt to access beyond end of device [ 584.106811][T15150] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 584.111070][T15150] syz.4.2216: attempt to access beyond end of device [ 584.111070][T15150] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 584.114604][T15150] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 584.120357][T15150] syz.4.2216: attempt to access beyond end of device [ 584.120357][T15150] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 584.123840][T15150] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 584.128410][T15150] syz.4.2216: attempt to access beyond end of device [ 584.128410][T15150] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 584.131962][T15150] syz.4.2216: attempt to access beyond end of device [ 584.131962][T15150] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 584.135646][T15150] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 584.138234][T15150] syz.4.2216: attempt to access beyond end of device [ 584.138234][T15150] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 584.141692][T15150] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 584.144771][T15150] syz.4.2216: attempt to access beyond end of device [ 584.144771][T15150] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 584.148509][T15150] syz.4.2216: attempt to access beyond end of device [ 584.148509][T15150] nbd4: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 584.151943][T15150] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 584.154611][T15150] syz.4.2216: attempt to access beyond end of device [ 584.154611][T15150] nbd4: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 584.158162][T15150] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 584.160684][T15150] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 585.687771][T15187] binder: 15183:15187 ioctl c0306201 0 returned -14 [ 585.950291][T15194] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 586.574693][T15190] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 586.579403][T15190] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 586.588454][T15190] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 586.595580][ T56] vhci_hcd: vhci_device speed not set [ 586.642325][T15224] input: syz0 as /devices/virtual/input/input12 [ 587.705594][T12464] Bluetooth: hci0: command 0x0419 tx timeout [ 587.994024][T15236] syz.2.2230: attempt to access beyond end of device [ 587.994024][T15236] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 587.998816][T15236] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 588.002305][T15236] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 588.007771][T15236] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 588.011325][T15236] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 588.015042][T15236] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 588.018617][T15236] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 588.021988][T15236] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 588.366462][T15250] Cannot find add_set index 3 as target [ 588.722904][T15252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 588.726116][T15252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 588.729441][T15252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 588.732068][T15252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 588.734791][T15252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 588.737964][T15252] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 588.740514][T15252] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 589.815520][T12464] Bluetooth: hci0: command 0x0419 tx timeout [ 589.929522][T15284] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 589.931252][T15284] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 589.934436][T15284] vhci_hcd vhci_hcd.0: Device attached [ 590.105877][ T5981] vhci_hcd: vhci_device speed not set [ 590.167858][ T5981] usb 37-1: new full-speed USB device number 33 using vhci_hcd [ 590.195714][ T6888] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 590.220199][T15291] netlink: 'syz.2.2240': attribute type 21 has an invalid length. [ 590.366357][ T6888] usb 5-1: config 0 has no interfaces? [ 590.368651][ T6888] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 590.372501][ T6888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.381659][ T6888] usb 5-1: config 0 descriptor?? [ 590.744888][T15285] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 35 [ 590.747988][ T6888] usb 5-1: USB disconnect, device number 89 [ 590.751222][ T12] vhci_hcd: stop threads [ 590.752387][ T12] vhci_hcd: release socket [ 590.753680][ T12] vhci_hcd: disconnect device [ 591.947149][T12464] Bluetooth: hci0: command 0x0419 tx timeout [ 595.189219][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2267'. [ 595.295516][ T5981] vhci_hcd: vhci_device speed not set [ 597.446606][T15448] nbd2: detected capacity change from 0 to 12 [ 597.449514][T14194] block nbd2: Send control failed (result -89) [ 597.449930][T15448] block nbd2: NBD_DISCONNECT [ 597.451146][T14194] block nbd2: Request send failed, requeueing [ 597.452716][ T6487] block nbd2: Dead connection, failed to find a fallback [ 597.452878][T12464] block nbd2: Receive control failed (result -32) [ 597.454409][ T6487] block nbd2: shutting down sockets [ 597.460063][ T6487] blk_print_req_error: 60 callbacks suppressed [ 597.460071][ T6487] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 597.460189][T15448] block nbd2: Send disconnect failed -89 [ 597.461667][ T6487] buffer_io_error: 60 callbacks suppressed [ 597.461674][ T6487] Buffer I/O error on dev nbd2, logical block 0, async page read [ 597.470024][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 597.472410][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 597.474550][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 597.477490][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 597.479787][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 597.482488][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 597.484623][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 597.487966][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 597.490128][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 597.492939][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 597.495131][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 597.499775][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 597.501790][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 597.504453][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 597.507435][T14194] ldm_validate_partition_table(): Disk read failed. [ 597.509303][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 597.512064][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 597.514137][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 597.518955][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 597.521232][T14194] Dev nbd2: unable to read RDB block 0 [ 597.523862][T14194] nbd2: unable to read partition table [ 597.525502][T14194] nbd2: partition table beyond EOD, truncated [ 597.643049][T14194] ldm_validate_partition_table(): Disk read failed. [ 597.644892][T14194] Dev nbd2: unable to read RDB block 0 [ 597.646576][T14194] nbd2: unable to read partition table [ 597.649598][T14194] nbd2: partition table beyond EOD, truncated [ 598.571211][ T39] kauditd_printk_skb: 26 callbacks suppressed [ 598.571223][ T39] audit: type=1326 audit(1734391691.857:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 598.585243][ T39] audit: type=1326 audit(1734391691.857:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 598.592958][ T39] audit: type=1326 audit(1734391691.857:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 598.601121][ T39] audit: type=1326 audit(1734391691.857:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 598.609197][ T39] audit: type=1326 audit(1734391691.857:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 598.617367][ T39] audit: type=1326 audit(1734391691.867:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 598.624850][ T39] audit: type=1326 audit(1734391691.867:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 598.630800][ T39] audit: type=1326 audit(1734391691.867:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 598.850752][ T39] audit: type=1326 audit(1734391691.867:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 598.870819][ T39] audit: type=1326 audit(1734391691.867:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.0.2290" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 599.716064][T15513] nbd0: detected capacity change from 0 to 12 [ 599.721230][T14194] block nbd0: Send control failed (result -89) [ 599.725898][T14194] block nbd0: Request send failed, requeueing [ 599.732122][T15516] block nbd0: NBD_DISCONNECT [ 599.734356][T14194] block nbd0: Disconnected due to user request. [ 599.741940][T15516] block nbd0: Send disconnect failed -89 [ 599.751610][T14194] ldm_validate_partition_table(): Disk read failed. [ 599.759520][T14194] Dev nbd0: unable to read RDB block 0 [ 599.761857][T14194] nbd0: unable to read partition table [ 599.763991][T14194] nbd0: partition table beyond EOD, truncated [ 599.768297][T14194] ldm_validate_partition_table(): Disk read failed. [ 599.770495][T14194] Dev nbd0: unable to read RDB block 0 [ 599.772366][T14194] nbd0: unable to read partition table [ 599.774027][T14194] nbd0: partition table beyond EOD, truncated [ 601.555784][T12464] Bluetooth: hci0: command 0x0419 tx timeout [ 601.724174][T15555] block device autoloading is deprecated and will be removed. [ 602.041231][T15558] input: syz0 as /devices/virtual/input/input13 [ 603.843781][T15572] delete_channel: no stack [ 605.393702][T15598] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 606.139427][T15625] netlink: 'syz.3.2318': attribute type 21 has an invalid length. [ 606.565493][T15631] nbd0: detected capacity change from 0 to 12 [ 606.568051][T15637] block nbd0: NBD_DISCONNECT [ 606.569757][T15637] block nbd0: Send disconnect failed -89 [ 606.574462][T14194] block nbd0: Send control failed (result -89) [ 606.576160][T14194] block nbd0: Request send failed, requeueing [ 606.577943][T14194] block nbd0: Disconnected due to user request. [ 606.587694][ T51] blk_print_req_error: 60 callbacks suppressed [ 606.587852][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 606.591878][ T51] buffer_io_error: 60 callbacks suppressed [ 606.591918][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 606.596814][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 606.599273][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 606.601860][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 606.604278][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 606.607842][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 606.615572][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 606.618610][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 606.622008][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 606.624946][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 606.628368][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 606.631238][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 606.634492][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 606.638437][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 606.640927][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 606.643034][T14194] ldm_validate_partition_table(): Disk read failed. [ 606.644861][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 606.648498][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 606.650605][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 606.653961][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 606.656332][T14194] Dev nbd0: unable to read RDB block 0 [ 606.657960][T14194] nbd0: unable to read partition table [ 606.659561][T14194] nbd0: partition table beyond EOD, truncated [ 606.665554][T12464] Bluetooth: hci0: command 0x0419 tx timeout [ 606.670180][T14194] ldm_validate_partition_table(): Disk read failed. [ 606.672083][T14194] Dev nbd0: unable to read RDB block 0 [ 606.673637][T14194] nbd0: unable to read partition table [ 606.675254][T14194] nbd0: partition table beyond EOD, truncated [ 607.212469][T15644] Unknown status report in ack skb [ 608.535112][T15653] delete_channel: no stack [ 609.065660][T15680] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 609.067403][T15680] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 609.069528][T15680] vhci_hcd vhci_hcd.0: Device attached [ 609.195814][T15674] nbd4: detected capacity change from 0 to 12 [ 609.204877][T14194] block nbd4: Send control failed (result -89) [ 609.207654][T15689] block nbd4: NBD_DISCONNECT [ 609.207756][T14194] block nbd4: Request send failed, requeueing [ 609.215145][T14194] block nbd4: Disconnected due to user request. [ 609.220544][T14194] ldm_validate_partition_table(): Disk read failed. [ 609.222349][T15689] block nbd4: Send disconnect failed -89 [ 609.228220][T14194] Dev nbd4: unable to read RDB block 0 [ 609.243263][T14194] nbd4: unable to read partition table [ 609.248578][T14194] nbd4: partition table beyond EOD, truncated [ 609.255767][ T25] vhci_hcd: vhci_device speed not set [ 609.267657][T14194] ldm_validate_partition_table(): Disk read failed. [ 609.286691][T14194] Dev nbd4: unable to read RDB block 0 [ 609.301297][T14194] nbd4: unable to read partition table [ 609.303451][T14194] nbd4: partition table beyond EOD, truncated [ 609.315599][ T25] usb 43-1: new full-speed USB device number 35 using vhci_hcd [ 611.465775][T15715] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 611.942184][T15718] delete_channel: no stack [ 612.076654][T15681] vhci_hcd: connection reset by peer [ 612.085770][ T11] vhci_hcd: stop threads [ 612.087421][ T11] vhci_hcd: release socket [ 612.089148][ T11] vhci_hcd: disconnect device [ 612.145581][T15731] nbd0: detected capacity change from 0 to 12 [ 612.149094][T14194] block nbd0: Send control failed (result -89) [ 612.149105][T15735] block nbd0: NBD_DISCONNECT [ 612.150812][T14194] block nbd0: Request send failed, requeueing [ 612.150874][T12464] block nbd0: Receive control failed (result -32) [ 612.153480][T14194] block nbd0: Disconnected due to user request. [ 612.159022][T15735] block nbd0: Send disconnect failed -89 [ 612.160568][ T51] blk_print_req_error: 60 callbacks suppressed [ 612.160577][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 612.165273][ T51] buffer_io_error: 60 callbacks suppressed [ 612.165285][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 612.170391][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 612.170419][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 612.170505][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 612.170527][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 612.170602][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 612.170623][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 612.170698][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 612.170719][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 612.170804][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 612.170827][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 612.170907][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 612.170928][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 612.171004][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 612.171026][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 612.171064][T14194] ldm_validate_partition_table(): Disk read failed. [ 612.171113][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 612.171135][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 612.171211][T14194] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 612.171232][T14194] Buffer I/O error on dev nbd0, logical block 0, async page read [ 612.171409][T14194] Dev nbd0: unable to read RDB block 0 [ 612.171641][T14194] nbd0: unable to read partition table [ 612.171754][T14194] nbd0: partition table beyond EOD, truncated [ 612.178470][T14194] ldm_validate_partition_table(): Disk read failed. [ 612.235394][T14194] Dev nbd0: unable to read RDB block 0 [ 612.237351][T14194] nbd0: unable to read partition table [ 612.239438][T14194] nbd0: partition table beyond EOD, truncated [ 612.351483][T15741] netlink: 'syz.0.2344': attribute type 21 has an invalid length. [ 612.745545][T12464] Bluetooth: hci0: command 0x0419 tx timeout [ 612.865704][T15757] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 612.867474][T15757] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 612.878799][T15757] vhci_hcd vhci_hcd.0: Device attached [ 612.959629][T15761] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:04:e8:57:00:00 [ 613.065569][ T56] vhci_hcd: vhci_device speed not set [ 613.125497][ T56] usb 37-1: new full-speed USB device number 34 using vhci_hcd [ 613.127644][ T6005] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 613.286638][ T6005] usb 5-1: config 0 has no interfaces? [ 613.288154][ T6005] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 613.290443][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.294023][ T6005] usb 5-1: config 0 descriptor?? [ 613.500086][T15758] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 36 [ 613.503158][ T1213] vhci_hcd: stop threads [ 613.504312][ T1213] vhci_hcd: release socket [ 613.506439][ T6005] usb 5-1: USB disconnect, device number 90 [ 613.508996][ T1213] vhci_hcd: disconnect device [ 613.575629][T15772] nbd4: detected capacity change from 0 to 12 [ 613.577782][T15772] block nbd4: NBD_DISCONNECT [ 613.577981][T14194] block nbd4: Send control failed (result -89) [ 613.580680][T14194] block nbd4: Request send failed, requeueing [ 613.582316][T14194] block nbd4: Disconnected due to user request. [ 613.584163][T15772] block nbd4: Send disconnect failed -89 [ 613.588072][T14194] ldm_validate_partition_table(): Disk read failed. [ 613.591015][T14194] Dev nbd4: unable to read RDB block 0 [ 613.592560][T14194] nbd4: unable to read partition table [ 613.594071][T14194] nbd4: partition table beyond EOD, truncated [ 613.598328][T14194] ldm_validate_partition_table(): Disk read failed. [ 613.600176][T14194] Dev nbd4: unable to read RDB block 0 [ 613.601686][T14194] nbd4: unable to read partition table [ 613.603224][T14194] nbd4: partition table beyond EOD, truncated [ 614.293168][T15782] bio_check_eod: 17 callbacks suppressed [ 614.293230][T15782] syz.4.2355: attempt to access beyond end of device [ 614.293230][T15782] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 614.298889][T15782] syz.4.2355: attempt to access beyond end of device [ 614.298889][T15782] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 614.302684][T15782] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 614.305544][T15782] syz.4.2355: attempt to access beyond end of device [ 614.305544][T15782] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 614.308969][T15782] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 614.312337][T15782] syz.4.2355: attempt to access beyond end of device [ 614.312337][T15782] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 614.316446][T15782] syz.4.2355: attempt to access beyond end of device [ 614.316446][T15782] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 614.319881][T15782] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 614.322740][T15782] syz.4.2355: attempt to access beyond end of device [ 614.322740][T15782] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 614.326614][T15782] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 614.336010][T15782] syz.4.2355: attempt to access beyond end of device [ 614.336010][T15782] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 614.343681][T15782] syz.4.2355: attempt to access beyond end of device [ 614.343681][T15782] nbd4: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 614.350230][T15782] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 614.353285][T15782] syz.4.2355: attempt to access beyond end of device [ 614.353285][T15782] nbd4: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 614.356883][T15782] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 614.359376][T15782] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 614.415569][ T25] vhci_hcd: vhci_device speed not set [ 614.491639][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 614.491651][ T39] audit: type=1326 audit(1734391707.827:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.2.2359" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 614.516598][ T39] audit: type=1326 audit(1734391707.837:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.2.2359" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 614.522103][ T39] audit: type=1326 audit(1734391707.837:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.2.2359" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 614.536480][ T39] audit: type=1326 audit(1734391707.847:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.2.2359" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 614.556193][ T39] audit: type=1326 audit(1734391707.847:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.2.2359" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 614.561618][ T39] audit: type=1326 audit(1734391707.847:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.2.2359" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 614.567215][ T39] audit: type=1326 audit(1734391707.847:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.2.2359" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 614.572914][ T39] audit: type=1326 audit(1734391707.847:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.2.2359" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 614.585519][ T39] audit: type=1326 audit(1734391707.847:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.2.2359" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 614.591049][ T39] audit: type=1326 audit(1734391707.847:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15796 comm="syz.2.2359" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 615.061220][T15806] TCP: TCP_TX_DELAY enabled [ 615.416443][T15817] nbd2: detected capacity change from 0 to 12 [ 615.419313][T14194] block nbd2: Send control failed (result -89) [ 615.421014][T14194] block nbd2: Request send failed, requeueing [ 615.422736][T12464] block nbd2: Receive control failed (result -32) [ 615.422770][ T7157] block nbd2: Dead connection, failed to find a fallback [ 615.426340][ T7157] block nbd2: shutting down sockets [ 615.428345][T14194] ldm_validate_partition_table(): Disk read failed. [ 615.430242][T14194] Dev nbd2: unable to read RDB block 0 [ 615.431774][T14194] nbd2: unable to read partition table [ 615.433349][T14194] nbd2: partition table beyond EOD, truncated [ 615.436295][T15819] block nbd2: NBD_DISCONNECT [ 615.437929][T15819] block nbd2: Send disconnect failed -89 [ 615.442640][T14194] ldm_validate_partition_table(): Disk read failed. [ 615.449640][T14194] Dev nbd2: unable to read RDB block 0 [ 615.455649][T14194] nbd2: unable to read partition table [ 615.462347][T14194] nbd2: partition table beyond EOD, truncated [ 617.858842][T15841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.268860][ T56] vhci_hcd: vhci_device speed not set [ 618.616467][T15864] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2375'. [ 618.619045][T15864] random: crng reseeded on system resumption [ 621.707865][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2391'. [ 621.711862][T15933] IPVS: Error joining to the multicast group [ 622.038651][T15956] vivid-007: disconnect [ 622.345503][T12464] Bluetooth: hci0: command 0x0419 tx timeout [ 622.772251][T15975] macvlan0: mtu less than device minimum [ 622.780352][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'. [ 623.033079][T15955] vivid-007: reconnect [ 625.222737][T16040] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 626.817287][T16072] block nbd2: Device being setup by another task [ 626.887760][T16059] block nbd2: shutting down sockets [ 626.956904][T16061] block nbd2: NBD_DISCONNECT [ 626.960878][T16061] block nbd2: Send disconnect failed -32 [ 627.678811][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2421'. [ 627.683688][T16080] IPVS: Error joining to the multicast group [ 627.839292][T16094] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 627.841655][T16094] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 627.846191][T16094] vhci_hcd vhci_hcd.0: Device attached [ 628.035612][ T1017] vhci_hcd: vhci_device speed not set [ 628.095611][ T1017] usb 37-1: new full-speed USB device number 35 using vhci_hcd [ 628.098172][ T5981] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 628.218929][T16111] netlink: 'syz.4.2425': attribute type 21 has an invalid length. [ 628.256686][ T5981] usb 5-1: config 0 has no interfaces? [ 628.258503][ T5981] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 628.261224][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.265751][ T5981] usb 5-1: config 0 descriptor?? [ 628.436399][T16120] vivid-007: disconnect [ 628.474107][T16096] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 37 [ 628.480682][ T1141] vhci_hcd: stop threads [ 628.481821][ T1141] vhci_hcd: release socket [ 628.484135][ T1141] vhci_hcd: disconnect device [ 628.484560][ T5981] usb 5-1: USB disconnect, device number 91 [ 628.578000][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2428'. [ 628.939223][T16104] delete_channel: no stack [ 629.439753][T16119] vivid-007: reconnect [ 629.925560][T16161] nbd4: detected capacity change from 0 to 12 [ 629.930516][T14194] block nbd4: Send control failed (result -89) [ 629.932877][T14194] block nbd4: Request send failed, requeueing [ 629.933548][T16161] block nbd4: NBD_DISCONNECT [ 629.935084][ T6487] block nbd4: Dead connection, failed to find a fallback [ 629.935090][T12464] block nbd4: Receive control failed (result -32) [ 629.941862][ T6487] block nbd4: shutting down sockets [ 629.941915][T16161] block nbd4: Send disconnect failed -89 [ 629.943836][ T6487] blk_print_req_error: 95 callbacks suppressed [ 629.943851][ T6487] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.952441][ T6487] buffer_io_error: 95 callbacks suppressed [ 629.952454][ T6487] Buffer I/O error on dev nbd4, logical block 0, async page read [ 629.957946][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.960392][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 629.962671][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.966530][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 629.969538][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.972426][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 629.975284][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.980236][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 629.982368][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.985619][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 629.988530][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.991501][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 629.993766][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.996341][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 629.998440][T14194] ldm_validate_partition_table(): Disk read failed. [ 630.000232][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 630.000350][T16167] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 630.002680][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 630.004986][T16167] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 630.006555][T16167] vhci_hcd vhci_hcd.0: Device attached [ 630.008056][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 630.014198][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 630.016597][T14194] Dev nbd4: unable to read RDB block 0 [ 630.018592][T14194] nbd4: unable to read partition table [ 630.020267][T14194] nbd4: partition table beyond EOD, truncated [ 630.024854][T14194] ldm_validate_partition_table(): Disk read failed. [ 630.027590][T14194] Dev nbd4: unable to read RDB block 0 [ 630.029395][T14194] nbd4: unable to read partition table [ 630.031111][T14194] nbd4: partition table beyond EOD, truncated [ 630.196775][ T56] vhci_hcd: vhci_device speed not set [ 630.255673][ T56] usb 43-1: new full-speed USB device number 36 using vhci_hcd [ 630.365650][T16174] block nbd4: Device being setup by another task [ 630.369682][T16174] block nbd4: shutting down sockets [ 630.446655][T16172] block nbd4: NBD_DISCONNECT [ 630.448297][T16172] block nbd4: Send disconnect failed -32 [ 630.668779][T16179] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 630.671203][T16179] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 630.674021][T16179] vhci_hcd vhci_hcd.0: Device attached [ 630.954006][ T7247] vhci_hcd: vhci_device speed not set [ 631.015575][ T7247] usb 45-1: new full-speed USB device number 5 using vhci_hcd [ 631.019069][ T25] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 631.187130][ T25] usb 9-1: config 0 has no interfaces? [ 631.196726][ T25] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 631.207399][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.212115][ T25] usb 9-1: config 0 descriptor?? [ 631.418675][T16180] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 631.420535][ T25] usb 9-1: USB disconnect, device number 6 [ 631.425350][ T1141] vhci_hcd: stop threads [ 631.427070][ T1141] vhci_hcd: release socket [ 631.428778][ T1141] vhci_hcd: disconnect device [ 631.964146][T16193] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 631.966567][T16193] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 631.970163][T16193] vhci_hcd vhci_hcd.0: Device attached [ 632.215652][ T25] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 632.466817][ T25] usb 9-1: config 0 has no interfaces? [ 632.468298][ T25] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 632.664100][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.667179][ T25] usb 9-1: config 0 descriptor?? [ 632.705590][T16202] nbd2: detected capacity change from 0 to 12 [ 632.707506][T16203] block nbd2: NBD_DISCONNECT [ 632.707861][T14194] block nbd2: Send control failed (result -89) [ 632.710532][T14194] block nbd2: Request send failed, requeueing [ 632.712021][T14194] block nbd2: Disconnected due to user request. [ 632.713980][T16203] block nbd2: Send disconnect failed -89 [ 632.716308][T14194] ldm_validate_partition_table(): Disk read failed. [ 632.718118][T14194] Dev nbd2: unable to read RDB block 0 [ 632.719572][T14194] nbd2: unable to read partition table [ 632.721012][T14194] nbd2: partition table beyond EOD, truncated [ 632.725536][T14194] ldm_validate_partition_table(): Disk read failed. [ 632.727590][T14194] Dev nbd2: unable to read RDB block 0 [ 632.729567][T14194] nbd2: unable to read partition table [ 632.731062][T14194] nbd2: partition table beyond EOD, truncated [ 632.833187][T16207] block device autoloading is deprecated and will be removed. [ 632.870773][T16194] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 632.873061][ T74] vhci_hcd: stop threads [ 632.874215][ T74] vhci_hcd: release socket [ 632.874465][ T25] usb 9-1: USB disconnect, device number 7 [ 632.875672][ T74] vhci_hcd: disconnect device [ 633.000403][T16168] vhci_hcd: connection reset by peer [ 633.002277][ T12] vhci_hcd: stop threads [ 633.003519][ T12] vhci_hcd: release socket [ 633.007875][ T12] vhci_hcd: disconnect device [ 633.215639][ T1017] vhci_hcd: vhci_device speed not set [ 633.955357][T16220] 9pnet_virtio: no channels available for device syz [ 634.195640][ T63] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 634.518733][ T63] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 634.523879][ T63] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.528165][ T63] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 634.531885][ T63] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.538458][ T63] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 634.541791][ T63] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 634.544596][ T63] usb 9-1: Product: syz [ 634.546202][ T63] usb 9-1: Manufacturer: syz [ 634.552923][ T63] cdc_wdm 9-1:1.0: skipping garbage [ 634.554655][ T63] cdc_wdm 9-1:1.0: skipping garbage [ 634.557113][ T63] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 634.559150][ T63] cdc_wdm 9-1:1.0: Unknown control protocol [ 635.319113][ T6005] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 635.386311][ T56] vhci_hcd: vhci_device speed not set [ 635.485542][ T6005] usb 5-1: Using ep0 maxpacket: 8 [ 635.489062][ T6005] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 635.491216][ T6005] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 635.494013][ T6005] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 635.507046][ T6005] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 635.535541][ T6005] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 635.538554][ T6005] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 635.542505][ T6005] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 635.544474][ T6005] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 635.547485][ T6005] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 635.553903][ T6005] usb 5-1: string descriptor 0 read error: -22 [ 635.556028][ T6005] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 635.558481][ T6005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.594562][ T6005] adutux 5-1:168.0: interrupt endpoints not found [ 635.817427][T16246] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 635.819213][T16246] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 635.821254][T16246] vhci_hcd vhci_hcd.0: Device attached [ 635.846506][ T63] usb 5-1: USB disconnect, device number 92 [ 636.015605][ T25] vhci_hcd: vhci_device speed not set [ 636.075532][ T25] usb 41-1: new full-speed USB device number 24 using vhci_hcd [ 636.105583][ T7247] vhci_hcd: vhci_device speed not set [ 636.961537][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 636.961660][ T1451] usb 9-1: USB disconnect, device number 8 [ 636.963305][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 636.966451][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 638.007133][T16282] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2470'. [ 638.010061][T16282] netlink: 'syz.4.2470': attribute type 1 has an invalid length. [ 638.685582][ T6888] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 638.975565][ T6888] usb 9-1: Using ep0 maxpacket: 16 [ 638.987208][ T6888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 639.006052][ T6888] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 639.008742][ T6888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.011062][ T6888] usb 9-1: Product: syz [ 639.012589][ T6888] usb 9-1: Manufacturer: syz [ 639.026408][ T6888] usb 9-1: SerialNumber: syz [ 639.052344][T16247] vhci_hcd: connection reset by peer [ 639.056566][ T6888] usb 9-1: config 0 descriptor?? [ 639.065658][ T6888] hub 9-1:0.0: bad descriptor, ignoring hub [ 639.070158][ T6888] hub 9-1:0.0: probe with driver hub failed with error -5 [ 639.080013][ T11] vhci_hcd: stop threads [ 639.081682][ T11] vhci_hcd: release socket [ 639.083183][ T11] vhci_hcd: disconnect device [ 639.098828][ T6888] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input14 [ 639.557244][ T56] usb 9-1: USB disconnect, device number 9 [ 641.215583][ T25] vhci_hcd: vhci_device speed not set [ 642.615477][T16380] nbd4: detected capacity change from 0 to 12 [ 642.617805][T16377] block nbd4: NBD_DISCONNECT [ 642.619029][T14194] block nbd4: Send control failed (result -89) [ 642.621215][T14194] block nbd4: Request send failed, requeueing [ 642.623399][T14194] block nbd4: Disconnected due to user request. [ 642.625663][ T26] blk_print_req_error: 60 callbacks suppressed [ 642.625671][ T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 642.625794][T16377] block nbd4: Send disconnect failed -89 [ 642.627727][ T26] buffer_io_error: 60 callbacks suppressed [ 642.627736][ T26] Buffer I/O error on dev nbd4, logical block 0, async page read [ 642.638857][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 642.642178][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 642.645092][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 642.649065][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 642.654387][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 642.658181][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 642.661075][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 642.664337][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 642.667868][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 642.671170][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 642.674055][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 642.677798][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 642.680447][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 642.683080][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 642.686558][T14194] ldm_validate_partition_table(): Disk read failed. [ 642.689009][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 642.692233][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 642.695083][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 642.699153][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 642.701425][T14194] Dev nbd4: unable to read RDB block 0 [ 642.703386][T14194] nbd4: unable to read partition table [ 642.705341][T14194] nbd4: partition table beyond EOD, truncated [ 642.853988][T14194] ldm_validate_partition_table(): Disk read failed. [ 642.862487][T14194] Dev nbd4: unable to read RDB block 0 [ 642.867223][T14194] nbd4: unable to read partition table [ 642.869198][T14194] nbd4: partition table beyond EOD, truncated [ 643.305690][T16394] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 643.307435][T16394] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 643.312519][T16394] vhci_hcd vhci_hcd.0: Device attached [ 643.485914][ T6888] vhci_hcd: vhci_device speed not set [ 643.556330][ T6888] usb 41-1: new full-speed USB device number 25 using vhci_hcd [ 643.893912][T16422] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 643.895672][T16422] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 643.898072][T16422] vhci_hcd vhci_hcd.0: Device attached [ 644.085538][T16243] vhci_hcd: vhci_device speed not set [ 644.155644][T16243] usb 43-1: new full-speed USB device number 37 using vhci_hcd [ 646.317451][T16397] vhci_hcd: connection reset by peer [ 646.320821][ T1213] vhci_hcd: stop threads [ 646.322441][ T1213] vhci_hcd: release socket [ 646.324148][ T1213] vhci_hcd: disconnect device [ 646.916813][T16423] vhci_hcd: connection reset by peer [ 646.926301][ T1213] vhci_hcd: stop threads [ 646.927507][ T1213] vhci_hcd: release socket [ 646.928830][ T1213] vhci_hcd: disconnect device [ 647.372619][T16480] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 647.374462][T16480] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 647.377781][T16480] vhci_hcd vhci_hcd.0: Device attached [ 647.593101][T16488] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 647.595518][T16488] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 647.599754][T16488] vhci_hcd vhci_hcd.0: Device attached [ 647.775641][ T25] vhci_hcd: vhci_device speed not set [ 647.835635][ T25] usb 45-1: new full-speed USB device number 6 using vhci_hcd [ 647.855522][ T1451] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 648.010796][ T1451] usb 9-1: config 0 has no interfaces? [ 648.012366][ T1451] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 648.015253][ T1451] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.019505][ T1451] usb 9-1: config 0 descriptor?? [ 648.224631][T16489] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 648.226682][ T56] usb 9-1: USB disconnect, device number 10 [ 648.231732][ T74] vhci_hcd: stop threads [ 648.232890][ T74] vhci_hcd: release socket [ 648.235191][ T74] vhci_hcd: disconnect device [ 648.289327][T16495] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 648.291148][T16495] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 648.293683][T16495] vhci_hcd vhci_hcd.0: Device attached [ 648.465567][ T6005] vhci_hcd: vhci_device speed not set [ 648.525523][ T6005] usb 37-1: new full-speed USB device number 36 using vhci_hcd [ 648.545550][ T1451] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 648.716891][ T1451] usb 5-1: config 0 has no interfaces? [ 648.718830][ T1451] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 648.721940][ T1451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.727424][ T1451] usb 5-1: config 0 descriptor?? [ 648.895517][T16506] nbd4: detected capacity change from 0 to 12 [ 648.898040][T14194] block nbd4: Send control failed (result -89) [ 648.899404][T16506] block nbd4: NBD_DISCONNECT [ 648.899789][T14194] block nbd4: Request send failed, requeueing [ 648.902960][T14194] block nbd4: Disconnected due to user request. [ 648.904683][ T7157] blk_print_req_error: 25 callbacks suppressed [ 648.904694][ T7157] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.904739][T16506] block nbd4: Send disconnect failed -89 [ 648.906611][ T7157] buffer_io_error: 25 callbacks suppressed [ 648.906619][ T7157] Buffer I/O error on dev nbd4, logical block 0, async page read [ 648.914380][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.914407][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 648.914482][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.914503][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 648.914568][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.914588][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 648.914652][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.914672][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 648.914747][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.914768][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 648.914838][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.914859][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 648.914923][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.914943][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 648.914992][T14194] ldm_validate_partition_table(): Disk read failed. [ 648.915031][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.915052][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 648.915117][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.915156][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 648.915307][T14194] Dev nbd4: unable to read RDB block 0 [ 648.917379][T14194] nbd4: unable to read partition table [ 648.931393][T16496] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 38 [ 648.932664][T14194] nbd4: partition table beyond EOD, [ 648.941476][ T1451] usb 5-1: USB disconnect, device number 93 [ 648.941841][T14194] truncated [ 648.955208][ T1213] vhci_hcd: stop threads [ 648.971905][T14194] ldm_validate_partition_table(): Disk read failed. [ 648.973514][ T1213] vhci_hcd: release socket [ 648.975317][T14194] Dev nbd4: unable to read RDB block 0 [ 648.977361][ T1213] vhci_hcd: disconnect device [ 648.978653][T14194] nbd4: unable to read partition table [ 648.988195][T14194] nbd4: partition table beyond EOD, truncated [ 649.295825][T16243] vhci_hcd: vhci_device speed not set [ 649.782832][T16535] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 649.784589][T16535] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 649.787059][T16535] vhci_hcd vhci_hcd.0: Device attached [ 650.005537][T16243] vhci_hcd: vhci_device speed not set [ 650.075574][T16243] usb 43-1: device descriptor read/64, error -110 [ 650.255533][T16243] vhci_hcd: vhci_device speed not set [ 650.323366][T16243] usb 43-1: new full-speed USB device number 38 using vhci_hcd [ 650.343767][ T39] kauditd_printk_skb: 40 callbacks suppressed [ 650.343784][ T39] audit: type=1326 audit(1734391743.677:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16543 comm="syz.0.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 650.351874][ T39] audit: type=1326 audit(1734391743.677:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16543 comm="syz.0.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 650.357895][ T39] audit: type=1326 audit(1734391743.687:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16543 comm="syz.0.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 650.363760][ T39] audit: type=1326 audit(1734391743.687:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16543 comm="syz.0.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 650.369880][ T39] audit: type=1326 audit(1734391743.687:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16543 comm="syz.0.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 650.383703][ T39] audit: type=1326 audit(1734391743.697:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16543 comm="syz.0.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 650.389899][ T39] audit: type=1326 audit(1734391743.697:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16543 comm="syz.0.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 650.397944][T16481] vhci_hcd: connection reset by peer [ 650.486302][ T74] vhci_hcd: stop threads [ 650.487482][ T74] vhci_hcd: release socket [ 650.488955][ T74] vhci_hcd: disconnect device [ 650.491694][ T39] audit: type=1326 audit(1734391743.697:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16543 comm="syz.0.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 650.500899][ T39] audit: type=1326 audit(1734391743.697:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16543 comm="syz.0.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 650.508983][ T39] audit: type=1326 audit(1734391743.697:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16543 comm="syz.0.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 650.575523][ T6888] vhci_hcd: vhci_device speed not set [ 652.806173][T16536] vhci_hcd: connection reset by peer [ 652.809642][ T1141] vhci_hcd: stop threads [ 652.810776][ T1141] vhci_hcd: release socket [ 652.817594][ T1141] vhci_hcd: disconnect device [ 652.979461][ T25] vhci_hcd: vhci_device speed not set [ 653.320429][T16605] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 653.625711][ T56] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 653.628166][ T6005] vhci_hcd: vhci_device speed not set [ 653.787157][ T56] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 653.789553][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.792321][ T56] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 653.794883][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.799249][ T56] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 653.801675][ T56] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 653.803805][ T56] usb 5-1: Product: syz [ 653.804934][ T56] usb 5-1: Manufacturer: syz [ 653.808812][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 653.810254][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 653.812271][ T56] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 653.813873][ T56] cdc_wdm 5-1:1.0: Unknown control protocol [ 654.174831][T16638] 9pnet_virtio: no channels available for device syz [ 654.918530][T16641] syzkaller0: entered promiscuous mode [ 654.920083][T16641] syzkaller0: entered allmulticast mode [ 655.023277][T16649] overlayfs: missing 'lowerdir' [ 655.455572][T16243] vhci_hcd: vhci_device speed not set [ 656.385173][ T1017] usb 5-1: USB disconnect, device number 94 [ 657.348134][T16685] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 657.595627][T16688] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 658.675510][ T1017] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 658.856693][ T1017] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 658.859722][ T1017] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.863166][ T1017] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 658.875518][ T1017] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.883363][ T1017] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 658.895647][ T1017] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 658.905466][ T1017] usb 9-1: Product: syz [ 658.915555][ T1017] usb 9-1: Manufacturer: syz [ 658.929007][ T1017] cdc_wdm 9-1:1.0: skipping garbage [ 658.930945][ T1017] cdc_wdm 9-1:1.0: skipping garbage [ 658.945729][ T1017] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 658.947943][ T1017] cdc_wdm 9-1:1.0: Unknown control protocol [ 661.395846][ T1017] usb 9-1: USB disconnect, device number 11 [ 661.823229][T16746] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 662.036941][T16749] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 662.153171][T16753] syz.3.2581: attempt to access beyond end of device [ 662.153171][T16753] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 662.158032][T16753] FAT-fs (nbd3): unable to read boot sector [ 662.745541][T16762] nbd2: detected capacity change from 0 to 12 [ 662.747782][T16764] block nbd2: NBD_DISCONNECT [ 662.749444][T16764] block nbd2: Send disconnect failed -89 [ 662.755785][T14194] block nbd2: Send control failed (result -89) [ 662.757956][T14194] block nbd2: Request send failed, requeueing [ 662.760034][T14194] block nbd2: Disconnected due to user request. [ 662.762221][ T7157] blk_print_req_error: 25 callbacks suppressed [ 662.762229][ T7157] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 662.766205][ T7157] buffer_io_error: 25 callbacks suppressed [ 662.766212][ T7157] Buffer I/O error on dev nbd2, logical block 0, async page read [ 662.766402][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 662.772116][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 662.774263][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 662.776789][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 662.778815][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 662.781157][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 662.783243][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 662.785664][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 662.787754][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 662.790074][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 662.792115][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 662.794438][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 662.796637][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 662.798948][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 662.801028][T14194] ldm_validate_partition_table(): Disk read failed. [ 662.802782][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 662.805103][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 662.807203][T14194] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 662.809521][T14194] Buffer I/O error on dev nbd2, logical block 0, async page read [ 662.811591][T14194] Dev nbd2: unable to read RDB block 0 [ 662.813117][T14194] nbd2: unable to read partition table [ 662.814610][T14194] nbd2: partition table beyond EOD, truncated [ 663.112873][T14194] ldm_validate_partition_table(): Disk read failed. [ 663.114798][T14194] Dev nbd2: unable to read RDB block 0 [ 663.116539][T14194] nbd2: unable to read partition table [ 663.118151][T14194] nbd2: partition table beyond EOD, truncated [ 664.925684][T16790] nbd0: detected capacity change from 0 to 12 [ 664.927534][T16791] block nbd0: NBD_DISCONNECT [ 664.928808][T16791] block nbd0: Send disconnect failed -89 [ 664.930557][T14194] block nbd0: Send control failed (result -89) [ 664.932231][T14194] block nbd0: Request send failed, requeueing [ 664.945515][T14194] block nbd0: Disconnected due to user request. [ 664.947699][T14194] ldm_validate_partition_table(): Disk read failed. [ 664.949592][T14194] Dev nbd0: unable to read RDB block 0 [ 664.951125][T14194] nbd0: unable to read partition table [ 664.952624][T14194] nbd0: partition table beyond EOD, truncated [ 664.963316][T14194] ldm_validate_partition_table(): Disk read failed. [ 664.966227][T14194] Dev nbd0: unable to read RDB block 0 [ 664.968721][T14194] nbd0: unable to read partition table [ 664.971110][T14194] nbd0: partition table beyond EOD, truncated [ 665.215923][T16799] syz.0.2592: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 665.219714][T16799] CPU: 2 UID: 0 PID: 16799 Comm: syz.0.2592 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 665.222484][T16799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 665.225255][T16799] Call Trace: [ 665.226396][T16799] [ 665.227524][T16799] dump_stack_lvl+0x16c/0x1f0 [ 665.229218][T16799] warn_alloc+0x24d/0x3a0 [ 665.230717][T16799] ? __pfx_warn_alloc+0x10/0x10 [ 665.232340][T16799] ? __pfx_mark_lock+0x10/0x10 [ 665.234086][T16799] ? __might_fault+0x13b/0x190 [ 665.235772][T16799] ? __pfx_lock_release+0x10/0x10 [ 665.237488][T16799] __vmalloc_node_range_noprof+0x10df/0x1530 [ 665.239719][T16799] ? __might_fault+0xe3/0x190 [ 665.241499][T16799] ? _copy_from_user+0x59/0xd0 [ 665.243299][T16799] ? compat_do_replace+0x1ae/0x750 [ 665.245232][T16799] ? compat_copy_ebt_replace_from_user+0x307/0x420 [ 665.247092][T16799] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 665.249594][T16799] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 665.251948][T16799] ? __pfx_lock_release+0x10/0x10 [ 665.253818][T16799] ? compat_do_replace+0x1ae/0x750 [ 665.255717][T16799] vmalloc_noprof+0x6b/0x90 [ 665.257471][T16799] ? compat_do_replace+0x1ae/0x750 [ 665.259412][T16799] compat_do_replace+0x1ae/0x750 [ 665.261271][T16799] ? __pfx_compat_do_replace+0x10/0x10 [ 665.263310][T16799] ? aa_get_newest_label+0x376/0x680 [ 665.265257][T16799] ? __pfx_aa_get_newest_label+0x10/0x10 [ 665.267248][T16799] ? bpf_lsm_capable+0x9/0x10 [ 665.268684][T16799] ? security_capable+0x7e/0x260 [ 665.269934][T16799] do_ebt_set_ctl+0x4af/0x580 [ 665.271121][T16799] ? sockopt_release_sock+0x52/0x60 [ 665.272428][T16799] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 665.273696][T16799] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 665.275105][T16799] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 665.276867][T16799] nf_setsockopt+0x8a/0xf0 [ 665.278323][T16799] ip_setsockopt+0xcb/0xf0 [ 665.280017][T16799] udp_setsockopt+0x7d/0xd0 [ 665.281668][T16799] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 665.283231][T16799] do_sock_setsockopt+0x222/0x480 [ 665.284568][T16799] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 665.286091][T16799] ? lock_acquire+0x2f/0xb0 [ 665.287328][T16799] __sys_setsockopt+0x1a0/0x230 [ 665.288652][T16799] __ia32_sys_setsockopt+0xbc/0x160 [ 665.290016][T16799] ? lockdep_hardirqs_on+0x7c/0x110 [ 665.291351][T16799] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 665.293074][T16799] __do_fast_syscall_32+0x73/0x120 [ 665.294425][T16799] do_fast_syscall_32+0x32/0x80 [ 665.295747][T16799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 665.297423][T16799] RIP: 0023:0xf7ff0579 [ 665.298784][T16799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 665.305792][T16799] RSP: 002b:00000000f512555c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 665.308866][T16799] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 665.311776][T16799] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 00000000000000e0 [ 665.314673][T16799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.317066][T16799] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 665.319255][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.321311][T16799] [ 665.322634][T16799] Mem-Info: [ 665.323495][T16799] active_anon:13180 inactive_anon:316 isolated_anon:0 [ 665.323495][T16799] active_file:7008 inactive_file:21426 isolated_file:0 [ 665.323495][T16799] unevictable:1768 dirty:433 writeback:0 [ 665.323495][T16799] slab_reclaimable:5956 slab_unreclaimable:60679 [ 665.323495][T16799] mapped:28264 shmem:6703 pagetables:995 [ 665.323495][T16799] sec_pagetables:324 bounce:0 [ 665.323495][T16799] kernel_misc_reclaimable:0 [ 665.323495][T16799] free:61007 free_pcp:7048 free_cma:0 [ 665.335157][T16799] Node 0 active_anon:4380kB inactive_anon:1264kB active_file:10128kB inactive_file:344kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3260kB dirty:24kB writeback:0kB shmem:4952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9140kB pagetables:712kB sec_pagetables:1152kB all_unreclaimable? yes [ 665.345583][T16799] Node 1 active_anon:48340kB inactive_anon:0kB active_file:17904kB inactive_file:85360kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:112596kB dirty:1708kB writeback:0kB shmem:21860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3480kB pagetables:3268kB sec_pagetables:144kB all_unreclaimable? no [ 665.353911][T16799] Node 0 DMA free:2964kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:20kB inactive_anon:8kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:484kB local_pcp:204kB free_cma:0kB [ 665.362594][T16799] lowmem_reserve[]: 0 273 0 0 0 [ 665.364464][T16799] Node 0 DMA32 free:23736kB boost:6144kB min:20048kB low:23524kB high:27000kB reserved_highatomic:4096KB active_anon:4360kB inactive_anon:1256kB active_file:10084kB inactive_file:344kB unevictable:3536kB writepending:24kB present:1032196kB managed:306304kB mlocked:0kB bounce:0kB free_pcp:4912kB local_pcp:184kB free_cma:0kB [ 665.373505][T16806] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 665.375390][T16799] lowmem_reserve[]: 0 0 0 0 0 [ 665.379803][T16799] Node 1 DMA32 free:217328kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:6144KB active_anon:48340kB inactive_anon:0kB active_file:17904kB inactive_file:85360kB unevictable:3536kB writepending:1708kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:22752kB local_pcp:840kB free_cma:0kB [ 665.389165][T16799] lowmem_reserve[]: 0 0 0 0 0 [ 665.390476][T16799] Node 0 DMA: 37*4kB (UM) 38*8kB (UM) 31*16kB (UM) 15*32kB (UM) 8*64kB (UM) 2*128kB (UM) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2964kB [ 665.394564][T16799] Node 0 DMA32: 592*4kB (UEH) 111*8kB (UMEH) 8*16kB (UH) 180*32kB (UEH) 82*64kB (UEH) 29*128kB (UE) 6*256kB (UM) 2*512kB (UM) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 23736kB [ 665.399407][T16799] Node 1 DMA32: 5*4kB (E) 202*8kB (UME) 63*16kB (UME) 97*32kB (UME) 149*64kB (UME) 140*128kB (UMEH) 110*256kB (UMEH) 91*512kB (UMEH) 32*1024kB (UMH) 11*2048kB (UM) 13*4096kB (UMH) = 216500kB [ 665.404394][T16799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.407064][T16799] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 665.409541][T16799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.412058][T16799] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 665.414507][T16799] 35137 total pagecache pages [ 665.415905][T16799] 0 pages in swap cache [ 665.417076][T16799] Free swap = 123868kB [ 665.418188][T16799] Total swap = 124996kB [ 665.419342][T16799] 524155 pages RAM [ 665.420355][T16799] 0 pages HighMem/MovableOnly [ 665.422611][T16799] 206676 pages reserved [ 665.423723][T16799] 0 pages cma reserved [ 665.425035][T16797] nbd2: detected capacity change from 0 to 12 [ 665.438501][T16800] block nbd2: NBD_DISCONNECT [ 665.439904][T16800] block nbd2: Send disconnect failed -89 [ 665.486079][T14194] block nbd2: Send control failed (result -89) [ 665.488456][T14194] block nbd2: Request send failed, requeueing [ 665.490674][T14194] block nbd2: Disconnected due to user request. [ 665.493834][T14194] ldm_validate_partition_table(): Disk read failed. [ 665.500875][T14194] Dev nbd2: unable to read RDB block 0 [ 665.506692][T14194] nbd2: unable to read partition table [ 665.508384][T14194] nbd2: partition table beyond EOD, truncated [ 665.603335][T14194] ldm_validate_partition_table(): Disk read failed. [ 665.605247][T14194] Dev nbd2: unable to read RDB block 0 [ 665.612469][T14194] nbd2: unable to read partition table [ 665.613990][T14194] nbd2: partition table beyond EOD, truncated [ 667.154483][T16855] input: syz0 as /devices/virtual/input/input15 [ 668.190090][T16879] netlink: 'syz.0.2611': attribute type 4 has an invalid length. [ 668.199104][T16879] netlink: 'syz.0.2611': attribute type 4 has an invalid length. [ 668.225874][T16877] nbd4: detected capacity change from 0 to 12 [ 668.231615][T16880] block nbd4: NBD_DISCONNECT [ 668.232891][T16880] block nbd4: Send disconnect failed -89 [ 668.234646][T14194] block nbd4: Send control failed (result -89) [ 668.236615][T14194] block nbd4: Request send failed, requeueing [ 668.238207][T14194] block nbd4: Disconnected due to user request. [ 668.239910][ T26] blk_print_req_error: 95 callbacks suppressed [ 668.239918][ T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.243889][ T26] buffer_io_error: 95 callbacks suppressed [ 668.243896][ T26] Buffer I/O error on dev nbd4, logical block 0, async page read [ 668.243985][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.243999][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 668.252010][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.254315][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 668.256496][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.258825][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 668.260875][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.263217][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 668.265340][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.267865][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 668.269907][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.272309][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 668.274498][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.277166][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 668.279341][T14194] ldm_validate_partition_table(): Disk read failed. [ 668.281161][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.283558][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 668.285851][T14194] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.288223][T14194] Buffer I/O error on dev nbd4, logical block 0, async page read [ 668.290299][T14194] Dev nbd4: unable to read RDB block 0 [ 668.291832][T14194] nbd4: unable to read partition table [ 668.293363][T14194] nbd4: partition table beyond EOD, truncated [ 668.298737][T14194] ldm_validate_partition_table(): Disk read failed. [ 668.300838][T14194] Dev nbd4: unable to read RDB block 0 [ 668.302387][T14194] nbd4: unable to read partition table [ 668.303910][T14194] nbd4: partition table beyond EOD, truncated [ 669.728187][ T215] Bluetooth: hci4: Frame reassembly failed (-84) [ 669.915673][T16918] nbd3: detected capacity change from 0 to 12 [ 669.917866][T16919] block nbd3: NBD_DISCONNECT [ 669.917897][T14194] block nbd3: Send control failed (result -89) [ 669.920694][T14194] block nbd3: Request send failed, requeueing [ 669.922187][T14194] block nbd3: Disconnected due to user request. [ 669.924172][T14194] ldm_validate_partition_table(): Disk read failed. [ 669.924431][T16919] block nbd3: Send disconnect failed -89 [ 669.929022][T14194] Dev nbd3: unable to read RDB block 0 [ 669.930632][T14194] nbd3: unable to read partition table [ 669.932120][T14194] nbd3: partition table beyond EOD, truncated [ 669.936477][T14194] ldm_validate_partition_table(): Disk read failed. [ 669.938455][T14194] Dev nbd3: unable to read RDB block 0 [ 669.940072][T14194] nbd3: unable to read partition table [ 669.941683][T14194] nbd3: partition table beyond EOD, truncated [ 670.093946][T16924] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 670.095703][T16924] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 670.098281][T16924] vhci_hcd vhci_hcd.0: Device attached [ 670.104415][T16922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.275595][ T5981] vhci_hcd: vhci_device speed not set [ 670.335531][ T5981] usb 41-1: new full-speed USB device number 26 using vhci_hcd [ 671.795548][ T5952] Bluetooth: hci4: command 0x1003 tx timeout [ 671.795580][T12464] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 673.098414][T16925] vhci_hcd: connection reset by peer [ 673.104309][ T1141] vhci_hcd: stop threads [ 673.105537][ T1141] vhci_hcd: release socket [ 673.106993][ T1141] vhci_hcd: disconnect device [ 673.211618][T16948] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 674.228310][T16962] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 674.230069][T16962] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 674.232561][T16962] vhci_hcd vhci_hcd.0: Device attached [ 674.425512][ T1017] vhci_hcd: vhci_device speed not set [ 674.485513][ T1017] usb 43-1: new full-speed USB device number 39 using vhci_hcd [ 675.091602][T16987] xt_HMARK: spi-set and port-set can't be combined [ 675.115394][T16989] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 675.117144][T16989] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 675.120673][T16989] vhci_hcd vhci_hcd.0: Device attached [ 675.295569][ T6062] vhci_hcd: vhci_device speed not set [ 675.355560][ T25] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 675.357639][ T6062] usb 45-1: new full-speed USB device number 7 using vhci_hcd [ 675.457484][ T5981] vhci_hcd: vhci_device speed not set [ 675.506675][ T25] usb 9-1: config 0 has no interfaces? [ 675.508214][ T25] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 675.510560][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.513932][ T25] usb 9-1: config 0 descriptor?? [ 675.717969][T16990] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 6 [ 675.719314][ T25] usb 9-1: USB disconnect, device number 12 [ 675.722872][ T1213] vhci_hcd: stop threads [ 675.724009][ T1213] vhci_hcd: release socket [ 675.725263][ T1213] vhci_hcd: disconnect device [ 675.937281][T16996] program syz.0.2645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 676.070989][T16997] warn_alloc: 1 callbacks suppressed [ 676.071001][T16997] syz.2.2637: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 676.077527][T16997] CPU: 1 UID: 0 PID: 16997 Comm: syz.2.2637 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 676.081145][T16997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 676.084813][T16997] Call Trace: [ 676.085982][T16997] [ 676.087022][T16997] dump_stack_lvl+0x16c/0x1f0 [ 676.088517][T16997] warn_alloc+0x24d/0x3a0 [ 676.090020][T16997] ? __pfx_warn_alloc+0x10/0x10 [ 676.091711][T16997] ? __pfx_mark_lock+0x10/0x10 [ 676.093374][T16997] ? __might_fault+0x13b/0x190 [ 676.095050][T16997] ? __pfx_lock_release+0x10/0x10 [ 676.096776][T16997] __vmalloc_node_range_noprof+0x10df/0x1530 [ 676.098851][T16997] ? __might_fault+0xe3/0x190 [ 676.100432][T16997] ? _copy_from_user+0x59/0xd0 [ 676.102147][T16997] ? compat_do_replace+0x1ae/0x750 [ 676.103942][T16997] ? compat_copy_ebt_replace_from_user+0x307/0x420 [ 676.106176][T16997] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 676.108525][T16997] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 676.110730][T16997] ? compat_do_replace+0x1ae/0x750 [ 676.112519][T16997] vmalloc_noprof+0x6b/0x90 [ 676.114106][T16997] ? compat_do_replace+0x1ae/0x750 [ 676.115886][T16997] compat_do_replace+0x1ae/0x750 [ 676.117617][T16997] ? lock_acquire.part.0+0x11b/0x380 [ 676.119490][T16997] ? __pfx_compat_do_replace+0x10/0x10 [ 676.121430][T16997] ? aa_get_newest_label+0x376/0x680 [ 676.123304][T16997] ? __pfx_aa_get_newest_label+0x10/0x10 [ 676.125290][T16997] ? bpf_lsm_capable+0x9/0x10 [ 676.126963][T16997] ? security_capable+0x7e/0x260 [ 676.128709][T16997] do_ebt_set_ctl+0x4af/0x580 [ 676.130181][T16997] ? sockopt_release_sock+0x52/0x60 [ 676.132023][T16997] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 676.133865][T16997] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 676.135375][T16997] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 676.136880][T16997] nf_setsockopt+0x8a/0xf0 [ 676.137975][T16997] ip_setsockopt+0xcb/0xf0 [ 676.139106][T16997] udp_setsockopt+0x7d/0xd0 [ 676.140317][T16997] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 676.141870][T16997] do_sock_setsockopt+0x222/0x480 [ 676.143209][T16997] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 676.144656][T16997] ? lock_acquire+0x2f/0xb0 [ 676.145851][T16997] __sys_setsockopt+0x1a0/0x230 [ 676.147160][T16997] __ia32_sys_setsockopt+0xbc/0x160 [ 676.148520][T16997] ? lockdep_hardirqs_on+0x7c/0x110 [ 676.149931][T16997] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 676.151659][T16997] __do_fast_syscall_32+0x73/0x120 [ 676.153005][T16997] do_fast_syscall_32+0x32/0x80 [ 676.154276][T16997] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 676.155929][T16997] RIP: 0023:0xf70ce579 [ 676.156996][T16997] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 676.162056][T16997] RSP: 002b:00000000f509f55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 676.164238][T16997] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 676.166299][T16997] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 00000000000000e0 [ 676.168344][T16997] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 676.170617][T16997] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 676.172670][T16997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 676.174716][T16997] [ 676.175814][T16997] Mem-Info: [ 676.176736][T16997] active_anon:13133 inactive_anon:316 isolated_anon:0 [ 676.176736][T16997] active_file:7008 inactive_file:21421 isolated_file:0 [ 676.176736][T16997] unevictable:1768 dirty:147 writeback:0 [ 676.176736][T16997] slab_reclaimable:5980 slab_unreclaimable:60781 [ 676.176736][T16997] mapped:27180 shmem:6658 pagetables:997 [ 676.176736][T16997] sec_pagetables:325 bounce:0 [ 676.176736][T16997] kernel_misc_reclaimable:0 [ 676.176736][T16997] free:64683 free_pcp:3974 free_cma:0 [ 676.188132][T16997] Node 0 active_anon:4368kB inactive_anon:1264kB active_file:10128kB inactive_file:344kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3260kB dirty:0kB writeback:0kB shmem:4948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9108kB pagetables:712kB sec_pagetables:1152kB all_unreclaimable? yes [ 676.196209][T16997] Node 1 active_anon:48164kB inactive_anon:0kB active_file:17904kB inactive_file:85340kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:105460kB dirty:588kB writeback:0kB shmem:21688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3528kB pagetables:3276kB sec_pagetables:148kB all_unreclaimable? no [ 676.204346][T16997] Node 0 DMA free:2964kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:20kB inactive_anon:8kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:484kB local_pcp:80kB free_cma:0kB [ 676.211486][T16997] lowmem_reserve[]: 0 273 0 0 0 [ 676.212781][T16997] Node 0 DMA32 free:21688kB boost:6144kB min:20048kB low:23524kB high:27000kB reserved_highatomic:4096KB active_anon:4348kB inactive_anon:1256kB active_file:10084kB inactive_file:344kB unevictable:3536kB writepending:0kB present:1032196kB managed:306304kB mlocked:0kB bounce:0kB free_pcp:7156kB local_pcp:2312kB free_cma:0kB [ 676.220430][T16997] lowmem_reserve[]: 0 0 0 0 0 [ 676.221704][T16997] Node 1 DMA32 free:233840kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:6144KB active_anon:48164kB inactive_anon:0kB active_file:17904kB inactive_file:85340kB unevictable:3536kB writepending:588kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:8444kB local_pcp:340kB free_cma:0kB [ 676.229423][T16997] lowmem_reserve[]: 0 0 0 0 0 [ 676.230680][T16997] Node 0 DMA: 37*4kB (UM) 38*8kB (UM) 31*16kB (UM) 15*32kB (UM) 8*64kB (UM) 2*128kB (UM) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2964kB [ 676.234587][T16997] Node 0 DMA32: 592*4kB (UEH) 111*8kB (UMEH) 8*16kB (UH) 180*32kB (UEH) 82*64kB (UEH) 29*128kB (UE) 6*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 21688kB [ 676.239016][T16997] Node 1 DMA32: 132*4kB (UE) 58*8kB (UME) 195*16kB (UE) 78*32kB (UME) 274*64kB (UME) 172*128kB (UMEH) 115*256kB (UMEH) 95*512kB (UMEH) 33*1024kB (UMH) 11*2048kB (UM) 13*4096kB (UMH) = 233808kB [ 676.243911][T16997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.246378][T16997] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 676.248757][T16997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.249588][T16999] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 676.251160][T16997] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 676.251172][T16997] 35088 total pagecache pages [ 676.257612][T16997] 0 pages in swap cache [ 676.258697][T16997] Free swap = 123868kB [ 676.259784][T16997] Total swap = 124996kB [ 676.260865][T16997] 524155 pages RAM [ 676.261858][T16997] 0 pages HighMem/MovableOnly [ 676.263080][T16997] 206676 pages reserved [ 676.264168][T16997] 0 pages cma reserved [ 676.675539][T17003] veth1_macvtap: left promiscuous mode [ 676.677011][T17003] macsec0: entered promiscuous mode [ 676.678351][T17003] macsec0: entered allmulticast mode [ 677.240739][T16965] vhci_hcd: connection reset by peer [ 677.245806][ T1213] vhci_hcd: stop threads [ 677.247035][ T1213] vhci_hcd: release socket [ 677.255484][ T1213] vhci_hcd: disconnect device [ 677.890701][T17028] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 677.892466][T17028] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 677.894597][T17028] vhci_hcd vhci_hcd.0: Device attached [ 678.155643][ T6888] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 678.309059][ T6888] usb 9-1: config 0 has no interfaces? [ 678.310593][ T6888] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 678.319601][ T6888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.325881][ T6888] usb 9-1: config 0 descriptor?? [ 678.529100][T17029] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 6 [ 678.532224][ T63] usb 9-1: USB disconnect, device number 13 [ 678.534191][ T215] vhci_hcd: stop threads [ 678.535288][ T215] vhci_hcd: release socket [ 678.536655][ T215] vhci_hcd: disconnect device [ 679.615600][ T1017] vhci_hcd: vhci_device speed not set [ 679.741411][T17067] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 679.743181][T17067] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 679.745675][T17067] vhci_hcd vhci_hcd.0: Device attached [ 679.751348][T17072] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 679.935526][ T63] vhci_hcd: vhci_device speed not set [ 679.997827][ T35] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 680.005543][ T63] usb 37-1: new full-speed USB device number 37 using vhci_hcd [ 680.170943][ T35] usb 5-1: config 0 has no interfaces? [ 680.172582][ T35] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 680.174960][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.178142][ T35] usb 5-1: config 0 descriptor?? [ 680.384933][ T35] usb 5-1: USB disconnect, device number 95 [ 680.403509][T17069] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 39 [ 680.407723][ T1213] vhci_hcd: stop threads [ 680.408873][ T1213] vhci_hcd: release socket [ 680.410320][ T1213] vhci_hcd: disconnect device [ 680.495614][ T6062] vhci_hcd: vhci_device speed not set [ 681.443449][T17101] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 683.336720][T17133] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 683.399924][T17133] overlay: filesystem on ./bus not supported as upperdir [ 684.380000][T17148] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 685.385690][ T63] vhci_hcd: vhci_device speed not set [ 687.004050][T17186] kernel profiling enabled (shift: 9) [ 687.285718][T17188] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 687.287484][T17188] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 687.290035][T17188] vhci_hcd vhci_hcd.0: Device attached [ 687.476750][T17195] warn_alloc: 2 callbacks suppressed [ 687.476800][T17195] syz.4.2684: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 687.481735][T17195] CPU: 1 UID: 0 PID: 17195 Comm: syz.4.2684 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 687.484388][T17195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 687.487241][T17195] Call Trace: [ 687.488124][T17195] [ 687.488908][T17195] dump_stack_lvl+0x16c/0x1f0 [ 687.490147][T17195] warn_alloc+0x24d/0x3a0 [ 687.491293][T17195] ? __pfx_warn_alloc+0x10/0x10 [ 687.492573][T17195] ? __pfx_mark_lock+0x10/0x10 [ 687.493828][T17195] ? __might_fault+0x13b/0x190 [ 687.495094][T17195] ? __pfx_lock_release+0x10/0x10 [ 687.496416][T17195] __vmalloc_node_range_noprof+0x10df/0x1530 [ 687.497976][T17195] ? __might_fault+0xe3/0x190 [ 687.499220][T17195] ? _copy_from_user+0x59/0xd0 [ 687.500476][T17195] ? compat_do_replace+0x1ae/0x750 [ 687.501823][T17195] ? compat_copy_ebt_replace_from_user+0x307/0x420 [ 687.503500][T17195] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 687.505389][T17195] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 687.507040][T17195] ? compat_do_replace+0x1ae/0x750 [ 687.508369][T17195] vmalloc_noprof+0x6b/0x90 [ 687.509566][T17195] ? compat_do_replace+0x1ae/0x750 [ 687.510900][T17195] compat_do_replace+0x1ae/0x750 [ 687.512188][T17195] ? lock_acquire.part.0+0x11b/0x380 [ 687.513577][T17195] ? __pfx_compat_do_replace+0x10/0x10 [ 687.515026][T17195] ? aa_get_newest_label+0x376/0x680 [ 687.516436][T17195] ? __pfx_aa_get_newest_label+0x10/0x10 [ 687.517896][T17195] ? bpf_lsm_capable+0x9/0x10 [ 687.519123][T17195] ? security_capable+0x7e/0x260 [ 687.520407][T17195] do_ebt_set_ctl+0x4af/0x580 [ 687.521957][T17195] ? sockopt_release_sock+0x52/0x60 [ 687.523328][T17195] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 687.524680][T17195] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 687.526080][T17195] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 687.527649][T17195] nf_setsockopt+0x8a/0xf0 [ 687.528833][T17195] ip_setsockopt+0xcb/0xf0 [ 687.530000][T17195] udp_setsockopt+0x7d/0xd0 [ 687.531204][T17195] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 687.532747][T17195] do_sock_setsockopt+0x222/0x480 [ 687.534088][T17195] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 687.535545][T17195] ? lock_acquire+0x2f/0xb0 [ 687.536764][T17195] __sys_setsockopt+0x1a0/0x230 [ 687.538033][T17195] __ia32_sys_setsockopt+0xbc/0x160 [ 687.539387][T17195] ? lockdep_hardirqs_on+0x7c/0x110 [ 687.540712][T17195] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 687.542435][T17195] __do_fast_syscall_32+0x73/0x120 [ 687.543791][T17195] do_fast_syscall_32+0x32/0x80 [ 687.545042][T17195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 687.546680][T17195] RIP: 0023:0xf7f71579 [ 687.547759][T17195] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 687.552836][T17195] RSP: 002b:00000000f50a555c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 687.554932][T17195] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 687.556842][T17195] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 00000000000000e0 [ 687.558808][T17195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 687.560767][T17195] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 687.562791][T17195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 687.564811][T17195] [ 687.565912][T17195] Mem-Info: [ 687.566800][T17195] active_anon:19958 inactive_anon:316 isolated_anon:0 [ 687.566800][T17195] active_file:7008 inactive_file:21425 isolated_file:0 [ 687.566800][T17195] unevictable:1778 dirty:519 writeback:0 [ 687.566800][T17195] slab_reclaimable:6028 slab_unreclaimable:61215 [ 687.566800][T17195] mapped:28575 shmem:9546 pagetables:1024 [ 687.566800][T17195] sec_pagetables:330 bounce:0 [ 687.566800][T17195] kernel_misc_reclaimable:0 [ 687.566800][T17195] free:57505 free_pcp:3084 free_cma:0 [ 687.578180][T17195] Node 0 active_anon:4368kB inactive_anon:1264kB active_file:10128kB inactive_file:344kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3260kB dirty:12kB writeback:0kB shmem:4948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9120kB pagetables:712kB sec_pagetables:1152kB all_unreclaimable? yes [ 687.586194][T17195] Node 1 active_anon:75464kB inactive_anon:0kB active_file:17904kB inactive_file:85356kB unevictable:3576kB isolated(anon):0kB isolated(file):0kB mapped:111040kB dirty:2064kB writeback:0kB shmem:33236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3572kB pagetables:3384kB sec_pagetables:168kB all_unreclaimable? no [ 687.594379][T17195] Node 0 DMA free:2956kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:20kB inactive_anon:8kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:492kB local_pcp:80kB free_cma:0kB [ 687.601536][T17195] lowmem_reserve[]: 0 273 0 0 0 [ 687.602843][T17195] Node 0 DMA32 free:23416kB boost:6144kB min:20048kB low:23524kB high:27000kB reserved_highatomic:4096KB active_anon:4348kB inactive_anon:1256kB active_file:10084kB inactive_file:344kB unevictable:3536kB writepending:12kB present:1032196kB managed:306304kB mlocked:0kB bounce:0kB free_pcp:4872kB local_pcp:520kB free_cma:0kB [ 687.610540][T17195] lowmem_reserve[]: 0 0 0 0 0 [ 687.611798][T17195] Node 1 DMA32 free:203300kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:6144KB active_anon:75464kB inactive_anon:0kB active_file:17904kB inactive_file:85356kB unevictable:3576kB writepending:2064kB present:1048432kB managed:948252kB mlocked:40kB bounce:0kB free_pcp:7008kB local_pcp:4868kB free_cma:0kB [ 687.619694][T17195] lowmem_reserve[]: 0 0 0 0 0 [ 687.620945][T17195] Node 0 DMA: 37*4kB (UM) 37*8kB (UM) 31*16kB (UM) 15*32kB (UM) 8*64kB (UM) 2*128kB (UM) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2956kB [ 687.624866][T17195] Node 0 DMA32: 778*4kB (UMEH) 124*8kB (UMEH) 13*16kB (UMH) 173*32kB (UMEH) 86*64kB (UMEH) 31*128kB (UME) 6*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 23416kB [ 687.629428][T17195] Node 1 DMA32: 217*4kB (UME) 287*8kB (UME) 257*16kB (UME) 138*32kB (UME) 189*64kB (UME) 105*128kB (UEH) 58*256kB (UMEH) 95*512kB (UMEH) 33*1024kB (UMH) 8*2048kB (UM) 13*4096kB (UMH) = 204140kB [ 687.634373][T17195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 687.636909][T17195] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 687.639278][T17195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 687.641663][T17195] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 687.643951][T17195] 37981 total pagecache pages [ 687.645198][T17195] 2 pages in swap cache [ 687.646336][T17195] Free swap = 123868kB [ 687.647426][T17195] Total swap = 124996kB [ 687.648510][T17195] 524155 pages RAM [ 687.649487][T17195] 0 pages HighMem/MovableOnly [ 687.650712][T17195] 206676 pages reserved [ 687.651812][T17195] 0 pages cma reserved [ 687.670945][T16243] vhci_hcd: vhci_device speed not set [ 687.730238][T17197] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 687.835983][ T6005] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 687.838922][T16243] usb 37-1: new full-speed USB device number 38 using vhci_hcd [ 688.077911][ T6005] usb 5-1: config 0 has no interfaces? [ 688.079966][ T6005] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 688.083142][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.087469][ T6005] usb 5-1: config 0 descriptor?? [ 688.307192][T17189] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 40 [ 688.311033][ T215] vhci_hcd: stop threads [ 688.312563][ T215] vhci_hcd: release socket [ 688.314377][ T6005] usb 5-1: USB disconnect, device number 96 [ 688.315056][ T215] vhci_hcd: disconnect device [ 689.096975][T17237] veth1_macvtap: left promiscuous mode [ 689.098411][T17237] macsec0: entered promiscuous mode [ 689.099714][T17237] macsec0: entered allmulticast mode [ 689.472825][T17221] delete_channel: no stack [ 689.624882][T17247] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 689.626551][T17247] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 689.629201][T17247] vhci_hcd vhci_hcd.0: Device attached [ 689.836247][ T56] vhci_hcd: vhci_device speed not set [ 689.895561][ T56] usb 43-1: new full-speed USB device number 40 using vhci_hcd [ 690.741764][T17270] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 690.882384][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 690.883193][ T39] audit: type=1326 audit(1734391784.217:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.0.2703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 690.892968][ T39] audit: type=1326 audit(1734391784.217:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17271 comm="syz.0.2703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 692.663183][T17248] vhci_hcd: connection reset by peer [ 692.665212][ T12] vhci_hcd: stop threads [ 692.674329][ T12] vhci_hcd: release socket [ 692.676757][ T12] vhci_hcd: disconnect device [ 692.892893][T17297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.995480][T16243] vhci_hcd: vhci_device speed not set [ 693.155559][ T6888] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 693.305659][ T6888] usb 5-1: Using ep0 maxpacket: 8 [ 693.321800][ T6888] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 693.324118][ T6888] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 693.326383][ T6888] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 693.328722][ T6888] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 693.331621][ T6888] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 693.334489][ T6888] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 693.337544][ T6888] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 693.350460][ T6888] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 693.352861][ T6888] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 693.354785][ T6888] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 693.357282][ T6888] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 693.360259][ T6888] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 693.364338][ T6888] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 693.370260][ T6888] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 693.382431][ T6888] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 693.384803][ T6888] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 693.386977][ T6888] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 693.389404][ T6888] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 693.392357][ T6888] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 693.405589][ T6888] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 693.408515][ T6888] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 693.414545][ T6888] usb 5-1: string descriptor 0 read error: -22 [ 693.416391][ T6888] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 693.418834][ T6888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.424136][ T6888] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 693.825695][ T25] usb 5-1: USB disconnect, device number 97 [ 695.075587][ T56] vhci_hcd: vhci_device speed not set [ 695.490485][T17324] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 695.940048][T17343] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2719'. [ 695.944012][T17343] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2719'. [ 696.689215][T17354] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 696.967201][T17357] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 696.970232][T17357] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 696.976396][T17357] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 696.979025][T17357] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 697.295560][ T6888] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 697.445583][ T6888] usb 5-1: Using ep0 maxpacket: 8 [ 697.459849][ T6888] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 697.463577][ T6888] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 697.472031][ T6888] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 697.479947][ T6888] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 697.490794][ T6888] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 697.494560][ T6888] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 697.516921][ T6888] usb 5-1: string descriptor 0 read error: -22 [ 697.519322][ T6888] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 697.522532][ T6888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.533741][ T6888] adutux 5-1:168.0: interrupt endpoints not found [ 697.735588][ T56] usb 5-1: USB disconnect, device number 98 [ 699.477797][T17407] XFS (sr0): Invalid superblock magic number [ 699.510200][T17407] netlink: 'syz.4.2735': attribute type 10 has an invalid length. [ 699.523767][T17407] team0: Cannot enslave team device to itself [ 699.564446][T17417] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 699.566227][T17417] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 699.569042][T17417] vhci_hcd vhci_hcd.0: Device attached [ 699.745631][ T1451] vhci_hcd: vhci_device speed not set [ 699.805497][ T1451] usb 37-1: new full-speed USB device number 39 using vhci_hcd [ 699.808038][ T6888] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 699.869167][T17429] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 699.871383][T17429] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 699.874307][T17429] vhci_hcd vhci_hcd.0: Device attached [ 699.929088][T17432] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 699.931680][T17432] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 699.935113][T17432] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 699.937842][T17432] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 699.959249][ T6888] usb 5-1: config 0 has no interfaces? [ 699.961394][ T6888] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 699.965378][ T6888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.975578][ T6888] usb 5-1: config 0 descriptor?? [ 700.056228][ T35] vhci_hcd: vhci_device speed not set [ 700.125686][ T1017] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 700.127880][ T35] usb 45-1: new full-speed USB device number 8 using vhci_hcd [ 700.181981][T17418] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 41 [ 700.184851][ T11] vhci_hcd: stop threads [ 700.186080][ T11] vhci_hcd: release socket [ 700.187185][ T25] usb 5-1: USB disconnect, device number 99 [ 700.189262][ T11] vhci_hcd: disconnect device [ 700.297593][ T1017] usb 9-1: config 0 has no interfaces? [ 700.299059][ T1017] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 700.301399][ T1017] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.305116][ T1017] usb 9-1: config 0 descriptor?? [ 700.534202][T17430] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 7 [ 700.536768][ T11] vhci_hcd: stop threads [ 700.538419][ T11] vhci_hcd: release socket [ 700.539821][ T56] usb 9-1: USB disconnect, device number 14 [ 700.540155][ T11] vhci_hcd: disconnect device [ 700.780476][ T39] audit: type=1326 audit(1734392050.122:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.2.2742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 700.786626][ T39] audit: type=1326 audit(1734392050.122:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.2.2742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 700.792296][ T39] audit: type=1326 audit(1734392050.122:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.2.2742" exe="/syz-executor" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 700.798268][ T39] audit: type=1326 audit(1734392050.122:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.2.2742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 700.808443][ T39] audit: type=1326 audit(1734392050.122:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.2.2742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 700.816086][ T39] audit: type=1326 audit(1734392050.122:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.2.2742" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 700.823394][ T39] audit: type=1326 audit(1734392050.122:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.2.2742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 700.829615][ T39] audit: type=1326 audit(1734392050.122:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.2.2742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 700.835276][ T39] audit: type=1326 audit(1734392050.122:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.2.2742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 700.841077][ T39] audit: type=1326 audit(1734392050.122:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.2.2742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 702.136130][T17467] veth1_macvtap: left promiscuous mode [ 702.138023][T17467] macsec0: entered promiscuous mode [ 702.139800][T17467] macsec0: entered allmulticast mode [ 702.690375][T17480] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 702.692856][T17480] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 702.696367][T17480] vhci_hcd vhci_hcd.0: Device attached [ 702.935692][T12880] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 703.097064][T12880] usb 9-1: config 0 has no interfaces? [ 703.098606][T12880] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 703.101062][T12880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.104825][T12880] usb 9-1: config 0 descriptor?? [ 703.309106][T17481] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 7 [ 703.310976][T16243] usb 9-1: USB disconnect, device number 15 [ 703.312975][ T1213] vhci_hcd: stop threads [ 703.314630][ T1213] vhci_hcd: release socket [ 703.325112][ T1213] vhci_hcd: disconnect device [ 704.764616][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2757'. [ 704.773983][T17507] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 704.895578][ T1451] vhci_hcd: vhci_device speed not set [ 705.104587][T17519] veth1_macvtap: left promiscuous mode [ 705.106685][T17519] macsec0: entered promiscuous mode [ 705.108629][T17519] macsec0: entered allmulticast mode [ 705.687149][T17527] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 705.846978][ T35] vhci_hcd: vhci_device speed not set [ 706.128604][T17540] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 706.130420][T17540] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 706.132604][T17540] vhci_hcd vhci_hcd.0: Device attached [ 706.345561][ T35] vhci_hcd: vhci_device speed not set [ 706.385481][T16243] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 706.415522][ T35] usb 45-1: device descriptor read/64, error -110 [ 706.566870][T16243] usb 9-1: config 0 has no interfaces? [ 706.568412][T16243] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 706.570943][T16243] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.574450][T16243] usb 9-1: config 0 descriptor?? [ 706.606388][ T35] vhci_hcd: vhci_device speed not set [ 706.678234][ T35] usb 45-1: new full-speed USB device number 9 using vhci_hcd [ 706.784211][T17541] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 8 [ 706.787266][T16243] usb 9-1: USB disconnect, device number 16 [ 706.789894][ T1213] vhci_hcd: stop threads [ 706.791116][ T1213] vhci_hcd: release socket [ 706.792471][ T1213] vhci_hcd: disconnect device [ 706.906391][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 706.906402][ T39] audit: type=1326 audit(1734392056.252:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.3.2769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 706.913694][ T39] audit: type=1326 audit(1734392056.252:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.3.2769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 706.920236][ T39] audit: type=1326 audit(1734392056.252:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.3.2769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 706.927996][ T39] audit: type=1326 audit(1734392056.252:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.3.2769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 706.935884][ T39] audit: type=1326 audit(1734392056.262:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.3.2769" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 706.943371][ T39] audit: type=1326 audit(1734392056.262:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.3.2769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 706.951204][ T39] audit: type=1326 audit(1734392056.262:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.3.2769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 706.958964][ T39] audit: type=1326 audit(1734392056.272:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.3.2769" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 706.966806][ T39] audit: type=1326 audit(1734392056.282:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.3.2769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 706.974378][ T39] audit: type=1326 audit(1734392056.282:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.3.2769" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 707.187548][T17554] [ 707.188424][T17554] ====================================================== [ 707.190730][T17554] WARNING: possible circular locking dependency detected [ 707.193080][T17554] 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 707.196141][T17554] ------------------------------------------------------ [ 707.199778][T17554] syz.2.2770/17554 is trying to acquire lock: [ 707.201772][T17554] ffff8880243343c8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_exit_sched+0xd1/0x310 [ 707.205010][T17554] [ 707.205010][T17554] but task is already holding lock: [ 707.207411][T17554] ffff8880447780b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_disable+0xb5/0x490 [ 707.210470][T17554] [ 707.210470][T17554] which lock already depends on the new lock. [ 707.210470][T17554] [ 707.213588][T17554] [ 707.213588][T17554] the existing dependency chain (in reverse order) is: [ 707.216180][T17554] [ 707.216180][T17554] -> #4 (&eq->sysfs_lock){+.+.}-{4:4}: [ 707.218213][T17554] __mutex_lock+0x19b/0xa60 [ 707.219522][T17554] elevator_disable+0xb5/0x490 [ 707.220873][T17554] __blk_mq_update_nr_hw_queues+0x41e/0x1500 [ 707.222536][T17554] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 707.224513][T17554] nbd_start_device+0x15b/0xd70 [ 707.226454][T17554] nbd_ioctl+0x21a/0xfd0 [ 707.227872][T17554] compat_blkdev_ioctl+0x2f7/0x750 [ 707.229380][T17554] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 707.230942][T17554] __do_fast_syscall_32+0x73/0x120 [ 707.232487][T17554] do_fast_syscall_32+0x32/0x80 [ 707.234215][T17554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 707.236727][T17554] [ 707.236727][T17554] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 707.239814][T17554] blk_mq_submit_bio+0x1fb6/0x24c0 [ 707.241870][T17554] __submit_bio+0x384/0x540 [ 707.243801][T17554] submit_bio_noacct_nocheck+0x698/0xd70 [ 707.246031][T17554] submit_bio_noacct+0x93a/0x1e20 [ 707.247706][T17554] block_read_full_folio+0x812/0xa50 [ 707.249579][T17554] filemap_read_folio+0xc6/0x2a0 [ 707.251458][T17554] filemap_get_pages+0x155f/0x1be0 [ 707.253210][T17554] filemap_read+0x3ca/0xd70 [ 707.254738][T17554] blkdev_read_iter+0x187/0x480 [ 707.256386][T17554] vfs_read+0x87f/0xbe0 [ 707.258013][T17554] ksys_read+0x12b/0x250 [ 707.259740][T17554] do_syscall_64+0xcd/0x250 [ 707.261600][T17554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.263923][T17554] [ 707.263923][T17554] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 707.266998][T17554] down_read+0x9a/0x330 [ 707.268703][T17554] page_cache_ra_unbounded+0x173/0x750 [ 707.270880][T17554] page_cache_ra_order+0x8f2/0xc80 [ 707.272898][T17554] filemap_fault+0x14a5/0x2820 [ 707.274818][T17554] __do_fault+0x10a/0x490 [ 707.276674][T17554] do_pte_missing+0x99f/0x3e00 [ 707.278591][T17554] __handle_mm_fault+0x103c/0x2a40 [ 707.280653][T17554] handle_mm_fault+0x3fa/0xaa0 [ 707.282595][T17554] do_user_addr_fault+0x7a3/0x13f0 [ 707.284640][T17554] exc_page_fault+0x5c/0xc0 [ 707.286515][T17554] asm_exc_page_fault+0x26/0x30 [ 707.288467][T17554] _copy_to_user+0xb6/0xd0 [ 707.290284][T17554] msr_read+0x14f/0x250 [ 707.291982][T17554] vfs_read+0x1df/0xbe0 [ 707.293662][T17554] ksys_read+0x12b/0x250 [ 707.295388][T17554] __do_fast_syscall_32+0x73/0x120 [ 707.297491][T17554] do_fast_syscall_32+0x32/0x80 [ 707.299458][T17554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 707.301912][T17554] [ 707.301912][T17554] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 707.304625][T17554] __might_fault+0x11b/0x190 [ 707.306507][T17554] _copy_from_user+0x29/0xd0 [ 707.308283][T17554] __blk_trace_setup+0xa8/0x180 [ 707.310178][T17554] blk_trace_setup+0x47/0x70 [ 707.312051][T17554] sg_ioctl+0x7a3/0x26b0 [ 707.313786][T17554] compat_ptr_ioctl+0x6b/0xa0 [ 707.315686][T17554] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 707.317800][T17554] __do_fast_syscall_32+0x73/0x120 [ 707.319836][T17554] do_fast_syscall_32+0x32/0x80 [ 707.321787][T17554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 707.324234][T17554] [ 707.324234][T17554] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 707.327020][T17554] __lock_acquire+0x249e/0x3c40 [ 707.328946][T17554] lock_acquire.part.0+0x11b/0x380 [ 707.330920][T17554] __mutex_lock+0x19b/0xa60 [ 707.332607][T17554] blk_mq_exit_sched+0xd1/0x310 [ 707.334513][T17554] elevator_disable+0xc0/0x490 [ 707.336417][T17554] __blk_mq_update_nr_hw_queues+0x41e/0x1500 [ 707.338769][T17554] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 707.340972][T17554] nbd_start_device+0x15b/0xd70 [ 707.342932][T17554] nbd_ioctl+0x21a/0xfd0 [ 707.344651][T17554] compat_blkdev_ioctl+0x2f7/0x750 [ 707.346684][T17554] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 707.348780][T17554] __do_fast_syscall_32+0x73/0x120 [ 707.350818][T17554] do_fast_syscall_32+0x32/0x80 [ 707.352258][T17554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 707.354040][T17554] [ 707.354040][T17554] other info that might help us debug this: [ 707.354040][T17554] [ 707.356643][T17554] Chain exists of: [ 707.356643][T17554] &q->debugfs_mutex --> &q->q_usage_counter(io)#51 --> &eq->sysfs_lock [ 707.356643][T17554] [ 707.360244][T17554] Possible unsafe locking scenario: [ 707.360244][T17554] [ 707.362633][T17554] CPU0 CPU1 [ 707.364543][T17554] ---- ---- [ 707.366449][T17554] lock(&eq->sysfs_lock); [ 707.368082][T17554] lock(&q->q_usage_counter(io)#51); [ 707.370918][T17554] lock(&eq->sysfs_lock); [ 707.373366][T17554] lock(&q->debugfs_mutex); [ 707.375046][T17554] [ 707.375046][T17554] *** DEADLOCK *** [ 707.375046][T17554] [ 707.377930][T17554] 7 locks held by syz.2.2770/17554: [ 707.379801][T17554] #0: ffff8880243da198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 707.383204][T17554] #1: ffff8880243da0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 707.386964][T17554] #2: ffff888024334118 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x205/0x1500 [ 707.390914][T17554] #3: ffff888024334088 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x214/0x1500 [ 707.394776][T17554] #4: ffff888024333b58 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500 [ 707.399041][T17554] #5: ffff888024333b90 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500 [ 707.403334][T17554] #6: ffff8880447780b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_disable+0xb5/0x490 [ 707.406775][T17554] [ 707.406775][T17554] stack backtrace: [ 707.408892][T17554] CPU: 3 UID: 0 PID: 17554 Comm: syz.2.2770 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 707.412724][T17554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 707.416530][T17554] Call Trace: [ 707.417765][T17554] [ 707.418862][T17554] dump_stack_lvl+0x116/0x1f0 [ 707.420580][T17554] print_circular_bug+0x41c/0x610 [ 707.422395][T17554] check_noncircular+0x31a/0x400 [ 707.424150][T17554] ? __pfx_check_noncircular+0x10/0x10 [ 707.425911][T17554] ? hlock_class+0x4e/0x130 [ 707.427107][T17554] ? mark_lock+0xb5/0xc60 [ 707.428238][T17554] ? lockdep_lock+0xc6/0x200 [ 707.429807][T17554] ? __pfx_lockdep_lock+0x10/0x10 [ 707.431628][T17554] __lock_acquire+0x249e/0x3c40 [ 707.433432][T17554] ? __pfx___lock_acquire+0x10/0x10 [ 707.435354][T17554] lock_acquire.part.0+0x11b/0x380 [ 707.437183][T17554] ? blk_mq_exit_sched+0xd1/0x310 [ 707.438992][T17554] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 707.441030][T17554] ? rcu_is_watching+0x12/0xc0 [ 707.442815][T17554] ? trace_lock_acquire+0x14e/0x1f0 [ 707.444654][T17554] ? find_held_lock+0x2d/0x110 [ 707.446363][T17554] ? blk_mq_exit_sched+0xd1/0x310 [ 707.448181][T17554] ? lock_acquire+0x2f/0xb0 [ 707.449840][T17554] ? blk_mq_exit_sched+0xd1/0x310 [ 707.451666][T17554] __mutex_lock+0x19b/0xa60 [ 707.453313][T17554] ? blk_mq_exit_sched+0xd1/0x310 [ 707.455184][T17554] ? xas_find+0x2fd/0x870 [ 707.456781][T17554] ? blk_mq_exit_sched+0xd1/0x310 [ 707.458449][T17554] ? __pfx___mutex_lock+0x10/0x10 [ 707.460269][T17554] ? xa_find+0x1ca/0x370 [ 707.461831][T17554] ? __pfx_xa_find+0x10/0x10 [ 707.463514][T17554] ? elevator_disable+0xb5/0x490 [ 707.465053][T17554] ? blk_mq_exit_sched+0xd1/0x310 [ 707.466886][T17554] blk_mq_exit_sched+0xd1/0x310 [ 707.468676][T17554] ? __pfx_blk_mq_exit_sched+0x10/0x10 [ 707.470675][T17554] ? mark_held_locks+0x9f/0xe0 [ 707.472446][T17554] elevator_disable+0xc0/0x490 [ 707.474188][T17554] __blk_mq_update_nr_hw_queues+0x41e/0x1500 [ 707.476405][T17554] ? __mutex_trylock_common+0xea/0x250 [ 707.478373][T17554] ? __pfx___mutex_trylock_common+0x10/0x10 [ 707.480507][T17554] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 707.482564][T17554] ? rcu_is_watching+0x12/0xc0 [ 707.484270][T17554] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 707.486553][T17554] ? __pfx___mutex_trylock_common+0x10/0x10 [ 707.488705][T17554] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 707.490785][T17554] ? __pfx___mutex_lock+0x10/0x10 [ 707.492615][T17554] ? trace_contention_end+0xee/0x140 [ 707.494523][T17554] ? __mutex_lock+0x1cc/0xa60 [ 707.496250][T17554] ? nbd_ioctl+0x151/0xfd0 [ 707.497889][T17554] ? __pfx___mutex_lock+0x10/0x10 [ 707.499868][T17554] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 707.501919][T17554] nbd_start_device+0x15b/0xd70 [ 707.503725][T17554] ? bpf_lsm_capable+0x9/0x10 [ 707.505437][T17554] nbd_ioctl+0x21a/0xfd0 [ 707.507009][T17554] ? __pfx_nbd_ioctl+0x10/0x10 [ 707.508689][T17554] ? __pfx_lock_release+0x10/0x10 [ 707.510414][T17554] ? trace_lock_acquire+0x14e/0x1f0 [ 707.511775][T17554] ? __pfx_nbd_ioctl+0x10/0x10 [ 707.513018][T17554] compat_blkdev_ioctl+0x2f7/0x750 [ 707.514691][T17554] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 707.516615][T17554] ? __fget_files+0x206/0x3a0 [ 707.518277][T17554] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 707.520263][T17554] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 707.522184][T17554] __do_fast_syscall_32+0x73/0x120 [ 707.524045][T17554] do_fast_syscall_32+0x32/0x80 [ 707.525869][T17554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 707.528158][T17554] RIP: 0023:0xf70ce579 [ 707.529645][T17554] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 707.536452][T17554] RSP: 002b:00000000f50c055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 707.539436][T17554] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ab03 [ 707.542380][T17554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 707.545234][T17554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 707.548073][T17554] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 707.550869][T17554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 707.553668][T17554] [ 707.665659][T17554] block nbd2: shutting down sockets [ 709.069716][ T74] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.159312][ T74] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.219808][ T74] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.287500][ T74] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.340332][ T74] bridge_slave_1: left allmulticast mode [ 709.342444][ T74] bridge_slave_1: left promiscuous mode [ 709.344509][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.347756][ T74] bridge_slave_0: left allmulticast mode [ 709.349611][ T74] bridge_slave_0: left promiscuous mode [ 709.351515][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.499256][ T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.503170][ T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.507552][ T74] bond0 (unregistering): Released all slaves [ 709.781334][ T74] hsr_slave_0: left promiscuous mode [ 709.783485][ T74] hsr_slave_1: left promiscuous mode [ 709.785762][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.787743][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.789832][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.791761][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.794634][ T74] veth0_macvtap: left promiscuous mode [ 709.993448][ T74] team0 (unregistering): Port device team_slave_1 removed [ 710.039090][ T74] team0 (unregistering): Port device team_slave_0 removed [ 710.634054][ T74] IPVS: stop unused estimator thread 0... [ 711.775553][ T35] vhci_hcd: vhci_device speed not set VM DIAGNOSIS: 23:30:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000002 RDX=ffff8880226e4880 RSI=0000000000000000 RDI=ffffc900037a7c00 RBP=0000000000000000 RSP=ffffc900037a7b60 R8 =0000000000000005 R9 =0000000000000002 R10=0000000000000002 R11=0000000000000001 R12=ffffc900037a7c00 R13=ffff8880226e4880 R14=00007ffffffff000 R15=0000000000000000 RIP=ffffffff8b201280 RFL=00040093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f42bfab7d00 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004a920000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=e57def3fe57def3f e57def3fe57def3f e57def3fe57def3f e57def3fe57def3f e57def3fe57def3f e57def3fe57def3f e57def3fe57def3f e57def3fe57def3f ZMM22=0a9eb4270a9eb427 0a9eb4270a9eb427 0a9eb4270a9eb427 0a9eb4270a9eb427 0a9eb4270a9eb427 0a9eb4270a9eb427 0a9eb4270a9eb427 0a9eb4270a9eb427 ZMM23=089d2847089d2847 089d2847089d2847 089d2847089d2847 089d2847089d2847 089d2847089d2847 089d2847089d2847 089d2847089d2847 089d2847089d2847 ZMM24=675a91ab675a91ab 675a91ab675a91ab 675a91ab675a91ab 675a91ab675a91ab 675a91ab675a91ab 675a91ab675a91ab 675a91ab675a91ab 675a91ab675a91ab ZMM25=dba3923edba3923e dba3923edba3923e dba3923edba3923e dba3923edba3923e dba3923edba3923e dba3923edba3923e dba3923edba3923e dba3923edba3923e ZMM26=af4669f6af4669f6 af4669f6af4669f6 af4669f6af4669f6 af4669f6af4669f6 af4669f6af4669f6 af4669f6af4669f6 af4669f6af4669f6 af4669f6af4669f6 ZMM27=7cfa36747cfa3674 7cfa36747cfa3674 7cfa36747cfa3674 7cfa36747cfa3674 7cfa36747cfa3674 7cfa36747cfa3674 7cfa36747cfa3674 7cfa36747cfa3674 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=d1190000d1190000 d1190000d1190000 d1190000d1190000 d1190000d1190000 d1190000d1190000 d1190000d1190000 d1190000d1190000 d1190000d1190000 info registers vcpu 1 CPU#1 RAX=00000001000008fd RBX=ffff8880226e4880 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fd RDI=0000000000000001 RBP=0000000000000008 RSP=ffffc90003027100 R8 =0000000000000000 R9 =fffffbfff2039b3a R10=ffffffff901cd9d7 R11=1ffffffff1bb8b79 R12=0000000000000003 R13=1ffff92000604e20 R14=0000000000000000 R15=ffffc90003027120 RIP=ffffffff81682da5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000076ab0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003c800000000 0000000700000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000acedc4 RBX=0000000000000002 RCX=ffffffff8b1a17a9 RDX=ffffed10056c6fee RSI=ffffffff8bb16bc0 RDI=ffffffff81702e19 RBP=ffffed10036ed000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=ffff88802b73fb10 R12=0000000000000002 R13=ffff88801b768000 R14=ffffffff901cd9d0 R15=0000000000000000 RIP=ffffffff8b1a2b8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000007404c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142075 RDI=ffffffff9a665300 RBP=ffffffff9a6652c0 RSP=ffffc90003936f20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff85142010 R15=0000000000000000 RIP=ffffffff8514209f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006bd3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003c800000000 0000000700000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000