last executing test programs: 1.029858572s ago: executing program 2 (id=1192): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 928.847845ms ago: executing program 2 (id=1193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) 927.305824ms ago: executing program 3 (id=1194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "a9cbc4b723986beb2541731c8831607b6ee747534f2610e68420ac50bde6dad58d04aad3777f18b4f168b3950653ce1d7740b6225b60f102dea41282032f21c3f19760a59ad876506e4e939e80e92248edfd8137e41621c1a490cf3cbb0502fa6deb4cb0efa6bc813cca06ed4828bafa15d1afd8ac82b71d1a7b410eeac6a6f31e4995b05d3f93bf80a053ae74958ed42c6c4b4d0bcaa08d3e6025a166ac6f19973f974613e0d7ca520dd948ed23fcce9f475faa3e49d697324fa1b2cdfef7deb66a190e9185a90f5c54c88895af1a61f8c0722f0c0bf9835d8910449682cc5551ec995aec222238bb28f41ba7f99f93b785dd2d48cf389f27da125b9c3ec7f716d6b6b696a93e625f0e17b4ff3bac5eec8e2dd837254c16d8c9b2a773ac70b8dc7216980fcf1db0cd885a6f3379dfcca516b0b5771d3dfb2212fd569b8f6003dcf8478390e14a5bf73eb1a61a12ce20ea3f5fbd6d9a56a4adf6043190cc7d559e7773668d0498f6c7438917d204ed2ec53da03cc744619be3785cd8cddb678f8e90965f22242bb62fa3590dde45cacad3852a54154a90d7495cc4cfbd7baacc19604efd864cc76a7e867cd7403301f45a3ad20ed8edf412e4aae5f279eada88ee43a436dd3b1f37098b7d81759aff2d81e5593535d44035fdcbae0f45a7163c06b8ed7da27a03e266947d7f11d9e1600f1a88b99643a0b99abad360b8137415f7800f8a5a16ba306778733d5493cc73d0aacebe1cc4618847bd620034cb617c55e47ff8d8000f52c25a6b3e9272c297e6b30bed370dda4c2b56278893a4faefb28a87c40229d3f80814e128eedb7050465e1e00547a1b77ebaef78355d9867ce521138d63f147ec3de6cac38d9eeb1d167494466e00d97a32701117bbe0f95304970e632b9cf8ded044b3f1c01326095b422678d798a9c5f8ab05f4e6549639186723aa3d38927ed4ca94a9e6de3c4f5ce99d090389473455cb366c7dfcb43ebe60271a3693e80ae4948291753007f5032f518ffc832f3e819f3bdac1085a80cdd494cdcac4a874a14818b9dae534559c2c5a542a12949a22fddb9060e8a400f96512aa8eaaa6659932dc8852f5709a808604c2fda229c79933646e36255948baec6e0c2d4fbe056628157ba456603e5cb45761b5aa97c0daceb3e6d7a192d109847057cb4322c9c5e62403c921e9cebeca77d12c3ed05f5e131e3c00d9070618872ea8a1f05e4598c98739d3a9245e537ed992aa4eb8a571e4c7c0dc797f91e3258835f9db1b6501edaaf38c9fd4d718c743d30b6f1e480ce9408aa6b894055768738e3df843301d99b476ba8d30f6483022ad7fd50493e600700ef1b70c72f607feb0df9898b61a38f4f59d23779b7af4a5b5a0e7379877d8c875d1e47a9ddbac19208cd22e05f729a9175b9bf1c96618d63585204eb5ea29e0a0f17c12219fd51bc462dcff6d3ff73b64d2a5f7ebe6ebdefd841698e909cf1018a88afefc1802fc97c22a240f20ce6938ae6b2224f7ca311622695577f3e4cb8f7e87bcf5bcdcc5311815bab1499465f687903b4da5693c83cbe13ba3d94f413bbdf9886241fc1f0b9ea00e7b2d1c2fe29d8921c56919bbfa091d4542c590a18848256b7eca92114c5542356bb15e1cd59b28a5d5b86bb92c30e88ea6edc6efd3c685a7e9b840b61f445bb57d670d3dbba61da442fcdabd4c14b9dd6543aafca5bea6ca16c00bbdc0999cec79272dfd1de86bea7d830ec2deaa339c2fc57d6490ee7cf3bb4e6cb4b8dcaa4279bef0af601f96dc25a3cf926eb6c5eb9529a266e1a9d96fbb5e0ffeb472d40e3853f42d69e725d2dd570b531779a09a5f945a2dce4ddd898be60b9d38f3c305f942f8f8a3ee992de01a0d6b3db1a4174b770681d2470edd2319a9b9d04d3cadd67583a313c071f809c89134b2b714cb2d7247d4d6b5d794302e9408e946bf1cadc767a8ae918a6608f7d2dbb2d825e949c823ac6bda0c46dea864c83222f3c7f7ec020f3a6445f3762dfaae5a28c3857053b2548d11c9b9f4af5366b43012e35d14ba139085493e95ad24bcc92b835f3c72ff762fcbe3d04ee2051e959a9e680f51425d5eeeedd99767fccda20b44bbbac6989e1d6f70f030c2530b83923fbf27fbf24f62ff7a5619b39b338e165dcf66faf6092edd19216fdacfb8eb80bd7d8a7767f538c3021e20f498c8e456bc32af1157b5988950caf1c478047f132c01f53c12929f030e9d78c284e64a521350d72748ef214c05f4c8d2e47384c3cd29c99a2df1abb2e8ff5a363a488feb119e8ad5e3c39a4f24449d00b3772090b499e2c65b50a3e6ce7f1e2f2bac0ae5e58147d1d6887617ca38d12b1cc9a5e3ee47539f40179136698acd9b9e20a4f85335dcb19d4ba4a05bcd84b27a9f1897ab8f67abf78ba3ce4d87b37c129562d33bb0836c8fe830c068e7c8b6728ed585258c7d82b5c407d0532bf5ba60cfb0a6e6f3aa44bdf3bb7ac389023c3db4395c3875a3496d85640d423775d8ac0c4c3ab1831bdd785a5ca0ba2073bdf6970e4b63718944603ab32b83d7c73af090c3a941561a76f08e2235e1ea8a0b721cd6a73466664c411c33fd1a3e46e580c77034cb09ac38b6d1824f642d3354e827b6ddc0ca15c3bd7192882eaece388d428282c859fed7d280e5d81cd0252c149154e2038a3f2535781dc81d7221278c21ee819fb913fc8d97e96f3dbbf0b2cd63a0ceeadec43fca7a760f45aa53de97597b4afb3abf5921125e9f148da377556e6de1a62aab6055b10c1698649515e62c572d62d901ae7fcd417b627db64785fbdc21f0e978eb143d7abb2771de9a912466fb6e6f55a12f209e131732d45a8293f1a36ddddfad54f857016e3ab7fceb97ddfde1a8c8569dfa972ec636e7c93e603d5e1d0e98d6f109dfa6df50ce987abfc291aba0e488ba8f0596fbd1bacd58862b611250a85cd34e7d100f785286d815281b62ef2dfeea5e8ba4ee4a019af0ff59b0f4f3049f8718d0fca57de1cf88763d13ad26c50cccec4faba99d899ef079c3400052d065cc0a44e8f73dc5bef5f8681015b29c96dacd026d920f369a2b0c341b8295f5268e2d9bf80df2d9ea1017b5b41ec2060c2fecc67c040e7c37521b6d6174c4d4ed4accc5479f6fc4ddc0e45a7f8030ff8e23f000315a3565498d07bd0cc6459f5cff23b40ffb80ace2f48fe0c1a337bb4f748bb8c057089de5cd727b278b45d84a8f7df9f898b3cef2ec319b032f888c4953bfe141c8e4b67ab3f95fa133790ea17b27be21c9478da70641265045e81e28229a4dc15f59c2f18b1b9c082d1154bc9565508fc9419912b48f3b1271609006399a844f6ccedb6323ada63d3e0b340fd07cf9e3b98b1d193bd76796c2a185366b25468017d28371d8792eb42304961bc9c1f4ef4025d2814837dacc9f1d777bfeddb30eca1cacd9f5b6619c4000252ecdabf7107dff264046c111c6f5767e3486c37ec175f52bd3460a7ad49e35bb729ba76e2fa5e117c49b750000005e0abf56340740b81ea37c5df26b7c885cc5da412cf4e9932e2561aa7945945dcba0677786c9ea9b9aee47d73454df82048f021b30a817606c96415c22e1e908316f84aae52e050e31176408d35ef33091618df7d38d22bd2b626dc138f423c32362878c8f6538dcf0b96c4298668d4bb35773c952bbebd4778c964b0eae8eac9bef3469ea5da890377c500ea027180f5308585cd7941c7e3305c32d610de49b5c1acce6c285d88a99dcebb2b5972a276d416abf25b44c1712a43d3e30005a1535553e779c0f72ff519d2407214c02e7020ca479e93c3fb2b867ad73e69ba10e92f329cd54c4c80d227d0710cf384fd9a39d444053afce6d1e93b47137843d149e888bd868b1b2179c1fdd8291d15724db10a756300209ae4a2ed91788fe9f980af1bb00d05a8fe1a020fe4bba91fb487c8ea674a6739067a0a86b7f2a4fc141f6c864f065fc6e5effdb5a1f1d063c6888626e13ced52f3669677dad96da1cfff7d700e9f6f74131b8ac0f4fb6c8d5fd675b1ed6001bba7dd0e95567a6d06fe28e756609821312f4725c5909c6353ad385e57fb162e2f65b5e2a0100aaa356a19b9c5c183d195d0134adb8bc8d03415daafd95f3a5e44f201741e22dd905dc12469664040ce714a5d9042f58db392d6c6af1eaa4c82cd9b4996252b44334be627708463ffe52a80d8d1c8a5b1a23f9c68144c4a6c6387e542b3cb9de7765faf05fda086986d3c6a1f0906b2ea0eba741abb9514ccd57f2d8ea1d67145c5d71749b560f85093ecc265a24239078253fa0bd39bf67f8e1d78f07e167c05d808771c7b0146af368e8859273ef76f9feedf7fc69640b5e95a25076c477338e31cc9a7348b8a31a0f8d4dd9e6c46f18126279c5d1192ddee08a7057195689954b26a19dcfd2a59febb6556c18c18abc85527372919196b29a737f8bb3b97bebaf3e6c43099064e067f12772c2333be19dd4e803289430a660d68963a26ff1b1c8c664c0318a2558dec140d984837a936651906ab960b6bff8bc8b32704f3e0769e6c85c9f5bd50270bc1030ea71f2db5c43116bd0641ed31ab6db12514aec68febe59e04d2b872c9fc2173017ee6e75a18d6832c9992d1ed2ead9452dce9b2efa01dc97ea31ee5c3f5743760f2589615f45738140d0f8c148f1858d0897094a34727493e607132bc1eefa0d0ff236f9ac5a2a0f0bf06719c1d5061846e427fa36138c808741ccbd10ad3f6f54470804e656a8ab1a9ee9a523bed87cb2fd4d6db8aa6d6b80d1e9886dc12b915665101b9094a22f444379182f5356fed797ebd97ec6493bd681f69321f9735ae6d3d6822818c7cfb21c5f3a0f9d5b8ef070c916fe9ccbbf04128a27e7928e3572f125b986c52ec0de078b40135b922a2feb294b0349df06d1c3e2c9d2ed2ee88b7a1673423c6baedb51beb8f8cb1b3b986d1b9632fedfaec8e9a237311beb89cb0dd7efaa5b68537641d06b7cbfda581344c87452b4d3fe96cea6143378c4dd7586a9d55c666cce828ef91a35f3f0a5c9c369bd20c1bc7cc77fcf316a567fa21863b12c43faf3b9588dce4caa151937c6ee699cf49dba041775773ae062c69783758513a178bf46d2d40e24afe8975dd768a466755af2ffbb9fa728724a18fc9f427672ad5867a72ae8caca60fcc90cf817c291a2025b5243ae36e200b5e5c9ee4e90eac775c3b29fe1df8c35716f37d11961084fc28b0f8855376ec85d7741535f88db7977629dd832f06bb258e9a88cfc8671df2763fd9383a777f768c7aaecb9a7af9e76bb719767767c3d5178e2a10765c6b2ae80753f403125a9203ede6ed44eb96a1a010842f88f020dbb7f8df8bcbea0b60f1b99dd9b9aae2dbc995edc8ed82ec5e21e8d5e4d8d9fd0bfab342db38d12bb24c20c2a579069d74624db16bb9ec501312d8de0e653e9e74668d0ed05ccb0eb99db410c0000000fc246302635630b295ccf849e45944a25baa7f4651fa37f147e0fa977c0304e7cf25fa78260ca03abe8dc32cfb461f019f7d82194a98daae521ec4eaf3e138bb95b09d8ff2f106febcc126743abc8f8b707cd2cae1548c6fe54f64bf46c9ff03975e0c37eda3d485ff76ea5ae71fa5a2ca0d9293ea0cd4186e6e2e26fc2ba5e2cdde9400d9c1717058157a8410c9cd7ca4e679f41d8932576e7b292f28dfb9775b0ac5eb5788a8ddf797e32919e7a41c305af2e4e37eb4d5600", "1acd2077949cf1f27e1e764566e4cffaa168dcad09bfe7c84a06d9db78a4e8f0504116608cffa736ae4427d04f27d39e5de80f8935f281bc483252d1c4e0dff576831d8505d3cf34ddc4f4760b53ec5182b54b352dea1b5975eea9b6bffd5b66524559c7c3e9981d7a0ff5ffe6814c923871db66426d98286aec1debc56864a4b29ee5cb46989af08546d6d1a5d9da45db7d8abea1d392d0c668cc040da5d129ddbbe6a95a7d9e51a13328ea3fbd9ac81f03914ed9d1d2b72c234093a351f7294556996ca5459d796cb4127a9aed8e0cca398d1b5af6eae257d02db91a61d49a5677ee9c8caf1855edd2c25b9b3a9a5174d2193108e5e87d781780d9506a890687c80c429f3a46028ed71364c4b8d3b2380b38d2cf7e447dee058f556dcae2627e49dfd316d169d382f2b6775233157f57c7be54b105e2493e140ad97ecf9c12df8f0db9a973d0ef9197ebbdebc5e822ee06852a408560c7f19c65ab8527edc9ec1d6378f2c748f7e84d1d6e98de8abab3e0e42a866e1ec5d00822b124a98d77e9c8dbb3ac6648afe409b21e1cf2f5458a0588cd11af6887f552f6c16a801abf2594eb9a80e704b8053573f661dd29706e71060b630272037144b33d684f66128950510d4138785418f726eb7c7f84c7dda646b3647d673122f95ef89c863c3d4adec4477664cfe911683f19862cc918451f70a6a359dbc66b3599c0af91858ebe13c253a6e9a96758955fdfd1be103777812339e3786484a25b18994ba69b4275f26a64afb9be5219061d94d7c472236f1a20a9217d70abab15182c5f04c6080d535e34045d6497c1c8a2ea53fc022eb159d0d1be59a21f277ce441f3c5cb03ef0e7e1ac63177dfe567e2cb9055228f32c9ca6d38d99093fdc129951380cedafcca40712a2da5cc0af8d872d8f848ea5ff95210a52d2390e236da76fffce86cc8a78a8ea0e1e4464ceac9021556d29d7470ca19849b417aa6aee032f3bd437cb5c839c9f5fb20ec1367449abfb5e19f8365b7947bda60e34136e2eb53e0243766c2718d4bfe6eec77f8ca04d177cc17bad59d651a08349651de6d4dbf5856a6d42cc8cb2441ab7dfa9420d87d4a5aa5914f619b2478a0d68a98280231c8e7558d11eec87e80f2d039b5d6b287d9b3667b020dc45b999b162247bf38f5ac5fc99b5eb6ac5939d35d7d6e71b366f9553ada2784671aecdbdcaf42a2f254dc0289f7be9c6f0c045b30f63ae1a8fac778030f27e04e980bae66e474bc4f9572b8a0d8119ce13ea2ad1285b3397bc929ff26a2ba1ef2760c77e3e114d15742740b27796cb2fc84761db427cdf3c63be71fd6734ed2cb1300a8d5e2b1964f2a0320bfbad8e9bce0cd9329c8c41d79107d77f65c99f3c03813c1f0f5351869434c2ccb685f1863fac38a44ecf354ffde4926ae3cee90833db386633e6dba3585ec36f1aca6701d4d1fc13ac1c5d4cf2ae8c8c418da372bce96451dc2add28828e45ce3f6e35da3d49dcdb8ceb084a581b68fc5fcd4c45246e6b215ca98ae7239c317fe45404984292a83ac7e62614665bec4a5e80b055a0635003e93172e2045ec88144d9d7a2b50c45333720e2273b165147a0b1af77fe87089fe8c0fd32c4e950aedf6798c9007575dc86c02089414089527baf9bbbe5eaf4d58289de0987f8f310d7900ef2350daa438ac83ff255344a2bc814a3e7055269544310b0fe78b07eb0ee5f16899fc8bdf8e3cc47d27a44c93528885452195706091eaf15930f9df5874c19d0a1deedde0cbe9cda7f0618c378bc4ba6fbe911d546c7bc76954fcc6b5ef56c77d306421f9d24e0770cf8b578aaa6276bff4b98e9968e9a1f8c78c6d647d8c52a42d27ee8359840747913e0983e049ad77d87e35800eeeb19cd786a5edf6886e610f51b4d2290d959c7fe906dad2d3e2a5648c5ec0d48becaf209fbb6599d1b0d6299cb2b2fad3b3efac6ba0911a63ae399fa3f19adecc9b10533c99bba28bf9e37600db41c2b463c25b0602fb86ef043ee72aa26e7f102c3afe4073d1318671a514f8320dcbc699514792d5c90c34fe6809102cb6537a4e76530256cd997a1dba4a75b1578c7f12b409af040afa35c54001a4abf1c402f91413995ced6b64256684c34283e644246d235af905fa2edf8f802a65c1c1e0ba24ea656cb3b1f876b6f335aed27c3a6e8da53b1b9c283d299390310df6dc84e5569ad3ac1744824b329fc24cb8612c061b09440464c1168012dc40e8df788f9c708bde6bd4eb3f6111729b08796d0243b07a21ac542ae418f19ec3d7171197c8ca216b20f786784400f2834d98819a5fbbd909677f7d7309dca5c0e2cf74a8a53c1791c78488fec0520d3c71a9698e5040920acc5eb7764f4c295cb2f00b5a62d5fc1e1d0040c639886712ad4fece171739fbc0519b93c8bccac49f871a0e2f5ba97331be916aaae29b8cd646028629cc227b916d1d8b4729da3baffb0e39b533e039eb9f10073c156485902745ec60b8d281b2f84a8651fe4c533119bab8424bcecb28c067ffb1e03e05bcf9d6d44dfe0782e072934fc36e70b1acbf30387495618ac2729811aa6c2901b109b33a0010cfbe666fe9fcac86cc81023dda253863714e89c78265e219d00ba20b3c846368dd21816f699a6af20a290f075f4346b98ad40d69caaf2614856c0bdaa661907975679f5cb5afd3738ba811db58123922647476de50ccf17360393433b547bf0377b2115a7cd357699d043bd80981a2a28c638f7c2e725d85f9edd2fdcfea1f7e2bf02f9f0d4236c9d14c6d382dad99192125b219eea6a13b5685efcf34454d2a12537c5354dc5e34ecda968422cc472f0fec174b95cd298e89e7efbc164465dae45059a40e104b1a980ebc781848b0109ce9cec600b190a34dcf741dd6145d56c4ec27c983a7d6328130c122217bbbb33e2cffba1a352b6805dbd715772153b53051db7215f475ba8673b0dd59e2db414a658d3d262c5304d300b930921c7c0a9910eed96a705eea2c8657be193836a20f23fcbc8ef105ca25551626caf63c511d3c9dcffd9d485f27a63b6992e4b6fa26b02903a4da52fd7fa06397fe2883f9b6a4cac2ffb8ce1f476ec72bccaf0ec7b16e6f601e72f46e835d9bc2a82dccaa449728d22a7ff17772276f54073c66b184de0fa7f681823dcb7603a20aa94b76a9b7adb9f11f447b8764b2d719bea91ea32edbb4d340d18f18b3f53d1d07d0405facb202c30ac1ec145516e071cc71c59cc6205db061a8c19bb2d3ab463f6fea1c6d3b5a69d96e5b67ed569e1c04cff6c9f69ab9343e9a71bf6776d3b84b47de2ecf9a0d45515ef5a3b5c6d55f2c6543ef2bf0eb795219da3026ab06c9ba9bbdc30d5dc7c3782a9f58141a63f8d4683ad5c1d156c92c508cefd9702e9267263e34ff96800c425f768bd204466f4f9badabdfaf35e1a8096150e8afeea3a30586b89d1002f041612f8e81de4dcd268bf538307c4d28d1d2ae1af979f3b02017ebe942cdc8fa7964fe978254eb15fed7478e4200e381409486d37e0205c597b5ec19243ab547da051dee03f18e079af60dcb2095fe86f292a4b4bba8682ed8b220c0b48958882aaa7e93448bfecebfba6ca3ef28e0752080cbc9f752d6da814a9dc5bc552d9fe73b8a1df8eb0158df58810fce8719f11b04c4e157ac8ae3692f825a4569ff859273775c45eb999fff7a47ca461b2fda6edfe8ed8371ed29c4f7499448cfff0bc47ca1d8fc9eb35f79db389781c36e89541b686edc21f088463b2d26fd9b650eaf5ed1cda0f00040000000000009b0c527ba655252f77b77c2f4cc0f7741c52a57629fe511c5f9c17ee44fec35da363f5356343037b2705a393115062719e6bd87bbff2472a7833be6d2270fe5ff4cc9f0439a53adb91fe1520ff4841c120e80c99fcc2d0ee794fa8c91dc9c4227ef9f9ac784ce41abefa69b84acb285e385b74501ea137be765172d90738f201497cb7c992dcc2f17341c9b6a0ef3dcb14350669802e3295b5a133142df7bc5645bbf222d2da033ee4cc4f225f248ad88782945869c29943eb6498c87c2b125fb2d4067118c2b417308a1703fd9f48c48ee2a9c5af44df473e3b99b8a941fc4967060b4960864bc97e4f2bf53e7a5c2ec3d47e7bf8345b56a4df5f84d0523c1b6cf9399110e393474b3ece22c4923f531ff12242d5e2b293846a7ed06e3e7f062cb173431a2b680188fb46d2cb74d4a0d9dae59e2be485aabbb54c26406e6e77de3031e049bd8a49139fa62151716a665fb9f1966cf6c57f4185f7cffbbc43341f3b69a3ae0a4dcfd9b37f0035a69ac552830f0ca56069c8f69162280bced2ec30c6789f32cd38d7f97953f0989b65cf90f01206b20b0111a3d22f3d2f85104b03283f4fd7b80e53f20f1c91d5bf3b67aac25c4300b3191c1f5d7bb0fe112deac0f6acbea3b57c20c5d8f0bad48873a7e7347ead5a4d0b73041c86bdcd3b91d6cbe0ebb5824fb90cb4e74f439505074f236679c4ea4015fbdf0c44b4063b62cdced485cbca0eae2404da7158a974b7dc14c5207107d5424de14a35739f68f3f151c6de20d0ad19d06521baf26ab2cb7ff7e8f83d60a9f554367f99fa5c44910b886e1c9c2418a7a4b33f19fff9af4724c7c8251ffc24cc4464b8804b6704bc0572b23498ec92263d37bdb54490f3316087c5b192a20027ad6cf1a2c3fef8043e2847b8734fa8dc91ce992474796e3f71580841379279f8b10ab8e6766196fb5a9b2ff44cabece6930fb9f32e867047313410c13b11a8a788a29ad93a5b9ae1b960a46fd48fe5cdd7168815c67b267065453547cb60db74f37238b2f7f3c78abc249ffe118a1d3e7eb5cdd326ad0a07a50bd24a6be4b5e56fade7fb7c3b515b4d0b16884c9eee7ef9c82f2ea4d89113e950622cee8e63519a899da3ee83bcd369b01b373934bbed73d8f94e3312e72d82d3fb8b8e65b0f5580cffda633467fc3285023159c3ac7273a46275d874b87254df07ea15d0806f4b8312c4e95235cab31e015a3603906c188233db45dea658dcf694f5097a9e26aba8b58e248210fa5e12fa08cbbe0a01afa9b2c36d38d298dd180ee6e358d45397471bc064e2e8e51da189e98bf41cc30b50b0d937e8cbfc5b138dc66143716b27190689efebcaa5676c9eb370465f77803b219b0ee1f65f343d70b01435f9adc46979b121944e13a02cbdd47a9898b26d6cc5294a9358971bad37a6b01d8b2ee251e50b02acbd560bcd4a212124f308d87eca79d13c77b90510675989ffb70a9d5643df2db6067bd4e0fd21d0a40b84177279587777f763bb9e2fc99186402ff1905eb61b6ea3bef862beb10ede1fbca93f5b426f683bb72099ffc61c99d8a7527fe9167b13d786402864d2b4237fa47426f46b6d5e0911de793f73610b46de4e62b8a67aaed298a9a2d5b5c5b7936f8bcc62a8f9d64d8ff1470a386974b35f382f42ad1fb2c9de214b35aa0afcff7806d7601ab9142a0dade5c7a9e6b0c16027c4d0fc413ba5d16f0d4826b3f469afa6e5ce4a19e21d2a2c2c1e3055706d0ce371dee59a06e534887cf5e300bd118b7c5e8eee2a8fd4bf6ca96df566f49049bd25533c8ae08eb2334ba183529c041f3d9b45139173f3ee8b1b8f8633c9cb7caa735805d56b1e3119a97f3ce86ecd8f21256c0a5a54266cc00927c881ac18fef64f25704b3f01b4885a9c4053aec5bfe5be638563267548cacbad2a95c3c48e6a913bd87ec0c489c236214b650a17d27081ae8def0d27c0d6a25553601875192d11c9e3ef2a3273c1f9b079"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0) 850.027959ms ago: executing program 0 (id=1195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f00000001c0)='./file0\x00', 0x200) close_range(r0, 0xffffffffffffffff, 0x0) 787.897779ms ago: executing program 3 (id=1196): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) finit_module(r0, 0x0, 0x1) 787.720029ms ago: executing program 3 (id=1197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xffff, 0xfff6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 787.432495ms ago: executing program 0 (id=1198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=""/31, &(0x7f0000000140)=0x1f) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x1006020}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) acct(0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xd5) 649.913285ms ago: executing program 1 (id=1205): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc0303, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x3, 0x80a0000, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 649.666339ms ago: executing program 0 (id=1206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 617.56491ms ago: executing program 1 (id=1207): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000002058041a500000000000010902240001000000000904000005030000000921000000012294030905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, 0x0, 0x300) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 490.102364ms ago: executing program 0 (id=1208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 120.611869ms ago: executing program 2 (id=1209): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x44000840) r1 = dup(r0) recvmmsg$unix(r1, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000062, 0x0) 120.516861ms ago: executing program 2 (id=1210): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f00000003c0)) 120.424644ms ago: executing program 2 (id=1211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f00000005c0)="97"}) 116.701803ms ago: executing program 0 (id=1212): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 60.207076ms ago: executing program 3 (id=1213): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) 59.585165ms ago: executing program 2 (id=1214): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 59.271417ms ago: executing program 1 (id=1215): r0 = io_uring_setup(0x3cd4, &(0x7f00000001c0)={0x0, 0x40, 0x2, 0x0, 0x111}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x86200, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12020, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x29f, 0xa7c4, 0x0, 0x40, 0x0, 0x1, 0x6, 0x5, 0x9, 0x1, 0x5, 0x1, 0x2}, {0x3, 0xfffd, 0x4, 0x3, 0x1a, 0x5, 0x3, 0x9, 0x10, 0xd, 0x1, 0x0, 0x4}, {0x3, 0x9, 0x3, 0xb, 0x4, 0x40, 0xd, 0x4, 0x4, 0x8c, 0x0, 0x3, 0x8000000000000000}], 0x1}) mmap(&(0x7f0000266000/0x1000)=nil, 0x1000, 0x6, 0x11, 0xffffffffffffffff, 0x0) 59.147928ms ago: executing program 3 (id=1216): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in6=@private1}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) 58.986157ms ago: executing program 1 (id=1217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) 58.74118ms ago: executing program 3 (id=1218): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000100", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0x2000000000001]}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/address_bits', 0x40000, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) 307.801µs ago: executing program 1 (id=1219): openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 120.62µs ago: executing program 1 (id=1220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 0 (id=1221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xffff, 0xfff6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:5130' (ED25519) to the list of known hosts. [ 40.876061][ T5930] cgroup: Unknown subsys name 'net' [ 40.996885][ T5930] cgroup: Unknown subsys name 'cpuset' [ 41.000734][ T5930] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.825755][ T5930] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.016699][ T5318] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.019708][ T5318] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.022201][ T5318] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.025250][ T5318] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.027759][ T5318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.036690][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.039450][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.041940][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.044658][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.047686][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.068056][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.071487][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.074105][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.076950][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.079601][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.090849][ T5964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.093601][ T5964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.096247][ T5964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.099349][ T5964] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.101775][ T5964] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.209105][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 45.297131][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 45.317657][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.320228][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.322580][ T5954] bridge_slave_0: entered allmulticast mode [ 45.325479][ T5954] bridge_slave_0: entered promiscuous mode [ 45.355210][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.358106][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.360348][ T5954] bridge_slave_1: entered allmulticast mode [ 45.362913][ T5954] bridge_slave_1: entered promiscuous mode [ 45.421427][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.426891][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.484028][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 45.501766][ T5954] team0: Port device team_slave_0 added [ 45.506239][ T5954] team0: Port device team_slave_1 added [ 45.510925][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.513160][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.516145][ T5958] bridge_slave_0: entered allmulticast mode [ 45.518735][ T5958] bridge_slave_0: entered promiscuous mode [ 45.525544][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.527827][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.530065][ T5958] bridge_slave_1: entered allmulticast mode [ 45.532601][ T5958] bridge_slave_1: entered promiscuous mode [ 45.567594][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.569778][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.577692][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.639363][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.641580][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.649730][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.668377][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.689166][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.768374][ T5962] chnl_net:caif_netlink_parms(): no params data found [ 45.775618][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.777871][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.780108][ T5961] bridge_slave_0: entered allmulticast mode [ 45.782676][ T5961] bridge_slave_0: entered promiscuous mode [ 45.801109][ T5958] team0: Port device team_slave_0 added [ 45.808635][ T5958] team0: Port device team_slave_1 added [ 45.823417][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.826078][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.828701][ T5961] bridge_slave_1: entered allmulticast mode [ 45.831301][ T5961] bridge_slave_1: entered promiscuous mode [ 45.836477][ T5954] hsr_slave_0: entered promiscuous mode [ 45.838759][ T5954] hsr_slave_1: entered promiscuous mode [ 45.906394][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.908605][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.916724][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.935584][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.956916][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.959157][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.967287][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.997113][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.016301][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.018571][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.020906][ T5962] bridge_slave_0: entered allmulticast mode [ 46.023460][ T5962] bridge_slave_0: entered promiscuous mode [ 46.069131][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.071402][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.073690][ T5962] bridge_slave_1: entered allmulticast mode [ 46.076241][ T5962] bridge_slave_1: entered promiscuous mode [ 46.079409][ T5961] team0: Port device team_slave_0 added [ 46.101243][ T5958] hsr_slave_0: entered promiscuous mode [ 46.103426][ T5958] hsr_slave_1: entered promiscuous mode [ 46.105564][ T5958] debugfs: 'hsr0' already exists in 'hsr' [ 46.107380][ T5958] Cannot create hsr debugfs directory [ 46.122161][ T5961] team0: Port device team_slave_1 added [ 46.154289][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.156479][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.164482][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.184905][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.199686][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.201869][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.210771][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.236351][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.314792][ T5962] team0: Port device team_slave_0 added [ 46.336654][ T5962] team0: Port device team_slave_1 added [ 46.375249][ T5961] hsr_slave_0: entered promiscuous mode [ 46.377688][ T5961] hsr_slave_1: entered promiscuous mode [ 46.379767][ T5961] debugfs: 'hsr0' already exists in 'hsr' [ 46.381582][ T5961] Cannot create hsr debugfs directory [ 46.391084][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.394002][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.401815][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.408132][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.410475][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.418465][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.535475][ T5962] hsr_slave_0: entered promiscuous mode [ 46.537670][ T5962] hsr_slave_1: entered promiscuous mode [ 46.539721][ T5962] debugfs: 'hsr0' already exists in 'hsr' [ 46.541529][ T5962] Cannot create hsr debugfs directory [ 46.630828][ T5954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.638983][ T5954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.659372][ T5954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.667654][ T5954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.731869][ T5958] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.736477][ T5958] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.743046][ T5958] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.747291][ T5958] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.792766][ T5961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.797265][ T5961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.806106][ T5961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.809905][ T5961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.851579][ T5962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.857381][ T5962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.862132][ T5962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.866604][ T5962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.892719][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.907280][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.916555][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.935867][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.938336][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.950798][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.958174][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.961047][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.975435][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.977917][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.986473][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.988708][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.003035][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.031821][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.041484][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.043772][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.049227][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.054205][ T5318] Bluetooth: hci0: command tx timeout [ 47.055322][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.059179][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.076772][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.087669][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.089857][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.102022][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.104322][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.123660][ T5318] Bluetooth: hci2: command tx timeout [ 47.136357][ T5318] Bluetooth: hci1: command tx timeout [ 47.136397][ T5964] Bluetooth: hci3: command tx timeout [ 47.146541][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.160493][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.189127][ T5954] veth0_vlan: entered promiscuous mode [ 47.198440][ T5954] veth1_vlan: entered promiscuous mode [ 47.208488][ T5958] veth0_vlan: entered promiscuous mode [ 47.219696][ T5958] veth1_vlan: entered promiscuous mode [ 47.225731][ T5954] veth0_macvtap: entered promiscuous mode [ 47.233191][ T5954] veth1_macvtap: entered promiscuous mode [ 47.242355][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.251079][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.259588][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.272181][ T194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.289338][ T1146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.292091][ T1146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.296856][ T1146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.300342][ T5958] veth0_macvtap: entered promiscuous mode [ 47.308175][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.319650][ T5958] veth1_macvtap: entered promiscuous mode [ 47.333646][ T5961] veth0_vlan: entered promiscuous mode [ 47.343258][ T5961] veth1_vlan: entered promiscuous mode [ 47.348866][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.360235][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.362715][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.371223][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.391801][ T5962] veth0_vlan: entered promiscuous mode [ 47.391913][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.396099][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.398412][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.401133][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.404220][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.408871][ T5961] veth0_macvtap: entered promiscuous mode [ 47.416586][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.421409][ T5961] veth1_macvtap: entered promiscuous mode [ 47.426955][ T5962] veth1_vlan: entered promiscuous mode [ 47.438997][ T5954] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.450398][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.452125][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.457318][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.471962][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.483842][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.488077][ T1146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.488119][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.496760][ T1146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.500740][ T1146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.505686][ T5962] veth0_macvtap: entered promiscuous mode [ 47.508551][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.517409][ T5962] veth1_macvtap: entered promiscuous mode [ 47.564778][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.568332][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.583165][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.588388][ T6039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.592479][ T6039] bridge0: entered allmulticast mode [ 47.595849][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.598188][ T6039] kernel profiling enabled (shift: 17) [ 47.598311][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.598456][ T6039] netlink: 'syz.1.2': attribute type 16 has an invalid length. [ 47.598466][ T6039] netlink: 'syz.1.2': attribute type 17 has an invalid length. [ 47.600294][ T6039] bridge0: left allmulticast mode [ 47.611248][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 47.613084][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.627971][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.630483][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.633011][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.636132][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.641762][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.644873][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.674964][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.677895][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.699540][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.702032][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.803806][ T60] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 47.965824][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.969203][ T60] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 47.983797][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.993664][ T60] usb 8-1: config 0 descriptor?? [ 48.303613][ T840] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.400142][ T60] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 48.408147][ T60] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0926:3333.0002/input/input5 [ 48.478166][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.481617][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.484788][ T840] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 48.487627][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.494810][ T840] usb 7-1: config 0 descriptor?? [ 48.505637][ T60] keytouch 0003:0926:3333.0002: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 48.605838][ T1460] usb 8-1: USB disconnect, device number 2 [ 48.845900][ T6073] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14'. [ 48.906481][ T840] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 48.908682][ T840] arvo 0003:1E7D:30D4.0003: item fetching failed at offset 6/7 [ 48.912280][ T840] arvo 0003:1E7D:30D4.0003: parse failed [ 48.915293][ T840] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -22 [ 49.119298][ T840] usb 7-1: USB disconnect, device number 2 [ 49.123626][ T5964] Bluetooth: hci0: command tx timeout [ 49.204062][ T5964] Bluetooth: hci1: command tx timeout [ 49.204089][ T5318] Bluetooth: hci2: command tx timeout [ 49.205835][ T5956] Bluetooth: hci3: command tx timeout [ 49.562531][ T40] audit: type=1326 audit(1753978383.660:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 49.569337][ T40] audit: type=1326 audit(1753978383.660:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 49.575915][ T40] audit: type=1326 audit(1753978383.660:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 49.582360][ T40] audit: type=1326 audit(1753978383.660:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 49.588999][ T40] audit: type=1326 audit(1753978383.660:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 49.595630][ T40] audit: type=1326 audit(1753978383.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 49.602331][ T40] audit: type=1326 audit(1753978383.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 49.609173][ T40] audit: type=1326 audit(1753978383.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 49.615705][ T40] audit: type=1326 audit(1753978383.670:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 49.667575][ T40] audit: type=1326 audit(1753978383.770:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.2.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 50.180509][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 50.459992][ T6135] Invalid ELF header len 16 [ 51.203980][ T5318] Bluetooth: hci0: command tx timeout [ 51.268311][ T6168] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.293739][ T5318] Bluetooth: hci3: command tx timeout [ 51.293977][ T5964] Bluetooth: hci2: command tx timeout [ 51.294028][ T5956] Bluetooth: hci1: command tx timeout [ 52.160599][ T6208] netlink: 56 bytes leftover after parsing attributes in process `syz.1.67'. [ 52.416880][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.158978][ T6233] netlink: 60 bytes leftover after parsing attributes in process `syz.0.76'. [ 53.293736][ T5318] Bluetooth: hci0: command tx timeout [ 53.363618][ T5318] Bluetooth: hci2: command tx timeout [ 53.373795][ T5318] Bluetooth: hci1: command tx timeout [ 53.373810][ T5956] Bluetooth: hci3: command tx timeout [ 53.418237][ T6250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.748667][ T6260] pim6reg1: entered promiscuous mode [ 53.750529][ T6260] pim6reg1: entered allmulticast mode [ 54.081961][ T60] hid-generic 0000:C1161:0000.0004: item fetching failed at offset 0/1 [ 54.086202][ T60] hid-generic 0000:C1161:0000.0004: probe with driver hid-generic failed with error -22 [ 54.363634][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 54.483980][ T5964] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 54.485072][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 54.530787][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.537405][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.540617][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.545132][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.548264][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.552442][ T34] usb 7-1: config 0 descriptor?? [ 54.783736][ T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.942061][ T60] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.945342][ T60] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.951118][ T60] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 54.954132][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 54.956637][ T60] usb 8-1: SerialNumber: syz [ 54.976953][ T34] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 55.067259][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 55.067282][ T40] audit: type=1326 audit(1753978389.170:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.1.119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 55.075963][ T40] audit: type=1326 audit(1753978389.170:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.1.119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 55.082787][ T40] audit: type=1326 audit(1753978389.170:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.1.119" exe="/syz-executor" sig=0 arch=40000003 syscall=165 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 55.089458][ T40] audit: type=1326 audit(1753978389.170:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.1.119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 55.096024][ T40] audit: type=1326 audit(1753978389.170:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.1.119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 55.172415][ T60] usb 8-1: 0:2 : does not exist [ 55.221148][ T60] usb 8-1: USB disconnect, device number 3 [ 55.232949][ T6020] usb 7-1: USB disconnect, device number 3 [ 55.287491][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 55.354590][ T6342] input: syz1 as /devices/virtual/input/input7 [ 56.294502][ T6362] usb usb8: usbfs: process 6362 (syz.1.130) did not claim interface 0 before use [ 56.298697][ T6362] process 'syz.1.130' launched './file1' with NULL argv: empty string added [ 56.883504][ T6389] dummy0: entered promiscuous mode [ 57.378410][ T6396] syzkaller0: entered promiscuous mode [ 57.380294][ T6396] syzkaller0: entered allmulticast mode [ 58.787596][ T6456] bridge1: entered promiscuous mode [ 58.800164][ T6456] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 59.077030][ T6461] bridge0: port 3(vlan2) entered blocking state [ 59.079157][ T6461] bridge0: port 3(vlan2) entered disabled state [ 59.081206][ T6461] vlan2: entered allmulticast mode [ 59.082839][ T6461] bridge0: entered allmulticast mode [ 59.087359][ T6461] vlan2: left allmulticast mode [ 59.089152][ T6461] bridge0: left allmulticast mode [ 59.384338][ T6466] vlan2: entered allmulticast mode [ 59.514065][ T6474] ======================================================= [ 59.514065][ T6474] WARNING: The mand mount option has been deprecated and [ 59.514065][ T6474] and is ignored by this kernel. Remove the mand [ 59.514065][ T6474] option from the mount to silence this warning. [ 59.514065][ T6474] ======================================================= [ 60.035792][ T6502] tipc: Started in network mode [ 60.044965][ T6502] tipc: Node identity 2aad92ff09e4, cluster identity 4711 [ 60.047748][ T6502] tipc: Enabled bearer , priority 0 [ 60.052679][ T6502] tipc: Resetting bearer [ 60.069898][ T6501] tipc: Disabling bearer [ 60.073424][ T40] audit: type=1326 audit(1753978394.170:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6507 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 60.080639][ T40] audit: type=1326 audit(1753978394.170:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6507 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 60.097184][ T40] audit: type=1326 audit(1753978394.190:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 60.111486][ T40] audit: type=1326 audit(1753978394.190:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6507 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 60.118213][ T40] audit: type=1326 audit(1753978394.190:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6507 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 60.124942][ T40] audit: type=1326 audit(1753978394.200:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6507 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 60.131427][ T40] audit: type=1326 audit(1753978394.200:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6507 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 60.131851][ T6511] tipc: Started in network mode [ 60.138164][ T40] audit: type=1326 audit(1753978394.200:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6507 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 60.139609][ T6511] tipc: Node identity d2d59ccc970e, cluster identity 4711 [ 60.146610][ T40] audit: type=1326 audit(1753978394.200:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6507 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01598 code=0x7ffc0000 [ 60.146636][ T40] audit: type=1326 audit(1753978394.200:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6507 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 60.146660][ T40] audit: type=1326 audit(1753978394.200:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6507 comm="syz.2.183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 60.169739][ T6511] tipc: Enabled bearer , priority 0 [ 60.180502][ T6511] tipc: Resetting bearer [ 60.188204][ T6510] tipc: Disabling bearer [ 60.300576][ T6517] netlink: 96 bytes leftover after parsing attributes in process `syz.1.187'. [ 60.402583][ T6536] pim6reg1: entered promiscuous mode [ 60.405026][ T6536] pim6reg1: entered allmulticast mode [ 60.531204][ T6540] pim6reg1: entered promiscuous mode [ 60.532959][ T6540] pim6reg1: entered allmulticast mode [ 61.637177][ T6567] input: syz1 as /devices/virtual/input/input8 [ 61.639197][ T6567] input: failed to attach handler leds to device input8, error: -6 [ 61.721018][ T6574] tipc: Enabled bearer , priority 0 [ 61.734365][ T6574] tipc: Resetting bearer [ 61.744874][ T6572] tipc: Disabling bearer [ 61.882668][ T6581] tipc: Enabled bearer , priority 0 [ 61.886859][ T6581] tipc: Resetting bearer [ 61.904997][ T6580] tipc: Disabling bearer [ 62.125198][ T6601] dummy0: entered promiscuous mode [ 63.905571][ T6651] tipc: Enabling of bearer rejected, failed to enable media [ 65.950158][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.074477][ T6736] tipc: Enabling of bearer rejected, failed to enable media [ 67.483606][ T839] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 67.636540][ T839] usb 7-1: unable to get BOS descriptor or descriptor too short [ 67.641333][ T839] usb 7-1: not running at top speed; connect to a high speed hub [ 67.646050][ T839] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 67.649676][ T839] usb 7-1: config 0 has no interface number 0 [ 67.652396][ T839] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 65535, setting to 64 [ 67.657407][ T839] usb 7-1: config 0 interface 88 has no altsetting 0 [ 67.663095][ T839] usb 7-1: string descriptor 0 read error: -22 [ 67.665957][ T839] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 67.669773][ T839] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 67.676178][ T839] usb 7-1: config 0 descriptor?? [ 67.680419][ T6751] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.688611][ T839] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.88/input/input9 [ 67.900108][ T839] usb 7-1: USB disconnect, device number 4 [ 68.014101][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 68.018448][ T5964] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.190488][ T6774] futex_wake_op: syz.0.281 tries to shift op by 32; fix this program [ 68.242362][ T6781] tipc: Enabling of bearer rejected, failed to enable media [ 68.753492][ T6823] bridge0: port 3(vlan2) entered blocking state [ 68.756217][ T6823] bridge0: port 3(vlan2) entered disabled state [ 68.758845][ T6823] vlan2: entered allmulticast mode [ 68.760965][ T6823] bridge0: entered allmulticast mode [ 68.764456][ T6823] vlan2: left allmulticast mode [ 68.765922][ T6823] bridge0: left allmulticast mode [ 68.780439][ T6822] netlink: 56 bytes leftover after parsing attributes in process `syz.3.298'. [ 68.955632][ T6827] tipc: Enabling of bearer rejected, failed to enable media [ 69.177916][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 69.177927][ T40] audit: type=1326 audit(1753978403.280:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 69.188628][ T40] audit: type=1326 audit(1753978403.280:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 69.196294][ T40] audit: type=1326 audit(1753978403.280:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.304" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 69.205041][ T40] audit: type=1326 audit(1753978403.280:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 69.210938][ T40] audit: type=1326 audit(1753978403.280:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 69.217477][ T40] audit: type=1326 audit(1753978403.280:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.304" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 69.223404][ T40] audit: type=1326 audit(1753978403.290:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 69.229590][ T40] audit: type=1326 audit(1753978403.290:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 69.235705][ T40] audit: type=1326 audit(1753978403.290:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.304" exe="/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 69.241610][ T40] audit: type=1326 audit(1753978403.290:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 69.244299][ T6847] tipc: Enabled bearer , priority 0 [ 69.253169][ T6847] tipc: Resetting bearer [ 69.260905][ T6846] tipc: Disabling bearer [ 69.364689][ T6854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.310'. [ 69.375792][ T6855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.338349][ T6882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.382945][ T6883] bridge_slave_1: left allmulticast mode [ 70.385978][ T6883] bridge_slave_1: left promiscuous mode [ 70.387907][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.392385][ T6883] bridge_slave_0: left allmulticast mode [ 70.394729][ T6883] bridge_slave_0: left promiscuous mode [ 70.396902][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.477693][ T6885] tipc: Enabled bearer , priority 0 [ 70.481992][ T6885] tipc: Resetting bearer [ 70.489980][ T6884] tipc: Disabling bearer [ 70.619115][ T6897] tipc: Enabled bearer , priority 0 [ 70.623261][ T6897] tipc: Resetting bearer [ 70.631816][ T6896] tipc: Disabling bearer [ 70.807419][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.809529][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.033610][ T6020] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 71.186317][ T6020] usb 8-1: unable to get BOS descriptor or descriptor too short [ 71.189167][ T6020] usb 8-1: not running at top speed; connect to a high speed hub [ 71.192353][ T6020] usb 8-1: config 0 has an invalid interface number: 88 but max is 0 [ 71.195046][ T6020] usb 8-1: config 0 has no interface number 0 [ 71.196950][ T6020] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 65535, setting to 64 [ 71.200378][ T6020] usb 8-1: config 0 interface 88 has no altsetting 0 [ 71.205235][ T6020] usb 8-1: string descriptor 0 read error: -22 [ 71.207250][ T6020] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 71.210056][ T6020] usb 8-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 71.214374][ T6020] usb 8-1: config 0 descriptor?? [ 71.217192][ T6907] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.223048][ T6020] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.88/input/input10 [ 71.230234][ C2] usb_acecad 8-1:0.88: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 71.425744][ T60] usb 8-1: USB disconnect, device number 4 [ 71.614566][ T6920] random: crng reseeded on system resumption [ 71.645397][ T6922] tipc: Enabled bearer , priority 0 [ 71.650050][ T6922] tipc: Resetting bearer [ 71.657740][ T6921] tipc: Disabling bearer [ 71.667334][ T6924] syzkaller0: entered promiscuous mode [ 71.669117][ T6924] syzkaller0: entered allmulticast mode [ 71.914705][ T6943] tipc: Enabled bearer , priority 0 [ 71.919441][ T6943] tipc: Resetting bearer [ 71.926410][ T6942] tipc: Disabling bearer [ 72.069137][ T6956] syzkaller0: entered promiscuous mode [ 72.070773][ T6956] syzkaller0: entered allmulticast mode [ 72.348303][ T6976] tipc: Enabling of bearer rejected, failed to enable media [ 73.012323][ T7005] tipc: Enabling of bearer rejected, failed to enable media [ 73.172528][ T7014] syzkaller0: entered promiscuous mode [ 73.174992][ T7014] syzkaller0: entered allmulticast mode [ 73.483367][ T7037] syzkaller0: entered promiscuous mode [ 73.486207][ T7037] syzkaller0: entered allmulticast mode [ 73.669771][ T7049] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.383'. [ 73.833573][ T7065] syzkaller0: entered promiscuous mode [ 73.835430][ T7065] syzkaller0: entered allmulticast mode [ 73.925291][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 74.253594][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 74.257340][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 74.260795][ T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 74.266221][ T10] usb 7-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 74.271196][ T10] usb 7-1: config 0 interface 0 has no altsetting 1 [ 74.274651][ T10] usb 7-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 74.278232][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.281344][ T10] usb 7-1: SerialNumber: syz [ 74.286072][ T10] usb 7-1: config 0 descriptor?? [ 74.290432][ T10] usb-storage 7-1:0.0: USB Mass Storage device detected [ 74.294291][ T7080] syzkaller0: entered promiscuous mode [ 74.297311][ T7080] syzkaller0: entered allmulticast mode [ 74.300431][ T10] usb-storage 7-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 74.415044][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 74.415055][ T40] audit: type=1326 audit(1753978408.520:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.0.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 74.423688][ T40] audit: type=1326 audit(1753978408.520:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.0.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 74.430247][ T40] audit: type=1326 audit(1753978408.520:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.0.398" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 74.437409][ T40] audit: type=1326 audit(1753978408.520:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.0.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 74.444959][ T40] audit: type=1326 audit(1753978408.520:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.0.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 74.451683][ T40] audit: type=1326 audit(1753978408.520:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.0.398" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 74.458389][ T40] audit: type=1326 audit(1753978408.520:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.0.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 74.464980][ T40] audit: type=1326 audit(1753978408.520:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.0.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 74.471434][ T40] audit: type=1326 audit(1753978408.520:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.0.398" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 74.478103][ T40] audit: type=1326 audit(1753978408.540:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.0.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 74.490534][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 74.495740][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 74.499959][ T10] usb 7-1: USB disconnect, device number 5 [ 75.612521][ T7129] overlayfs: failed to resolve './bus': -2 [ 75.798219][ T7139] 9pnet_fd: Insufficient options for proto=fd [ 76.196841][ T7150] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.423'. [ 76.248085][ T7158] syzkaller0: entered promiscuous mode [ 76.250288][ T7158] syzkaller0: entered allmulticast mode [ 76.440238][ T7175] syzkaller0: entered promiscuous mode [ 76.442089][ T7175] syzkaller0: entered allmulticast mode [ 76.984740][ T7202] serio: Serial port ptm0 [ 77.322103][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 77.413035][ T7208] syzkaller0: entered promiscuous mode [ 77.414918][ T7208] syzkaller0: entered allmulticast mode [ 77.569073][ T7219] 9pnet_fd: Insufficient options for proto=fd [ 77.765564][ T7230] syzkaller0: entered promiscuous mode [ 77.767328][ T7230] syzkaller0: entered allmulticast mode [ 77.834027][ T5862] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 77.944568][ T5964] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 77.947625][ T5964] CPU: 2 UID: 0 PID: 5964 Comm: kworker/u33:3 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 77.947641][ T5964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.947649][ T5964] Workqueue: hci1 hci_rx_work [ 77.947669][ T5964] Call Trace: [ 77.947674][ T5964] [ 77.947678][ T5964] dump_stack_lvl+0x16c/0x1f0 [ 77.947691][ T5964] sysfs_warn_dup+0x7f/0xa0 [ 77.947703][ T5964] sysfs_create_dir_ns+0x24b/0x2b0 [ 77.947714][ T5964] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 77.947725][ T5964] ? find_held_lock+0x2b/0x80 [ 77.947738][ T5964] ? do_raw_spin_unlock+0x172/0x230 [ 77.947756][ T5964] kobject_add_internal+0x2c4/0x9b0 [ 77.947771][ T5964] kobject_add+0x16e/0x240 [ 77.947783][ T5964] ? __pfx_kobject_add+0x10/0x10 [ 77.947796][ T5964] ? do_raw_spin_unlock+0x172/0x230 [ 77.947814][ T5964] ? kobject_put+0xab/0x5a0 [ 77.947829][ T5964] device_add+0x288/0x1a70 [ 77.947846][ T5964] ? __pfx_dev_set_name+0x10/0x10 [ 77.947856][ T5964] ? __pfx_device_add+0x10/0x10 [ 77.947871][ T5964] ? mgmt_send_event_skb+0x2fb/0x460 [ 77.947889][ T5964] hci_conn_add_sysfs+0x17e/0x230 [ 77.947906][ T5964] le_conn_complete_evt+0x1075/0x1d70 [ 77.947922][ T5964] ? find_held_lock+0x2b/0x80 [ 77.947931][ T5964] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 77.947945][ T5964] ? hci_event_packet+0x459/0x11c0 [ 77.947965][ T5964] ? __mutex_unlock_slowpath+0x163/0x800 [ 77.947977][ T5964] hci_le_conn_complete_evt+0x23c/0x370 [ 77.947995][ T5964] hci_le_meta_evt+0x354/0x5e0 [ 77.948010][ T5964] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 77.948026][ T5964] hci_event_packet+0x682/0x11c0 [ 77.948041][ T5964] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 77.948057][ T5964] ? __pfx_hci_event_packet+0x10/0x10 [ 77.948073][ T5964] ? kcov_remote_start+0x3c9/0x6d0 [ 77.948089][ T5964] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.948108][ T5964] hci_rx_work+0x2c5/0x16b0 [ 77.948124][ T5964] ? rcu_is_watching+0x12/0xc0 [ 77.948136][ T5964] process_one_work+0x9cf/0x1b70 [ 77.948157][ T5964] ? __pfx_process_one_work+0x10/0x10 [ 77.948177][ T5964] ? assign_work+0x1a0/0x250 [ 77.948192][ T5964] worker_thread+0x6c8/0xf10 [ 77.948216][ T5964] ? __pfx_worker_thread+0x10/0x10 [ 77.948231][ T5964] kthread+0x3c2/0x780 [ 77.948247][ T5964] ? __pfx_kthread+0x10/0x10 [ 77.948262][ T5964] ? rcu_is_watching+0x12/0xc0 [ 77.948272][ T5964] ? __pfx_kthread+0x10/0x10 [ 77.948287][ T5964] ret_from_fork+0x5d7/0x6f0 [ 77.948303][ T5964] ? __pfx_kthread+0x10/0x10 [ 77.948318][ T5964] ret_from_fork_asm+0x1a/0x30 [ 77.948337][ T5964] [ 77.948352][ T5964] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 78.034975][ T5964] Bluetooth: hci1: failed to register connection device [ 78.057047][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short [ 78.060409][ T5862] usb 5-1: not running at top speed; connect to a high speed hub [ 78.064284][ T5862] usb 5-1: config 1 interface 0 altsetting 133 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.068450][ T5862] usb 5-1: config 1 interface 0 has no altsetting 0 [ 78.073123][ T5862] usb 5-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.40 [ 78.076463][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.079090][ T5862] usb 5-1: Product: syz [ 78.080470][ T5862] usb 5-1: Manufacturer: syz [ 78.082007][ T5862] usb 5-1: SerialNumber: syz [ 78.106765][ T7221] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.318757][ T5862] usbhid 5-1:1.0: can't add hid device: -71 [ 78.320760][ T5862] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 78.328471][ T5862] usb 5-1: USB disconnect, device number 2 [ 78.453472][ T7258] syzkaller0: entered promiscuous mode [ 78.455848][ T7258] syzkaller0: entered allmulticast mode [ 78.884716][ T7272] syz.0.470 uses obsolete (PF_INET,SOCK_PACKET) [ 78.999043][ T7275] netlink: 'syz.3.471': attribute type 8 has an invalid length. [ 79.281762][ T7282] tipc: Enabling of bearer rejected, failed to enable media [ 80.081100][ T7311] binder: 7310:7311 ioctl c0306201 800004c0 returned -14 [ 80.148810][ T7315] syzkaller0: entered promiscuous mode [ 80.150590][ T7315] syzkaller0: entered allmulticast mode [ 80.441008][ T7335] syzkaller0: entered promiscuous mode [ 80.442814][ T7335] syzkaller0: entered allmulticast mode [ 81.045356][ T53] cfg80211: failed to load regulatory.db [ 81.481654][ T7363] tipc: Cannot configure node identity twice [ 81.484098][ T7363] tipc: Cannot configure node identity twice [ 81.512143][ T7365] syzkaller0: entered promiscuous mode [ 81.514700][ T7365] syzkaller0: entered allmulticast mode [ 81.600423][ T7368] syzkaller0: entered promiscuous mode [ 81.602194][ T7368] syzkaller0: entered allmulticast mode [ 81.851220][ T7384] syzkaller0: entered promiscuous mode [ 81.853023][ T7384] syzkaller0: entered allmulticast mode [ 81.998357][ T7391] tipc: Cannot configure node identity twice [ 82.108525][ T7398] syzkaller0: entered promiscuous mode [ 82.110458][ T7398] syzkaller0: entered allmulticast mode [ 82.436933][ T7417] dummy0: entered promiscuous mode [ 82.672877][ T7425] syzkaller0: entered promiscuous mode [ 82.675442][ T7425] syzkaller0: entered allmulticast mode [ 83.213182][ T7439] syzkaller0: entered promiscuous mode [ 83.217052][ T7439] syzkaller0: entered allmulticast mode [ 83.278423][ T7445] syzkaller0: entered promiscuous mode [ 83.280186][ T7445] syzkaller0: entered allmulticast mode [ 83.612811][ T7462] dummy0: entered promiscuous mode [ 84.379972][ T7481] syzkaller0: entered promiscuous mode [ 84.381797][ T7481] syzkaller0: entered allmulticast mode [ 84.696996][ T7501] syzkaller0: entered promiscuous mode [ 84.698768][ T7501] syzkaller0: entered allmulticast mode [ 85.049279][ T7507] syzkaller0: entered promiscuous mode [ 85.051073][ T7507] syzkaller0: entered allmulticast mode [ 85.380908][ T7520] netlink: 988 bytes leftover after parsing attributes in process `syz.1.569'. [ 85.514457][ T7526] syzkaller0: entered promiscuous mode [ 85.516263][ T7526] syzkaller0: entered allmulticast mode [ 85.696761][ T7542] syzkaller0: entered promiscuous mode [ 85.698540][ T7542] syzkaller0: entered allmulticast mode [ 85.727289][ T7546] syzkaller0: entered promiscuous mode [ 85.729079][ T7546] syzkaller0: entered allmulticast mode [ 86.098489][ T7582] netlink: 988 bytes leftover after parsing attributes in process `syz.1.597'. [ 86.234508][ T7597] netlink: 148 bytes leftover after parsing attributes in process `syz.2.604'. [ 86.249148][ T7599] syzkaller0: entered promiscuous mode [ 86.250940][ T7599] syzkaller0: entered allmulticast mode [ 86.699876][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 86.706788][ T7637] netlink: 104 bytes leftover after parsing attributes in process `syz.0.619'. [ 86.709668][ T7637] netlink: 104 bytes leftover after parsing attributes in process `syz.0.619'. [ 87.026167][ T7653] binder: 7652:7653 ioctl c0306201 800004c0 returned -14 [ 87.091446][ T7662] syzkaller0: entered promiscuous mode [ 87.093043][ T7662] syzkaller0: entered allmulticast mode [ 87.269912][ T7668] syzkaller0: entered promiscuous mode [ 87.271729][ T7668] syzkaller0: entered allmulticast mode [ 87.497073][ T7681] binder: 7680:7681 ioctl c0306201 800004c0 returned -14 [ 87.546046][ T7685] tipc: Enabling of bearer rejected, failed to enable media [ 87.550508][ T7685] syzkaller0: entered promiscuous mode [ 87.552362][ T7685] syzkaller0: entered allmulticast mode [ 87.702036][ T7695] syzkaller0: entered promiscuous mode [ 87.703890][ T7695] syzkaller0: entered allmulticast mode [ 87.707468][ T7694] syzkaller0: entered promiscuous mode [ 87.709217][ T7694] syzkaller0: entered allmulticast mode [ 87.947108][ T7705] binder: 7704:7705 ioctl c0306201 800004c0 returned -14 [ 88.026991][ T7713] tipc: Enabling of bearer rejected, failed to enable media [ 88.030120][ T7713] syzkaller0: entered promiscuous mode [ 88.031853][ T7713] syzkaller0: entered allmulticast mode [ 88.230127][ T7725] kvm: user requested TSC rate below hardware speed [ 88.235074][ T7725] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 88.237876][ T7725] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 88.697808][ T7761] syzkaller0: entered promiscuous mode [ 88.699595][ T7761] syzkaller0: entered allmulticast mode [ 88.791502][ T7766] tipc: Enabling of bearer rejected, failed to enable media [ 88.795033][ T7766] syzkaller0: entered promiscuous mode [ 88.796715][ T7766] syzkaller0: entered allmulticast mode [ 89.149276][ T7793] kvm: user requested TSC rate below hardware speed [ 90.581955][ T7842] tipc: Enabling of bearer rejected, failed to enable media [ 90.586118][ T7842] syzkaller0: entered promiscuous mode [ 90.588040][ T7842] syzkaller0: entered allmulticast mode [ 90.772056][ T7852] kvm: user requested TSC rate below hardware speed [ 90.785748][ T7852] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 90.919698][ T7863] tipc: Enabling of bearer rejected, failed to enable media [ 90.924849][ T7863] syzkaller0: entered promiscuous mode [ 90.927030][ T7863] syzkaller0: entered allmulticast mode [ 90.934797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.980565][ T7866] tipc: Enabling of bearer rejected, failed to enable media [ 90.985440][ T7866] syzkaller0: entered promiscuous mode [ 90.987659][ T7866] syzkaller0: entered allmulticast mode [ 91.208997][ T7880] kvm: user requested TSC rate below hardware speed [ 91.213648][ T7880] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 91.227019][ T7889] tipc: Enabling of bearer rejected, failed to enable media [ 91.230348][ T7889] syzkaller0: entered promiscuous mode [ 91.232085][ T7889] syzkaller0: entered allmulticast mode [ 91.538420][ T7916] tipc: Enabling of bearer rejected, failed to enable media [ 91.542184][ T7916] syzkaller0: entered promiscuous mode [ 91.544571][ T7916] syzkaller0: entered allmulticast mode [ 91.589015][ T7922] kvm: user requested TSC rate below hardware speed [ 91.593421][ T7922] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 91.637109][ T7924] netlink: 'syz.0.732': attribute type 72 has an invalid length. [ 91.639845][ T7924] netlink: 1016 bytes leftover after parsing attributes in process `syz.0.732'. [ 91.667430][ T7926] syzkaller0: entered promiscuous mode [ 91.669607][ T7926] syzkaller0: entered allmulticast mode [ 91.872788][ T7953] kvm: user requested TSC rate below hardware speed [ 91.876628][ T7953] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 92.113652][ T7969] syzkaller0: entered promiscuous mode [ 92.115814][ T7969] syzkaller0: entered allmulticast mode [ 92.437184][ T7999] binder: 7998:7999 ioctl c0306201 800004c0 returned -14 [ 92.533227][ T8014] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.770'. [ 92.559194][ T8017] binder: BINDER_SET_CONTEXT_MGR already set [ 92.562288][ T8017] binder: 8015:8017 ioctl 4018620d 80000040 returned -16 [ 92.889088][ T8035] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.779'. [ 93.201903][ T8052] netlink: 328 bytes leftover after parsing attributes in process `syz.1.785'. [ 93.227071][ T8054] veth1_macvtap: mtu less than device minimum [ 93.579138][ T8078] syzkaller0: entered promiscuous mode [ 93.580971][ T8078] syzkaller0: entered allmulticast mode [ 93.663637][ T60] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 93.706881][ T8084] kvm: user requested TSC rate below hardware speed [ 93.813758][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 93.818250][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.821796][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.826101][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 93.830283][ T60] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 93.833141][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.838472][ T60] usb 6-1: config 0 descriptor?? [ 93.951819][ T8109] syzkaller0: entered promiscuous mode [ 93.954642][ T8109] syzkaller0: entered allmulticast mode [ 94.258137][ T8064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.262755][ T8064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.268492][ T60] hid (null): usage index exceeded [ 94.270945][ T60] hid (null): report_id 1629957346 is invalid [ 94.272949][ T60] hid (null): unknown global tag 0xc [ 94.274924][ T60] hid (null): unknown global tag 0xd [ 94.276745][ T60] hid (null): unknown global tag 0xd [ 94.278553][ T60] hid (null): unknown global tag 0xe [ 94.288409][ T60] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0006/input/input11 [ 94.356522][ T60] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0006/input/input12 [ 94.372915][ T60] kye 0003:0458:5011.0006: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 94.468548][ T6020] usb 6-1: USB disconnect, device number 2 [ 94.896981][ T8141] syzkaller0: entered promiscuous mode [ 94.898841][ T8141] syzkaller0: entered allmulticast mode [ 95.062746][ T8152] binder: 8151:8152 ioctl c0306201 800001c0 returned -14 [ 95.125721][ T8162] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 95.380333][ T8171] syzkaller0: entered promiscuous mode [ 95.382199][ T8171] syzkaller0: entered allmulticast mode [ 95.978630][ T8198] kvm: user requested TSC rate below hardware speed [ 96.492322][ T8208] syzkaller0: entered promiscuous mode [ 96.494516][ T8208] syzkaller0: entered allmulticast mode [ 96.699514][ T8216] syzkaller0: entered promiscuous mode [ 96.701258][ T8216] syzkaller0: entered allmulticast mode [ 96.780130][ T8218] binder: 8217:8218 ioctl c0306201 800004c0 returned -14 [ 96.804748][ T8220] Zero length message leads to an empty skb [ 96.842883][ T8224] kvm: user requested TSC rate below hardware speed [ 96.942906][ T8230] syzkaller0: entered promiscuous mode [ 96.944872][ T8230] syzkaller0: entered allmulticast mode [ 97.060561][ T8240] binder: 8239:8240 ioctl c0306201 800004c0 returned -14 [ 97.295410][ T8263] binder: 8262:8263 ioctl c00c6211 0 returned -14 [ 97.306227][ T8265] binder: BINDER_SET_CONTEXT_MGR already set [ 97.308213][ T8265] binder: 8264:8265 ioctl 4018620d 80000040 returned -16 [ 97.459902][ T8281] kvm: user requested TSC rate below hardware speed [ 97.893919][ T8309] kvm: user requested TSC rate below hardware speed [ 97.948680][ T8313] input: syz0 as /devices/virtual/input/input13 [ 98.151609][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 98.231847][ T8337] kvm: user requested TSC rate below hardware speed [ 98.333623][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.483711][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 98.486618][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.491337][ T10] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 98.494347][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.496896][ T10] usb 5-1: Product: syz [ 98.498223][ T10] usb 5-1: Manufacturer: syz [ 98.499984][ T10] usb 5-1: SerialNumber: syz [ 98.503012][ T10] usb 5-1: config 0 descriptor?? [ 98.506358][ T10] asix 5-1:0.0: probe with driver asix failed with error -22 [ 98.603606][ T29] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 98.709994][ T840] usb 5-1: USB disconnect, device number 3 [ 98.755027][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.758309][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.761758][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 98.766998][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.769815][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.772310][ T29] usb 6-1: Product: syz [ 98.773718][ T29] usb 6-1: Manufacturer: syz [ 98.775186][ T29] usb 6-1: SerialNumber: syz [ 98.778323][ T8350] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.782080][ T29] cdc_mbim 6-1:1.0: skipping garbage [ 99.063920][ T8364] kvm: user requested TSC rate below hardware speed [ 99.259540][ T8379] binder: 8378:8379 ioctl c0306201 800004c0 returned -14 [ 99.348749][ T8391] kvm: user requested TSC rate below hardware speed [ 99.586625][ T29] cdc_mbim 6-1:1.0: bind() failure [ 99.591803][ T29] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 99.595084][ T29] cdc_ncm 6-1:1.1: bind() failure [ 99.599450][ T29] usb 6-1: USB disconnect, device number 3 [ 99.659510][ T8420] syzkaller0: entered promiscuous mode [ 99.661256][ T8420] syzkaller0: entered allmulticast mode [ 100.090789][ T8435] netlink: 92 bytes leftover after parsing attributes in process `syz.0.935'. [ 100.152861][ T8441] syzkaller0: entered promiscuous mode [ 100.154782][ T8441] syzkaller0: entered allmulticast mode [ 101.028089][ T8469] netlink: 136 bytes leftover after parsing attributes in process `syz.2.949'. [ 101.074390][ T8473] tipc: Enabling of bearer rejected, failed to enable media [ 101.077553][ T8473] syzkaller0: entered promiscuous mode [ 101.079402][ T8473] syzkaller0: entered allmulticast mode [ 101.184021][ T8481] overlayfs: workdir and upperdir must reside under the same mount [ 101.330276][ T8492] tipc: Enabled bearer , priority 0 [ 101.334414][ T8492] tipc: Resetting bearer [ 101.348666][ T8491] tipc: Disabling bearer [ 102.091588][ T8511] kvm: user requested TSC rate below hardware speed [ 102.096856][ T8511] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 102.399652][ T8537] tipc: Enabling of bearer rejected, failed to enable media [ 102.781249][ T8573] tipc: Enabling of bearer rejected, failed to enable media [ 102.784928][ T8573] syzkaller0: entered promiscuous mode [ 102.786749][ T8573] syzkaller0: entered allmulticast mode [ 103.469223][ T8598] tipc: Started in network mode [ 103.470811][ T8598] tipc: Node identity 9206b3170bb3, cluster identity 4711 [ 103.473128][ T8598] tipc: Enabled bearer , priority 0 [ 103.476282][ T8598] syzkaller0: entered promiscuous mode [ 103.478221][ T8598] syzkaller0: entered allmulticast mode [ 103.489282][ T8597] tipc: Resetting bearer [ 103.497149][ T8597] tipc: Disabling bearer [ 103.505678][ T8600] tipc: Enabling of bearer rejected, failed to enable media [ 103.566249][ T8606] tipc: Enabling of bearer rejected, failed to enable media [ 104.570318][ T8634] kvm: user requested TSC rate below hardware speed [ 104.656809][ T8636] binder: BINDER_SET_CONTEXT_MGR already set [ 104.658697][ T8636] binder: 8635:8636 ioctl 4018620d 80000140 returned -16 [ 105.515045][ T8661] tipc: Enabled bearer , priority 0 [ 105.517676][ T8661] syzkaller0: entered promiscuous mode [ 105.519467][ T8661] syzkaller0: entered allmulticast mode [ 105.525885][ T8661] tipc: Resetting bearer [ 105.529063][ T8660] tipc: Resetting bearer [ 105.536021][ T8660] tipc: Disabling bearer [ 105.833599][ T5862] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.993627][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 105.996893][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.000321][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.003386][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 106.009093][ T5862] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 106.011939][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.015677][ T5862] usb 5-1: config 0 descriptor?? [ 106.415976][ T8680] tipc: Enabling of bearer rejected, failed to enable media [ 106.436211][ T5862] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0007/input/input14 [ 106.499191][ T5862] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0007/input/input15 [ 106.550932][ T5862] kye 0003:0458:5011.0007: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 106.745817][ T8693] tipc: Started in network mode [ 106.748097][ T8693] tipc: Node identity 5aaedea85bae, cluster identity 4711 [ 106.751299][ T8693] tipc: Enabled bearer , priority 0 [ 106.757320][ T8693] syzkaller0: entered promiscuous mode [ 106.759653][ T8693] syzkaller0: entered allmulticast mode [ 106.766954][ T8693] tipc: Resetting bearer [ 106.770327][ T8692] tipc: Resetting bearer [ 106.778850][ T8692] tipc: Disabling bearer [ 107.048414][ T8708] tipc: Enabled bearer , priority 0 [ 107.051905][ T8708] syzkaller0: entered promiscuous mode [ 107.055009][ T8708] syzkaller0: entered allmulticast mode [ 107.062413][ T8708] tipc: Resetting bearer [ 107.066556][ T8707] tipc: Resetting bearer [ 107.073090][ T8707] tipc: Disabling bearer [ 107.475762][ C2] kye 0003:0458:5011.0007: usb_submit_urb(ctrl) failed: -1 [ 108.324150][ T5862] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 108.328174][ T5862] usb 5-1: device reset changed ep0 maxpacket size! [ 108.332084][ T6028] usb 5-1: USB disconnect, device number 4 [ 108.483625][ T6028] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.633610][ T6028] usb 5-1: Using ep0 maxpacket: 8 [ 108.636678][ T6028] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 108.639779][ T6028] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 102, changing to 10 [ 108.643217][ T6028] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 24624, setting to 1024 [ 108.646745][ T6028] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 108.649526][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.804814][ T8761] fuse: Bad value for 'fd' [ 108.833654][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 108.833666][ T40] audit: type=1326 audit(1753978442.930:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.1.1063" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f27579 code=0x0 [ 108.857394][ T6028] usb 5-1: string descriptor 0 read error: -71 [ 108.871657][ T6028] usb 5-1: USB disconnect, device number 5 [ 109.947416][ T8780] binder: 8779:8780 ioctl 4018620d 0 returned -22 [ 109.951382][ T8780] binder: 8779:8780 ioctl c0306201 800004c0 returned -14 [ 110.130986][ T8791] tipc: Enabled bearer , priority 0 [ 110.133787][ T8791] syzkaller0: entered promiscuous mode [ 110.135540][ T8791] syzkaller0: entered allmulticast mode [ 110.141070][ T8791] tipc: Resetting bearer [ 110.144087][ T8790] tipc: Resetting bearer [ 110.150009][ T8790] tipc: Disabling bearer [ 110.240436][ T8795] syzkaller0: entered promiscuous mode [ 110.242294][ T8795] syzkaller0: entered allmulticast mode [ 111.149584][ T8829] tipc: Enabling of bearer rejected, failed to enable media [ 111.543652][ T5862] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.713649][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 111.716794][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.720017][ T5862] usb 5-1: config 7 has an invalid interface number: 227 but max is 0 [ 111.722617][ T5862] usb 5-1: config 7 has no interface number 0 [ 111.724792][ T5862] usb 5-1: config 7 interface 227 has no altsetting 0 [ 111.728517][ T5862] usb 5-1: New USB device found, idVendor=0c26, idProduct=0020, bcdDevice=3f.89 [ 111.731442][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.734168][ T5862] usb 5-1: Product: syz [ 111.735510][ T5862] usb 5-1: Manufacturer: syz [ 111.736968][ T5862] usb 5-1: SerialNumber: syz [ 111.947744][ T5862] usb 5-1: USB disconnect, device number 6 [ 112.297663][ T8869] syzkaller0: entered promiscuous mode [ 112.299460][ T8869] syzkaller0: entered allmulticast mode [ 113.228281][ T8900] tipc: Enabling of bearer rejected, failed to enable media [ 113.259110][ T8904] binder: 8903:8904 ioctl c0306201 800004c0 returned -14 [ 113.934814][ T8913] overlayfs: failed to clone upperpath [ 114.030698][ T8926] tipc: Enabling of bearer rejected, failed to enable media [ 114.563674][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 114.563691][ T5964] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 114.603384][ T8936] tipc: Enabled bearer , priority 0 [ 114.606728][ T8936] syzkaller0: entered promiscuous mode [ 114.608927][ T8936] syzkaller0: entered allmulticast mode [ 114.616998][ T8936] tipc: Resetting bearer [ 114.621333][ T8935] tipc: Resetting bearer [ 114.628725][ T8935] tipc: Disabling bearer [ 114.708958][ T8938] binder: 8937:8938 ioctl c0306201 800004c0 returned -14 [ 114.933055][ T8951] tipc: Enabled bearer , priority 0 [ 114.938568][ T8951] tipc: Resetting bearer [ 114.949931][ T8950] tipc: Disabling bearer [ 114.961950][ T8955] tipc: Enabling of bearer rejected, failed to enable media [ 115.025562][ T6059] Process accounting resumed [ 115.291475][ T8988] tipc: Enabled bearer , priority 0 [ 115.295607][ T8988] syzkaller0: entered promiscuous mode [ 115.297420][ T8988] syzkaller0: entered allmulticast mode [ 115.307704][ T8988] tipc: Resetting bearer [ 115.311833][ T8987] tipc: Resetting bearer [ 115.328847][ T8987] tipc: Disabling bearer [ 115.433903][ T8994] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147492352 (4294984704 ns) > initial count (3670199016 ns). Using initial count to start timer. [ 115.529482][ T8997] binder: 8996:8997 ioctl c0306201 800004c0 returned -14 [ 115.573685][ T6059] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.816725][ T6059] usb 5-1: Using ep0 maxpacket: 32 [ 115.819612][ T6059] usb 5-1: config 254 has an invalid interface number: 160 but max is 0 [ 115.822267][ T6059] usb 5-1: config 254 has no interface number 0 [ 115.824708][ T6059] usb 5-1: config 254 interface 160 has no altsetting 0 [ 115.830000][ T6059] usb 5-1: New USB device found, idVendor=24df, idProduct=d062, bcdDevice=c0.3f [ 115.833984][ T6059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.837274][ T6059] usb 5-1: Product: syz [ 115.838683][ T6059] usb 5-1: Manufacturer: syz [ 115.840452][ T6059] usb 5-1: SerialNumber: syz [ 116.212185][ T6059] usb 5-1: bad CDC descriptors [ 116.215936][ T6059] usb 5-1: USB disconnect, device number 7 [ 116.674905][ T9045] fuse: Bad value for 'fd' [ 116.680096][ T5862] Process accounting resumed [ 116.809150][ T9056] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147492352 (4294984704 ns) > initial count (3670199016 ns). Using initial count to start timer. [ 116.867763][ T9048] tipc: Enabled bearer , priority 0 [ 116.870527][ T9051] syzkaller0: entered promiscuous mode [ 116.872685][ T9051] syzkaller0: entered allmulticast mode [ 116.880223][ T9035] tipc: Resetting bearer [ 116.883378][ T9034] tipc: Resetting bearer [ 116.892316][ T9034] tipc: Disabling bearer [ 117.025031][ T9083] fuse: Bad value for 'fd' [ 117.035687][ T53] Process accounting resumed [ 117.038440][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'. [ 117.158396][ T9095] binder: 9094:9095 ioctl 4018620d 0 returned -22 [ 117.160901][ T9095] binder: 9094:9095 ioctl c0306201 800004c0 returned -14 [ 117.478597][ T9121] fuse: Bad value for 'fd' [ 117.480960][ T10] Process accounting resumed [ 117.979356][ T9126] tipc: Enabled bearer , priority 0 [ 117.981674][ T9133] syzkaller0: entered promiscuous mode [ 117.983446][ T9133] syzkaller0: entered allmulticast mode [ 117.990288][ T9149] tipc: Resetting bearer [ 117.992303][ T9152] syzkaller0: entered promiscuous mode [ 117.994471][ T9152] syzkaller0: entered allmulticast mode [ 117.997223][ T9112] tipc: Resetting bearer [ 118.003027][ T9112] tipc: Disabling bearer [ 118.105887][ T9163] binder: 9162:9163 ioctl 4018620d 0 returned -22 [ 118.108394][ T9163] binder: 9162:9163 ioctl c0306201 800004c0 returned -14 [ 118.205835][ T9182] tipc: Enabling of bearer rejected, failed to enable media [ 118.212900][ T9184] tipc: Enabled bearer , priority 0 [ 118.215504][ T9184] syzkaller0: entered promiscuous mode [ 118.217233][ T9184] syzkaller0: entered allmulticast mode [ 118.222367][ T9184] tipc: Resetting bearer [ 118.224080][ T9178] [ 118.225174][ T9178] ====================================================== [ 118.227373][ T9178] WARNING: possible circular locking dependency detected [ 118.229544][ T9178] 6.16.0-syzkaller-08685-g260f6f4fda93 #0 Not tainted [ 118.233069][ T9178] ------------------------------------------------------ [ 118.235242][ T9178] syz.3.1218/9178 is trying to acquire lock: [ 118.237110][ T9178] ffff88801cec8a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 118.240249][ T9178] [ 118.240249][ T9178] but task is already holding lock: [ 118.242542][ T9178] ffff8880446700a8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 118.245973][ T9178] [ 118.245973][ T9178] which lock already depends on the new lock. [ 118.245973][ T9178] [ 118.249044][ T9178] [ 118.249044][ T9178] the existing dependency chain (in reverse order) is: [ 118.251822][ T9178] [ 118.251822][ T9178] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 118.254499][ T9178] blk_alloc_queue+0x619/0x760 [ 118.256161][ T9178] blk_mq_alloc_queue+0x172/0x280 [ 118.257903][ T9178] __blk_mq_alloc_disk+0x29/0x120 [ 118.259641][ T9178] loop_add+0x490/0xb70 [ 118.261125][ T9178] loop_init+0x164/0x270 [ 118.262651][ T9178] do_one_initcall+0x120/0x6e0 [ 118.264316][ T9178] kernel_init_freeable+0x5c2/0x900 [ 118.266092][ T9178] kernel_init+0x1c/0x2b0 [ 118.267601][ T9178] ret_from_fork+0x5d7/0x6f0 [ 118.269212][ T9178] ret_from_fork_asm+0x1a/0x30 [ 118.270858][ T9178] [ 118.270858][ T9178] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 118.273065][ T9178] fs_reclaim_acquire+0x102/0x150 [ 118.274797][ T9178] kmem_cache_alloc_noprof+0x53/0x3b0 [ 118.276622][ T9178] __kernfs_iattrs+0x124/0x3e0 [ 118.278296][ T9178] __kernfs_setattr+0x4d/0x3c0 [ 118.279939][ T9178] kernfs_iop_setattr+0xda/0x120 [ 118.281627][ T9178] notify_change+0x6a6/0x1230 [ 118.283226][ T9178] do_truncate+0x1d7/0x230 [ 118.284757][ T9178] path_openat+0x2678/0x2cb0 [ 118.286345][ T9178] do_filp_open+0x20b/0x470 [ 118.287938][ T9178] do_sys_openat2+0x11b/0x1d0 [ 118.289545][ T9178] __x64_sys_openat+0x174/0x210 [ 118.291227][ T9178] do_syscall_64+0xcd/0x490 [ 118.292799][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.294811][ T9178] [ 118.294811][ T9178] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 118.297433][ T9178] __lock_acquire+0x126f/0x1c90 [ 118.299117][ T9178] lock_acquire+0x179/0x350 [ 118.300701][ T9178] down_read+0x9b/0x480 [ 118.302193][ T9178] kernfs_iop_getattr+0x9c/0xf0 [ 118.303875][ T9178] vfs_getattr_nosec+0x2ac/0x430 [ 118.305587][ T9178] vfs_getattr+0x4a/0x60 [ 118.307106][ T9178] loop_query_min_dio_size.isra.0+0x117/0x250 [ 118.309158][ T9178] lo_ioctl+0x179b/0x20b0 [ 118.310694][ T9178] lo_compat_ioctl+0xb9/0x170 [ 118.312327][ T9178] compat_blkdev_ioctl+0x2eb/0x7a0 [ 118.314099][ T9178] __ia32_compat_sys_ioctl+0x242/0x370 [ 118.315972][ T9178] __do_fast_syscall_32+0x7c/0x3a0 [ 118.317732][ T9178] do_fast_syscall_32+0x32/0x80 [ 118.319386][ T9178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.321520][ T9178] [ 118.321520][ T9178] other info that might help us debug this: [ 118.321520][ T9178] [ 118.324649][ T9178] Chain exists of: [ 118.324649][ T9178] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 118.324649][ T9178] [ 118.329064][ T9178] Possible unsafe locking scenario: [ 118.329064][ T9178] [ 118.331367][ T9178] CPU0 CPU1 [ 118.333040][ T9178] ---- ---- [ 118.334762][ T9178] lock(&q->q_usage_counter(io)#24); [ 118.336441][ T9178] lock(fs_reclaim); [ 118.338479][ T9178] lock(&q->q_usage_counter(io)#24); [ 118.340888][ T9178] rlock(&root->kernfs_iattr_rwsem); [ 118.342545][ T9178] [ 118.342545][ T9178] *** DEADLOCK *** [ 118.342545][ T9178] [ 118.345023][ T9178] 3 locks held by syz.3.1218/9178: [ 118.346640][ T9178] #0: ffff8880204e2400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 118.349723][ T9178] #1: ffff8880446700a8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 118.353284][ T9178] #2: ffff8880446700e0 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 118.356969][ T9178] [ 118.356969][ T9178] stack backtrace: [ 118.358833][ T9178] CPU: 3 UID: 0 PID: 9178 Comm: syz.3.1218 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 118.358847][ T9178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.358853][ T9178] Call Trace: [ 118.358858][ T9178] [ 118.358863][ T9178] dump_stack_lvl+0x116/0x1f0 [ 118.358875][ T9178] print_circular_bug+0x275/0x350 [ 118.358889][ T9178] check_noncircular+0x14c/0x170 [ 118.358902][ T9178] __lock_acquire+0x126f/0x1c90 [ 118.358919][ T9178] lock_acquire+0x179/0x350 [ 118.358932][ T9178] ? kernfs_iop_getattr+0x9c/0xf0 [ 118.358945][ T9178] ? __pfx___might_resched+0x10/0x10 [ 118.358958][ T9178] down_read+0x9b/0x480 [ 118.358970][ T9178] ? kernfs_iop_getattr+0x9c/0xf0 [ 118.358980][ T9178] ? find_held_lock+0x2b/0x80 [ 118.358989][ T9178] ? __pfx_down_read+0x10/0x10 [ 118.358999][ T9178] ? kernfs_root+0xee/0x2a0 [ 118.359010][ T9178] kernfs_iop_getattr+0x9c/0xf0 [ 118.359021][ T9178] vfs_getattr_nosec+0x2ac/0x430 [ 118.359034][ T9178] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 118.359046][ T9178] vfs_getattr+0x4a/0x60 [ 118.359058][ T9178] loop_query_min_dio_size.isra.0+0x117/0x250 [ 118.359070][ T9178] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 118.359080][ T9178] ? mark_held_locks+0x49/0x80 [ 118.359096][ T9178] ? blk_freeze_queue_start+0xec/0x140 [ 118.359108][ T9178] lo_ioctl+0x179b/0x20b0 [ 118.359119][ T9178] ? __pfx_lo_ioctl+0x10/0x10 [ 118.359130][ T9178] ? kasan_quarantine_put+0x10a/0x240 [ 118.359142][ T9178] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.359158][ T9178] ? blk_get_meta_cap+0x482/0x700 [ 118.359170][ T9178] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 118.359184][ T9178] ? blkdev_common_ioctl+0x1d6/0x2470 [ 118.359195][ T9178] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 118.359213][ T9178] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 118.359226][ T9178] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.359242][ T9178] ? do_vfs_ioctl+0x128/0x14f0 [ 118.359256][ T9178] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 118.359273][ T9178] lo_compat_ioctl+0xb9/0x170 [ 118.359283][ T9178] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 118.359293][ T9178] compat_blkdev_ioctl+0x2eb/0x7a0 [ 118.359306][ T9178] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 118.359317][ T9178] ? __ia32_compat_sys_openat+0x110/0x210 [ 118.359334][ T9178] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 118.359347][ T9178] __ia32_compat_sys_ioctl+0x242/0x370 [ 118.359362][ T9178] __do_fast_syscall_32+0x7c/0x3a0 [ 118.359373][ T9178] do_fast_syscall_32+0x32/0x80 [ 118.359383][ T9178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.359397][ T9178] RIP: 0023:0xf7f55579 [ 118.359405][ T9178] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 118.359416][ T9178] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 118.359425][ T9178] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c06 [ 118.359432][ T9178] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.359437][ T9178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.359443][ T9178] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 118.359449][ T9178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.359458][ T9178] [ 118.458866][ T53] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 118.461377][ T9183] tipc: Resetting bearer [ 118.464862][ T9183] tipc: Disabling bearer [ 118.603629][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 118.606438][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.609830][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.612827][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 118.617024][ T53] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 118.620149][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.623622][ T53] usb 7-1: config 0 descriptor?? [ 119.031800][ T53] hid (null): invalid report_size 12903 [ 119.037754][ T53] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0008/input/input17 [ 119.104789][ T53] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0008/input/input18 [ 119.112799][ T53] kye 0003:0458:5011.0008: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 119.231481][ T53] usb 7-1: USB disconnect, device number 6 VM DIAGNOSIS: 16:14:12 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff8b7f4fc5 RDX=1ffff92000eeeeb8 RSI=ffffffff8b7f5002 RDI=0000000000000000 RBP=ffffc900077775c0 RSP=ffffc900077774b8 R8 =0000000000000000 R9 =0000000000000009 R10=0000000000000000 R11=0000000000000001 R12=00007fc113b68fff R13=ffff88804b82ca50 R14=ffffc900077775d8 R15=ffffc900077775e8 RIP=ffffffff8b7f5032 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097527000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc113b5b440 CR3=0000000071a4f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 766c6f7365726269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000c10 000000000000d3f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802b541fc0 RCX=ffffffff81aef721 RDX=ffff8880275dc880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000717f880 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff9afa8878 R12=dffffc0000000000 R13=ffffed10056a83f9 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81baf978 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097627000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5045528 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000f570c RBX=0000000000000002 RCX=ffffffff8b88bc39 RDX=ffffed1005686656 RSI=ffffffff8c15e480 RDI=ffffffff8190c1d1 RBP=ffffed1003bd4910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801dea4880 R14=ffffffff90a7dc90 R15=0000000000000000 RIP=ffffffff8b88a79f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097727000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002fe18ff8 CR3=0000000050980000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000010003 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7474ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855e81b5 RDI=ffffffff9b0a5840 RBP=ffffffff9b0a5800 RSP=ffffc90007ddf0f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e36312e36 R12=0000000000000000 R13=000000000000000a R14=ffffffff9b0a5800 R15=ffffffff855e8150 RIP=ffffffff855e81df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097827000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080002280 CR3=000000004ec25000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000