last executing test programs: 3m49.911302843s ago: executing program 0 (id=483): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x59, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000090000000000000003000000c24a0001ffffffff850000002a0000009500000000000000f37ef53f987645ff67d58ccefe84345754a8785560184e3e8b25e9c54cbf98cb120326fe6b46bb9e0425478a257521baf00b985475f01666fc14b9da27c30975377603b8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = creat(0x0, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000001c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x1, 0x0, 0x81d, 0xf1, {{0x42, 0x4, 0x1, 0x9, 0x108, 0x65, 0x0, 0x3, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_addr={0x44, 0x2c, 0xd4, 0x1, 0xb, [{@multicast2, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xfffff800}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x401}, {@broadcast, 0xfffffff0}]}, @cipso={0x86, 0x7a, 0x2, [{0x7, 0x4, "e4d9"}, {0x5, 0x10, "bdee870512d01952779e5ab12783"}, {0x7, 0xd, "b633c5a82851670c5f824d"}, {0x5, 0xa, "8fc621ced69bd372"}, {0x1, 0xb, "cf372495c6a6afd311"}, {0x1, 0x12, "9ee2e2ac0e228d63c48e474de8d2fd41"}, {0x5, 0x9, "9375ca0a5b1139"}, {0x2, 0xe, "2bd9c1e858d7cc8154ccb3ea"}, {0xc6943a1488decff4, 0x8, "619663837f8d"}, {0x1, 0xd, "6c8702bcb7a2796af0823e"}]}, @timestamp_prespec={0x44, 0x14, 0x6c, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010101, 0xf}]}, @noop, @end, @cipso={0x86, 0x36, 0xffffffffffffffff, [{0x0, 0xf, "f25c8b43768a06ca64fd6ac12a"}, {0x1, 0x2}, {0x0, 0x11, "01ec702898677bc833e08f9b60caa9"}, {0x0, 0x2}, {0x7, 0x6, "b41d4ea8"}, {0x4, 0x6, "0795d443"}]}]}}}}}) fstat(r2, &(0x7f00000003c0)) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4) 3m49.827455297s ago: executing program 0 (id=484): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="7c8df5ba000c3958dd99bda873cab7158150fe7db0404ea00acb8393e003a83bd04f05d0a7675ed2ba5777685142c6083629eb8659eef625f3c4bc580530377c14027246b08633337c1fe07a5e", @ANYBLOB="82fb33c160f0074ac3eb3ffa70df12549cd989155a0ee514260be71d9496f4c74db9785668d309751c899d801b3f8f0cfa0672e443b27f8f7fdc22a4fb2aca9a6af4287e233c8593745dd57ca3f44d4d6d7029e8ca96bae5782319464bed55079fd68120059b349c6577b002a28f914644747dcf6dffa331aa57f6e14bd0e9b660cd7a3629fa3a72c46caf39f2be833dcbe39253a6ec926524dde5ccc190a75851aae38bca35ff451ec54a4c60408ab0386c675f10b817d8f064391ae27b", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x1008a000}, 0x20098884) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_setup(0x62c3, &(0x7f0000000000)={0x0, 0x70e6, 0x8, 0xffffffff, 0xf5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0", @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r6 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r6, &(0x7f0000000000), 0x0, 0x2) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000040)='1\x00', 0x2) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x1f) ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000180)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x1, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x1, 0x723, 0x400, 0x2, 0x3562bc0d, 0x100, 0xffffffa7, 0x5, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0x4aa14, 0x1, 0x4, 0x0, 0x6, 0xf58, 0x1]}) 3m48.682248117s ago: executing program 0 (id=487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000640)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r9, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x48}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc000001}, 0x801) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f800000041000100fcff070004000000010000000400488082fe01800a2eeccbfcb078c6c4b21fb54b99df98c6edda7cbe528d1cc598055a27a5bbb145906bf1bfb38f21e4b7f9c4386d53d7885af614406c2dd9fe438dcb6943def69cc626c32e8baa178110bd643d02fa3e85f5377eecf3ce9c64b4e8399314978171f2c9b84d5864591d34e7206c36c271a053bd0ed3ae5412da3df50d19aef503664a13e8a44c52dd14eeb874bf3ab459d6cd24a2f8e784f7334f6d8bdb41bdac34d186a3ed2a3aac5a7341b82691dc827cd91fb242acf3c98c89313087502d2afb414221a0f1d326a4522bd6d454522386a962c6c8710008000200", @ANYRES32=r0, @ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x20010084}, 0x4008094) 3m48.550485076s ago: executing program 0 (id=488): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000680)=""/120, 0x78}], 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, 0x0) 3m48.413385091s ago: executing program 0 (id=489): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 3m47.097220488s ago: executing program 0 (id=495): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f0000001900"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x2bc}, 0x1, 0x0, 0x0, 0x20040011}, 0x8080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000080)='vxfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='#\'-\x00', 0x0, r4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x114a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r8) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fedbdf25030100005800018044000400200001000a00000000000000ff00000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000001f203e0d0001003564703a73797a3000d975979fedcf92ff363152ed9bb6f0f695fc6ecd21d058"], 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r9, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x40040) 3m46.631040489s ago: executing program 32 (id=495): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f0000001900"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x2bc}, 0x1, 0x0, 0x0, 0x20040011}, 0x8080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000080)='vxfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='#\'-\x00', 0x0, r4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x114a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r8) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fedbdf25030100005800018044000400200001000a00000000000000ff00000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000001f203e0d0001003564703a73797a3000d975979fedcf92ff363152ed9bb6f0f695fc6ecd21d058"], 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r9, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x40040) 8.856486457s ago: executing program 3 (id=1343): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000, @rand_addr=0xfffffffd}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) fsopen(&(0x7f0000000000)='udf\x00', 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xd]}, 0x8, 0x800) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(r1, &(0x7f0000000140), 0x8, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r4, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x815) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r2, 0x4008af75, &(0x7f0000000100)={0x3, 0x84}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x81, &(0x7f0000006680)) listxattr(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x40187014, &(0x7f0000000000)={0x1, 0x0, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 7.642814671s ago: executing program 3 (id=1348): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000010c0)=0x18cc, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './sys/kernel/mm/lru_gen/enabled\x00'}) recvmsg$can_raw(r1, &(0x7f00000023c0)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f0000000880)=""/39, 0x27}, {&(0x7f00000008c0)=""/177, 0xb1}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/174, 0xae}, {&(0x7f00000021c0)=""/79, 0x4f}], 0xa, &(0x7f00000022c0)=""/224, 0xe0}, 0x10100) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000300)={@ax25={{0x3, @null, 0x6}, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, {&(0x7f0000000200)=""/178, 0xb2}, &(0x7f00000002c0), 0x4d}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='n', 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./sys/kernel/mm/lru_gen/enabled\x00', &(0x7f0000000180), &(0x7f00000001c0)='./sys/kernel/mm/lru_gen/enabled\x00', 0x20, 0x1) 7.511974471s ago: executing program 3 (id=1350): mount(0x0, 0x0, &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x1, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xb, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r5 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x80000, 0x0) fanotify_mark(r2, 0x408, 0x22, r4, 0x0) fanotify_mark(r2, 0x80, 0x0, r4, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r6 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r6, 0x80044dfd, &(0x7f0000000080)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) ioctl$SG_BLKTRACESETUP(r5, 0xc0401273, &(0x7f0000000140)={'\x00', 0xffff, 0x9c, 0xc, 0x1, 0x6, r7}) r8 = syz_open_dev$vbi(0x0, 0x3, 0x2) write(r8, 0x0, 0x0) r9 = syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r10 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0xb, "d5883806da95f58b91"}]}}}}}}, 0x4e) 6.012405261s ago: executing program 1 (id=1360): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0', 0x1) 5.932329324s ago: executing program 1 (id=1361): mount(0x0, 0x0, &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x1, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xb, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r6 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x80000, 0x0) fanotify_mark(r2, 0x408, 0x22, r4, 0x0) fanotify_mark(r2, 0x80, 0x0, r4, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000080)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) ioctl$SG_BLKTRACESETUP(r6, 0xc0401273, &(0x7f0000000140)={'\x00', 0xffff, 0x9c, 0xc, 0x1, 0x6, r7}) r8 = syz_open_dev$vbi(0x0, 0x3, 0x2) write(r8, 0x0, 0x0) r9 = syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r10 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0xb, "d5883806da95f58b91"}]}}}}}}, 0x4e) 5.601694585s ago: executing program 3 (id=1362): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/19, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000100)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', &(0x7f0000000040)='proc\x00', 0x10000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x400000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x80, 0x2b) ioctl$TCFLSH(r1, 0x540b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000003010101"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8880) close(r2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r4, &(0x7f0000001f40)=[{{&(0x7f0000000540)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/74, 0x4a}, {&(0x7f0000000640)=""/247, 0xf7}, {&(0x7f0000000740)=""/181, 0xb5}], 0x3, &(0x7f0000000a40)=""/238, 0xee}, 0x3}, {{&(0x7f0000000b40)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/154, 0x9a}, {&(0x7f0000000c80)=""/27, 0x1b}], 0x2, &(0x7f0000000240)=""/43, 0x2b}, 0x7}, {{&(0x7f0000000d40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000dc0)=""/56, 0x38}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/45, 0x2d}], 0x3, &(0x7f0000001ec0)=""/67, 0x43}, 0x4}], 0x3, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) 5.112222955s ago: executing program 2 (id=1364): r0 = socket$rxrpc(0x21, 0x2, 0xa) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r4) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r9, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000069243279f92445cab5c9f940b4e32717e9549044fd98eb1ac224c8d9026595abb5802a4f16c4daad6bbb55363339cf55d1335", @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf2501000000080002000100000014000c0020010000000000000000000000000001080008000400000008000700", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="080004006401010005000d0002000000"], 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x200840) ioctl$EVIOCGBITKEY(r10, 0x80404521, &(0x7f0000001500)=""/4096) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 4.712293895s ago: executing program 4 (id=1366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4d9b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001840)=ANY=[], 0x0) 4.662082153s ago: executing program 4 (id=1367): r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000100), 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3e}, 0x1c) bind$inet6(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) pwritev2(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000000c0)="3a4002c716d6a76c8c4954a5376cbb6f97620bfe3824433daae61da82f787afff91cf673ef7ebed356e623497f0489", 0x2f}, {&(0x7f0000000100)="14647874f50593fbd741385970459568ce343ccd4ca406866df429c6830d4bed180761c6379067d47e193a152b8d9b9da24d5e2bfff31cabce47132c5f77935c3daa805711c8891ca27689fc7040b552c98f8497e0f83d29d4d31a5428db4e0b66c4f2cb4a58658f48f111a2d19940a9fdc06ef423164c716d82f62fbfec4a93993b602b0ae83752df6dc833066afb0806d527718d646510a82a215b61d8cbfb270fca0317890b361155dfa0a614209ff9cd54f0f116b87d9a4b25f7b04a5318ecbb78440b2eaee36182408db4a31885717297d9ac1a2347feb0c981cd", 0xdd}], 0x3, 0x3, 0xffff8000, 0x14) 4.111570036s ago: executing program 3 (id=1368): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003c4000000c403218740eeca69fc87c0cc7aef7360d2db771dd40c78e6f90101f1e4a20a099b07557ecb288519b90f989a70612d43520ca004c2dfc4377d32f940ac74128f7b59a82675fb13315f2b115317122e00d7276e90c5e5ac6937b0da57fd299551ed90232d5050299f379e6ad21bb0d5fb360f3b1e0a8c85546a6eb2fae3eb812044204e3c1a6561defda329ccf4363b5e688d3d7ba6bc39b7a30d17146125ce0075ff6e21b9d25bd6ea75e37460a17518ae59c2f1822649d466153638affa000000000000"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') execve(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000000000)="0f", 0x34) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180200003d06460000995171998500080015ac47b7000085000000050000009500b23f00"/48], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807}, 0x4c) socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x128400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000000), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000380)={0xfffffffd, 0x1000083}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="220000001a0001000000000000000a00804e"], 0x38}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 4.091912967s ago: executing program 2 (id=1369): clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) 3.932166485s ago: executing program 2 (id=1370): mount(0x0, 0x0, &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x1, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xb, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r5 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x80000, 0x0) fanotify_mark(r2, 0x408, 0x22, r4, 0x0) fanotify_mark(r2, 0x80, 0x0, r4, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r6 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r6, 0x80044dfd, &(0x7f0000000080)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) ioctl$SG_BLKTRACESETUP(r5, 0xc0401273, &(0x7f0000000140)={'\x00', 0xffff, 0x9c, 0xc, 0x1, 0x6, r7}) r8 = syz_open_dev$vbi(0x0, 0x3, 0x2) write(r8, 0x0, 0x0) r9 = syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r10 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0xb, "d5883806da95f58b91"}]}}}}}}, 0x4e) 3.755342459s ago: executing program 4 (id=1371): openat$nvme_fabrics(0xffffff9c, &(0x7f0000000400), 0x109000, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000001100)="02", 0x1) pselect6(0x40, &(0x7f0000000240)={0x3, 0x9, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) unshare(0x6020400) r2 = io_uring_setup(0xf06, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000000)=[r2], 0x1) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 3.40677731s ago: executing program 1 (id=1372): openat$nvme_fabrics(0xffffff9c, &(0x7f0000000400), 0x109000, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000001100)="02", 0x1) pselect6(0x40, &(0x7f0000000240)={0x3, 0x9, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) unshare(0x6020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ec) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 2.651914561s ago: executing program 4 (id=1373): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}, 0x400c0c8) r1 = syz_open_procfs(r0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000010c0)=0xfffffffc, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x99, "8be2fda3de9892a4bcd9041e5893515fa45946638432b3e32577a8fe9a82afbab784dcc9292e2f0b5163dc3bdbfbb45395739f1244dc7a759e20450d310e3d555ed12ddc6dbcc74d08dbf31e76f8e5f980706dfa26c2e50438c8781909e1bf777b1b7229d153d905fc913942819110ef4f164c31734cb1e781ec4a3740590fc98c4521eaa823de3963012a9c710966f9c9f778e7f5004d2145"}, &(0x7f0000000300)=0xa1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r4, 0x3}, 0xc) read$msr(r3, &(0x7f000001cd00)=""/102400, 0x19000) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000e40)={[0xfffffffffffffff9, 0xe34, 0x1, 0xfffffffffffffff8, 0xa, 0xfffffffffffffffb, 0x1000, 0x40100000000000b, 0x40, 0x0, 0x40100000000000, 0xe, 0x8000000000000002, 0x1, 0x1fffffffffffb, 0x4], 0x50000, 0x1c22c5}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.410439526s ago: executing program 2 (id=1374): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250200030000000000060007000500", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x404cc83}, 0x0) 2.23198216s ago: executing program 1 (id=1375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000340)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r2 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x101801) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000004c0)={0xa, 0x0, 0x0, {0x0, 0x759bc414, 0x800007, 0x20003}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$COMEDI_BUFINFO(r1, 0xc02c640e, &(0x7f0000000240)={0x10, 0x0, 0x1ff, 0x9, 0x9f, 0x800, 0x80000001}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x4, 0x0, 0x24}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x3}}, &(0x7f0000000200)={0x0, 0x1c, 0x34}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) 2.183690141s ago: executing program 1 (id=1376): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @remote, 0x4001, "aaa517d60f2811d48c8a2cc60c4380bc23b510090000004a2864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x40}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x8}}, './cgroup.cpu/cgroup.procs\x00'}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r3, 0x0) io_uring_setup(0xfa4, &(0x7f0000000000)={0x0, 0xbe4d, 0x0, 0x3, 0x16b}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0x3}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd84\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaKS\xffn*\xcf\t\\\xces\x04\x1e*p\x9e\xf2\x16\x01`\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xab\x81\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xb1)*O\xe3\xc3L\xd6J\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e\x00\xb4\xc2\xac\xacT\xedq\x10\xb1HW\xben\xbc\x9b\x03\xb6#\xd6z\xe5\xf5\xb4\xcdBA(\xd1\xf3Sx\xad\xa37\xda7\xc6\xc3\xcc\xf6w\x19m_O\xc9C\xb4\xea\xd5U\xb3\x82\xab1\x8e\xfc\xe3\xa8\x89\xb1?\xbf\x84\xdb\x01\x00\xc1\r\x16\x15\x8a\x1d\xa1\x98\x0fS\xd1c\x01O\xd7oi\x96\ts\a \x90Y\xe4\xc2\xcbcC\xdb\xa9\x85'}]}, 0x10a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='0\n', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000040), 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) 1.987947499s ago: executing program 2 (id=1377): r0 = socket$rxrpc(0x21, 0x2, 0xa) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r4) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r9, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000069243279f92445cab5c9f940b4e32717e9549044fd98eb1ac224c8d9026595abb5802a4f16c4daad6bbb55363339cf55d1335", @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf2501000000080002000100000014000c0020010000000000000000000000000001080008000400000008000700", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="080004006401010005000d0002000000"], 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x200840) ioctl$EVIOCGBITKEY(r10, 0x80404521, &(0x7f0000001500)=""/4096) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 1.088025297s ago: executing program 3 (id=1378): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="28213d5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6d27", 0x62) r1 = socket(0x1e, 0x1, 0x0) openat$null(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x11, &(0x7f0000000700)="02000000097effff", 0x8) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, 0x0, 0xffffffffffffff3d) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='vhci_hcd.0\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 1.004535231s ago: executing program 4 (id=1379): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x5c, &(0x7f0000003380)}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) acct(&(0x7f0000000040)='./file0\x00') r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1b) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40850) syz_emit_ethernet(0x86, &(0x7f0000000540)={@random="e90c610faca2", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x78, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "c280440876218f4076c9f025d316ae0235103803e8122f7ac1bc5b24d97134ef", "eeb6ad324972d996277be1c7919f46f8", {"430f140c019f1953ffa9e47fadca163a", "3b70439ab82b682a6576c87b9f8bb9ff"}}}}}}}, 0x0) 411.814039ms ago: executing program 2 (id=1380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x8009, 0x7, 0x7, 0x1, 0x3, 0x9a, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0xa, 0x2400000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) 364.35916ms ago: executing program 1 (id=1381): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc9e, 0x0, 0x0, 0x0, 0xde9e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf5e}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0xe) 0s ago: executing program 4 (id=1382): mount(0x0, 0x0, &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x1, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xb, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r5 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x80000, 0x0) fanotify_mark(r2, 0x408, 0x22, r4, 0x0) fanotify_mark(r2, 0x80, 0x0, r4, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r6 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r6, 0x80044dfd, &(0x7f0000000080)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) ioctl$SG_BLKTRACESETUP(r5, 0xc0401273, &(0x7f0000000140)={'\x00', 0xffff, 0x9c, 0xc, 0x1, 0x6, r7}) r8 = syz_open_dev$vbi(0x0, 0x3, 0x2) write(r8, 0x0, 0x0) r9 = syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r10 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0xb, "d5883806da95f58b91"}]}}}}}}, 0x4e) kernel console output (not intermixed with test programs): hanging to 7 [ 306.753155][ T7942] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 306.815312][ T7942] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 306.829280][ T7942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.842567][ T7942] usb 7-1: Product: syz [ 306.849128][ T7942] usb 7-1: Manufacturer: syz [ 306.860600][ T7942] usb 7-1: SerialNumber: syz [ 306.981477][ T7942] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 307.023938][ T7942] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 307.027980][ T9560] overlay: Unknown parameter 'default_permissions:redirect_dir' [ 307.076045][ T7942] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 307.401626][ T9575] syzkaller0: entered promiscuous mode [ 307.403430][ T9575] syzkaller0: entered allmulticast mode [ 308.297044][ T50] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 308.460413][ T50] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 308.463606][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.466130][ T50] usb 8-1: Product: syz [ 308.467636][ T50] usb 8-1: Manufacturer: syz [ 308.469106][ T50] usb 8-1: SerialNumber: syz [ 308.747510][ T50] rtl8150 8-1:1.0: couldn't reset the device [ 308.750117][ T50] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 308.756051][ T50] usb 8-1: USB disconnect, device number 24 [ 308.886110][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 308.886404][ T43] audit: type=1326 audit(1785667205.999:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.4.993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 308.903614][ T43] audit: type=1326 audit(1785667205.999:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.4.993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 308.916143][ T43] audit: type=1326 audit(1785667206.009:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.4.993" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf709efec code=0x7ffc0000 [ 308.928708][ T43] audit: type=1326 audit(1785667206.009:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.4.993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 308.938204][ T43] audit: type=1326 audit(1785667206.009:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.4.993" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf709efec code=0x7ffc0000 [ 308.947459][ T43] audit: type=1326 audit(1785667206.009:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.4.993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 308.956433][ T43] audit: type=1326 audit(1785667206.009:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.4.993" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf709efec code=0x7ffc0000 [ 308.965933][ T43] audit: type=1326 audit(1785667206.009:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.4.993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 308.975154][ T43] audit: type=1326 audit(1785667206.009:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.4.993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 308.984670][ T43] audit: type=1326 audit(1785667206.009:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9592 comm="syz.4.993" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf709efec code=0x7ffc0000 [ 309.775224][ T9605] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 309.782394][ T9605] VFS: Can't find a romfs filesystem on dev nullb0. [ 309.782394][ T9605] [ 309.916004][ T9607] Cache volume key already in use (9p,syz,) [ 309.939855][ T9547] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 310.257095][ T5830] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 310.440061][ T5830] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 310.444428][ T5830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.451515][ T5830] usb 8-1: Product: syz [ 310.453665][ T5830] usb 8-1: Manufacturer: syz [ 310.457149][ T5830] usb 8-1: SerialNumber: syz [ 310.785520][ T5830] rtl8150 8-1:1.0: couldn't reset the device [ 310.789724][ T5830] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 310.816163][ T5830] usb 8-1: USB disconnect, device number 25 [ 310.931671][ T9625] uhci_hcd 0000:00:1d.0: remove, state 4 [ 310.935946][ T9625] usb usb2: USB disconnect, device number 1 [ 311.011648][ T5830] usb 7-1: USB disconnect, device number 27 [ 311.121567][ T5830] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 311.153565][ T5830] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 311.175532][ T5830] ti_usb_3410_5052 7-1:2.0: device disconnected [ 311.255236][ T9625] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 312.433279][ T50] IPVS: starting estimator thread 0... [ 312.523521][ T9652] IPVS: using max 26 ests per chain, 62400 per kthread [ 312.610480][ T9651] ima: policy update completed [ 312.947035][ T5830] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 312.994093][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'. [ 313.100843][ T5830] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 313.106453][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.110227][ T5830] usb 7-1: Product: syz [ 313.112045][ T5830] usb 7-1: Manufacturer: syz [ 313.114424][ T5830] usb 7-1: SerialNumber: syz [ 313.253961][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 313.511146][ T5830] rtl8150 7-1:1.0: couldn't reset the device [ 313.523415][ T5830] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 313.534851][ T5830] usb 7-1: USB disconnect, device number 28 [ 313.556284][ T9666] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 313.577037][ T5891] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 313.729008][ T5891] usb 8-1: config 0 has no interfaces? [ 313.731547][ T5891] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 313.735378][ T5891] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.744127][ T5891] usb 8-1: config 0 descriptor?? [ 314.049110][ T43] kauditd_printk_skb: 4099 callbacks suppressed [ 314.049159][ T43] audit: type=1800 audit(1785667211.169:4270): pid=9671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1017" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 314.062408][ T9671] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 314.065004][ T9671] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 314.071006][ T9671] vhci_hcd vhci_hcd.0: Device attached [ 314.082861][ T43] audit: type=1800 audit(1785667211.199:4271): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148401 res=0 errno=0 [ 314.083583][ T43] audit: type=1800 audit(1785667211.199:4272): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148413 res=0 errno=0 [ 314.095397][ T43] audit: type=1800 audit(1785667211.209:4273): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148425 res=0 errno=0 [ 314.160172][ T7942] usb 8-1: USB disconnect, device number 26 [ 314.166600][ T43] audit: type=1800 audit(1785667211.279:4274): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 314.239064][ T43] audit: type=1800 audit(1785667211.359:4275): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=5226 res=0 errno=0 [ 314.296140][ T9678] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 314.343494][ T9674] vhci_hcd: connection closed [ 314.345847][ T5793] vhci_hcd vhci_hcd.4: stop threads [ 314.351078][ T5793] vhci_hcd vhci_hcd.4: release socket [ 314.356542][ T5793] vhci_hcd vhci_hcd.4: disconnect device [ 314.359282][ T5855] usb 46-1: SetAddress Request (2) to port 0 [ 314.361783][ T5855] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 314.377122][ T5855] usb 46-1: enqueue for inactive port 0 [ 314.405017][ T43] audit: type=1800 audit(1785667211.519:4276): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 314.513256][ T43] audit: type=1800 audit(1785667211.629:4277): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 314.564373][ T43] audit: type=1800 audit(1785667211.679:4278): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 314.596958][ T43] audit: type=1800 audit(1785667211.709:4279): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148437 res=0 errno=0 [ 314.867744][ T5855] usb usb46-port1: attempt power cycle [ 315.022654][ T9697] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 315.512901][ T5855] usb usb46-port1: unable to enumerate USB device [ 316.157290][ T5893] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 316.350560][ T5893] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 316.363293][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.377024][ T5893] usb 7-1: Product: syz [ 316.388008][ T5893] usb 7-1: Manufacturer: syz [ 316.394738][ T5893] usb 7-1: SerialNumber: syz [ 316.648076][ T9711] can0: slcan on ttyS3. [ 316.755077][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.757853][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.806564][ T5893] rtl8150 7-1:1.0: couldn't reset the device [ 316.816550][ T5893] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 316.827399][ T5893] usb 7-1: USB disconnect, device number 29 [ 316.841078][ T9710] can0 (unregistered): slcan off ttyS3. [ 317.472649][ T9721] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 317.591733][ T9728] syzkaller0: entered promiscuous mode [ 317.593798][ T9728] syzkaller0: entered allmulticast mode [ 318.031773][ T9739] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 318.890185][ T9757] FAULT_INJECTION: forcing a failure. [ 318.890185][ T9757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.896286][ T9757] CPU: 1 UID: 0 PID: 9757 Comm: syz.4.1045 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.896316][ T9757] Tainted: [L]=SOFTLOCKUP [ 318.896324][ T9757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 318.896335][ T9757] Call Trace: [ 318.896342][ T9757] [ 318.896350][ T9757] dump_stack_lvl+0x100/0x190 [ 318.896379][ T9757] should_fail_ex.cold+0x5/0xa [ 318.896407][ T9757] _copy_from_iter+0x1f4/0x1690 [ 318.896439][ T9757] ? __asan_memset+0x23/0x50 [ 318.896460][ T9757] ? __pfx__copy_from_iter+0x10/0x10 [ 318.896487][ T9757] ? __pfx___alloc_skb+0x10/0x10 [ 318.896522][ T9757] netlink_sendmsg+0x808/0xda0 [ 318.896549][ T9757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.896574][ T9757] ? apparmor_socket_sendmsg+0x15b/0x270 [ 318.896623][ T9757] ____sys_sendmsg+0xa4d/0xbe0 [ 318.896643][ T9757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.896666][ T9757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.896695][ T9757] ___sys_sendmsg+0x190/0x1e0 [ 318.896718][ T9757] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.896750][ T9757] ? find_held_lock+0x2b/0x80 [ 318.896785][ T9757] __sys_sendmsg+0x160/0x210 [ 318.896809][ T9757] ? __pfx___sys_sendmsg+0x10/0x10 [ 318.896850][ T9757] ? __pfx_ksys_write+0x10/0x10 [ 318.896872][ T9757] __do_fast_syscall_32+0xe7/0x970 [ 318.896900][ T9757] ? lockdep_hardirqs_on+0x78/0x100 [ 318.896924][ T9757] do_fast_syscall_32+0x32/0x70 [ 318.896948][ T9757] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.896974][ T9757] RIP: 0023:0xf709efec [ 318.896994][ T9757] Code: Unable to access opcode bytes at 0xf709efc2. [ 318.897003][ T9757] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 318.897022][ T9757] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 318.897034][ T9757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.897044][ T9757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.897055][ T9757] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 318.897064][ T9757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.897087][ T9757] [ 319.111263][ T43] kauditd_printk_skb: 39 callbacks suppressed [ 319.111276][ T43] audit: type=1800 audit(1785667216.229:4319): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 319.232437][ T9759] vlan2: entered promiscuous mode [ 319.234202][ T9759] hsr0: entered promiscuous mode [ 319.237800][ T9759] vlan2: entered allmulticast mode [ 319.239553][ T9759] hsr0: entered allmulticast mode [ 319.241338][ T9759] hsr_slave_0: entered allmulticast mode [ 319.243220][ T9759] hsr_slave_1: entered allmulticast mode [ 319.245709][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 319.286745][ T9761] hsr_slave_0: left promiscuous mode [ 319.300419][ T9761] hsr_slave_1: left promiscuous mode [ 319.459946][ T43] audit: type=1800 audit(1785667216.579:4320): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 319.574857][ T9764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 319.721783][ T43] audit: type=1800 audit(1785667216.839:4321): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 319.864009][ T43] audit: type=1800 audit(1785667216.979:4322): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 319.975863][ T43] audit: type=1800 audit(1785667217.089:4323): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 320.047088][ T43] audit: type=1800 audit(1785667217.159:4324): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 320.289617][ T9778] FAULT_INJECTION: forcing a failure. [ 320.289617][ T9778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.293857][ T9778] CPU: 1 UID: 0 PID: 9778 Comm: syz.4.1051 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.293887][ T9778] Tainted: [L]=SOFTLOCKUP [ 320.293891][ T9778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.293898][ T9778] Call Trace: [ 320.293903][ T9778] [ 320.293908][ T9778] dump_stack_lvl+0x100/0x190 [ 320.293927][ T9778] should_fail_ex.cold+0x5/0xa [ 320.293941][ T9778] _copy_from_user+0x2e/0xd0 [ 320.293963][ T9778] do_sys_poll+0x345/0xe90 [ 320.293984][ T9778] ? find_held_lock+0x2b/0x80 [ 320.293999][ T9778] ? is_bpf_text_address+0x8a/0x1a0 [ 320.294017][ T9778] ? is_bpf_text_address+0x8a/0x1a0 [ 320.294034][ T9778] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 320.294051][ T9778] ? __pfx_do_sys_poll+0x10/0x10 [ 320.294106][ T9778] ? __schedule+0x126e/0x6730 [ 320.294120][ T9778] ? set_compat_user_sigmask+0x1d9/0x260 [ 320.294133][ T9778] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 320.294146][ T9778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 320.294163][ T9778] __ia32_compat_sys_ppoll_time32+0x2b6/0x350 [ 320.294177][ T9778] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 320.294189][ T9778] ? fput+0x79/0x100 [ 320.294203][ T9778] ? rcu_is_watching+0x12/0xc0 [ 320.294219][ T9778] __do_fast_syscall_32+0xe7/0x970 [ 320.294235][ T9778] ? lockdep_hardirqs_on+0x78/0x100 [ 320.294251][ T9778] do_fast_syscall_32+0x32/0x70 [ 320.294266][ T9778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.294281][ T9778] RIP: 0023:0xf709efec [ 320.294297][ T9778] Code: Unable to access opcode bytes at 0xf709efc2. [ 320.294301][ T9778] RSP: 002b:00000000f544b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000135 [ 320.294313][ T9778] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 320.294320][ T9778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.294326][ T9778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.294332][ T9778] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 320.294338][ T9778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.294351][ T9778] [ 320.696074][ T43] audit: type=1800 audit(1785667217.809:4325): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 320.755498][ T43] audit: type=1800 audit(1785667217.869:4326): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 321.072232][ T43] audit: type=1800 audit(1785667218.189:4327): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 321.123570][ T9788] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 321.228771][ T43] audit: type=1800 audit(1785667218.349:4328): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35096 res=0 errno=0 [ 321.467210][ T5855] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 321.689896][ T5855] usb 9-1: not running at top speed; connect to a high speed hub [ 321.700536][ T5855] usb 9-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.707224][ T5855] usb 9-1: config 1 interface 0 has no altsetting 0 [ 321.717614][ T5855] usb 9-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 321.720435][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.722808][ T5855] usb 9-1: Product: Щ [ 321.724043][ T5855] usb 9-1: Manufacturer: î ½ã¨äŸ°ç™¿á‰’å¢žæ’æ­¡ãž¶èº“ꕊ鱇嫣擊飆︼岤잗ï»á•«á´ä®ã¥²á´šï·‡ä¡§ä´©é²®áœ›é–䉩ⱖé·ï”¸âž¼ç¦´å†íŠ›é¹”ä¢¼ìœ†ê­¤ë¢©ç¬…á“¼é¼¡æ¸’ä‡ É›ê–¡ê Œå °ê»˜é± ëˆ«è§¥æ¡»ë´„èŸžê¶¥î¿¾É¤ä»ºá°°ê‰¯ä›°à ·ã£‰â¿é¦€ê„¶í†˜æ™œì§ë•굚 [ 321.731774][ T5855] usb 9-1: SerialNumber: ﳿ [ 323.539484][ T5855] usbhid 9-1:1.0: can't add hid device: -71 [ 323.541467][ T5855] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 323.545210][ T5855] usb 9-1: USB disconnect, device number 9 [ 324.066533][ T9811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1062'. [ 324.079871][ T9811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1062'. [ 324.159655][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 324.159666][ T43] audit: type=1800 audit(1785667221.279:4347): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 324.633178][ T9821] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 324.680089][ T43] audit: type=1800 audit(1785667221.799:4348): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 324.782843][ T43] audit: type=1800 audit(1785667221.899:4349): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 324.841142][ T9827] nfs4: Bad value for 'source' [ 324.883468][ T43] audit: type=1800 audit(1785667221.999:4350): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 324.965818][ T9830] cgroup: Unknown subsys name 'addr' [ 325.094723][ T43] audit: type=1800 audit(1785667222.209:4351): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 325.146625][ T43] audit: type=1800 audit(1785667222.259:4352): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 325.231842][ T43] audit: type=1800 audit(1785667222.349:4353): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 325.398399][ T43] audit: type=1800 audit(1785667222.519:4354): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 325.422742][ T43] audit: type=1800 audit(1785667222.539:4355): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 325.500278][ T43] audit: type=1800 audit(1785667222.619:4356): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 325.511076][ T9839] syzkaller0: entered promiscuous mode [ 325.512877][ T9839] syzkaller0: entered allmulticast mode [ 325.526700][ T9843] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 325.539139][ T5891] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 325.573833][ T9845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1074'. [ 325.697921][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1071'. [ 325.722328][ T5891] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 325.738953][ T5891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.742169][ T5891] usb 9-1: Product: syz [ 325.743805][ T5891] usb 9-1: Manufacturer: syz [ 325.745633][ T5891] usb 9-1: SerialNumber: syz [ 326.880608][ T5891] rtl8150 9-1:1.0: couldn't reset the device [ 326.883752][ T5891] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 327.902247][ T50] usb 9-1: USB disconnect, device number 10 [ 328.502981][ T9875] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 328.550555][ T9875] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 328.552503][ T9875] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 328.559216][ T9875] vhci_hcd vhci_hcd.0: Device attached [ 328.593849][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.598201][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.635589][ T9875] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 328.853220][ T5855] usb 42-1: SetAddress Request (2) to port 0 [ 329.095326][ T5855] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 329.221939][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 329.221951][ T43] audit: type=1800 audit(1785667226.339:4388): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 329.717028][ T43] audit: type=1800 audit(1785667226.829:4389): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 330.082419][ T9877] vhci_hcd: connection reset by peer [ 330.082755][ T9891] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 330.090174][ T5793] vhci_hcd vhci_hcd.2: stop threads [ 330.092630][ T5793] vhci_hcd vhci_hcd.2: release socket [ 330.098212][ T5793] vhci_hcd vhci_hcd.2: disconnect device [ 330.218735][ T43] audit: type=1800 audit(1785667227.339:4390): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 330.233335][ T43] audit: type=1800 audit(1785667227.349:4391): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151765 res=0 errno=0 [ 330.379536][ T43] audit: type=1800 audit(1785667227.499:4392): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 331.168639][ T43] audit: type=1800 audit(1785667228.249:4393): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 331.439226][ T43] audit: type=1800 audit(1785667228.489:4394): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 331.459956][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1088'. [ 331.503832][ T43] audit: type=1800 audit(1785667228.619:4395): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 331.569645][ T9908] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 331.840631][ T43] audit: type=1800 audit(1785667228.959:4396): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 331.869056][ T43] audit: type=1800 audit(1785667228.989:4397): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 334.580234][ T5855] usb 42-1: device descriptor read/8, error -110 [ 334.821143][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 334.821156][ T43] audit: type=1800 audit(1785667231.939:4404): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 335.108581][ T5855] usb usb42-port1: attempt power cycle [ 335.562866][ T9955] syzkaller0: entered promiscuous mode [ 335.566786][ T9955] syzkaller0: entered allmulticast mode [ 335.947262][ T43] audit: type=1800 audit(1785667232.229:4405): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 336.013222][ T43] audit: type=1800 audit(1785667232.359:4406): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 336.105738][ T43] audit: type=1800 audit(1785667232.409:4407): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151929 res=0 errno=0 [ 336.174132][ T43] audit: type=1800 audit(1785667232.459:4408): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 336.246274][ T43] audit: type=1800 audit(1785667233.179:4409): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 336.577006][ T5855] usb usb42-port1: unable to enumerate USB device [ 336.740992][ T43] audit: type=1800 audit(1785667233.859:4410): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 336.833654][ T43] audit: type=1800 audit(1785667233.949:4411): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 336.861662][ T9963] 9pnet_virtio: no channels available for device syz [ 337.986754][ T43] audit: type=1800 audit(1785667235.099:4412): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 338.013779][ T43] audit: type=1800 audit(1785667235.119:4413): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 339.183177][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'. [ 339.397002][ T9979] FAULT_INJECTION: forcing a failure. [ 339.397002][ T9979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.406402][ T9979] CPU: 1 UID: 0 PID: 9979 Comm: syz.2.1109 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.406422][ T9979] Tainted: [L]=SOFTLOCKUP [ 339.406426][ T9979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.406433][ T9979] Call Trace: [ 339.406438][ T9979] [ 339.406442][ T9979] dump_stack_lvl+0x100/0x190 [ 339.406468][ T9979] should_fail_ex.cold+0x5/0xa [ 339.406485][ T9979] _copy_from_iter+0x1f4/0x1690 [ 339.406509][ T9979] ? __asan_memset+0x23/0x50 [ 339.406525][ T9979] ? __pfx__copy_from_iter+0x10/0x10 [ 339.406542][ T9979] ? __pfx___alloc_skb+0x10/0x10 [ 339.406565][ T9979] netlink_sendmsg+0x808/0xda0 [ 339.406581][ T9979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.406595][ T9979] ? apparmor_socket_sendmsg+0x15b/0x270 [ 339.406612][ T9979] ____sys_sendmsg+0xa4d/0xbe0 [ 339.406623][ T9979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.406636][ T9979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.406654][ T9979] ___sys_sendmsg+0x190/0x1e0 [ 339.406667][ T9979] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.406685][ T9979] ? find_held_lock+0x2b/0x80 [ 339.406709][ T9979] __sys_sendmsg+0x160/0x210 [ 339.406726][ T9979] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.406745][ T9979] ? __pfx_ksys_write+0x10/0x10 [ 339.406760][ T9979] __do_fast_syscall_32+0xe7/0x970 [ 339.406778][ T9979] ? lockdep_hardirqs_on+0x78/0x100 [ 339.406796][ T9979] do_fast_syscall_32+0x32/0x70 [ 339.406812][ T9979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.406838][ T9979] RIP: 0023:0xf7fa7fec [ 339.406854][ T9979] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 339.406859][ T9979] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 339.406870][ T9979] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000080 [ 339.406877][ T9979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.406884][ T9979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.406891][ T9979] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 339.406900][ T9979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.406920][ T9979] [ 340.068850][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 340.068861][ T43] audit: type=1800 audit(1785667237.189:4419): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 340.119919][ T43] audit: type=1800 audit(1785667237.229:4420): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152176 res=0 errno=0 [ 340.133816][ T43] audit: type=1800 audit(1785667237.229:4421): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152186 res=0 errno=0 [ 340.151747][ T43] audit: type=1800 audit(1785667237.259:4422): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1111" name="id" dev="configfs" ino=32956 res=0 errno=0 [ 340.187016][ T43] audit: type=1804 audit(1785667237.259:4423): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1111" name="/newroot/301/config/usb_gadget/g1/functions/midi.usb0/id" dev="configfs" ino=32956 res=1 errno=0 [ 340.227991][ T43] audit: type=1800 audit(1785667237.339:4424): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 340.249335][ T43] audit: type=1800 audit(1785667237.349:4425): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 340.268348][ T43] audit: type=1800 audit(1785667237.379:4426): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 340.300587][ T43] audit: type=1800 audit(1785667237.419:4427): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152238 res=0 errno=0 [ 340.494595][ T43] audit: type=1800 audit(1785667237.609:4428): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 340.743788][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 340.749280][T10006] netlink: 'syz.1.1117': attribute type 10 has an invalid length. [ 340.751746][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'. [ 341.197531][ T5821] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 341.572583][T10020] 9pnet_virtio: no channels available for device syz [ 341.735082][T10024] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 341.737562][T10024] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 341.749009][T10024] vhci_hcd vhci_hcd.0: Device attached [ 342.034876][ T41] usb 44-1: SetAddress Request (2) to port 0 [ 342.038690][ T41] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 342.405428][T10025] vhci_hcd: connection reset by peer [ 342.446806][ T5793] vhci_hcd vhci_hcd.3: stop threads [ 342.448802][ T5793] vhci_hcd vhci_hcd.3: release socket [ 342.457296][ T5793] vhci_hcd vhci_hcd.3: disconnect device [ 343.007035][ T5893] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 343.161860][ T5893] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 343.165163][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.168587][ T5893] usb 7-1: Product: syz [ 343.170331][ T5893] usb 7-1: Manufacturer: syz [ 343.172361][ T5893] usb 7-1: SerialNumber: syz [ 343.256094][T10042] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 343.369363][T10042] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 343.371799][T10042] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 343.450773][ T5893] rtl8150 7-1:1.0: couldn't reset the device [ 343.453553][ T5893] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 343.463758][ T5893] usb 7-1: USB disconnect, device number 30 [ 343.478124][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.481322][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.640010][T10042] vhci_hcd vhci_hcd.0: Device attached [ 343.837516][T10042] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 344.507051][ T5821] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 344.527947][T10043] vhci_hcd: connection closed [ 344.530835][ T5793] vhci_hcd vhci_hcd.3: stop threads [ 344.535077][ T5793] vhci_hcd vhci_hcd.3: release socket [ 344.537588][ T5793] vhci_hcd vhci_hcd.3: disconnect device [ 344.658709][ T5821] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 344.662418][ T5821] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.666588][ T5821] usb 7-1: config 0 has no interface number 0 [ 344.670347][ T5821] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 344.675069][ T5821] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 344.679527][ T5821] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 344.683144][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.688985][ T5821] usb 7-1: config 0 descriptor?? [ 344.695224][T10052] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 344.705262][ T5821] ldusb 7-1:0.55: Interrupt in endpoint not found [ 345.411251][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 345.411273][ T43] audit: type=1800 audit(1785667242.529:4465): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 345.461286][T10060] openvswitch: netlink: ct_state flags 0001010a unsupported [ 345.489951][ T43] audit: type=1800 audit(1785667242.609:4466): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 345.535307][ T43] audit: type=1800 audit(1785667242.649:4467): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 345.617503][ T43] audit: type=1800 audit(1785667242.739:4468): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 345.730576][ T43] audit: type=1800 audit(1785667242.849:4469): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 345.770964][ T43] audit: type=1800 audit(1785667242.889:4470): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 345.797808][ T43] audit: type=1800 audit(1785667242.909:4471): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 345.872558][T10070] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 345.989858][ T43] audit: type=1800 audit(1785667243.109:4472): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 346.266218][T10078] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 346.280225][ T43] audit: type=1800 audit(1785667243.399:4473): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1136" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 346.292547][T10078] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 346.295207][T10078] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 346.299405][T10078] vhci_hcd vhci_hcd.0: Device attached [ 346.344378][T10078] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 346.881063][ T43] audit: type=1800 audit(1785667243.999:4474): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 346.884454][T10079] vhci_hcd: connection closed [ 346.897356][ T5793] vhci_hcd vhci_hcd.3: stop threads [ 346.901137][ T5793] vhci_hcd vhci_hcd.3: release socket [ 346.905363][ T5793] vhci_hcd vhci_hcd.3: disconnect device [ 347.137016][ T41] usb 44-1: device descriptor read/8, error -110 [ 347.173687][ T5830] usb 7-1: USB disconnect, device number 31 [ 347.528435][ T41] usb usb44-port1: attempt power cycle [ 347.607222][ T34] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 347.756964][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 347.761441][ T34] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 347.764515][ T34] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 347.767624][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 347.771286][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 347.775064][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 347.779268][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 347.785750][ T34] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 347.789263][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.794518][ T34] usb 7-1: config 0 descriptor?? [ 347.932342][T10101] FAULT_INJECTION: forcing a failure. [ 347.932342][T10101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.937904][T10101] CPU: 0 UID: 0 PID: 10101 Comm: syz.4.1144 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.937932][T10101] Tainted: [L]=SOFTLOCKUP [ 347.937938][T10101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.937949][T10101] Call Trace: [ 347.937956][T10101] [ 347.937963][T10101] dump_stack_lvl+0x100/0x190 [ 347.937992][T10101] should_fail_ex.cold+0x5/0xa [ 347.938013][T10101] _copy_to_user+0x32/0xd0 [ 347.938045][T10101] bpf_log_attr_finalize+0x169/0x1a0 [ 347.938068][T10101] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 347.938087][T10101] ? btf_new_fd+0x1de4/0x5bc0 [ 347.938108][T10101] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 347.938139][T10101] btf_new_fd+0x9c7/0x5bc0 [ 347.938158][T10101] ? kernel_text_address+0x8d/0x100 [ 347.938199][T10101] ? __pfx_btf_new_fd+0x10/0x10 [ 347.938223][T10101] ? rcu_is_watching+0x12/0xc0 [ 347.938247][T10101] ? apparmor_capable+0x1d7/0x4d0 [ 347.938271][T10101] ? security_capable+0x80/0x260 [ 347.938295][T10101] ? ns_capable+0xd2/0xf0 [ 347.938318][T10101] __sys_bpf+0x1e5f/0x4e80 [ 347.938347][T10101] ? __pfx___sys_bpf+0x10/0x10 [ 347.938368][T10101] ? find_held_lock+0x2b/0x80 [ 347.938390][T10101] ? get_pid_task+0xfc/0x250 [ 347.938412][T10101] ? get_pid_task+0xfc/0x250 [ 347.938440][T10101] ? proc_fail_nth_write+0x9f/0x220 [ 347.938469][T10101] ? find_held_lock+0x2b/0x80 [ 347.938497][T10101] ? rcu_read_lock_any_held+0x6a/0xa0 [ 347.938521][T10101] ? find_held_lock+0x2b/0x80 [ 347.938542][T10101] ? ksys_write+0x190/0x250 [ 347.938559][T10101] ? ksys_write+0x190/0x250 [ 347.938594][T10101] ? fput+0x79/0x100 [ 347.938618][T10101] ? __ia32_sys_bpf+0xcc/0x170 [ 347.938636][T10101] __ia32_sys_bpf+0xcc/0x170 [ 347.938663][T10101] ? __do_fast_syscall_32+0x98/0x970 [ 347.938691][T10101] __do_fast_syscall_32+0xe7/0x970 [ 347.938714][T10101] ? lockdep_hardirqs_on+0x78/0x100 [ 347.938739][T10101] do_fast_syscall_32+0x32/0x70 [ 347.938764][T10101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.938787][T10101] RIP: 0023:0xf709efec [ 347.938808][T10101] Code: Unable to access opcode bytes at 0xf709efc2. [ 347.938816][T10101] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 347.938833][T10101] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 00000000800000c0 [ 347.938844][T10101] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.938854][T10101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.938863][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.938873][T10101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.938897][T10101] [ 348.006425][ T34] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 348.069254][T10103] binder_alloc: 10102: binder_alloc_buf, no vma [ 348.090342][ T41] usb usb44-port1: unable to enumerate USB device [ 348.270693][T10110] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.336906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 348.437269][ T7942] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 348.590004][ T7942] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 348.593592][ T7942] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.597965][ T7942] usb 9-1: config 0 has no interface number 0 [ 348.600699][ T7942] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 348.605086][ T7942] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 348.609673][ T7942] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 348.613454][ T7942] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.620784][ T7942] usb 9-1: config 0 descriptor?? [ 348.628005][T10105] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 348.639066][ T7942] ldusb 9-1:0.55: Interrupt in endpoint not found [ 349.298546][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.366332][ T5830] usb 7-1: USB disconnect, device number 32 [ 349.469343][ T5830] usblp0: removed [ 350.998352][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 350.998363][ T43] audit: type=1800 audit(1785667248.109:4502): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 351.158835][ T5830] usb 9-1: USB disconnect, device number 11 [ 351.381605][ T43] audit: type=1800 audit(1785667248.499:4503): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 351.435958][ T43] audit: type=1800 audit(1785667248.549:4504): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 351.492303][ T43] audit: type=1800 audit(1785667248.609:4505): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153170 res=0 errno=0 [ 351.499288][ T43] audit: type=1800 audit(1785667248.609:4506): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153185 res=0 errno=0 [ 351.512805][ T43] audit: type=1800 audit(1785667248.629:4507): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153200 res=0 errno=0 [ 351.523385][ T43] audit: type=1800 audit(1785667248.639:4508): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153215 res=0 errno=0 [ 351.913778][ T43] audit: type=1800 audit(1785667249.029:4509): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 351.932375][ T43] audit: type=1800 audit(1785667249.049:4510): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 351.969818][T10154] syzkaller0: entered promiscuous mode [ 351.972108][T10154] syzkaller0: entered allmulticast mode [ 352.013716][ T43] audit: type=1800 audit(1785667249.129:4511): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 352.107138][T10156] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 352.573633][T10169] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 352.630468][T10169] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 352.633273][T10169] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 352.637732][T10169] vhci_hcd vhci_hcd.0: Device attached [ 352.800746][T10169] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 352.906982][ T6237] usb 42-1: SetAddress Request (6) to port 0 [ 352.908966][ T6237] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 353.071983][T10165] syz.1.1161: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 353.080973][T10165] CPU: 2 UID: 0 PID: 10165 Comm: syz.1.1161 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.081001][T10165] Tainted: [L]=SOFTLOCKUP [ 353.081007][T10165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 353.081018][T10165] Call Trace: [ 353.081025][T10165] [ 353.081032][T10165] dump_stack_lvl+0x100/0x190 [ 353.081060][T10165] warn_alloc.cold+0x94/0xa8 [ 353.081081][T10165] ? __pfx_warn_alloc+0x10/0x10 [ 353.081103][T10165] ? find_held_lock+0x2b/0x80 [ 353.081126][T10165] ? psi_memstall_leave+0x19c/0x360 [ 353.081155][T10165] ? psi_memstall_leave+0x1e6/0x360 [ 353.081182][T10165] ? psi_memstall_leave+0x1eb/0x360 [ 353.081206][T10165] ? lockdep_hardirqs_on+0x78/0x100 [ 353.081242][T10165] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 353.081269][T10165] ? find_held_lock+0x2b/0x80 [ 353.081296][T10165] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 353.081318][T10165] ? lockdep_hardirqs_on+0x78/0x100 [ 353.081342][T10165] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 353.081365][T10165] ? rcu_is_watching+0x12/0xc0 [ 353.081388][T10165] ? trace_sched_exit_tp+0x120/0x160 [ 353.081412][T10165] ? __schedule+0x126e/0x6730 [ 353.081432][T10165] ? lockdep_hardirqs_on+0x78/0x100 [ 353.081470][T10165] ? __pfx___schedule+0x10/0x10 [ 353.081489][T10165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.081518][T10165] ? policy_nodemask+0xed/0x4f0 [ 353.081546][T10165] alloc_pages_mpol+0x1fb/0x540 [ 353.081574][T10165] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 353.081607][T10165] alloc_pages_noprof+0x1a/0x160 [ 353.081625][T10165] kimage_alloc_pages+0x72/0x380 [ 353.081654][T10165] kimage_alloc_control_pages+0x157/0xa20 [ 353.081686][T10165] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 353.081722][T10165] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 353.081756][T10165] do_kexec_load+0x275/0x810 [ 353.081785][T10165] ? __pfx_do_kexec_load+0x10/0x10 [ 353.081821][T10165] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 353.081852][T10165] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 353.081881][T10165] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 353.081911][T10165] ? syscall_user_dispatch+0x76/0x130 [ 353.081935][T10165] __do_fast_syscall_32+0xe7/0x970 [ 353.081965][T10165] do_fast_syscall_32+0x32/0x70 [ 353.081990][T10165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.082013][T10165] RIP: 0023:0xf6feefec [ 353.082035][T10165] Code: Unable to access opcode bytes at 0xf6feefc2. [ 353.082043][T10165] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000011b [ 353.082061][T10165] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 353.082072][T10165] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 353.082082][T10165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.082091][T10165] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 353.082101][T10165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.082124][T10165] [ 353.082304][T10165] Mem-Info: [ 353.208495][T10165] active_anon:3806 inactive_anon:3305 isolated_anon:0 [ 353.208495][T10165] active_file:908 inactive_file:18841 isolated_file:0 [ 353.208495][T10165] unevictable:768 dirty:359 writeback:0 [ 353.208495][T10165] slab_reclaimable:6870 slab_unreclaimable:58641 [ 353.208495][T10165] mapped:26580 shmem:3715 pagetables:1362 [ 353.208495][T10165] sec_pagetables:301 bounce:0 [ 353.208495][T10165] kernel_misc_reclaimable:0 [ 353.208495][T10165] free:27427 free_pcp:890 free_cma:0 [ 353.230112][T10165] Node 0 active_anon:240kB inactive_anon:448kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:4kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8768kB pagetables:1488kB sec_pagetables:1092kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 353.244530][T10165] Node 1 active_anon:14984kB inactive_anon:12772kB active_file:3560kB inactive_file:74964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106232kB dirty:1432kB writeback:0kB shmem:13320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5480kB pagetables:3960kB sec_pagetables:112kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 353.258669][T10165] Node 0 DMA free:2640kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.271448][T10165] lowmem_reserve[]: 0 280 280 280 280 [ 353.274293][T10165] Node 0 DMA32 free:19112kB boost:8192kB min:20964kB low:24156kB high:27348kB reserved_highatomic:0KB free_highatomic:0KB active_anon:240kB inactive_anon:448kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:2184kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:1992kB local_pcp:0kB free_cma:0kB [ 353.288164][T10165] lowmem_reserve[]: 0 0 0 0 0 [ 353.290381][T10165] Node 1 DMA32 free:93680kB boost:24576kB min:71720kB low:83504kB high:95288kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15036kB inactive_anon:12772kB active_file:3560kB inactive_file:72532kB unevictable:1536kB writepending:1432kB zspages:2040kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1108kB local_pcp:0kB free_cma:0kB [ 353.305143][T10165] lowmem_reserve[]: 0 0 0 0 0 [ 353.307903][T10165] Node 0 DMA: 86*4kB (U) 15*8kB (U) 2*16kB (U) 15*32kB (U) 4*64kB (U) 1*128kB (U) 1*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2640kB [ 353.315284][T10165] Node 0 DMA32: 6*4kB (E) 53*8kB (UME) 14*16kB (UE) 100*32kB (UE) 53*64kB (UME) 18*128kB (UME) 11*256kB (UE) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 0*4096kB = 19040kB [ 353.324254][T10165] Node 1 DMA32: 858*4kB (UME) 893*8kB (UME) 614*16kB (UME) 425*32kB (UME) 274*64kB (UME) 136*128kB (UME) 64*256kB (UME) 12*512kB (UM) 2*1024kB (M) 1*2048kB (U) 0*4096kB = 95568kB [ 353.332159][T10165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.336146][T10165] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 353.341052][T10165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.345183][T10165] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 353.349570][T10165] 23605 total pagecache pages [ 353.351713][T10165] 1480 pages in swap cache [ 353.354026][T10165] Free swap = 104516kB [ 353.355780][T10165] Total swap = 124996kB [ 353.358978][T10165] 524155 pages RAM [ 353.360831][T10165] 0 pages HighMem/MovableOnly [ 353.363117][T10165] 211540 pages reserved [ 353.365256][T10165] 0 pages cma reserved [ 353.749059][T10170] vhci_hcd: connection reset by peer [ 353.763466][ T5793] vhci_hcd vhci_hcd.2: stop threads [ 353.765782][ T5793] vhci_hcd vhci_hcd.2: release socket [ 353.770648][ T5793] vhci_hcd vhci_hcd.2: disconnect device [ 353.827010][ T5830] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 353.976601][T10165] kexec: Could not allocate control_code_buffer [ 353.998767][ T5830] usb 9-1: config 0 has an invalid interface number: 205 but max is 0 [ 354.002373][ T5830] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.008244][ T5830] usb 9-1: config 0 has no interface number 0 [ 354.013113][ T5830] usb 9-1: config 0 interface 205 has no altsetting 0 [ 354.035776][ T5830] usb 9-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 354.040936][ T5830] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.044339][ T5830] usb 9-1: Product: syz [ 354.046097][ T5830] usb 9-1: Manufacturer: syz [ 354.048147][ T5830] usb 9-1: SerialNumber: syz [ 354.057082][ T5830] usb 9-1: config 0 descriptor?? [ 354.072545][ T5830] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 354.077797][ T5830] dvb-usb: bulk message failed: -22 (3/0) [ 354.110847][ T5830] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 354.115946][ T5830] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 354.121496][ T5830] usb 9-1: media controller created [ 354.126183][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.175691][ T5830] dvb-usb: bulk message failed: -22 (6/0) [ 354.182924][ T5830] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 354.194562][ T5830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input10 [ 354.211926][ T5830] dvb-usb: schedule remote query interval to 150 msecs. [ 354.215708][ T5830] dvb-usb: bulk message failed: -22 (3/0) [ 354.236965][ T5830] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 354.370896][ T5830] dvb-usb: bulk message failed: -22 (1/0) [ 354.672765][T10185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.564354][ T5830] dvb-usb: error while querying for an remote control event. [ 355.624492][T10189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.697948][T10189] bond1: (slave bond0): Enslaving as an active interface with an up link [ 356.089008][ T43] kauditd_printk_skb: 48 callbacks suppressed [ 356.089021][ T43] audit: type=1800 audit(1785667253.209:4560): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 356.188709][ T43] audit: type=1800 audit(1785667253.309:4561): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 356.218680][ T1042] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 356.369012][ T1042] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 356.372605][ T1042] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.376523][ T43] audit: type=1800 audit(1785667253.489:4562): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 356.378236][ T1042] usb 8-1: config 0 has no interface number 0 [ 356.386191][ T1042] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.390695][ T1042] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 356.394820][ T1042] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 356.399102][ T1042] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.422400][ T1042] usb 8-1: config 0 descriptor?? [ 356.424879][T10202] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 356.429363][ T1042] ldusb 8-1:0.55: Interrupt in endpoint not found [ 356.563706][ T43] audit: type=1800 audit(1785667253.679:4563): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 356.570056][ T43] audit: type=1800 audit(1785667253.679:4564): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154626 res=0 errno=0 [ 356.576470][ T43] audit: type=1800 audit(1785667253.689:4565): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=154655 res=0 errno=0 [ 356.583427][ T43] audit: type=1800 audit(1785667253.689:4566): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=154633 res=0 errno=0 [ 356.589979][ T43] audit: type=1800 audit(1785667253.689:4567): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=154634 res=0 errno=0 [ 356.596568][ T43] audit: type=1800 audit(1785667253.689:4568): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=154635 res=0 errno=0 [ 356.604520][ T43] audit: type=1800 audit(1785667253.699:4569): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154675 res=0 errno=0 [ 356.607975][ T34] usb 9-1: USB disconnect, device number 12 [ 356.644356][ T34] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 357.037787][ T34] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 357.167036][ T41] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 357.191245][ T34] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 357.194934][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.198135][ T34] usb 9-1: Product: syz [ 357.199802][ T34] usb 9-1: Manufacturer: syz [ 357.201574][ T34] usb 9-1: SerialNumber: syz [ 357.935096][ T41] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 358.027743][ T6237] usb 42-1: device descriptor read/8, error -110 [ 358.136151][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.141716][ T41] usb 7-1: config 0 has no interface number 0 [ 358.145427][ T41] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 358.150659][ T41] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 358.155355][ T41] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 358.159499][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.187243][ T41] usb 7-1: config 0 descriptor?? [ 358.190968][T10221] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 358.199334][ T41] ldusb 7-1:0.55: Interrupt in endpoint not found [ 358.206061][ T34] rtl8150 9-1:1.0: couldn't reset the device [ 358.212096][ T34] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 358.220008][ T34] usb 9-1: USB disconnect, device number 13 [ 358.410362][T10230] dlm: no locking on control device [ 358.427744][ T6237] usb usb42-port1: attempt power cycle [ 358.441157][T10234] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 358.461529][T10234] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 358.463650][T10234] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 358.467116][T10234] vhci_hcd vhci_hcd.0: Device attached [ 358.499812][T10234] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 358.695181][T10238] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1179'. [ 358.747125][ T1042] usb 40-1: SetAddress Request (14) to port 0 [ 358.750834][ T1042] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 358.848739][ T7941] usb 8-1: USB disconnect, device number 28 [ 358.900027][T10247] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.907464][T10247] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.027632][ T6237] usb usb42-port1: unable to enumerate USB device [ 359.035793][T10247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.041819][T10247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.074976][T10235] vhci_hcd: connection reset by peer [ 359.078327][ T5793] vhci_hcd vhci_hcd.1: stop threads [ 359.080499][ T5793] vhci_hcd vhci_hcd.1: release socket [ 359.082675][ T5793] vhci_hcd vhci_hcd.1: disconnect device [ 359.187119][ T5793] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.191610][ T5793] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.200221][ T5793] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.203275][ T5793] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.702361][T10265] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1188'. [ 359.710506][T10265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.853674][ T34] usb 7-1: USB disconnect, device number 33 [ 359.876986][ T6237] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 360.027891][ T6237] usb 8-1: Invalid ep0 maxpacket: 64 [ 360.158680][ T6237] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 360.307047][ T6237] usb 8-1: Invalid ep0 maxpacket: 64 [ 360.309831][ T6237] usb usb8-port1: attempt power cycle [ 360.647268][ T6237] usb 8-1: new low-speed USB device number 31 using dummy_hcd [ 360.667829][ T6237] usb 8-1: Invalid ep0 maxpacket: 64 [ 360.797033][ T6237] usb 8-1: new low-speed USB device number 32 using dummy_hcd [ 360.817761][ T6237] usb 8-1: Invalid ep0 maxpacket: 64 [ 360.820742][ T6237] usb usb8-port1: unable to enumerate USB device [ 360.894308][T10282] 9p: Bad value for 'rfdno' [ 361.257835][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 361.257871][ T43] audit: type=1800 audit(1785667258.349:4608): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 361.292915][ T43] audit: type=1800 audit(1785667258.349:4609): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155253 res=0 errno=0 [ 361.594577][T10299] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 361.768625][ T43] audit: type=1800 audit(1785667258.889:4610): pid=10300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1196" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 361.778280][T10300] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 361.781043][T10300] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 361.797530][T10300] vhci_hcd vhci_hcd.0: Device attached [ 361.822202][ T43] audit: type=1800 audit(1785667258.939:4611): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 361.840436][T10304] syzkaller0: entered promiscuous mode [ 361.842921][T10304] syzkaller0: entered allmulticast mode [ 362.101173][ T43] audit: type=1800 audit(1785667259.219:4612): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 362.174839][T10301] vhci_hcd: connection closed [ 362.175121][ T5793] vhci_hcd vhci_hcd.1: stop threads [ 362.187038][ T5793] vhci_hcd vhci_hcd.1: release socket [ 362.191172][ T5793] vhci_hcd vhci_hcd.1: disconnect device [ 362.602144][ T43] audit: type=1800 audit(1785667259.719:4613): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 362.800726][ T43] audit: type=1800 audit(1785667259.909:4614): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 362.941686][ T43] audit: type=1800 audit(1785667260.059:4615): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 363.108852][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'. [ 363.129118][T10320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1204'. [ 363.206119][ T43] audit: type=1800 audit(1785667260.099:4616): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 363.280601][T10325] FAULT_INJECTION: forcing a failure. [ 363.280601][T10325] name failslab, interval 1, probability 0, space 0, times 0 [ 363.286084][T10325] CPU: 1 UID: 0 PID: 10325 Comm: syz.3.1205 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.286116][T10325] Tainted: [L]=SOFTLOCKUP [ 363.286121][T10325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.286131][T10325] Call Trace: [ 363.286137][T10325] [ 363.286143][T10325] dump_stack_lvl+0x100/0x190 [ 363.286168][T10325] should_fail_ex.cold+0x5/0xa [ 363.286187][T10325] should_failslab+0xc2/0x120 [ 363.286209][T10325] __kmalloc_noprof+0xfc/0x820 [ 363.286228][T10325] ? rcu_is_watching+0x12/0xc0 [ 363.286247][T10325] ? tomoyo_realpath_from_path+0xb6/0x690 [ 363.286276][T10325] tomoyo_realpath_from_path+0xb6/0x690 [ 363.286304][T10325] tomoyo_path_number_perm+0x23c/0x580 [ 363.286324][T10325] ? tomoyo_path_number_perm+0x22e/0x580 [ 363.286345][T10325] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 363.286364][T10325] ? find_held_lock+0x2b/0x80 [ 363.286384][T10325] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 363.286422][T10325] ? find_held_lock+0x2b/0x80 [ 363.286440][T10325] ? __fget_files+0x215/0x3d0 [ 363.286455][T10325] ? hook_file_ioctl_common+0x140/0x440 [ 363.286475][T10325] ? __fget_files+0x215/0x3d0 [ 363.286493][T10325] ? __fget_files+0x21f/0x3d0 [ 363.286511][T10325] security_file_ioctl_compat+0xd3/0x230 [ 363.286548][T10325] __ia32_compat_sys_ioctl+0xc2/0x360 [ 363.286575][T10325] __do_fast_syscall_32+0xe7/0x970 [ 363.286597][T10325] ? lockdep_hardirqs_on+0x78/0x100 [ 363.286619][T10325] do_fast_syscall_32+0x32/0x70 [ 363.286640][T10325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.286660][T10325] RIP: 0023:0xf7f83fec [ 363.286680][T10325] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 363.286687][T10325] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 363.286704][T10325] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000c008640a [ 363.286713][T10325] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.286723][T10325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.286732][T10325] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 363.286741][T10325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.286762][T10325] [ 363.358382][T10325] ERROR: Out of memory at tomoyo_realpath_from_path. [ 363.778564][ T1042] usb 40-1: device descriptor read/8, error -110 [ 364.191415][ T1042] usb usb40-port1: attempt power cycle [ 364.616908][ T43] audit: type=1800 audit(1785667260.199:4617): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 364.788091][ T1042] usb usb40-port1: unable to enumerate USB device [ 365.047356][T10339] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 365.051377][T10340] can: request_module (can-proto-4) failed. [ 365.102898][T10343] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 365.105733][T10343] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 365.131333][T10343] vhci_hcd vhci_hcd.0: Device attached [ 365.146318][T10339] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 365.149055][T10339] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 365.185750][T10339] vhci_hcd vhci_hcd.0: Device attached [ 365.399888][T10343] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 365.427697][ T1042] usb 42-1: SetAddress Request (10) to port 0 [ 365.429909][ T1042] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 365.477713][ T50] usb 44-1: SetAddress Request (6) to port 0 [ 365.479718][ T50] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 365.925920][T10349] vhci_hcd: connection reset by peer [ 365.936410][ T5793] vhci_hcd vhci_hcd.3: stop threads [ 365.940160][ T5793] vhci_hcd vhci_hcd.3: release socket [ 365.949838][ T5793] vhci_hcd vhci_hcd.3: disconnect device [ 366.278602][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 366.278661][ T43] audit: type=1800 audit(1785667263.399:4629): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 366.591143][T10346] vhci_hcd: connection reset by peer [ 366.594664][ T5793] vhci_hcd vhci_hcd.2: stop threads [ 366.601343][ T5793] vhci_hcd vhci_hcd.2: release socket [ 366.603815][ T5793] vhci_hcd vhci_hcd.2: disconnect device [ 366.663066][ T43] audit: type=1800 audit(1785667263.779:4630): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 366.685380][T10369] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 366.697314][T10369] nfs4: Unknown parameter '\:' [ 366.786529][ T43] audit: type=1800 audit(1785667263.899:4631): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 367.027660][ T43] audit: type=1800 audit(1785667263.909:4632): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155459 res=0 errno=0 [ 367.033957][ T43] audit: type=1800 audit(1785667264.139:4633): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 367.069864][ T43] audit: type=1800 audit(1785667264.189:4634): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 367.194158][T10377] 9pnet_virtio: no channels available for device syz [ 367.386662][ T43] audit: type=1800 audit(1785667264.489:4635): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 367.701677][ T5830] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 367.852939][ T43] audit: type=1800 audit(1785667264.969:4636): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 368.384885][ T5830] usb 9-1: Using ep0 maxpacket: 32 [ 368.622110][ T5830] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 368.624729][ T5830] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 368.627550][ T5830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 368.637052][ T5830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 368.647083][ T5830] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 368.652446][ T5830] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 368.658849][ T5830] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 368.667018][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.679332][ T43] audit: type=1800 audit(1785667265.799:4637): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155563 res=0 errno=0 [ 368.679803][ T5830] usb 9-1: config 0 descriptor?? [ 368.699351][ T43] audit: type=1800 audit(1785667265.809:4638): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=155592 res=0 errno=0 [ 369.206432][T10396] comedi comedi2: pcl818: I/O base address not correctly aligned [ 369.449884][T10375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.454104][T10375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.466907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 370.235091][T10405] netlink: 'syz.2.1226': attribute type 2 has an invalid length. [ 370.330798][ T5830] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 370.356523][ T5830] usb 9-1: USB disconnect, device number 14 [ 370.366903][ T5830] usblp0: removed [ 370.498350][ T1042] usb 42-1: device descriptor read/8, error -110 [ 370.577025][ T50] usb 44-1: device descriptor read/8, error -110 [ 370.887864][ T1042] usb usb42-port1: attempt power cycle [ 370.977944][ T50] usb usb44-port1: attempt power cycle [ 371.157011][ T6237] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 371.306994][ T5855] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 371.311154][ T6237] usb 7-1: Using ep0 maxpacket: 32 [ 371.317006][ T7941] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 371.322386][ T6237] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 371.325527][ T6237] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 371.331498][ T6237] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 371.339983][ T6237] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.343898][ T6237] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 371.352584][ T6237] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 371.363224][ T6237] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 371.368415][ T6237] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.377233][ T6237] usb 7-1: config 0 descriptor?? [ 371.377861][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 371.377873][ T43] audit: type=1800 audit(1785667268.499:4661): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155819 res=0 errno=0 [ 371.389513][ T43] audit: type=1800 audit(1785667268.499:4662): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=155848 res=0 errno=0 [ 371.397443][ T43] audit: type=1800 audit(1785667268.499:4663): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=155826 res=0 errno=0 [ 371.405278][ T43] audit: type=1800 audit(1785667268.499:4664): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=155827 res=0 errno=0 [ 371.413284][ T43] audit: type=1800 audit(1785667268.519:4665): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=155828 res=0 errno=0 [ 371.420909][ T43] audit: type=1800 audit(1785667268.529:4666): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155868 res=0 errno=0 [ 371.458035][ T1042] usb usb42-port1: unable to enumerate USB device [ 371.478631][ T5855] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 371.483130][ T5855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.489897][ T5855] usb 6-1: config 0 has no interface number 0 [ 371.492671][ T5855] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 371.498810][ T5855] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 371.499412][ T7941] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 371.504855][ T5855] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 371.504909][ T7941] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.510140][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.510842][ T7941] usb 9-1: config 0 has no interface number 0 [ 371.510869][ T7941] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 371.519029][ T7941] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 371.520830][ T5855] usb 6-1: config 0 descriptor?? [ 371.523721][ T43] audit: type=1800 audit(1785667268.639:4667): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155884 res=0 errno=0 [ 371.524458][ T7941] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 371.532090][T10423] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 371.538273][ T43] audit: type=1800 audit(1785667268.649:4668): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=155913 res=0 errno=0 [ 371.538535][ T7941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.539798][ T5855] ldusb 6-1:0.55: Interrupt in endpoint not found [ 371.546487][ T7941] usb 9-1: config 0 descriptor?? [ 371.552230][ T43] audit: type=1800 audit(1785667268.659:4669): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=155891 res=0 errno=0 [ 371.554854][ T50] usb usb44-port1: unable to enumerate USB device [ 371.561254][ T43] audit: type=1800 audit(1785667268.659:4670): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=155892 res=0 errno=0 [ 371.561597][T10425] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 371.563433][ T7941] ldusb 9-1:0.55: Interrupt in endpoint not found [ 371.589778][ T6237] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 371.852482][T10429] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.499295][T10439] binder: BINDER_SET_CONTEXT_MGR already set [ 372.501222][T10439] binder: 10438:10439 ioctl 4018620d 80004a80 returned -16 [ 372.555184][T10441] usbip-vudc usbip-vudc.0: gadget not bound [ 372.896964][ C2] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.913844][ T41] usb 7-1: USB disconnect, device number 34 [ 372.925837][ T41] usblp0: removed [ 373.579129][T10449] binder: BINDER_SET_CONTEXT_MGR already set [ 373.584575][T10449] binder: 10448:10449 ioctl 4018620d 80004a80 returned -16 [ 374.032335][ T5830] usb 9-1: USB disconnect, device number 15 [ 374.032701][ T5821] usb 6-1: USB disconnect, device number 31 [ 375.063963][T10467] syzkaller0: entered promiscuous mode [ 375.066281][T10467] syzkaller0: entered allmulticast mode [ 376.642431][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 376.642442][ T43] audit: type=1800 audit(1785667273.759:4697): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 376.685705][ T43] audit: type=1800 audit(1785667273.799:4698): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 378.178500][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.181539][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.971600][ T43] audit: type=1800 audit(1785667276.089:4699): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 379.008040][ T43] audit: type=1800 audit(1785667276.129:4700): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 379.042643][ T43] audit: type=1800 audit(1785667276.159:4701): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 379.066285][ T43] audit: type=1800 audit(1785667276.179:4702): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 380.017787][ T43] audit: type=1800 audit(1785667277.129:4703): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 380.023301][ T43] audit: type=1800 audit(1785667277.139:4704): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 380.102154][ T43] audit: type=1800 audit(1785667277.219:4705): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 380.148119][ T43] audit: type=1800 audit(1785667277.269:4706): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 380.193687][T10535] syzkaller0: entered promiscuous mode [ 380.195972][T10535] syzkaller0: entered allmulticast mode [ 380.296982][ T4052] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 380.450906][ T4052] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 380.454889][ T4052] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.460983][ T4052] usb 9-1: Product: syz [ 380.462345][ T4052] usb 9-1: Manufacturer: syz [ 380.465087][ T4052] usb 9-1: SerialNumber: syz [ 380.863472][ T4052] rtl8150 9-1:1.0: couldn't reset the device [ 380.865543][ T4052] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 380.888876][ T4052] usb 9-1: USB disconnect, device number 16 [ 381.342649][T10540] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 381.345011][T10540] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 381.356445][T10540] vhci_hcd vhci_hcd.0: Device attached [ 381.406668][T10542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 381.410056][T10540] FAULT_INJECTION: forcing a failure. [ 381.410056][T10540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.413983][T10540] CPU: 1 UID: 0 PID: 10540 Comm: syz.2.1261 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.414013][T10540] Tainted: [L]=SOFTLOCKUP [ 381.414017][T10540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.414024][T10540] Call Trace: [ 381.414029][T10540] [ 381.414034][T10540] dump_stack_lvl+0x100/0x190 [ 381.414053][T10540] should_fail_ex.cold+0x5/0xa [ 381.414066][T10540] _copy_from_user+0x2e/0xd0 [ 381.414085][T10540] memdup_user+0x6b/0xe0 [ 381.414110][T10540] strndup_user+0x78/0xe0 [ 381.414124][T10540] __ia32_sys_mount+0x136/0x310 [ 381.414139][T10540] ? __pfx___ia32_sys_mount+0x10/0x10 [ 381.414152][T10540] ? exit_to_user_mode_loop+0x166/0x6f0 [ 381.414164][T10540] ? rcu_is_watching+0x12/0xc0 [ 381.414180][T10540] __do_fast_syscall_32+0xe7/0x970 [ 381.414196][T10540] ? lockdep_hardirqs_on+0x78/0x100 [ 381.414212][T10540] do_fast_syscall_32+0x32/0x70 [ 381.414227][T10540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.414242][T10540] RIP: 0023:0xf7fa7fec [ 381.414256][T10540] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 381.414261][T10540] RSP: 002b:00000000f542450c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 381.414272][T10540] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000080001400 [ 381.414279][T10540] RDX: 0000000080001440 RSI: 0000000001008840 RDI: 0000000080000840 [ 381.414285][T10540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.414292][T10540] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 381.414298][T10540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.414312][T10540] [ 381.651079][T10547] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 381.686978][ T6237] usb 42-1: SetAddress Request (14) to port 0 [ 381.688846][ T6237] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 381.755752][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 381.755765][ T43] audit: type=1800 audit(1785667278.869:4723): pid=10555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1262" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 381.764777][T10555] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 381.767706][T10555] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 381.770871][T10555] vhci_hcd vhci_hcd.0: Device attached [ 381.777788][ T43] audit: type=1800 audit(1785667278.899:4724): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 381.796613][ T43] audit: type=1800 audit(1785667278.909:4725): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157392 res=0 errno=0 [ 381.797177][ T4052] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 381.799586][ T43] audit: type=1800 audit(1785667278.919:4726): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157404 res=0 errno=0 [ 381.817807][ T43] audit: type=1800 audit(1785667278.919:4727): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157416 res=0 errno=0 [ 381.915580][T10543] vhci_hcd: connection reset by peer [ 381.918545][ T5793] vhci_hcd vhci_hcd.2: stop threads [ 381.920294][ T5793] vhci_hcd vhci_hcd.2: release socket [ 381.922175][ T5793] vhci_hcd vhci_hcd.2: disconnect device [ 381.950655][ T4052] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 381.953795][ T4052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.956366][ T4052] usb 6-1: Product: syz [ 381.958634][ T4052] usb 6-1: Manufacturer: syz [ 381.960186][ T4052] usb 6-1: SerialNumber: syz [ 381.966726][ T43] audit: type=1800 audit(1785667279.079:4728): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157428 res=0 errno=0 [ 381.975861][ T43] audit: type=1800 audit(1785667279.079:4729): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=157460 res=0 errno=0 [ 381.982427][ T43] audit: type=1800 audit(1785667279.079:4730): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=157435 res=0 errno=0 [ 381.989232][ T43] audit: type=1800 audit(1785667279.079:4731): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=157436 res=0 errno=0 [ 382.117184][ T50] usb 44-1: SetAddress Request (10) to port 0 [ 382.119887][ T50] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 382.188391][ T43] audit: type=1800 audit(1785667279.299:4732): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157496 res=0 errno=0 [ 382.347343][ T4052] rtl8150 6-1:1.0: couldn't reset the device [ 382.349463][ T4052] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 382.355635][ T4052] usb 6-1: USB disconnect, device number 32 [ 382.905893][T10556] vhci_hcd: connection reset by peer [ 382.908690][ T5793] vhci_hcd vhci_hcd.3: stop threads [ 382.917043][ T5793] vhci_hcd vhci_hcd.3: release socket [ 382.919441][ T5793] vhci_hcd vhci_hcd.3: disconnect device [ 382.949923][T10566] netlink: 'syz.4.1268': attribute type 1 has an invalid length. [ 383.026548][T10566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.087615][T10566] bond1: (slave dummy0): making interface the new active one [ 383.091850][T10566] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 383.107956][T10566] netlink: 'syz.4.1268': attribute type 10 has an invalid length. [ 383.111338][T10566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1268'. [ 383.114717][T10566] dummy0: entered promiscuous mode [ 383.140523][T10566] bond1: (slave dummy0): Releasing active interface [ 384.621918][T10600] binder: BINDER_SET_CONTEXT_MGR already set [ 384.634321][T10600] binder: 10596:10600 ioctl 4018620d 80004a80 returned -16 [ 384.677375][ T7941] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 384.970015][ T7941] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 384.977184][ T7941] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.986226][ T7941] usb 9-1: config 0 has no interface number 0 [ 384.992614][ T7941] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 385.003958][ T7941] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 385.015124][ T7941] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 385.024169][ T7941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.062369][ T7941] usb 9-1: config 0 descriptor?? [ 385.106997][T10586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 385.163968][ T7941] ldusb 9-1:0.55: Interrupt in endpoint not found [ 386.373594][T10626] FAULT_INJECTION: forcing a failure. [ 386.373594][T10626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.377883][T10626] CPU: 2 UID: 0 PID: 10626 Comm: syz.1.1288 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.377902][T10626] Tainted: [L]=SOFTLOCKUP [ 386.377906][T10626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.377912][T10626] Call Trace: [ 386.377916][T10626] [ 386.377921][T10626] dump_stack_lvl+0x100/0x190 [ 386.377953][T10626] should_fail_ex.cold+0x5/0xa [ 386.377971][T10626] _copy_from_iter+0x1f4/0x1690 [ 386.377992][T10626] ? _copy_from_iter+0x270/0x1690 [ 386.378009][T10626] ? __pfx__copy_from_iter+0x10/0x10 [ 386.378028][T10626] ? __pfx__copy_from_iter+0x10/0x10 [ 386.378048][T10626] copy_page_from_iter+0x238/0x300 [ 386.378068][T10626] skb_copy_datagram_from_iter+0x399/0x720 [ 386.378087][T10626] tun_get_user+0x1889/0x3c20 [ 386.378108][T10626] ? __pfx_tun_get_user+0x10/0x10 [ 386.378122][T10626] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 386.378140][T10626] ? find_held_lock+0x2b/0x80 [ 386.378155][T10626] ? tun_get+0x191/0x370 [ 386.378166][T10626] ? tun_get+0x191/0x370 [ 386.378180][T10626] tun_chr_write_iter+0xdc/0x200 [ 386.378208][T10626] vfs_write+0x6ac/0x1050 [ 386.378220][T10626] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 386.378235][T10626] ? __pfx_vfs_write+0x10/0x10 [ 386.378244][T10626] ? find_held_lock+0x2b/0x80 [ 386.378266][T10626] ksys_write+0x12a/0x250 [ 386.378276][T10626] ? __pfx_ksys_write+0x10/0x10 [ 386.378290][T10626] do_int80_emulation+0x14b/0x720 [ 386.378309][T10626] asm_int80_emulation+0x1a/0x20 [ 386.378321][T10626] RIP: 0023:0xf71273eb [ 386.378330][T10626] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 386.378341][T10626] RSP: 002b:00000000f53dd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 386.378353][T10626] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000180 [ 386.378360][T10626] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 386.378366][T10626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.378373][T10626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.378379][T10626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.378392][T10626] [ 386.383369][T10627] loop5: detected capacity change from 0 to 7 [ 386.476816][T10627] Dev loop5: unable to read RDB block 7 [ 386.479038][T10627] loop5: unable to read partition table [ 386.479206][T10627] loop5: partition table beyond EOD, truncated [ 386.479303][T10627] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 386.737528][ T6237] usb 42-1: device descriptor read/8, error -110 [ 386.775456][T10641] random: crng reseeded on system resumption [ 387.143424][T10643] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 387.181269][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 387.181287][ T43] audit: type=1800 audit(1785667284.299:4771): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 387.204436][ T6237] usb usb42-port1: attempt power cycle [ 387.213671][T10643] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 387.215906][T10643] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 387.219494][ T50] usb 44-1: device descriptor read/8, error -110 [ 387.222517][ T43] audit: type=1800 audit(1785667284.329:4772): pid=10643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1290" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 387.231361][T10643] vhci_hcd vhci_hcd.0: Device attached [ 387.256333][ T34] usb 9-1: USB disconnect, device number 17 [ 387.347027][ T6237] usb 42-1: SetAddress Request (16) to port 0 [ 387.349758][ T6237] usb 42-1: new SuperSpeed USB device number 16 using vhci_hcd [ 387.362546][ T43] audit: type=1800 audit(1785667284.469:4773): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 387.419578][ T43] audit: type=1800 audit(1785667284.529:4774): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 387.492396][ T43] audit: type=1804 audit(1785667284.609:4775): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1293" name="/newroot/358/file1" dev="tmpfs" ino=2128 res=1 errno=0 [ 387.508571][ T43] audit: type=1800 audit(1785667284.619:4776): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1293" name="file1" dev="tmpfs" ino=2129 res=0 errno=0 [ 387.618151][ T50] usb usb44-port1: attempt power cycle [ 387.722917][ T43] audit: type=1800 audit(1785667284.839:4777): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 387.769837][ T43] audit: type=1800 audit(1785667284.879:4778): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 388.008699][T10646] vhci_hcd: connection reset by peer [ 388.418170][ T43] audit: type=1800 audit(1785667285.459:4779): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1296" name="alloc_sleep_millisecs" dev="sysfs" ino=1054 res=0 errno=0 [ 388.485237][T10582] vhci_hcd vhci_hcd.2: stop threads [ 388.486825][ T50] usb usb44-port1: unable to enumerate USB device [ 388.504561][T10582] vhci_hcd vhci_hcd.2: release socket [ 388.522899][T10582] vhci_hcd vhci_hcd.2: disconnect device [ 388.841919][ T43] audit: type=1800 audit(1785667285.929:4780): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 389.755604][T10683] tmpfs: Unknown parameter 'usrquotauencer' [ 390.088309][ T4052] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 390.247366][ T4052] usb 7-1: Using ep0 maxpacket: 8 [ 390.258543][ T4052] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.263337][ T4052] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.289478][ T4052] usb 7-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 390.294289][ T4052] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.311311][ T4052] usb 7-1: Product: syz [ 390.317571][ T4052] usb 7-1: Manufacturer: syz [ 390.320964][ T4052] usb 7-1: SerialNumber: syz [ 391.626991][ T5101] Bluetooth: hci3: command 0x040f tx timeout [ 392.052007][T10712] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 392.124375][T10712] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 392.127061][T10712] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 392.141371][T10712] vhci_hcd vhci_hcd.0: Device attached [ 392.328018][T10712] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 392.417675][ T50] usb 40-1: SetAddress Request (18) to port 0 [ 392.420413][ T6237] usb 42-1: device descriptor read/8, error -110 [ 392.423048][ T50] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 392.492655][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 392.492672][ T43] audit: type=1800 audit(1785667289.609:4799): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 392.601340][ T43] audit: type=1800 audit(1785667289.719:4800): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 392.623240][ T4052] gspca_main: ov519-2.14.0 probing 041e:4068 [ 392.631371][ T4052] ov519 7-1:1.0: reg_w 5a failed -71 [ 392.647369][ T43] audit: type=1800 audit(1785667289.769:4801): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 392.679616][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1311'. [ 392.692251][T10725] team0 (unregistering): Port device team_slave_0 removed [ 392.697950][T10725] team0 (unregistering): Port device team_slave_1 removed [ 392.703691][T10725] team0 (unregistering): Port device bond0 removed [ 392.756479][ T43] audit: type=1800 audit(1785667289.869:4802): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 392.763821][T10713] vhci_hcd: connection reset by peer [ 392.765808][T10582] vhci_hcd vhci_hcd.1: stop threads [ 392.767565][T10582] vhci_hcd vhci_hcd.1: release socket [ 392.772356][T10582] vhci_hcd vhci_hcd.1: disconnect device [ 392.829957][ T6237] usb usb42-port1: unable to enumerate USB device [ 393.165227][T10725] Invalid ELF header magic: != ELF [ 393.573749][ T43] audit: type=1800 audit(1785667290.689:4803): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 393.716943][ T43] audit: type=1800 audit(1785667290.789:4804): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 393.731071][ T43] audit: type=1800 audit(1785667290.849:4805): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 393.814480][ T43] audit: type=1800 audit(1785667290.929:4806): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 393.835476][T10740] ntfs3(nullb0): Primary boot signature is not NTFS. [ 393.839973][T10740] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 393.912342][ T43] audit: type=1800 audit(1785667291.029:4807): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 393.937073][ T34] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 394.036410][ T43] audit: type=1800 audit(1785667291.149:4808): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 394.104308][ T34] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 394.109895][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.115338][ T34] usb 8-1: Product: syz [ 394.121057][ T34] usb 8-1: Manufacturer: syz [ 394.124022][ T34] usb 8-1: SerialNumber: syz [ 394.183370][T10745] netlink: 'syz.1.1317': attribute type 1 has an invalid length. [ 394.189387][T10745] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1317'. [ 394.317839][T10749] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 394.320617][T10749] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 394.329329][T10749] vhci_hcd vhci_hcd.0: Device attached [ 394.471128][ T34] rtl8150 8-1:1.0: couldn't reset the device [ 394.474138][ T34] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 394.482263][ T34] usb 8-1: USB disconnect, device number 33 [ 394.617138][ T5893] usb 46-1: SetAddress Request (6) to port 0 [ 394.619802][ T5893] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 394.894957][T10751] vhci_hcd: connection reset by peer [ 394.898504][T10582] vhci_hcd vhci_hcd.4: stop threads [ 394.900630][T10582] vhci_hcd vhci_hcd.4: release socket [ 394.903696][T10582] vhci_hcd vhci_hcd.4: disconnect device [ 396.495186][T10780] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 396.512196][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 396.729609][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.736314][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.739600][T10780] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 396.739639][T10780] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 396.742296][T10780] vhci_hcd vhci_hcd.0: Device attached [ 396.815800][T10794] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 396.818111][T10794] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 396.825833][T10794] vhci_hcd vhci_hcd.0: Device attached [ 396.932651][T10780] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 397.363153][T10795] vhci_hcd: connection closed [ 397.365804][ T5820] vhci_hcd vhci_hcd.1: stop threads [ 397.373760][ T5820] vhci_hcd vhci_hcd.1: release socket [ 397.375653][ T5820] vhci_hcd vhci_hcd.1: disconnect device [ 397.441456][T10791] vhci_hcd: connection closed [ 397.441820][ T5820] vhci_hcd vhci_hcd.4: stop threads [ 397.447539][ T5820] vhci_hcd vhci_hcd.4: release socket [ 397.450370][ T5820] vhci_hcd vhci_hcd.4: disconnect device [ 397.457340][ T50] usb 40-1: device descriptor read/8, error -110 [ 397.535264][T10794] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 398.026952][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 398.026965][ T43] audit: type=1800 audit(1785667294.919:4838): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 398.359908][ T50] usb usb40-port1: attempt power cycle [ 398.430255][ T43] audit: type=1800 audit(1785667295.549:4839): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 398.462883][ T43] audit: type=1800 audit(1785667295.579:4840): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 398.756990][T10753] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 398.914085][T10753] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 398.917770][T10753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.920873][T10753] usb 6-1: Product: syz [ 398.922534][T10753] usb 6-1: Manufacturer: syz [ 398.924477][T10753] usb 6-1: SerialNumber: syz [ 398.934260][ T43] audit: type=1800 audit(1785667296.049:4841): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161556 res=0 errno=0 [ 398.947164][ T43] audit: type=1800 audit(1785667296.059:4842): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=161588 res=0 errno=0 [ 398.955096][ T43] audit: type=1800 audit(1785667296.059:4843): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=161563 res=0 errno=0 [ 398.963018][ T43] audit: type=1800 audit(1785667296.059:4844): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=161564 res=0 errno=0 [ 398.985672][ T50] usb usb40-port1: unable to enumerate USB device [ 399.145413][ T43] audit: type=1800 audit(1785667296.259:4845): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161624 res=0 errno=0 [ 399.338950][ T43] audit: type=1800 audit(1785667296.459:4846): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 399.381716][T10753] rtl8150 6-1:1.0: couldn't reset the device [ 399.385841][T10753] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 399.396985][ T43] audit: type=1800 audit(1785667296.509:4847): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=161585 res=0 errno=0 [ 399.400745][T10753] usb 6-1: USB disconnect, device number 33 [ 399.697217][ T5893] usb 46-1: device descriptor read/8, error -110 [ 400.103362][ T5893] usb usb46-port1: attempt power cycle [ 400.698840][ T5893] usb usb46-port1: unable to enumerate USB device [ 401.135126][T10841] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 401.460640][T10844] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 401.462881][T10844] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 401.468334][T10844] vhci_hcd vhci_hcd.0: Device attached [ 401.516977][ T4052] ov519 7-1:1.0: Can't determine sensor slave IDs [ 401.519896][ T4052] ov519 7-1:1.0: OV519 Config failed [ 401.522389][ T4052] ov519 7-1:1.0: probe with driver ov519 failed with error -22 [ 401.526753][ T4052] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 401.568537][T10844] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 401.590614][ T4052] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 401.598231][ T4052] usb 7-1: USB disconnect, device number 35 [ 401.623668][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.797005][ T5855] usb 42-1: SetAddress Request (18) to port 0 [ 401.802189][ T5855] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 402.210855][T10845] vhci_hcd: connection reset by peer [ 402.214202][ T5820] vhci_hcd vhci_hcd.2: stop threads [ 402.216565][ T5820] vhci_hcd vhci_hcd.2: release socket [ 402.218834][ T5820] vhci_hcd vhci_hcd.2: disconnect device [ 403.077111][T10753] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 403.271327][T10753] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 403.277252][T10753] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.283075][T10753] usb 8-1: Product: syz [ 403.284893][T10753] usb 8-1: Manufacturer: syz [ 403.295884][T10753] usb 8-1: SerialNumber: syz [ 403.388701][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 403.388738][ T43] audit: type=1800 audit(1785667300.509:4877): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162120 res=0 errno=0 [ 403.446704][ T43] audit: type=1800 audit(1785667300.539:4878): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=162152 res=0 errno=0 [ 403.495092][ T43] audit: type=1800 audit(1785667300.559:4879): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=162127 res=0 errno=0 [ 403.519250][ T43] audit: type=1800 audit(1785667300.599:4880): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=162128 res=0 errno=0 [ 403.651089][ T43] audit: type=1800 audit(1785667300.769:4881): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162188 res=0 errno=0 [ 403.848028][ T43] audit: type=1800 audit(1785667300.969:4882): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 403.873931][T10882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1354'. [ 403.923603][ T43] audit: type=1800 audit(1785667301.039:4883): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 403.962425][T10886] trusted_key: syz.1.1355 sent an empty control message without MSG_MORE. [ 403.976943][ T43] audit: type=1800 audit(1785667301.089:4884): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 404.019919][T10753] rtl8150 8-1:1.0: couldn't reset the device [ 404.022752][T10753] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 404.038141][T10753] usb 8-1: USB disconnect, device number 34 [ 404.041762][ T43] audit: type=1800 audit(1785667301.139:4885): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 404.058462][ T43] audit: type=1800 audit(1785667301.169:4886): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=162149 res=0 errno=0 [ 404.606983][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 404.790986][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 404.794462][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.797251][ T10] usb 6-1: Product: syz [ 404.798602][ T10] usb 6-1: Manufacturer: syz [ 404.800543][ T10] usb 6-1: SerialNumber: syz [ 405.039780][T10909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.044492][T10909] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.048701][T10909] dummy0: left promiscuous mode [ 405.058340][T10909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.092448][T10909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.100541][T10909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.127591][T10909] veth1_vlan: left promiscuous mode [ 405.130314][T10909] veth0_vlan: left promiscuous mode [ 405.133188][T10909] veth0_vlan: entered promiscuous mode [ 405.139390][T10909] veth1_vlan: entered promiscuous mode [ 405.147560][T10909] veth1_macvtap: left promiscuous mode [ 405.150320][T10909] veth0_macvtap: left promiscuous mode [ 405.154775][T10909] veth0_macvtap: entered promiscuous mode [ 405.158433][T10909] veth1_macvtap: entered promiscuous mode [ 405.170372][T10909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.173675][T10909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.176799][T10909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.180929][T10909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.223854][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.226226][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.231700][ T218] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.234555][ T218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.277576][ T5822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.289169][ T5822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.297109][ T5820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.301399][ T5820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.327135][T10919] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1365'. [ 405.787295][ T1042] libceph: connect (1)[c::]:6789 error -101 [ 405.800111][T10926] ceph: No mds server is up or the cluster is laggy [ 406.062752][ T1042] libceph: mon0 (1)[c::]:6789 connect error [ 406.069470][ T10] rtl8150 6-1:1.0: couldn't reset the device [ 406.071610][ T10] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 406.204784][ T4052] usb 6-1: USB disconnect, device number 34 [ 406.457036][ T5893] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 406.587044][ T5893] usb 8-1: device descriptor read/64, error -71 [ 406.597280][ T5821] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 406.750164][ T5821] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 406.753249][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.755797][ T5821] usb 7-1: Product: syz [ 406.757254][ T5821] usb 7-1: Manufacturer: syz [ 406.759304][ T5821] usb 7-1: SerialNumber: syz [ 406.827084][ T5893] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 406.957050][ T5893] usb 8-1: device descriptor read/64, error -71 [ 407.067927][ T5893] usb usb8-port1: attempt power cycle [ 407.299219][ T5855] usb 42-1: device descriptor read/8, error -110 [ 407.407449][ T5893] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 407.433019][ T5893] usb 8-1: device descriptor read/8, error -71 [ 407.677679][ T5893] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 407.707179][ T5893] usb 8-1: device descriptor read/8, error -71 [ 407.823000][ T5893] usb usb8-port1: unable to enumerate USB device [ 407.973095][ T5821] rtl8150 7-1:1.0: couldn't reset the device [ 407.975784][ T5821] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 407.985815][ T5821] usb 7-1: USB disconnect, device number 36 [ 408.026208][ T5855] usb usb42-port1: attempt power cycle [ 408.129920][T10951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1374'. [ 408.409310][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 408.409323][ T43] audit: type=1800 audit(1785667305.529:4920): pid=10957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1376" name="p_chmask" dev="configfs" ino=37495 res=0 errno=0 [ 408.493350][ T43] audit: type=1800 audit(1785667305.609:4921): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 408.627338][ T5855] usb usb42-port1: unable to enumerate USB device [ 409.189482][ T43] audit: type=1800 audit(1785667306.309:4922): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 409.233776][ T43] audit: type=1800 audit(1785667306.349:4923): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1378" name="unbind" dev="sysfs" ino=36610 res=0 errno=0 [ 409.244001][T10968] vhci_hcd vhci_hcd.0: remove, state 4 [ 409.246363][T10968] usb usb38: USB disconnect, device number 1 [ 409.286213][ T43] audit: type=1800 audit(1785667306.399:4924): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 409.297951][ T43] audit: type=1800 audit(1785667306.409:4925): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1378" name="bind" dev="sysfs" ino=36611 res=0 errno=0 [ 409.954018][ T43] audit: type=1800 audit(1785667307.069:4926): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 410.019093][T10979] syzkaller0: entered promiscuous mode [ 410.021683][T10979] syzkaller0: entered allmulticast mode [ 410.037225][T10582] vhci_hcd vhci_hcd.0: stop threads [ 410.039737][T10582] vhci_hcd vhci_hcd.0: release socket [ 410.042695][T10582] vhci_hcd vhci_hcd.0: disconnect device [ 410.046141][T10582] vhci_hcd vhci_hcd.0: stop threads [ 410.049433][T10582] vhci_hcd vhci_hcd.0: release socket [ 410.052444][T10582] vhci_hcd vhci_hcd.0: disconnect device [ 410.059797][T10582] vhci_hcd vhci_hcd.0: stop threads [ 410.061795][T10582] vhci_hcd vhci_hcd.0: release socket [ 410.065506][T10582] vhci_hcd vhci_hcd.0: disconnect device [ 410.071114][T10582] vhci_hcd vhci_hcd.0: stop threads [ 410.074681][T10582] vhci_hcd vhci_hcd.0: release socket [ 410.082099][T10582] vhci_hcd vhci_hcd.0: disconnect device [ 410.090254][T10582] vhci_hcd vhci_hcd.0: stop threads [ 410.096518][T10582] vhci_hcd vhci_hcd.0: release socket [ 410.108833][T10582] vhci_hcd vhci_hcd.0: disconnect device [ 410.125140][T10582] vhci_hcd vhci_hcd.0: stop threads [ 410.131891][T10582] vhci_hcd vhci_hcd.0: release socket [ 410.141488][T10582] vhci_hcd vhci_hcd.0: disconnect device [ 410.155386][T10582] vhci_hcd vhci_hcd.0: stop threads [ 410.169392][T10582] vhci_hcd vhci_hcd.0: release socket [ 410.215702][T10582] vhci_hcd vhci_hcd.0: disconnect device [ 410.226164][T10968] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 410.239294][T10582] vhci_hcd vhci_hcd.0: stop threads [ 410.247598][T10582] vhci_hcd vhci_hcd.0: release socket [ 410.271759][T10582] vhci_hcd vhci_hcd.0: disconnect device [ 410.371747][ T43] audit: type=1800 audit(1785667307.489:4927): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 410.377660][T10984] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 410.434436][ T43] audit: type=1800 audit(1785667307.549:4928): pid=10984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1381" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 410.443934][T10984] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 410.446355][T10984] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 410.454848][T10984] vhci_hcd vhci_hcd.0: Device attached [ 410.466955][T10968] vhci_hcd vhci_hcd.0: remove, state 4 [ 410.469053][T10968] usb usb37: USB disconnect, device number 1 [ 410.538296][T10984] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 410.648281][ T7941] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 410.692145][T10582] vhci_hcd vhci_hcd.0: stop threads [ 410.692700][T10968] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 410.694404][T10582] vhci_hcd vhci_hcd.0: release socket [ 410.706289][T10582] vhci_hcd vhci_hcd.0: disconnect device [ 410.713062][T10582] vhci_hcd vhci_hcd.0: stop threads [ 410.714980][T10582] vhci_hcd vhci_hcd.0: release socket [ 410.719483][ T50] usb 40-1: SetAddress Request (22) to port 0 [ 410.721458][ T50] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 410.724518][T10582] vhci_hcd vhci_hcd.0: disconnect device [ 410.729628][T10582] vhci_hcd vhci_hcd.0: stop threads [ 410.731603][T10582] vhci_hcd vhci_hcd.0: release socket [ 410.737426][T10582] ================================================================== [ 410.739934][ T43] audit: type=1800 audit(1785667307.859:4929): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36613 res=0 errno=0 [ 410.740542][T10582] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x44/0x456 [ 410.749554][T10582] Read of size 4 at addr ffff8880229b88f0 by task kworker/u32:0/10582 [ 410.752900][T10582] [ 410.755086][T10582] CPU: 1 UID: 0 PID: 10582 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.755113][T10582] Tainted: [L]=SOFTLOCKUP [ 410.755120][T10582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.755133][T10582] Workqueue: usbip_event event_handler [ 410.755175][T10582] Call Trace: [ 410.755184][T10582] [ 410.755191][T10582] dump_stack_lvl+0x100/0x190 [ 410.755214][T10582] print_report+0x13d/0x4b0 [ 410.755240][T10582] ? __virt_addr_valid+0x239/0x430 [ 410.755263][T10582] ? vhci_cleanup_unlink_list+0x44/0x456 [ 410.755289][T10582] kasan_report+0xdf/0x1c0 [ 410.755314][T10582] ? vhci_cleanup_unlink_list+0x44/0x456 [ 410.755341][T10582] vhci_cleanup_unlink_list+0x44/0x456 [ 410.755370][T10582] vhci_shutdown_connection.cold+0x165/0x37c [ 410.755398][T10582] event_handler+0x216/0x570 [ 410.755420][T10582] process_one_work+0xa23/0x1940 [ 410.755458][T10582] ? __pfx_process_one_work+0x10/0x10 [ 410.755483][T10582] ? __pfx_event_handler+0x10/0x10 [ 410.755504][T10582] worker_thread+0x5ef/0xe50 [ 410.755530][T10582] ? __pfx_worker_thread+0x10/0x10 [ 410.755555][T10582] ? kthread+0x13a/0x450 [ 410.755574][T10582] ? __pfx_worker_thread+0x10/0x10 [ 410.755598][T10582] kthread+0x370/0x450 [ 410.755618][T10582] ? __pfx_kthread+0x10/0x10 [ 410.755640][T10582] ret_from_fork+0x72b/0xd50 [ 410.755675][T10582] ? __pfx_ret_from_fork+0x10/0x10 [ 410.755695][T10582] ? __switch_to+0x800/0x10f0 [ 410.755723][T10582] ? __pfx_kthread+0x10/0x10 [ 410.755747][T10582] ret_from_fork_asm+0x1a/0x30 [ 410.755777][T10582] [ 410.755783][T10582] [ 410.760713][T10969] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 410.761138][T10582] Allocated by task 1: [ 410.761151][T10582] kasan_save_stack+0x30/0x50 [ 410.778090][T10969] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 2 [ 410.779008][T10582] kasan_save_track+0x14/0x30 [ 410.782575][T10969] vhci_hcd vhci_hcd.0: created sysfs vhci_hcd.0 [ 410.783501][T10582] __kasan_kmalloc+0xaa/0xb0 [ 410.829166][T10582] __kmalloc_noprof+0x322/0x820 [ 410.831065][T10582] __usb_create_hcd+0x5e/0xac0 [ 410.832947][T10582] vhci_hcd_probe+0xf3/0x4e0 [ 410.834719][T10582] platform_probe+0x106/0x1d0 [ 410.836569][T10582] really_probe+0x241/0xa60 [ 410.838307][T10582] __driver_probe_device+0x20e/0x450 [ 410.840343][T10582] driver_probe_device+0x4a/0x140 [ 410.842290][T10582] __device_attach_driver+0x1df/0x320 [ 410.844329][T10582] bus_for_each_drv+0x159/0x1e0 [ 410.846219][T10582] __device_attach+0x1e4/0x4d0 [ 410.848057][T10582] device_initial_probe+0xaf/0xd0 [ 410.849989][T10582] bus_probe_device+0x64/0x160 [ 410.851835][T10582] device_add+0x121d/0x1970 [ 410.853620][T10582] platform_device_add+0x35a/0x800 [ 410.855575][T10582] platform_device_register_full+0x5cf/0x830 [ 410.857868][T10582] vhci_hcd_init+0x1a1/0x2f0 [ 410.859688][T10582] do_one_initcall+0x11d/0x700 [ 410.861551][T10582] kernel_init_freeable+0x6ea/0x7b0 [ 410.863596][T10582] kernel_init+0x1f/0x1e0 [ 410.865285][T10582] ret_from_fork+0x72b/0xd50 [ 410.867051][T10582] ret_from_fork_asm+0x1a/0x30 [ 410.868897][T10582] [ 410.869824][T10582] Freed by task 10968: [ 410.871395][T10582] kasan_save_stack+0x30/0x50 [ 410.873237][T10582] kasan_save_track+0x14/0x30 [ 410.875031][T10582] kasan_save_free_info+0x3b/0x70 [ 410.876962][T10582] __kasan_slab_free+0x5f/0x80 [ 410.878800][T10582] kfree+0x22b/0x6c0 [ 410.880311][T10582] usb_put_hcd+0x149/0x1f0 SYZFAIL: failed to recv rpc [ 410.882029][T10582] vhci_hcd_remove+0x107/0x1b0 [ 410.884014][T10582] platform_remove+0x5f/0x80 [ 410.885783][T10582] device_remove+0xcb/0x180 [ 410.887523][T10582] device_release_driver_internal+0x44e/0x620 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 410.889856][T10582] unbind_store+0xf8/0x110 [ 410.891750][T10582] drv_attr_store+0x74/0xb0 [ 410.893544][T10582] sysfs_kf_write+0xf2/0x150 [ 410.895329][T10582] kernfs_fop_write_iter+0x3e0/0x5f0 [ 410.897364][T10582] vfs_write+0x6ac/0x1050 [ 410.899052][T10582] ksys_write+0x12a/0x250 [ 410.900726][T10582] __do_fast_syscall_32+0xe7/0x970 [ 410.902715][T10582] do_fast_syscall_32+0x32/0x70 [ 410.904606][T10582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 410.907018][T10582] [ 410.907956][T10582] Last potentially related work creation: [ 410.910134][T10582] kasan_save_stack+0x30/0x50 [ 410.911943][T10582] kasan_record_aux_stack+0xa7/0xc0 [ 410.913976][T10582] insert_work+0x36/0x230 [ 410.915652][T10582] __queue_work+0x9bc/0x12b0 [ 410.917448][T10582] queue_work_on+0x1a9/0x1e0 [ 410.919221][T10582] usb_hcd_giveback_urb+0x330/0x4a0 [ 410.921224][T10582] unlink1+0x418/0x510 [ 410.922809][T10582] usb_hcd_unlink_urb+0x131/0x210 [ 410.924748][T10582] usb_kill_urb+0x121/0x320 [ 410.926495][T10582] hub_quiesce+0x1e9/0x320 [ 410.928245][T10582] hub_suspend+0x4ab/0x9e0 [ 410.929978][T10582] usb_suspend_both+0x288/0x950 [ 410.931875][T10582] usb_runtime_suspend+0x49/0x120 [ 410.933849][T10582] __rpm_callback+0xc8/0x620 [ 410.935634][T10582] rpm_callback+0x16a/0x1b0 [ 410.937399][T10582] rpm_suspend+0x2f4/0x11a0 [ 410.939171][T10582] __pm_runtime_suspend+0xba/0x1a0 [ 410.941165][T10582] usb_new_device.cold+0xd61/0x115c [ 410.943196][T10582] register_root_hub+0x4e6/0x639 [ 410.945153][T10582] usb_add_hcd.cold+0xccd/0x1158 [ 410.947061][T10582] vhci_hcd_probe+0x14b/0x4e0 [ 410.948904][T10582] platform_probe+0x106/0x1d0 [ 410.950734][T10582] really_probe+0x241/0xa60 [ 410.952517][T10582] __driver_probe_device+0x20e/0x450 [ 410.954548][T10582] driver_probe_device+0x4a/0x140 [ 410.956492][T10582] __device_attach_driver+0x1df/0x320 [ 410.958528][T10582] bus_for_each_drv+0x159/0x1e0 [ 410.960402][T10582] __device_attach+0x1e4/0x4d0 [ 410.962252][T10582] device_initial_probe+0xaf/0xd0 [ 410.964198][T10582] bus_probe_device+0x64/0x160 [ 410.966019][T10582] device_add+0x121d/0x1970 [ 410.967744][T10582] platform_device_add+0x35a/0x800 [ 410.969705][T10582] platform_device_register_full+0x5cf/0x830 [ 410.971979][T10582] vhci_hcd_init+0x1a1/0x2f0 [ 410.973788][T10582] do_one_initcall+0x11d/0x700 [ 410.975620][T10582] kernel_init_freeable+0x6ea/0x7b0 [ 410.977621][T10582] kernel_init+0x1f/0x1e0 [ 410.979290][T10582] ret_from_fork+0x72b/0xd50 [ 410.981065][T10582] ret_from_fork_asm+0x1a/0x30 [ 410.982932][T10582] [ 410.983856][T10582] Second to last potentially related work creation: [ 410.986134][T10582] kasan_save_stack+0x30/0x50 [ 410.987776][T10582] kasan_record_aux_stack+0xa7/0xc0 [ 410.989818][T10582] insert_work+0x36/0x230 [ 410.991500][T10582] __queue_work+0x9bc/0x12b0 [ 410.993319][T10582] queue_work_on+0x1a9/0x1e0 [ 410.995112][T10582] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 410.997113][T10582] usb_hcd_submit_urb+0xab7/0x2150 [ 410.999071][T10582] usb_submit_urb+0x827/0x19b0 [ 411.000928][T10582] usb_start_wait_urb+0x10e/0x580 [ 411.002897][T10582] usb_control_msg+0x328/0x4b0 [ 411.004757][T10582] hub_ext_port_status+0x152/0x600 [ 411.006723][T10582] hub_activate+0x6e5/0x1c40 [ 411.008515][T10582] process_one_work+0xa23/0x1940 [ 411.010420][T10582] worker_thread+0x5ef/0xe50 [ 411.012230][T10582] kthread+0x370/0x450 [ 411.013544][T10582] ret_from_fork+0x72b/0xd50 [ 411.014982][T10582] ret_from_fork_asm+0x1a/0x30 [ 411.016782][T10582] [ 411.017579][T10582] The buggy address belongs to the object at ffff8880229b8000 [ 411.017579][T10582] which belongs to the cache kmalloc-8k of size 8192 [ 411.022424][T10582] The buggy address is located 2288 bytes inside of [ 411.022424][T10582] freed 8192-byte region [ffff8880229b8000, ffff8880229ba000) [ 411.027701][T10582] [ 411.028662][T10582] The buggy address belongs to the physical page: [ 411.031310][T10582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x229b8 [ 411.034632][T10582] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 411.038007][T10582] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 411.040840][T10582] page_type: f5(slab) [ 411.042395][T10582] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 411.045620][T10582] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 411.048854][T10582] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 411.052288][T10582] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 411.055543][T10582] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 411.058803][T10582] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 411.062074][T10582] page dumped because: kasan: bad access detected [ 411.064514][T10582] page_owner tracks the page as allocated [ 411.066668][T10582] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5088784336, free_ts 5017389678 [ 411.074336][T10582] post_alloc_hook+0xfd/0x120 [ 411.076142][T10582] get_page_from_freelist+0xf48/0x3530 [ 411.078234][T10582] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 411.080662][T10582] new_slab+0xa2/0x640 [ 411.082249][T10582] refill_objects+0xe3/0x410 [ 411.084028][T10582] __pcs_replace_empty_main+0x376/0x680 [ 411.086137][T10582] __kmalloc_noprof+0x66d/0x820 [ 411.088042][T10582] orangefs_init+0xd2/0x2a0 [ 411.089823][T10582] do_one_initcall+0x11d/0x700 [ 411.091679][T10582] kernel_init_freeable+0x6ea/0x7b0 [ 411.093709][T10582] kernel_init+0x1f/0x1e0 [ 411.095381][T10582] ret_from_fork+0x72b/0xd50 [ 411.097155][T10582] ret_from_fork_asm+0x1a/0x30 [ 411.099001][T10582] page last free pid 42 tgid 42 stack trace: [ 411.101305][T10582] free_pages_prepare+0x586/0xd80 [ 411.103257][T10582] __free_contig_range_common+0x14f/0x250 [ 411.105617][T10582] free_pages_bulk+0x12a/0x200 [ 411.107657][T10582] vm_area_free_pages+0xad/0x2b0 [ 411.109510][T10582] vfree+0x107/0x750 [ 411.110667][T10582] delayed_vfree_work+0x56/0x80 [ 411.112091][T10582] process_one_work+0xa23/0x1940 [ 411.113537][T10582] worker_thread+0x5ef/0xe50 [ 411.114952][T10582] kthread+0x370/0x450 [ 411.116225][T10582] ret_from_fork+0x72b/0xd50 [ 411.117712][T10582] ret_from_fork_asm+0x1a/0x30 [ 411.119486][T10582] [ 411.120311][T10582] Memory state around the buggy address: [ 411.122188][T10582] ffff8880229b8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.124505][T10582] ffff8880229b8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.126788][T10582] >ffff8880229b8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.129135][T10582] ^ [ 411.131326][T10582] ffff8880229b8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.133658][T10582] ffff8880229b8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.135931][T10582] ================================================================== [ 411.144851][ T7941] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 411.147727][ T7941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.150215][ T7941] usb 9-1: Product: syz [ 411.151536][ T7941] usb 9-1: Manufacturer: syz [ 411.153073][ T7941] usb 9-1: SerialNumber: syz [ 411.181266][T10969] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 411.184647][T10969] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 411.190146][T10969] usb usb2: Product: USB/IP Virtual Host Controller [ 411.194167][T10969] usb usb2: Manufacturer: Linux syzkaller vhci_hcd [ 411.197472][T10969] usb usb2: SerialNumber: vhci_hcd.0 [ 411.253535][T10582] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 411.256349][T10582] CPU: 1 UID: 0 PID: 10582 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.260563][T10582] Tainted: [L]=SOFTLOCKUP [ 411.262243][T10582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.266111][T10582] Workqueue: usbip_event event_handler [ 411.268243][T10582] Call Trace: [ 411.269542][T10582] [ 411.270703][T10582] dump_stack_lvl+0x100/0x190 [ 411.272564][T10582] vpanic+0x552/0x970 [ 411.274100][T10582] ? __pfx_vpanic+0x10/0x10 [ 411.275744][T10582] ? vhci_cleanup_unlink_list+0x44/0x456 [ 411.277815][T10582] panic+0xd1/0xe0 [ 411.279221][T10582] ? __pfx_panic+0x10/0x10 [ 411.280945][T10582] ? vhci_cleanup_unlink_list+0x44/0x456 [ 411.283025][T10582] ? preempt_schedule_common+0x42/0xc0 [ 411.285122][T10582] ? check_panic_on_warn+0x1f/0x90 [ 411.287088][T10582] check_panic_on_warn.cold+0x19/0x34 [ 411.289135][T10582] end_report.part.0+0x3a/0x90 [ 411.290993][T10582] kasan_report.cold+0xe/0x18 [ 411.292861][T10582] ? vhci_cleanup_unlink_list+0x44/0x456 [ 411.295011][T10582] vhci_cleanup_unlink_list+0x44/0x456 [ 411.297116][T10582] vhci_shutdown_connection.cold+0x165/0x37c [ 411.299406][T10582] event_handler+0x216/0x570 [ 411.301203][T10582] process_one_work+0xa23/0x1940 [ 411.303129][T10582] ? __pfx_process_one_work+0x10/0x10 [ 411.305199][T10582] ? __pfx_event_handler+0x10/0x10 [ 411.307162][T10582] worker_thread+0x5ef/0xe50 [ 411.308960][T10582] ? __pfx_worker_thread+0x10/0x10 [ 411.310947][T10582] ? kthread+0x13a/0x450 [ 411.312614][T10582] ? __pfx_worker_thread+0x10/0x10 [ 411.314553][T10582] kthread+0x370/0x450 [ 411.316115][T10582] ? __pfx_kthread+0x10/0x10 [ 411.317902][T10582] ret_from_fork+0x72b/0xd50 [ 411.319652][T10582] ? __pfx_ret_from_fork+0x10/0x10 [ 411.321642][T10582] ? __switch_to+0x800/0x10f0 [ 411.323477][T10582] ? __pfx_kthread+0x10/0x10 [ 411.325256][T10582] ret_from_fork_asm+0x1a/0x30 [ 411.327101][T10582] [ 411.328933][T10582] Kernel Offset: disabled [ 411.330025][T10582] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:41:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000000a83c2b RBX=ffffffff8e891480 RCX=ffffffff8bb922d5 RDX=0000000000000000 RSI=ffffffff8e1a99ad RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb9089f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53bcb08 CR3=000000006e134000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a131f5 RDI=ffffffff9b9f71a0 RBP=ffffffff9b9f7160 RSP=ffffc900038a7560 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6239323230386552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b6f71e1 R15=ffffffff85a13190 RIP=ffffffff85a1321f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73df6a0 CR3=0000000071f85000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000008b397f RBX=ffff88801cb04a80 RCX=ffffffff8bb922d5 RDX=0000000000000000 RSI=ffffffff8e1a99ad RDI=ffffffff8c400a80 RBP=ffffed1003960950 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed100568678d R10=ffff88802b433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bb9089f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ec5256bf40 CR3=000000005178e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff88802b43b600 RBX=ffff88802a5e8000 RCX=0000000000000001 RDX=1ffff110056a7899 RSI=ffffffff8e183b3c RDI=ffff88802b43b648 RBP=ffff88802a5e8558 RSP=ffffc900005df8d0 R8 =0000000000000001 R9 =fffffbfff1d5a2f5 R10=ffffffff8ead17af R11=0000000000000003 R12=ffff88802b53b600 R13=0000000000000000 R14=0000000000000000 R15=ffff88802b53b600 RIP=ffffffff81d5f943 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080004000 CR3=000000004f0ef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000