last executing test programs: 2m13.674136664s ago: executing program 1 (id=3610): ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x7ff}) openat$kvm(0xffffff9c, 0x0, 0x40000, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0xc5c4, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xd, r0}, 0x38) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03200009"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_setup(0x1, &(0x7f00000004c0)) syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000be4c091edd4c8a85c1ebe11800004bbde1d0e6e077ca00040000000000000c02000000030000000000"], &(0x7f0000000180), 0x35, 0x0, 0x1, 0x401}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 2m9.165484087s ago: executing program 1 (id=3629): openat$nvme_fabrics(0xffffff9c, &(0x7f0000000400), 0x109000, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000001100)="02", 0x1) pselect6(0x40, &(0x7f0000000240)={0x3, 0x9, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) unshare(0x6020400) r2 = io_uring_setup(0xf06, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000000)=[r2], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ec) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001000)='A', 0x1) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) 2m7.606049817s ago: executing program 1 (id=3633): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x25, 0x9, 0x0, 0x800, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$nfs4(&(0x7f0000000000)='-.%^%\x00', 0x0, 0x0, 0x20c0c24, &(0x7f00000003c0)={[{'/^-(-\'.*\x03!'}, {'9p\x00'}, {'#j'}, {'./binderfs/binder0\x00'}, {}, {'\x00'}], [{@subj_user={'subj_user', 0x3d, '$.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000001}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getgroups(0x2, &(0x7f0000000600)=[0x0, 0x0]) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './bus'}, 0x9) copy_file_range(r5, &(0x7f00000008c0)=0x4, r4, 0x0, 0x8, 0x0) 2m4.879312564s ago: executing program 1 (id=3637): ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x7ff}) openat$kvm(0xffffff9c, 0x0, 0x40000, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0xc5c4, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xd, r0}, 0x38) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03200009"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_setup(0x1, &(0x7f00000004c0)) syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000be4c091edd4c8a85c1ebe11800004bbde1d0e6e077ca00040000000000000c02000000030000000000"], &(0x7f0000000180), 0x35, 0x0, 0x1, 0x401}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 2m1.551919794s ago: executing program 1 (id=3651): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) write(r0, &(0x7f0000000640)='measure', 0x7) 2m1.334264523s ago: executing program 1 (id=3656): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r0, &(0x7f0000000740)={0x8, {"a7e59595c24fe84cd84349313d1bff7401b5a8936bab596901cb5291e936e5a9419dbed04264a25cbe0e075dea8d43aed5a36d68a2af5653c29872fed000ad768fc131c37b3255b51de36b80aa4de3702342483f29b145ef9973c92efa5a18e48e617a85ea1cf84d1d15b0fa5656cbf5f92966670b86c5b5caa38a0d70c6b873296d17cf3f027fa7c51be34e13acca47c074598fda42dce7788c1b3662ba53e1aef998323f58821313b902845304bf3e35b9e44680a09fa51c1c7fb5180542db1eeafb25c919d01d9584e8d84ec1d1ce51d58fbc5367625528a7467c6abbeb50fd9b4e52e70a2590b843bc66f3c44d9dfde7947b79240f663e5acc4490cc906bc50428bcda6f9f4bcf90c35752928b6180567b04bdbc7b78f2eefcb5c453d33665da8249ba8e497f44e670ec54598b894a9368b46f5ba71f342dde34cf5f923593006a2cea82458cdf3979a7711498abd5754ec90ab5741fda7a7d98cb14bc9002ab1c07dbc87469e69184a59ace809ccf8af69f461c00ee633364ed0e31fce91539eaf3e803eeb1b11731b09f60f4fae2231adb245594532b19dbd0aa4e91542b4958b02c2f8b84d2fc44d9d68fb8570b1d504fb9cec2a5ad1858fe39861d774e323c067ac76fd13b67041feeccf3a509fbf98cf106fe25b6839f6953db4085d5d49a5dcad46e109e9677f88e60b16040895dd0abf5756dca1d709457c26548bbc94be992eb1ce80e4ddd56ac9e730d6af9e6e4a431d1ea363e78836bd23eb0199896087974d0c27d04fa4c32ec344aa21f71ca63295f3a06c3a7eec6f409810e6c9615ab1da0816f6b386f7914e7a46bab9a44e28225cfb44be86d3ede3e40916b0a1019f3014d6224acbab3cb88bd45aa3f88b33432763538236edc8077c1398e5b3903e879bffd6b904e7b51dfd18c82a28da23e57b149241501b14dd683bc14e7960d7a0bb1369799861e8dbfb49773898162721f25f79c2b3e33ee7347b885a33a6cb11bdfbb5e12ae54047c16a0b599478d407d3a75c67475e6a6401c1221cb398e71adc3419ad1b3161d2200fa2f6375a0a6bbe69dbaccdab3e1415f5ad9bc9c282e088827cca2c49816009b01a00fcc89319038048d03f55bef7a91f7661eaffe754e676f1f17c7443ca08f85a954e96fdbc9f86ac48164071d3d32e6f17259d489b9187dc32a9bb213910769a2e80f3aba84dedb3bb0c93b0a7fada9946874b482cef56078a23bffc940bf960c70c8cd946cf33b5fda700e8701ee98c7f4f916fcb4775ca52577c76709c255a242ca94aa08adeddba05fae0d8772d2f6af8d0fe8ca36eac3cb871649f8acf90adef14b8299e62cb42f659ada1ec15fb37b644ad7db05b77b41c60db38b43d2af25e9576ca07f121f4c20df50ed92508ba8824b7cf12e51a67614d5daa1233f2dfdef8f23c4d9dc1d6a7c01a7714e4a52e090a42b2a8ee3e193a36a6c394c7daa28766aebd3b6a17fcadc4bb68d4fcd3da78994f902cc9f08adf1c24e94848df1f210b5fc9a05ea0f896aa385c2766420061ebedeec688ee2bd0fc4b87e7dbc44c11e4e49f68435ee57815d185c4dd0b58c7afa56a2922cb8925c67af17eaa68f790da5856d0534d9fb0e0d3e7a59572c15ea3c9d57eaf835ab0c5d42d1a40d0a9258237637bb3b0494eb6bd1e9172febb8ede8352b7719254b1a7396b2f31e6c3b920f35b87f81d230096655898917041bf7e54dcffc0bd86ee3302397646c9f3c2e997d4d113ddae91e468475c4d12ee929d2d02c9deaa36dc772bf227914f2184bc0a22d3b5266a72761ab5e5d3726c30a6a9bd4fb7076a38909c05c08c1d4d44202c351222b0e20c692deb3f1d220e4942786cb8e15b32e1fe0c8cc2e05668535ca11337792137d9398036ba7a6582a818163c0db9fbcc29f87c685bca5c795a6c579c489225bbc70f10618d85778e0ea4c57d21e50d8b2f0985eb35eeedf8216ab8b8fa7202faded4ce2410f50c43e7782f4ecdc244ba0404aaece0002ac1685c50695c2ae7999b22a9b75b8957f6366e1dd8fb57e659f47fffdd953ba17faf2a86d1306b3c9ee8624f3435c8787e0ef14de2a18f7240d30d2a614209587cce88c51410b5be5497c6a31112f2c6198522b4df4a9b66251b1854f47cb6714f97ed4da7e19798b021cd5fa32f470c47f28348bd918fe1deebe715957576715180f8d038101af9fdb3e632882bbbc3d381e19dec9089e6dd52d7a1d2186a0f70a3c01c705deae61d40e70ce5a1cb9aee9d0b1bb3f841d0928536e3926aad4a348b9a4463c9df80a38c347f914d00f85583ad2f008a76bb5fe27dc2a5396827fee4bd51f0e739d1bb4fda626ae809b9569160fae582eb0cd21703ce066ce0043d5f4741dfad7ebadb644c50c24322009cbd563b26f24a46b895e6ba81931fc579db2b0d861c4a3d6e7fc5f5b4baa094691f5494bff3fbf452656353cdde9eb0194867481e35ef1f3321b6e4cff6c4dab720986e43b394006f2a7bf3cd61f39beb9bbc9620830ae4b4dbd836f6676b62001e1b3ff52973ec4a576b288ed5061ab568f5dec0a5bea2e265413fae26f5b830dfe5c5dff8dda1e830b62fb8cee5bf86bd19b66ef06e3888b1bb2f0e1f3b48920dc0d2d65f0811b2847cd92486f0fd2faa973dff792ebc53089fecc965ed198aeb2547942ac139c934284a302d6a4e3c75afe241233b68c7c9005901b25b6671316d1a0ae2327cc3a95c57354b3e721ca33274225eb422e61b973a7880d272bc4565834f89993ae4d3e0a4bc8c9f9b6b0904f273c918061dc7a64838070aadd41ea0982f6b29d55c67f5b12b939898b5d3d81d8f2206e6c327238774b2eae2a78167b615d07aa92347dc93c4c0219643037101ca6eab3dab81d4234f46b9f9d249b99581786954d924cba5cc3218db112a94ec60605602d4ac969f5e475d7429b6a6d8804027ff85ef9fb281b78f7286c99509d685b72249bed3d742ab84ff34b971f9010a6693539116af9bb4907ad08f5b78b46de7b8338fd41ff87b9338efa2e344cf7f5b0d983a1e25623fe74eaa73bb6d67af14ceedbf76a065fbe13dd01e139c72cb1a08bb9f7ad2717bc1dc0a314ded77e5c84fcdaaa641f900d61d0f27cef67c743f46a81cff39a525cb06fe5699c94d1f1a4cb7294371f1bd74f52f0838057cfa7477e88b9a4b71a03ef9928170a18f694cd51536da5099355cff3a16cecd907a2ee90dd6f529f454c71831eed33753849b560d6fa89ee6e6d0ce43993ea7f414a563c3823c55b66f1c23d4fd473fa1dbb5d7d4af1a70507cc681fa65cf44e05c54a8683800547decf766cc910eb50e7f6f6b214cd46fb9568236931f27d8bd7a86165cb5a291394647609af15f927c0bef1b6f2bd80d16f7269098fbbf5092385a220f9ea852f50e965891d581a3fa7e224d72e979cc5c57f8281e80399b6635510cff93ef2f7f5bab67faf9d4729ce10392ba66be88f1acb463e9db14243c70078ad43a83dac8e9fdf5b7a655ce7fab30925f4809b8af824f55f2239e3de41e48e380ef63839f5c0bb17acefa7938b8533c30f8d4ac0ddd06b03b0fab8b93b1d6007e619e1f9bc7a769a27c9af11c54ad14f495116daad6d7736d977212c0fccf7029fe04552b86824bd7488bb2610c1ac33b69da746cc10ce042759576aacba1124fca504613f9058c55c2834e76e74327df9bcf751758df9ef824471495791882a2fde0a93feaecc54a1410f24768a821a820e8f1e7e33019ba4486e11ae560c8303ad1a44f2fd237cb3de81fc0e84b2edea63e069a4282b00f38ae01f4127db83d029c0b73ebca7ee1a38a10111d679abbc36b21cb044ae0216ce2e57cf3745723c1165a4d922794e33543c88214383b1aa85a8c566c22eda89afb154dcaa8d8cc7d7d6bf886c0e9c9bd9105ed08dd3692f78fd98f8099ebcf8e6b6d4442b11edbbbdb4617dfa910f188ed13716bf193bb24b3972071d4a691717317755bab5521e3deb68375ddd5c9f760bf31eb3976997d6ff612a07ba1441f5df8bce584034ec5b54c14abbaaf61b31714dfe790c6491a1ae97b60f84f93149023c8a5c0410ec4b5c3d9de61018dcb6baaa930df25f25b9cd79010a9205e88bc0506fcdc6bb3d486af50f4170517017438bcc0bd35675abb321105a1ccad8a82c86c1590b356eefaabf391a94f410dfdbc71637d9f050172456206225d9e198c479a9733c4506e64a4681274d5e1710f6ef16c1ee3830bde2d516432c0809285e600dc3637d9b30b4f8aecb4b4c33a4ee58370181bb24649c9b3f0bedf6a0349074b3e15ccda82170f252af884d5a3f0f85e47d57b859a44dcf2cc4382fc05ad199378f6c5de3f0f8c812e779c5ce74fe2b2a5edfa9d2bac7e38c2cbdff9682554cd8aceba560cf10f522e51f6704e8896a11011c4fc1361c3292b5bf5af0d3eaac6b5f81f37d739b6b112da9acc3e15ac7865bac4e61032609aa151cea8ffde2c9768b0f91406b0b85e125c8078ea3b2d1111b007d58e58f3606de4597aac781ef46dd2fd0fc790df2b2692079f20d8f9bfbf4d704f265411f4c33091739822933599f6209ce5baa2204ecb6c71bf0bc3b032c8dbf539505c87a83c3f2a78521a4452245f2e54a01d5d23abfe0e78b246ce4bfb14ee17b9a5821dacc3fd713c43080138552e5e51cdb58e7f9082f4235a24b2c8c19045a3e213701b19f1b8897dfbc2af094cabe4826f2a6136c84fde2f3dcbb4017e28bb55e8a40c103747fc8dbd5b7eba780a879504f9bc958d9a7e026daab161b1e5d6808fec0a1174ebbbdce9622eed70d7698992c24c5d7e8c20a016c849a333eb7e6a2895c96c0c3f459b0813cadca8b4c6c5e678772bc619bf1017d0ef5a66840cc358d9c3a09fd6d2e802a514fedd8ada6d9f2b1d461c91b1580695242c171ab11c302366352c2f44a1af8ff05c3504ea3df065c4ce5cdf32dbd404bfe87c39bd4ab2d97f29e52dc402b08cae7cb07be8b150aead4330aea11eeb01979ba9d986b1230ef0498881412e6c6eff51f3d8b3ad372b6cfdd1fb2dbdb675a03d669093b3c3d7ec0daa0f4bbdf15877192004ea1bf49855fc8af1278aea1ab622151ad935f691eaf1d94e25df0b74039db489684642ad58cf4a863d800dd5773100b1d44b95b3d92698c691b94073678be3c8f50bab7870dfc575e40a24ceedb487b5a45c55d65538632ba5b4290d9e17d23367ff88902226435c220830f61e580855230f98b2487083fb6e8c9ad69b455767835ef1aac043ef286d83f8146a11024f4df398fb10bc534b4c880dfea45c0340c1622f0abe226331dbbd075a44e67c677574ef42347dce3b0bca34850dc3ef2ce21b6d1f69f804204ae5146094840b096f492f34f827ffa8cda57cbdfe97534aa8b1d7c5069f6a618b00ddb9df4e7857fab87077bcd085f48e5347aca64d231142c4029f345dbca5d2fbf0ba346c52805171c430c77064ed1b6bdd0e69d486b5382669929fe96a8b94e41af688e1a57e2efa63ff61564086d93591362a958f527f89da05446c1abc10b66c193507c197ab187bb68262985ef3dfccc3d82a506c480386b71d1d88315ad38fdd0f1c409d99409394b0596e4fd9df53bfa086629ffa38094557c61b020ddc274c484d3b3de8134afbcc353f9b0556f62701eae87bc8e0c5e5489f4873fb534047a1e83771baf9f7f876ca61b8cce3d0c236fd9b332d6bed666e0a877d4b13ab23df7447fbf04ae520bff9cee7084d8a396f621ed5770e643c8b04c9a0f0c44aa0da15b20456e8e54df", 0x1000}}, 0x1006) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x39425, &(0x7f0000000080)={[{@subsystem='rdma'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '{$'}}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48020}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r3, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x23}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x80004) 1m45.918281123s ago: executing program 32 (id=3656): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r0, &(0x7f0000000740)={0x8, {"a7e59595c24fe84cd84349313d1bff7401b5a8936bab596901cb5291e936e5a9419dbed04264a25cbe0e075dea8d43aed5a36d68a2af5653c29872fed000ad768fc131c37b3255b51de36b80aa4de3702342483f29b145ef9973c92efa5a18e48e617a85ea1cf84d1d15b0fa5656cbf5f92966670b86c5b5caa38a0d70c6b873296d17cf3f027fa7c51be34e13acca47c074598fda42dce7788c1b3662ba53e1aef998323f58821313b902845304bf3e35b9e44680a09fa51c1c7fb5180542db1eeafb25c919d01d9584e8d84ec1d1ce51d58fbc5367625528a7467c6abbeb50fd9b4e52e70a2590b843bc66f3c44d9dfde7947b79240f663e5acc4490cc906bc50428bcda6f9f4bcf90c35752928b6180567b04bdbc7b78f2eefcb5c453d33665da8249ba8e497f44e670ec54598b894a9368b46f5ba71f342dde34cf5f923593006a2cea82458cdf3979a7711498abd5754ec90ab5741fda7a7d98cb14bc9002ab1c07dbc87469e69184a59ace809ccf8af69f461c00ee633364ed0e31fce91539eaf3e803eeb1b11731b09f60f4fae2231adb245594532b19dbd0aa4e91542b4958b02c2f8b84d2fc44d9d68fb8570b1d504fb9cec2a5ad1858fe39861d774e323c067ac76fd13b67041feeccf3a509fbf98cf106fe25b6839f6953db4085d5d49a5dcad46e109e9677f88e60b16040895dd0abf5756dca1d709457c26548bbc94be992eb1ce80e4ddd56ac9e730d6af9e6e4a431d1ea363e78836bd23eb0199896087974d0c27d04fa4c32ec344aa21f71ca63295f3a06c3a7eec6f409810e6c9615ab1da0816f6b386f7914e7a46bab9a44e28225cfb44be86d3ede3e40916b0a1019f3014d6224acbab3cb88bd45aa3f88b33432763538236edc8077c1398e5b3903e879bffd6b904e7b51dfd18c82a28da23e57b149241501b14dd683bc14e7960d7a0bb1369799861e8dbfb49773898162721f25f79c2b3e33ee7347b885a33a6cb11bdfbb5e12ae54047c16a0b599478d407d3a75c67475e6a6401c1221cb398e71adc3419ad1b3161d2200fa2f6375a0a6bbe69dbaccdab3e1415f5ad9bc9c282e088827cca2c49816009b01a00fcc89319038048d03f55bef7a91f7661eaffe754e676f1f17c7443ca08f85a954e96fdbc9f86ac48164071d3d32e6f17259d489b9187dc32a9bb213910769a2e80f3aba84dedb3bb0c93b0a7fada9946874b482cef56078a23bffc940bf960c70c8cd946cf33b5fda700e8701ee98c7f4f916fcb4775ca52577c76709c255a242ca94aa08adeddba05fae0d8772d2f6af8d0fe8ca36eac3cb871649f8acf90adef14b8299e62cb42f659ada1ec15fb37b644ad7db05b77b41c60db38b43d2af25e9576ca07f121f4c20df50ed92508ba8824b7cf12e51a67614d5daa1233f2dfdef8f23c4d9dc1d6a7c01a7714e4a52e090a42b2a8ee3e193a36a6c394c7daa28766aebd3b6a17fcadc4bb68d4fcd3da78994f902cc9f08adf1c24e94848df1f210b5fc9a05ea0f896aa385c2766420061ebedeec688ee2bd0fc4b87e7dbc44c11e4e49f68435ee57815d185c4dd0b58c7afa56a2922cb8925c67af17eaa68f790da5856d0534d9fb0e0d3e7a59572c15ea3c9d57eaf835ab0c5d42d1a40d0a9258237637bb3b0494eb6bd1e9172febb8ede8352b7719254b1a7396b2f31e6c3b920f35b87f81d230096655898917041bf7e54dcffc0bd86ee3302397646c9f3c2e997d4d113ddae91e468475c4d12ee929d2d02c9deaa36dc772bf227914f2184bc0a22d3b5266a72761ab5e5d3726c30a6a9bd4fb7076a38909c05c08c1d4d44202c351222b0e20c692deb3f1d220e4942786cb8e15b32e1fe0c8cc2e05668535ca11337792137d9398036ba7a6582a818163c0db9fbcc29f87c685bca5c795a6c579c489225bbc70f10618d85778e0ea4c57d21e50d8b2f0985eb35eeedf8216ab8b8fa7202faded4ce2410f50c43e7782f4ecdc244ba0404aaece0002ac1685c50695c2ae7999b22a9b75b8957f6366e1dd8fb57e659f47fffdd953ba17faf2a86d1306b3c9ee8624f3435c8787e0ef14de2a18f7240d30d2a614209587cce88c51410b5be5497c6a31112f2c6198522b4df4a9b66251b1854f47cb6714f97ed4da7e19798b021cd5fa32f470c47f28348bd918fe1deebe715957576715180f8d038101af9fdb3e632882bbbc3d381e19dec9089e6dd52d7a1d2186a0f70a3c01c705deae61d40e70ce5a1cb9aee9d0b1bb3f841d0928536e3926aad4a348b9a4463c9df80a38c347f914d00f85583ad2f008a76bb5fe27dc2a5396827fee4bd51f0e739d1bb4fda626ae809b9569160fae582eb0cd21703ce066ce0043d5f4741dfad7ebadb644c50c24322009cbd563b26f24a46b895e6ba81931fc579db2b0d861c4a3d6e7fc5f5b4baa094691f5494bff3fbf452656353cdde9eb0194867481e35ef1f3321b6e4cff6c4dab720986e43b394006f2a7bf3cd61f39beb9bbc9620830ae4b4dbd836f6676b62001e1b3ff52973ec4a576b288ed5061ab568f5dec0a5bea2e265413fae26f5b830dfe5c5dff8dda1e830b62fb8cee5bf86bd19b66ef06e3888b1bb2f0e1f3b48920dc0d2d65f0811b2847cd92486f0fd2faa973dff792ebc53089fecc965ed198aeb2547942ac139c934284a302d6a4e3c75afe241233b68c7c9005901b25b6671316d1a0ae2327cc3a95c57354b3e721ca33274225eb422e61b973a7880d272bc4565834f89993ae4d3e0a4bc8c9f9b6b0904f273c918061dc7a64838070aadd41ea0982f6b29d55c67f5b12b939898b5d3d81d8f2206e6c327238774b2eae2a78167b615d07aa92347dc93c4c0219643037101ca6eab3dab81d4234f46b9f9d249b99581786954d924cba5cc3218db112a94ec60605602d4ac969f5e475d7429b6a6d8804027ff85ef9fb281b78f7286c99509d685b72249bed3d742ab84ff34b971f9010a6693539116af9bb4907ad08f5b78b46de7b8338fd41ff87b9338efa2e344cf7f5b0d983a1e25623fe74eaa73bb6d67af14ceedbf76a065fbe13dd01e139c72cb1a08bb9f7ad2717bc1dc0a314ded77e5c84fcdaaa641f900d61d0f27cef67c743f46a81cff39a525cb06fe5699c94d1f1a4cb7294371f1bd74f52f0838057cfa7477e88b9a4b71a03ef9928170a18f694cd51536da5099355cff3a16cecd907a2ee90dd6f529f454c71831eed33753849b560d6fa89ee6e6d0ce43993ea7f414a563c3823c55b66f1c23d4fd473fa1dbb5d7d4af1a70507cc681fa65cf44e05c54a8683800547decf766cc910eb50e7f6f6b214cd46fb9568236931f27d8bd7a86165cb5a291394647609af15f927c0bef1b6f2bd80d16f7269098fbbf5092385a220f9ea852f50e965891d581a3fa7e224d72e979cc5c57f8281e80399b6635510cff93ef2f7f5bab67faf9d4729ce10392ba66be88f1acb463e9db14243c70078ad43a83dac8e9fdf5b7a655ce7fab30925f4809b8af824f55f2239e3de41e48e380ef63839f5c0bb17acefa7938b8533c30f8d4ac0ddd06b03b0fab8b93b1d6007e619e1f9bc7a769a27c9af11c54ad14f495116daad6d7736d977212c0fccf7029fe04552b86824bd7488bb2610c1ac33b69da746cc10ce042759576aacba1124fca504613f9058c55c2834e76e74327df9bcf751758df9ef824471495791882a2fde0a93feaecc54a1410f24768a821a820e8f1e7e33019ba4486e11ae560c8303ad1a44f2fd237cb3de81fc0e84b2edea63e069a4282b00f38ae01f4127db83d029c0b73ebca7ee1a38a10111d679abbc36b21cb044ae0216ce2e57cf3745723c1165a4d922794e33543c88214383b1aa85a8c566c22eda89afb154dcaa8d8cc7d7d6bf886c0e9c9bd9105ed08dd3692f78fd98f8099ebcf8e6b6d4442b11edbbbdb4617dfa910f188ed13716bf193bb24b3972071d4a691717317755bab5521e3deb68375ddd5c9f760bf31eb3976997d6ff612a07ba1441f5df8bce584034ec5b54c14abbaaf61b31714dfe790c6491a1ae97b60f84f93149023c8a5c0410ec4b5c3d9de61018dcb6baaa930df25f25b9cd79010a9205e88bc0506fcdc6bb3d486af50f4170517017438bcc0bd35675abb321105a1ccad8a82c86c1590b356eefaabf391a94f410dfdbc71637d9f050172456206225d9e198c479a9733c4506e64a4681274d5e1710f6ef16c1ee3830bde2d516432c0809285e600dc3637d9b30b4f8aecb4b4c33a4ee58370181bb24649c9b3f0bedf6a0349074b3e15ccda82170f252af884d5a3f0f85e47d57b859a44dcf2cc4382fc05ad199378f6c5de3f0f8c812e779c5ce74fe2b2a5edfa9d2bac7e38c2cbdff9682554cd8aceba560cf10f522e51f6704e8896a11011c4fc1361c3292b5bf5af0d3eaac6b5f81f37d739b6b112da9acc3e15ac7865bac4e61032609aa151cea8ffde2c9768b0f91406b0b85e125c8078ea3b2d1111b007d58e58f3606de4597aac781ef46dd2fd0fc790df2b2692079f20d8f9bfbf4d704f265411f4c33091739822933599f6209ce5baa2204ecb6c71bf0bc3b032c8dbf539505c87a83c3f2a78521a4452245f2e54a01d5d23abfe0e78b246ce4bfb14ee17b9a5821dacc3fd713c43080138552e5e51cdb58e7f9082f4235a24b2c8c19045a3e213701b19f1b8897dfbc2af094cabe4826f2a6136c84fde2f3dcbb4017e28bb55e8a40c103747fc8dbd5b7eba780a879504f9bc958d9a7e026daab161b1e5d6808fec0a1174ebbbdce9622eed70d7698992c24c5d7e8c20a016c849a333eb7e6a2895c96c0c3f459b0813cadca8b4c6c5e678772bc619bf1017d0ef5a66840cc358d9c3a09fd6d2e802a514fedd8ada6d9f2b1d461c91b1580695242c171ab11c302366352c2f44a1af8ff05c3504ea3df065c4ce5cdf32dbd404bfe87c39bd4ab2d97f29e52dc402b08cae7cb07be8b150aead4330aea11eeb01979ba9d986b1230ef0498881412e6c6eff51f3d8b3ad372b6cfdd1fb2dbdb675a03d669093b3c3d7ec0daa0f4bbdf15877192004ea1bf49855fc8af1278aea1ab622151ad935f691eaf1d94e25df0b74039db489684642ad58cf4a863d800dd5773100b1d44b95b3d92698c691b94073678be3c8f50bab7870dfc575e40a24ceedb487b5a45c55d65538632ba5b4290d9e17d23367ff88902226435c220830f61e580855230f98b2487083fb6e8c9ad69b455767835ef1aac043ef286d83f8146a11024f4df398fb10bc534b4c880dfea45c0340c1622f0abe226331dbbd075a44e67c677574ef42347dce3b0bca34850dc3ef2ce21b6d1f69f804204ae5146094840b096f492f34f827ffa8cda57cbdfe97534aa8b1d7c5069f6a618b00ddb9df4e7857fab87077bcd085f48e5347aca64d231142c4029f345dbca5d2fbf0ba346c52805171c430c77064ed1b6bdd0e69d486b5382669929fe96a8b94e41af688e1a57e2efa63ff61564086d93591362a958f527f89da05446c1abc10b66c193507c197ab187bb68262985ef3dfccc3d82a506c480386b71d1d88315ad38fdd0f1c409d99409394b0596e4fd9df53bfa086629ffa38094557c61b020ddc274c484d3b3de8134afbcc353f9b0556f62701eae87bc8e0c5e5489f4873fb534047a1e83771baf9f7f876ca61b8cce3d0c236fd9b332d6bed666e0a877d4b13ab23df7447fbf04ae520bff9cee7084d8a396f621ed5770e643c8b04c9a0f0c44aa0da15b20456e8e54df", 0x1000}}, 0x1006) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x39425, &(0x7f0000000080)={[{@subsystem='rdma'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '{$'}}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48020}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r3, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x23}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x80004) 9.969052845s ago: executing program 2 (id=3972): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003b000103a28b00000000000005000010"], 0x14}}, 0xc048) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x3}]}, 0x8) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) fsetxattr(r2, &(0x7f0000000180)=@known='trusted.overlay.redirect\x00', &(0x7f0000000240)='\x00', 0x1, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000600000000200000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4d0916cb7a186d2a2e55ba48ad3f796547502777ff87f76b395c692150689bb4a628a9f3aa873e97ebd2a2089456afed727eaa0e6eaaad8669a20c12065b35a5", 0x39}, 0x48, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) kexec_load(0x6181, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="61b004d5c699fe7ea24ddd9b063737efaa5d265a6939f3cff8ff4419451bc2ffdfcc71a33b5ec82fc3ca15c06224f7e068bf3ea0cf55a09f689e1babafa71afa8f27c0241c8423a785aa0afc93a0a774c3f07b3d0a75ba127388aa6d33a7ba4d3dd85779f1b2de7791528706530ed799e70bcd8f7718459865625c3e49116f36fb16d2cdb387739e1fef78793094cfcadbe988d4bd1675546d67debdb6f37e9931d171271080d026a0d786739550a869aa274c76f6ed", 0xb6, 0x0, 0x6}], 0x150000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x41000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x7, 0xd}, {0x99f8d1e5a676aae2, 0x3000, 0x8, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x200000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x4, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0xfe, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0xf000, 0x6000, 0xc, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x1, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0x50008, 0x0, 0xfee7afff, 0x114, 0x0, 0xf801, 0x0, [0x80000005, 0x0, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$UI_GET_VERSION(r8, 0x8004552d, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 7.27555387s ago: executing program 2 (id=3977): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x25, 0x9, 0x0, 0x800, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$nfs4(&(0x7f0000000000)='-.%^%\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20c0c24, &(0x7f00000003c0)={[{'/^-(-\'.*\x03!'}, {'9p\x00'}, {'#j'}, {'./binderfs/binder0\x00'}, {}, {'\x00'}], [{@subj_user={'subj_user', 0x3d, '$.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000001}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getgroups(0x1, &(0x7f0000000600)=[0x0]) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './bus'}, 0x9) 6.294429962s ago: executing program 3 (id=3981): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @remote, 0x4001, "aaa517d60f2811d48c8a2cc60c4380bc23b510090000004a2864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x40}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x8}}, './cgroup.cpu/cgroup.procs\x00'}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r3, 0x0) io_uring_setup(0xfa4, &(0x7f0000000000)={0x0, 0xbe4d, 0x0, 0x3, 0x16b}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0x3}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd84\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaKS\xffn*\xcf\t\\\xces\x04\x1e*p\x9e\xf2\x16\x01`\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xab\x81\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xb1)*O\xe3\xc3L\xd6J\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e\x00\xb4\xc2\xac\xacT\xedq\x10\xb1HW\xben\xbc\x9b\x03\xb6#\xd6z\xe5\xf5\xb4\xcdBA(\xd1\xf3Sx\xad\xa37\xda7\xc6\xc3\xcc\xf6w\x19m_O\xc9C\xb4\xea\xd5U\xb3\x82\xab1\x8e\xfc\xe3\xa8\x89\xb1?\xbf\x84\xdb\x01\x00\xc1\r\x16\x15\x8a\x1d\xa1\x98\x0fS\xd1c\x01O\xd7oi\x96\ts\a \x90Y\xe4\xc2\xcbcC\xdb\xa9\x85'}]}, 0x10a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='0\n', 0x2) 5.747236189s ago: executing program 4 (id=3982): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r1, 0x301, 0x800000, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a45352, &(0x7f0000000180)={{0x80}, 'port1\x00', 0xc1, 0x10, 0x1, 0xfffff801, 0x8, 0x15, 0xff, 0x0, 0x3, 0xf}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) chdir(&(0x7f0000000100)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) 5.721671656s ago: executing program 2 (id=3983): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}, 0x400c0c8) r1 = syz_open_procfs(r0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000010c0)=0xfffffffc, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x99, "8be2fda3de9892a4bcd9041e5893515fa45946638432b3e32577a8fe9a82afbab784dcc9292e2f0b5163dc3bdbfbb45395739f1244dc7a759e20450d310e3d555ed12ddc6dbcc74d08dbf31e76f8e5f980706dfa26c2e50438c8781909e1bf777b1b7229d153d905fc913942819110ef4f164c31734cb1e781ec4a3740590fc98c4521eaa823de3963012a9c710966f9c9f778e7f5004d2145"}, &(0x7f0000000300)=0xa1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r4, 0x3}, 0xc) read$msr(r3, &(0x7f000001cd00)=""/102400, 0x19000) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000e40)={[0xfffffffffffffff9, 0xe34, 0x1, 0xfffffffffffffff8, 0xa, 0xfffffffffffffffb, 0x1000, 0x40100000000000b, 0x40, 0x0, 0x40100000000000, 0xe, 0x8000000000000002, 0x1, 0x1fffffffffffb, 0x4], 0x50000, 0x1c22c5}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.700594288s ago: executing program 4 (id=3984): r0 = socket$rxrpc(0x21, 0x2, 0xa) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000c21000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400dd05000008001b0000000000"], 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x23, 0x2, 0x0) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000069243279f92445cab5c9f940b4e32717e9549044fd98eb1ac224c8d9026595abb5802a4f16c4daad6bbb55363339cf55d1335", @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf2501000000080002000100000014000c0020010000000000000000000000000001080008000400000008000700", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYBLOB="080004006401010005000d0002000000"], 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x200840) ioctl$EVIOCGBITKEY(r8, 0x80404521, &(0x7f0000001500)=""/4096) 5.2153603s ago: executing program 3 (id=3986): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc9e, 0x0, 0x0, 0x0, 0xde9e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf5e}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r7 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r7, 0x0, 0xe) 4.841456855s ago: executing program 4 (id=3987): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000340)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r2 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x101801) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000004c0)={0xa, 0x0, 0x0, {0x0, 0x759bc414, 0x800007, 0x20003}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ff"], 0x38}}, 0x4040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$COMEDI_BUFINFO(r1, 0xc02c640e, &(0x7f0000000240)={0x10, 0x0, 0x1ff, 0x9, 0x9f, 0x800, 0x80000001}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x4, 0x0, 0x24}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x3}}, &(0x7f0000000200)={0x0, 0x1c, 0x34}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) 4.823530841s ago: executing program 0 (id=3988): r0 = socket$rxrpc(0x21, 0x2, 0xa) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r4) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r9, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000069243279f92445cab5c9f940b4e32717e9549044fd98eb1ac224c8d9026595abb5802a4f16c4daad6bbb55363339cf55d1335", @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf2501000000080002000100000014000c0020010000000000000000000000000001080008000400000008000700", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="080004006401010005000d0002000000"], 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x200840) ioctl$EVIOCGBITKEY(r10, 0x80404521, &(0x7f0000001500)=""/4096) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 4.380041594s ago: executing program 4 (id=3989): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x6) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc9e, 0x0, 0x0, 0x0, 0xde9e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf5e}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r7 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r7, 0x0, 0xe) 3.856323404s ago: executing program 0 (id=3990): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000440ffffffff0800064017000001080007400000000108000240000000170900010073797a30000000000900020073797a32"], 0x8c}}, 0x40) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) acct(&(0x7f0000000040)='./file0\x00') r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1b) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40850) syz_emit_ethernet(0x86, &(0x7f0000000540)={@random="e90c610faca2", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x78, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "c280440876218f4076c9f025d316ae0235103803e8122f7ac1bc5b24d97134ef", "eeb6ad324972d996277be1c7919f46f8", {"430f140c019f1953ffa9e47fadca163a", "3b70439ab82b682a6576c87b9f8bb9ff"}}}}}}}, 0x0) 3.777753001s ago: executing program 2 (id=3991): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000, @rand_addr=0xfffffffd}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xd]}, 0x8, 0x800) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r3 = signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000100)={0x3, 0x84}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x81, &(0x7f0000006680)) listxattr(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x40187014, &(0x7f0000000000)={0x1, 0x0, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 3.307858629s ago: executing program 3 (id=3992): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100002, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b7"], &(0x7f0000001540)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0x2}, 0x94) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x40) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x1, 0x1ff}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x20008) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x30bb03) poll(&(0x7f0000000140), 0x0, 0xe6) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8018}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0xff03, &(0x7f0000000200)=ANY=[], 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) 2.924922247s ago: executing program 0 (id=3993): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000, @rand_addr=0xfffffffd}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xd]}, 0x8, 0x800) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r3 = signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000100)={0x3, 0x84}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x81, &(0x7f0000006680)) listxattr(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x40187014, &(0x7f0000000000)={0x1, 0x0, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 2.893589636s ago: executing program 2 (id=3994): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x6) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc9e, 0x0, 0x0, 0x0, 0xde9e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf5e}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r7 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r7, 0x0, 0xe) 2.498827139s ago: executing program 4 (id=3995): r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = dup2(r0, r0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d1d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x10}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008841}, 0x8080) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat(r4, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff97ffffe, 0x4031, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) r7 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 2.164855694s ago: executing program 3 (id=3996): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003b000103a28b00000000000005000010"], 0x14}}, 0xc048) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x3}]}, 0x8) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) fsetxattr(r2, &(0x7f0000000180)=@known='trusted.overlay.redirect\x00', &(0x7f0000000240)='\x00', 0x1, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000600000000200000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4d0916cb7a186d2a2e55ba48ad3f796547502777ff87f76b395c692150689bb4a628a9f3aa873e97ebd2a2089456afed727eaa0e6eaaad8669a20c12065b35a5", 0x39}, 0x48, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) kexec_load(0x6181, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="61b004d5c699fe7ea24ddd9b063737efaa5d265a6939f3cff8ff4419451bc2ffdfcc71a33b5ec82fc3ca15c06224f7e068bf3ea0cf55a09f689e1babafa71afa8f27c0241c8423a785aa0afc93a0a774c3f07b3d0a75ba127388aa6d33a7ba4d3dd85779f1b2de7791528706530ed799e70bcd8f7718459865625c3e49116f36fb16d2cdb387739e1fef78793094cfcadbe988d4bd1675546d67debdb6f37e9931d171271080d026a0d786739550a869aa274c76f6ed", 0xb6, 0x0, 0x6}], 0x150000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x41000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x7, 0xd}, {0x99f8d1e5a676aae2, 0x3000, 0x8, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x200000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x4, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0xfe, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0xf000, 0x6000, 0xc, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x1, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0x50008, 0x0, 0xfee7afff, 0x114, 0x0, 0xf801, 0x0, [0x80000005, 0x0, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$UI_GET_VERSION(r8, 0x8004552d, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 1.985840747s ago: executing program 3 (id=3997): r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = dup2(r0, r0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d1d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, 0x0, 0x8080) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat(r3, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff97ffffe, 0x4031, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) r6 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 1.952030217s ago: executing program 0 (id=3998): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x25, 0x9, 0x0, 0x800, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$nfs4(&(0x7f0000000000)='-.%^%\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20c0c24, &(0x7f00000003c0)={[{'/^-(-\'.*\x03!'}, {'9p\x00'}, {'#j'}, {'./binderfs/binder0\x00'}, {}, {'\x00'}], [{@subj_user={'subj_user', 0x3d, '$.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000001}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getgroups(0x2, &(0x7f0000000600)=[0x0, 0x0]) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './bus'}, 0x9) 1.066888815s ago: executing program 0 (id=3999): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @remote, 0x4001, "aaa517d60f2811d48c8a2cc60c4380bc23b510090000004a2864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x40}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x8}}, './cgroup.cpu/cgroup.procs\x00'}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r3, 0x0) io_uring_setup(0xfa4, &(0x7f0000000000)={0x0, 0xbe4d, 0x0, 0x3, 0x16b}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0x3}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd84\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaKS\xffn*\xcf\t\\\xces\x04\x1e*p\x9e\xf2\x16\x01`\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xab\x81\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xb1)*O\xe3\xc3L\xd6J\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e\x00\xb4\xc2\xac\xacT\xedq\x10\xb1HW\xben\xbc\x9b\x03\xb6#\xd6z\xe5\xf5\xb4\xcdBA(\xd1\xf3Sx\xad\xa37\xda7\xc6\xc3\xcc\xf6w\x19m_O\xc9C\xb4\xea\xd5U\xb3\x82\xab1\x8e\xfc\xe3\xa8\x89\xb1?\xbf\x84\xdb\x01\x00\xc1\r\x16\x15\x8a\x1d\xa1\x98\x0fS\xd1c\x01O\xd7oi\x96\ts\a \x90Y\xe4\xc2\xcbcC\xdb\xa9\x85'}]}, 0x10a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='0\n', 0x2) 605.088324ms ago: executing program 4 (id=4000): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="28213d5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6d27", 0x62) r1 = socket(0x1e, 0x1, 0x0) openat$null(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x11, &(0x7f0000000700)="02000000097effff", 0x8) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, 0x0, 0xffffffffffffff3d) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='vhci_hcd.0\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 593.123654ms ago: executing program 3 (id=4001): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x25, 0x9, 0x0, 0x800, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$nfs4(&(0x7f0000000000)='-.%^%\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20c0c24, &(0x7f00000003c0)={[{'/^-(-\'.*\x03!'}, {'9p\x00'}, {'#j'}, {'./binderfs/binder0\x00'}, {}, {'\x00'}], [{@subj_user={'subj_user', 0x3d, '$.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000001}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getgroups(0x1, &(0x7f0000000600)=[0x0]) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './bus'}, 0x9) 23.825854ms ago: executing program 2 (id=4002): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000640), 0x1, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRES64=r2, @ANYBLOB="ac21334285517b5ad2df05c2fac64b3d81883f345e37291b82f842bf85ed438c844fad3ccdcd22cfb235226dc82a760cb8b6cd1d4fca3c016c59d268ba0ae90320d097ec2997ecf2540ca8524e592c01f3df2a2bdf32c83316f87960f9ddc3a3b15184accf0d4f4e685b35b017ba9207323970a5d3e0fa3b57cbe908993cae30f0b8aade77f9d36e5a0ea5a0f1484d6c2718413fd1b72163044df8b61331bcaab152bb6d8ccb8fca2fe33fbe036c129907591753c4789b8e7d4cb3867a3f2f0cc4073edcabc1ad220d4e8c19a46a", @ANYRESHEX=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c810) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="000a30000000090a0108000000000000000000061400128010000180090001007866724d00000000080007400000003714000000000000020500000aa616dc6b6c7edc3dd07a972891ead645c6e5fac48dfaadea0000"], 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0xc040) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64300000000000009400000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 0s ago: executing program 0 (id=4003): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc9e, 0x0, 0x0, 0x0, 0xde9e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf5e}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0xe) kernel console output (not intermixed with test programs): 689] dt9812 [ 903.783948][T18689] comedi: valid board names for ni_labpc_cs driver are: [ 903.783957][T18689] ni_labpc_cs [ 903.783963][T18689] comedi: valid board names for ni_daq_700 driver are: [ 903.783979][T18689] ni_daq_700 [ 903.785310][ T50] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 903.788251][T18689] comedi: valid board names for labpc_pci driver are: [ 903.788265][T18689] labpc_pci [ 903.788272][T18689] comedi: valid board names for adl_pci9118 driver are: [ 903.788281][T18689] pci9118dg [ 903.788289][T18689] pci9118hg [ 903.788296][T18689] pci9118hr [ 903.788305][T18689] comedi: valid board names for 8255_pci driver are: [ 903.788312][T18689] 8255_pci [ 903.788319][T18689] comedi: valid board names for s526 driver are: [ 903.788328][T18689] s526 [ 903.797112][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.801158][T18689] comedi: valid board names for multiq3 driver are: [ 903.808295][ T50] usb 5-1: config 0 descriptor?? [ 903.809443][T18689] multiq3 [ 903.846570][T18689] comedi: valid board names for pcmuio driver are: [ 903.848788][T18689] pcmuio48 [ 903.849860][T18689] pcmuio96 [ 903.851283][T18689] comedi: valid board names for pcmmio driver are: [ 903.854045][T18689] pcmmio [ 903.855274][T18689] comedi: valid board names for pcmda12 driver are: [ 903.857563][T18689] pcmda12 [ 903.858603][T18689] comedi: valid board names for pcmad driver are: [ 903.860742][T18689] pcmad12 [ 903.861768][T18689] pcmad16 [ 903.862780][T18689] comedi: valid board names for ni_labpc driver are: [ 903.864918][T18689] lab-pc-1200 [ 903.866099][T18689] lab-pc-1200ai [ 903.867300][T18689] lab-pc+ [ 903.868327][T18689] comedi: valid board names for atmio16 driver are: [ 903.870443][T18689] atmio16 [ 903.871428][T18689] atmio16d [ 903.872437][T18689] comedi: valid board names for ni_at_ao driver are: [ 903.874556][T18689] at-ao-6 [ 903.875559][T18689] at-ao-10 [ 903.876801][T18689] comedi: valid board names for ni_at_a2150 driver are: [ 903.879407][T18689] ni_at_a2150 [ 903.880520][T18689] comedi: valid board names for adq12b driver are: [ 903.882554][T18689] adq12b [ 903.883499][T18689] comedi: valid board names for mpc624 driver are: [ 903.885563][T18689] mpc624 [ 903.886625][T18689] comedi: valid board names for c6xdigio driver are: [ 903.888827][T18689] c6xdigio [ 903.890158][T18689] comedi: valid board names for aio_iiro_16 driver are: [ 903.892967][T18689] aio_iiro_16 [ 903.894079][T18689] comedi: valid board names for aio_aio12_8 driver are: [ 903.896394][T18689] aio_aio12_8 [ 903.897556][T18689] aio_ai12_8 [ 903.898642][T18689] aio_ao12_4 [ 903.899735][T18689] comedi: valid board names for fl512 driver are: [ 903.901773][T18689] fl512 [ 903.902705][T18689] comedi: valid board names for dmm32at driver are: [ 903.904844][T18689] dmm32at [ 903.905851][T18689] comedi: valid board names for dt282x driver are: [ 903.908083][T18689] dt2821 [ 903.909064][T18689] dt2821-f [ 903.910078][T18689] dt2821-g [ 903.911198][T18689] dt2823 [ 903.912135][T18689] dt2824-pgh [ 903.913199][T18689] dt2824-pgl [ 903.914252][T18689] dt2825 [ 903.915462][T18689] dt2827 [ 903.916863][T18689] dt2828 [ 903.918083][T18689] dt2829 [ 903.919393][T18689] dt21-ez [ 903.920631][T18689] dt23-ez [ 903.921835][T18689] dt24-ez [ 903.922869][T18689] dt24-ez-pgl [ 903.924064][T18689] comedi: valid board names for dt2817 driver are: [ 903.926508][T18689] dt2817 [ 903.927766][T18689] comedi: valid board names for dt2815 driver are: [ 903.930468][T18689] dt2815 [ 903.931708][T18689] comedi: valid board names for dt2814 driver are: [ 903.934502][T18689] dt2814 [ 903.935776][T18689] comedi: valid board names for dt2811 driver are: [ 903.938533][T18689] dt2811-pgh [ 903.939938][T18689] dt2811-pgl [ 903.941263][T18689] comedi: valid board names for dt2801 driver are: [ 903.943281][T18689] dt2801 [ 903.944255][T18689] comedi: valid board names for das6402 driver are: [ 903.946394][T18689] das6402-12 [ 903.947463][T18689] das6402-16 [ 903.948526][T18689] comedi: valid board names for das1800 driver are: [ 903.950871][T18689] das-1701st [ 903.951938][T18689] das-1701st-da [ 903.953329][T18689] das-1702st [ 903.954688][T18689] das-1702st-da [ 903.956269][T18689] das-1702hr [ 903.957380][T18689] das-1702hr-da [ 903.958771][T18689] das-1701ao [ 903.959904][T18689] das-1702ao [ 903.961241][T18689] das-1801st [ 903.962335][T18689] das-1801st-da [ 903.963535][T18689] das-1802st [ 903.964650][T18689] das-1802st-da [ 903.965820][T18689] das-1802hr [ 903.967409][T18689] das-1802hr-da [ 903.968901][T18689] das-1801hc [ 903.970346][T18689] das-1802hc [ 903.971460][T18689] das-1801ao [ 903.972523][T18689] das-1802ao [ 903.973584][T18689] comedi: valid board names for das800 driver are: [ 903.976318][T18689] das-800 [ 903.977630][T18689] cio-das800 [ 903.979043][T18689] das-801 [ 903.980169][T18689] cio-das801 [ 903.981568][T18689] das-802 [ 903.982886][T18689] cio-das802 [ 903.984254][T18689] cio-das802/16 [ 903.985633][T18689] comedi: valid board names for isa-das08 driver are: [ 903.988437][T18689] isa-das08 [ 903.989823][T18689] das08-pgm [ 903.991186][T18689] das08-pgh [ 903.992550][T18689] das08-pgl [ 903.993873][T18689] das08-aoh [ 903.995245][T18689] das08-aol [ 903.996794][T18689] das08-aom [ 903.998150][T18689] das08/jr-ao [ 903.999682][T18689] das08jr-16-ao [ 904.001149][T18689] pc104-das08 [ 904.002629][T18689] das08jr/16 [ 904.004077][T18689] comedi: valid board names for das16m1 driver are: [ 904.006940][T18689] das16m1 [ 904.008228][T18689] comedi: valid board names for dac02 driver are: [ 904.010412][T18689] dac02 [ 904.011588][T18689] comedi: valid board names for rti802 driver are: [ 904.014191][T18689] rti802 [ 904.015474][T18689] comedi: valid board names for rti800 driver are: [ 904.018288][T18689] rti800 [ 904.019579][T18689] rti815 [ 904.020843][T18689] comedi: valid board names for pcm3724 driver are: [ 904.023342][T18689] pcm3724 [ 904.024477][T18689] comedi: valid board names for pcl818 driver are: [ 904.027362][T18689] pcl818l [ 904.028578][T18689] pcl818h [ 904.029647][T18689] pcl818hd [ 904.030890][T18689] pcl818hg [ 904.032193][T18689] pcl818 [ 904.032474][ T50] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 904.033435][T18689] pcl718 [ 904.038428][T18689] pcm3718 [ 904.039730][T18689] comedi: valid board names for pcl816 driver are: [ 904.042496][T18689] pcl816 [ 904.043541][T18689] pcl814b [ 904.044552][T18689] comedi: valid board names for pcl812 driver are: [ 904.047110][T18689] pcl812 [ 904.048402][T18689] pcl812pg [ 904.049716][T18689] acl8112pg [ 904.050821][T18689] acl8112dg [ 904.051931][T18689] acl8112hg [ 904.053263][T18689] a821pgl [ 904.054549][T18689] a821pglnda [ 904.055948][T18689] a821pgh [ 904.057925][T18689] a822pgl [ 904.059204][T18689] a822pgh [ 904.060430][T18689] a823pgl [ 904.061676][T18689] a823pgh [ 904.062994][T18689] pcl813 [ 904.064075][T18689] pcl813b [ 904.065401][T18689] acl8113 [ 904.066591][T18689] iso813 [ 904.067925][T18689] acl8216 [ 904.069091][T18689] a826pg [ 904.070054][T18689] comedi: valid board names for pcl730 driver are: [ 904.072273][T18689] pcl730 [ 904.073228][T18689] iso730 [ 904.074183][T18689] acl7130 [ 904.075248][T18689] pcm3730 [ 904.076555][T18689] pcl725 [ 904.077727][T18689] p8r8dio [ 904.078974][T18689] acl7225b [ 904.080228][T18689] p16r16dio [ 904.081570][T18689] pcl733 [ 904.082880][T18689] pcl734 [ 904.084103][T18689] opmm-1616-xt [ 904.085599][T18689] pearl-mm-p [ 904.087067][T18689] ir104-pbf [ 904.088364][T18689] comedi: valid board names for pcl726 driver are: [ 904.090926][T18689] pcl726 [ 904.092112][T18689] pcl727 [ 904.093355][T18689] pcl728 [ 904.094521][T18689] acl6126 [ 904.095783][T18689] acl6128 [ 904.097795][T18689] comedi: valid board names for pcl724 driver are: [ 904.100424][T18689] pcl724 [ 904.101593][T18689] pcl722 [ 904.102810][T18689] pcl731 [ 904.103994][T18689] acl7122 [ 904.105265][T18689] acl7124 [ 904.106605][T18689] pet48dio [ 904.107865][T18689] pcmio48 [ 904.109139][T18689] onyx-mm-dio [ 904.110510][T18689] comedi: valid board names for pcl711 driver are: [ 904.113061][T18689] pcl711 [ 904.114265][T18689] pcl711b [ 904.115561][T18689] acl8112hg [ 904.117033][T18689] acl8112dg [ 904.118338][T18689] comedi: valid board names for amplc_pc263 driver are: [ 904.121104][T18689] pc263 [ 904.122252][T18689] comedi: valid board names for amplc_pc236 driver are: [ 904.124973][T18689] pc36at [ 904.126317][T18689] comedi: valid board names for amplc_dio200 driver are: [ 904.129032][T18689] pc212e [ 904.130220][T18689] pc214e [ 904.131487][T18689] pc215e [ 904.132670][T18689] pc218e [ 904.133868][T18689] pc272e [ 904.135090][T18689] comedi: valid board names for comedi_parport driver are: [ 904.138013][T18689] comedi_parport [ 904.139490][T18689] comedi: valid board names for comedi_test driver are: [ 904.142093][T18689] comedi_test [ 904.143459][T18689] comedi: valid board names for comedi_bond driver are: [ 904.146765][T18689] comedi_bond [ 904.237331][ T7157] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 904.398288][ T7157] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 904.406073][ T7157] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.412299][ T7157] usb 7-1: config 0 has no interface number 0 [ 904.417054][ T7157] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 904.426090][ T7157] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 904.436251][ T7157] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 904.441363][ T7157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.448167][ T7157] usb 7-1: config 0 descriptor?? [ 904.450768][T18695] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 904.454888][ T7157] ldusb 7-1:0.55: Interrupt in endpoint not found [ 904.611582][ T5934] usb 5-1: USB disconnect, device number 29 [ 904.623627][ T5934] usblp0: removed [ 904.665414][ T10] usb 7-1: USB disconnect, device number 11 [ 905.426130][T14197] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 905.587793][T14197] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 905.590474][T14197] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.594005][T14197] usb 5-1: config 0 has no interface number 0 [ 905.596384][T14197] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 905.599786][T14197] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 905.603315][T14197] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 905.606549][T14197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.610352][T14197] usb 5-1: config 0 descriptor?? [ 905.615555][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 905.615565][ T42] audit: type=1800 audit(1785667212.352:160): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300802 res=0 errno=0 [ 905.624483][T18709] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 905.635884][T14197] ldusb 5-1:0.55: Interrupt in endpoint not found [ 905.641943][ T42] audit: type=1800 audit(1785667212.352:161): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=300831 res=0 errno=0 [ 905.653727][ T42] audit: type=1800 audit(1785667212.372:162): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=300809 res=0 errno=0 [ 905.660186][ T42] audit: type=1800 audit(1785667212.372:163): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=300810 res=0 errno=0 [ 905.666706][ T42] audit: type=1800 audit(1785667212.372:164): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=300811 res=0 errno=0 [ 905.673126][ T42] audit: type=1800 audit(1785667212.382:165): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=300851 res=0 errno=0 [ 905.833221][T18713] syzkaller0: entered promiscuous mode [ 905.835649][T18713] syzkaller0: entered allmulticast mode [ 906.839748][T18717] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 907.708162][T18720] syz.3.3680: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 907.713380][T18720] CPU: 3 UID: 0 PID: 18720 Comm: syz.3.3680 Tainted: G L syzkaller #0 PREEMPT(full) [ 907.713410][T18720] Tainted: [L]=SOFTLOCKUP [ 907.713416][T18720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 907.713428][T18720] Call Trace: [ 907.713436][T18720] [ 907.713449][T18720] dump_stack_lvl+0x100/0x190 [ 907.713478][T18720] warn_alloc.cold+0x94/0xa8 [ 907.713494][T18720] ? __pfx_warn_alloc+0x10/0x10 [ 907.713507][T18720] ? find_held_lock+0x2b/0x80 [ 907.713522][T18720] ? psi_memstall_leave+0x19c/0x360 [ 907.713539][T18720] ? psi_memstall_leave+0x1e6/0x360 [ 907.713556][T18720] ? psi_memstall_leave+0x1eb/0x360 [ 907.713571][T18720] ? lockdep_hardirqs_on+0x78/0x100 [ 907.713590][T18720] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 907.713611][T18720] ? __pfx_clockevents_program_event+0x10/0x10 [ 907.713626][T18720] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 907.713640][T18720] ? irqentry_exit+0x24d/0xa00 [ 907.713654][T18720] ? lockdep_hardirqs_on+0x78/0x100 [ 907.713668][T18720] ? irqentry_exit+0x24d/0xa00 [ 907.713691][T18720] ? irqentry_exit+0x24d/0xa00 [ 907.713704][T18720] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 907.713722][T18720] ? policy_nodemask+0xed/0x4f0 [ 907.713739][T18720] alloc_pages_mpol+0x1fb/0x540 [ 907.713756][T18720] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 907.713774][T18720] ? alloc_pages_noprof+0xb0/0x160 [ 907.713786][T18720] alloc_pages_noprof+0x1a/0x160 [ 907.713797][T18720] kimage_alloc_pages+0x72/0x380 [ 907.713815][T18720] kimage_alloc_control_pages+0x157/0xa20 [ 907.713915][T18720] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 907.713928][T18720] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 907.713950][T18720] do_kexec_load+0x275/0x810 [ 907.713969][T18720] ? __pfx_do_kexec_load+0x10/0x10 [ 907.713990][T18720] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 907.714010][T18720] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 907.714033][T18720] __do_fast_syscall_32+0xe7/0x970 [ 907.714052][T18720] do_fast_syscall_32+0x32/0x70 [ 907.714068][T18720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 907.714083][T18720] RIP: 0023:0xf707efec [ 907.714098][T18720] Code: Unable to access opcode bytes at 0xf707efc2. [ 907.714103][T18720] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011b [ 907.714115][T18720] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 907.714122][T18720] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 907.714140][T18720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 907.714148][T18720] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 907.714155][T18720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 907.714169][T18720] [ 907.714210][T18720] Mem-Info: [ 907.820423][T18720] active_anon:442 inactive_anon:345 isolated_anon:0 [ 907.820423][T18720] active_file:1428 inactive_file:7163 isolated_file:0 [ 907.820423][T18720] unevictable:1768 dirty:325 writeback:0 [ 907.820423][T18720] slab_reclaimable:6203 slab_unreclaimable:60186 [ 907.820423][T18720] mapped:23658 shmem:1768 pagetables:1165 [ 907.820423][T18720] sec_pagetables:315 bounce:0 [ 907.820423][T18720] kernel_misc_reclaimable:0 [ 907.820423][T18720] free:25101 free_pcp:538 free_cma:0 [ 907.835344][T18720] Node 0 active_anon:40kB inactive_anon:36kB active_file:4kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7680kB pagetables:1224kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 907.846735][T18720] Node 1 active_anon:1828kB inactive_anon:1044kB active_file:5808kB inactive_file:28552kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:94604kB dirty:1300kB writeback:0kB shmem:5536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5732kB pagetables:3436kB sec_pagetables:136kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 907.858070][T18720] Node 0 DMA free:3888kB boost:2048kB min:2792kB low:2976kB high:3160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 907.868084][T18720] lowmem_reserve[]: 0 280 280 280 280 [ 907.869892][T18720] Node 0 DMA32 free:30248kB boost:20480kB min:34400kB low:37880kB high:41360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:36kB active_file:4kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:1960kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:3808kB local_pcp:0kB free_cma:0kB [ 907.880686][T18720] lowmem_reserve[]: 0 0 0 0 0 [ 907.882721][T18720] Node 1 DMA32 free:64332kB boost:18432kB min:64444kB low:75944kB high:87444kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1828kB inactive_anon:944kB active_file:5808kB inactive_file:28552kB unevictable:5536kB writepending:1300kB zspages:4568kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:452kB local_pcp:0kB free_cma:0kB [ 907.893602][T18720] lowmem_reserve[]: 0 0 0 0 0 [ 907.895287][T18720] Node 0 DMA: 241*4kB (UM) 48*8kB (UM) 19*16kB (UM) 22*32kB (UM) 8*64kB (UM) 4*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3892kB [ 907.900385][T18720] Node 0 DMA32: 9*4kB (UE) 7*8kB (E) 135*16kB (UE) 285*32kB (UE) 90*64kB (UME) 42*128kB (UME) 8*256kB (U) 9*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 29164kB [ 907.906698][T18720] Node 1 DMA32: 866*4kB (UME) 1180*8kB (UME) 603*16kB (UME) 306*32kB (UME) 126*64kB (UME) 44*128kB (UME) 22*256kB (UME) 12*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 63960kB [ 907.912601][T18720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 907.916525][T18720] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 907.920137][T18720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 907.923317][T18720] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 907.926699][T18720] 10578 total pagecache pages [ 907.928534][T18720] 259 pages in swap cache [ 907.930232][T18720] Free swap = 100612kB [ 907.932058][T18720] Total swap = 124996kB [ 907.933750][T18720] 524155 pages RAM [ 907.935312][T18720] 0 pages HighMem/MovableOnly [ 907.937197][T18720] 211540 pages reserved [ 907.938638][T18720] 0 pages cma reserved [ 908.167127][T14197] usb 5-1: USB disconnect, device number 30 [ 908.373674][T18720] kexec: Could not allocate control_code_buffer [ 908.506696][ T42] audit: type=1800 audit(1785667215.212:166): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301090 res=0 errno=0 [ 909.376608][ T5934] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 909.562814][ T5934] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 909.568016][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.572333][ T5934] usb 5-1: config 0 has no interface number 0 [ 909.575209][ T5934] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 909.579146][ T5934] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 909.583850][ T5934] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 909.587716][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.616451][ T5934] usb 5-1: config 0 descriptor?? [ 909.621463][ T42] audit: type=1800 audit(1785667216.362:167): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301117 res=0 errno=0 [ 909.621967][T18738] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 909.647594][ T5934] ldusb 5-1:0.55: Interrupt in endpoint not found [ 909.686198][ T42] audit: type=1800 audit(1785667216.372:168): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=301146 res=0 errno=0 [ 909.693273][ T42] audit: type=1800 audit(1785667216.372:169): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=301124 res=0 errno=0 [ 910.076605][ T50] usb 5-1: USB disconnect, device number 31 [ 911.660027][T18759] 9pnet_virtio: no channels available for device syz [ 912.046105][T14197] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 912.198679][T14197] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 912.202209][T14197] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.206888][T14197] usb 7-1: config 0 has no interface number 0 [ 912.209751][T14197] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 912.214068][T14197] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 912.219010][T14197] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 912.222864][T14197] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.229792][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 912.229802][ T42] audit: type=1800 audit(1785667218.972:174): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301278 res=0 errno=0 [ 912.238087][T14197] usb 7-1: config 0 descriptor?? [ 912.242637][T18761] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 912.246833][ T42] audit: type=1800 audit(1785667218.972:175): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=301307 res=0 errno=0 [ 912.250193][T14197] ldusb 7-1:0.55: Interrupt in endpoint not found [ 912.259120][ T42] audit: type=1800 audit(1785667218.972:176): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=301285 res=0 errno=0 [ 912.266207][ T42] audit: type=1800 audit(1785667218.982:177): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=301286 res=0 errno=0 [ 912.279078][ T42] audit: type=1800 audit(1785667218.982:178): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=301287 res=0 errno=0 [ 912.285655][ T42] audit: type=1800 audit(1785667218.992:179): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301327 res=0 errno=0 [ 912.972225][T18763] kexec: Could not allocate control_code_buffer [ 913.019946][T18766] 9pnet_virtio: no channels available for device syz [ 914.747300][T12064] usb 7-1: USB disconnect, device number 12 [ 915.992732][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 916.001509][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 916.002922][ T42] audit: type=1800 audit(1785667222.742:180): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301380 res=0 errno=0 [ 916.004701][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 916.027789][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 916.031570][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 916.045807][ T42] audit: type=1800 audit(1785667222.782:181): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301392 res=0 errno=0 [ 916.130373][ T42] audit: type=1800 audit(1785667222.832:182): pid=17722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301453 res=0 errno=0 [ 916.157393][ T42] audit: type=1800 audit(1785667222.862:183): pid=17722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301475 res=0 errno=0 [ 916.195412][T18787] can0: slcan on ttyS3. [ 917.211033][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.345271][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 917.345284][ T42] audit: type=1800 audit(1785667224.082:186): pid=18808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3702" name="unbind" dev="sysfs" ino=28559 res=0 errno=0 [ 917.361323][T18808] uhci_hcd 0000:00:1d.0: remove, state 4 [ 917.369032][T18808] usb usb1: USB disconnect, device number 1 [ 917.381994][T18785] can0 (unregistered): slcan off ttyS3. [ 917.452102][ T42] audit: type=1800 audit(1785667224.192:187): pid=18811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3702" name="bind" dev="sysfs" ino=28560 res=0 errno=0 [ 917.521997][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.621286][T18815] syzkaller0: entered promiscuous mode [ 917.623554][T18815] syzkaller0: entered allmulticast mode [ 917.648142][ T5845] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 917.757707][T18808] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 917.808880][ T5845] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 917.811828][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.815086][ T5845] usb 5-1: config 0 has no interface number 0 [ 917.817688][ T5845] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 917.821772][ T5845] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 917.825619][ T5845] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 917.829879][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.837245][ T5845] usb 5-1: config 0 descriptor?? [ 917.839548][T18810] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 917.847519][ T42] audit: type=1800 audit(1785667224.592:188): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=303436 res=0 errno=0 [ 917.873535][ T42] audit: type=1800 audit(1785667224.622:189): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=303465 res=0 errno=0 [ 917.885609][ T5845] ldusb 5-1:0.55: Interrupt in endpoint not found [ 917.906695][ T42] audit: type=1800 audit(1785667224.622:190): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=303443 res=0 errno=0 [ 917.938305][ T42] audit: type=1800 audit(1785667224.622:191): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=303444 res=0 errno=0 [ 917.944914][ T42] audit: type=1800 audit(1785667224.632:192): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=303445 res=0 errno=0 [ 917.961321][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.986662][ T42] audit: type=1800 audit(1785667224.702:193): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=303489 res=0 errno=0 [ 918.054999][T18789] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.069345][T18789] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.074546][T18789] bridge_slave_0: entered allmulticast mode [ 918.078976][T18789] bridge_slave_0: entered promiscuous mode [ 918.084099][T18789] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.087689][T18789] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.093498][T18789] bridge_slave_1: entered allmulticast mode [ 918.107058][T18789] bridge_slave_1: entered promiscuous mode [ 918.133605][ T5754] Bluetooth: hci3: command tx timeout [ 918.140854][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.193107][T18789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.203044][T18789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.234926][T18789] team0: Port device team_slave_0 added [ 918.248372][T18789] team0: Port device team_slave_1 added [ 918.290945][T18789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.295060][T18789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.303818][T18789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.309513][T18789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.311838][T18789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.320895][T18789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.349428][ T42] audit: type=1800 audit(1785667225.092:194): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=305384 res=0 errno=0 [ 918.379468][ T42] audit: type=1800 audit(1785667225.122:195): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=305802 res=0 errno=0 [ 918.399338][T18789] hsr_slave_0: entered promiscuous mode [ 918.404345][T18789] hsr_slave_1: entered promiscuous mode [ 918.406577][T18789] debugfs: 'hsr0' already exists in 'hsr' [ 918.408376][T18789] Cannot create hsr debugfs directory [ 918.578059][ T13] bridge_slave_1: left allmulticast mode [ 918.583253][ T13] bridge_slave_1: left promiscuous mode [ 918.585247][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.614005][ T13] bridge_slave_0: left allmulticast mode [ 918.622317][ T13] bridge_slave_0: left promiscuous mode [ 918.629228][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.651719][ T13] dvmrp0: left allmulticast mode [ 918.658192][ T13] dvmrp8: left allmulticast mode [ 918.842717][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.853472][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.858845][ T13] bond0 (unregistering): Released all slaves [ 918.871753][ T13] bond1 (unregistering): Released all slaves [ 918.893828][ T5457] 8021q: adding VLAN 0 to HW filter on device eth3 [ 919.280727][T18789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 919.285639][T18789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 919.290614][ T5457] 8021q: adding VLAN 0 to HW filter on device eth4 [ 919.293418][T18789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 919.297804][T18789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 919.300559][T18789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 919.305396][T18789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 919.339934][ T13] hsr_slave_0: left promiscuous mode [ 919.345229][ T13] hsr_slave_1: left promiscuous mode [ 919.348480][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.353847][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.361132][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.365146][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.381375][ T13] dummy0: left allmulticast mode [ 919.386335][ T13] veth1_macvtap: left promiscuous mode [ 919.388116][ T13] veth0_macvtap: left promiscuous mode [ 919.389872][ T13] veth1_vlan: left promiscuous mode [ 919.391568][ T13] veth0_vlan: left promiscuous mode [ 919.669392][ T13] team0 (unregistering): Port device team_slave_1 removed [ 919.680142][ T13] team0 (unregistering): Port device team_slave_0 removed [ 919.780645][T18789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 919.790043][T18789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 920.187000][ T5754] Bluetooth: hci3: command tx timeout [ 920.350924][ T5845] usb 5-1: USB disconnect, device number 32 [ 922.278498][ T5754] Bluetooth: hci3: command tx timeout [ 923.415402][ T5457] 8021q: adding VLAN 0 to HW filter on device eth2 [ 923.588404][T18789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.609496][T18789] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.619266][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.622359][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.640154][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.643270][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.702116][T18789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 923.757372][ T5457] 8021q: adding VLAN 0 to HW filter on device eth5 [ 923.761044][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3711'. [ 923.765031][T18880] netlink: 'syz.2.3711': attribute type 10 has an invalid length. [ 923.768625][T18880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3711'. [ 924.354986][ T5754] Bluetooth: hci3: command tx timeout [ 924.472869][T18789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.934399][T18906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3715'. [ 924.959424][T18789] veth0_vlan: entered promiscuous mode [ 924.974692][T18789] veth1_vlan: entered promiscuous mode [ 925.007596][T18789] veth0_macvtap: entered promiscuous mode [ 925.013870][T18789] veth1_macvtap: entered promiscuous mode [ 925.028922][T18789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.040814][T18789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.102609][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 925.102625][ T42] audit: type=1800 audit(1785667231.842:220): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308154 res=0 errno=0 [ 925.112975][T13070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.117261][T13070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.130647][T13070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.138292][T13070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.164434][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3715'. [ 925.178148][T13319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.181503][T13319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.191744][ T42] audit: type=1800 audit(1785667231.932:221): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308280 res=0 errno=0 [ 925.201501][T18915] FAULT_INJECTION: forcing a failure. [ 925.201501][T18915] name failslab, interval 1, probability 0, space 0, times 0 [ 925.217806][T18915] CPU: 1 UID: 0 PID: 18915 Comm: syz.3.3716 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.217827][T18915] Tainted: [L]=SOFTLOCKUP [ 925.217832][T18915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 925.217839][T18915] Call Trace: [ 925.217843][T18915] [ 925.217848][T18915] dump_stack_lvl+0x100/0x190 [ 925.217866][T18915] should_fail_ex.cold+0x5/0xa [ 925.217878][T18915] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 925.217892][T18915] should_failslab+0xc2/0x120 [ 925.217908][T18915] kmem_cache_alloc_noprof+0x91/0x6a0 [ 925.217923][T18915] ? skb_clone+0x190/0x400 [ 925.217943][T18915] skb_clone+0x190/0x400 [ 925.217959][T18915] netlink_deliver_tap+0xaed/0xcc0 [ 925.217977][T18915] netlink_unicast+0x62b/0x850 [ 925.217994][T18915] ? __pfx_netlink_unicast+0x10/0x10 [ 925.218011][T18915] netlink_sendmsg+0x8b0/0xda0 [ 925.218026][T18915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.218040][T18915] ? apparmor_socket_sendmsg+0x15b/0x270 [ 925.218056][T18915] ____sys_sendmsg+0xa4d/0xbe0 [ 925.218068][T18915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.218082][T18915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 925.218107][T18915] ___sys_sendmsg+0x190/0x1e0 [ 925.218144][T18915] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.218174][T18915] ? find_held_lock+0x2b/0x80 [ 925.218232][T18915] __sys_sendmsg+0x160/0x210 [ 925.218255][T18915] ? __pfx___sys_sendmsg+0x10/0x10 [ 925.218275][T18915] ? __pfx_ksys_write+0x10/0x10 [ 925.218290][T18915] __do_fast_syscall_32+0xe7/0x970 [ 925.218310][T18915] ? lockdep_hardirqs_on+0x78/0x100 [ 925.218327][T18915] do_fast_syscall_32+0x32/0x70 [ 925.218343][T18915] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 925.218358][T18915] RIP: 0023:0xf707efec [ 925.218374][T18915] Code: Unable to access opcode bytes at 0xf707efc2. [ 925.218380][T18915] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 925.218391][T18915] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 925.218398][T18915] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 925.218405][T18915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 925.218411][T18915] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 925.218418][T18915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 925.218438][T18915] [ 925.242712][T13319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.313821][T13319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.384602][T18919] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 925.426159][ T846] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 925.597474][ T846] usb 5-1: config 0 has no interfaces? [ 925.599831][ T846] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 925.615110][ T846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.624091][ T42] audit: type=1800 audit(1785667232.372:222): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308447 res=0 errno=0 [ 925.630632][ T846] usb 5-1: config 0 descriptor?? [ 925.644248][ T42] audit: type=1800 audit(1785667232.382:223): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308466 res=0 errno=0 [ 925.683326][ T42] audit: type=1800 audit(1785667232.382:224): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=308495 res=0 errno=0 [ 925.695578][ T42] audit: type=1800 audit(1785667232.382:225): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=308473 res=0 errno=0 [ 925.702823][ T42] audit: type=1800 audit(1785667232.382:226): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=308474 res=0 errno=0 [ 925.714702][ T42] audit: type=1800 audit(1785667232.392:227): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=308475 res=0 errno=0 [ 925.732513][ T60] IPVS: starting estimator thread 0... [ 925.735827][T18934] 9pnet_virtio: no channels available for device syz [ 925.876196][T18932] IPVS: using max 43 ests per chain, 103200 per kthread [ 926.739473][ T42] audit: type=1800 audit(1785667233.482:228): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35158 res=0 errno=0 [ 926.759512][ T42] audit: type=1800 audit(1785667233.492:229): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35181 res=0 errno=0 [ 927.006180][ T5934] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 927.169483][ T5934] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 927.174973][ T5934] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.181962][ T5934] usb 9-1: Product: syz [ 927.183391][ T5934] usb 9-1: Manufacturer: syz [ 927.187979][ T5934] usb 9-1: SerialNumber: syz [ 927.222954][T18949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3723'. [ 927.224569][ T50] usb 5-1: USB disconnect, device number 33 [ 927.596266][ T5934] rtl8150 9-1:1.0: couldn't reset the device [ 927.599178][ T5934] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 927.616274][ T5934] usb 9-1: USB disconnect, device number 2 [ 929.172819][T18976] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 929.217820][T18976] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 929.219995][T18976] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 929.224626][T18976] vhci_hcd vhci_hcd.0: Device attached [ 929.292755][T13964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.301906][T13964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.432036][T18976] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 929.536190][ T5845] usb 42-1: SetAddress Request (10) to port 0 [ 929.536279][ T5845] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 929.812387][T18977] vhci_hcd: connection reset by peer [ 929.817244][T13070] vhci_hcd vhci_hcd.2: stop threads [ 929.819502][T13070] vhci_hcd vhci_hcd.2: release socket [ 929.821705][T13070] vhci_hcd vhci_hcd.2: disconnect device [ 929.846144][ T50] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 929.848967][T18989] syzkaller0: entered promiscuous mode [ 929.852453][T18989] syzkaller0: entered allmulticast mode [ 930.018540][ T50] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 930.021686][ T50] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.024981][ T50] usb 5-1: config 0 has no interface number 0 [ 930.028506][ T50] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 930.032796][ T50] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 930.038234][ T50] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 930.039323][T18992] binder_alloc: 18991: binder_alloc_buf, no vma [ 930.041941][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.049428][ T50] usb 5-1: config 0 descriptor?? [ 930.055328][T18987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 930.061164][ T50] ldusb 5-1:0.55: Interrupt in endpoint not found [ 931.067292][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.326240][T14159] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 931.479931][T14159] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 931.483020][T14159] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.485927][T14159] usb 9-1: Product: syz [ 931.488471][T14159] usb 9-1: Manufacturer: syz [ 931.490559][T14159] usb 9-1: SerialNumber: syz [ 931.498658][ T42] kauditd_printk_skb: 72 callbacks suppressed [ 931.498714][ T42] audit: type=1800 audit(1785667238.242:302): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309151 res=0 errno=0 [ 931.509211][ T42] audit: type=1800 audit(1785667238.242:303): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=309183 res=0 errno=0 [ 931.515745][ T42] audit: type=1800 audit(1785667238.242:304): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=309158 res=0 errno=0 [ 931.522652][ T42] audit: type=1800 audit(1785667238.242:305): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=309159 res=0 errno=0 [ 931.728915][ T42] audit: type=1800 audit(1785667238.472:306): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309304 res=0 errno=0 [ 931.757519][ T42] audit: type=1800 audit(1785667238.502:307): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309430 res=0 errno=0 [ 931.767994][ T42] audit: type=1800 audit(1785667238.512:308): pid=17722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=309434 res=0 errno=0 [ 931.778958][ T42] audit: type=1800 audit(1785667238.522:309): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=309462 res=0 errno=0 [ 931.852035][T14159] rtl8150 9-1:1.0: couldn't reset the device [ 931.854727][T14159] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 931.860518][ T42] audit: type=1800 audit(1785667238.602:310): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=309180 res=0 errno=0 [ 931.867991][T14159] usb 9-1: USB disconnect, device number 3 [ 931.869044][ T42] audit: type=1800 audit(1785667238.602:311): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=309181 res=0 errno=0 [ 931.886165][ T7157] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 932.056191][ T7157] usb 7-1: Using ep0 maxpacket: 32 [ 932.060772][ T7157] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 932.064136][ T7157] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 932.067862][ T7157] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 932.072227][ T7157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 932.077284][ T7157] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 932.081503][ T7157] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 932.086194][ T7157] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 932.089945][ T7157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.096207][ T7157] usb 7-1: config 0 descriptor?? [ 932.303498][ T7157] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 932.436761][T19037] Invalid ELF header magic: != ELF [ 932.495268][ T7157] usb 5-1: USB disconnect, device number 34 [ 932.505365][T19040] binder_alloc: 19039: binder_alloc_buf, no vma [ 932.826279][T19048] syzkaller0: entered promiscuous mode [ 932.828224][T19048] syzkaller0: entered allmulticast mode [ 932.915566][ T7279] usb 7-1: USB disconnect, device number 13 [ 932.924661][ T7279] usblp0: removed [ 932.982431][T19046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3745'. [ 934.535645][T19069] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 934.596640][ T5845] usb 42-1: device descriptor read/8, error -110 [ 934.634074][T19069] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 934.638109][T19069] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 934.666184][T19069] vhci_hcd vhci_hcd.0: Device attached [ 934.696112][T19069] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 934.787599][ T7279] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 934.876567][ T5845] usb 42-1: SetAddress Request (11) to port 0 [ 934.879979][ T5845] usb 42-1: new SuperSpeed USB device number 11 using vhci_hcd [ 934.958195][ T7279] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 934.961907][ T7279] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.967619][ T7279] usb 5-1: config 0 has no interface number 0 [ 934.967975][T19076] vhci_hcd: connection reset by peer [ 934.970419][ T7279] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 934.977598][ T13] vhci_hcd vhci_hcd.2: stop threads [ 934.978012][ T7279] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 934.979683][ T13] vhci_hcd vhci_hcd.2: release socket [ 934.984331][ T7279] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 934.991515][ T7279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.996413][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 934.999716][ T7279] usb 5-1: config 0 descriptor?? [ 935.005869][T19071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 935.013572][ T7279] ldusb 5-1:0.55: Interrupt in endpoint not found [ 935.983365][T19074] kexec: Could not allocate control_code_buffer [ 937.526601][ T5534] usb 5-1: USB disconnect, device number 35 [ 937.527660][T19116] syzkaller0: entered promiscuous mode [ 937.530924][T19116] syzkaller0: entered allmulticast mode [ 937.828965][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 937.828983][ T42] audit: type=1800 audit(1785667244.572:330): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310157 res=0 errno=0 [ 937.865097][T19122] FAULT_INJECTION: forcing a failure. [ 937.865097][T19122] name failslab, interval 1, probability 0, space 0, times 0 [ 937.876290][T19122] CPU: 0 UID: 0 PID: 19122 Comm: syz.0.3760 Tainted: G L syzkaller #0 PREEMPT(full) [ 937.876310][T19122] Tainted: [L]=SOFTLOCKUP [ 937.876315][T19122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 937.876326][T19122] Call Trace: [ 937.876331][T19122] [ 937.876336][T19122] dump_stack_lvl+0x100/0x190 [ 937.876354][T19122] should_fail_ex.cold+0x5/0xa [ 937.876380][T19122] should_failslab+0xc2/0x120 [ 937.876399][T19122] __kmalloc_noprof+0xfc/0x820 [ 937.876413][T19122] ? ima_alloc_init_template+0xb6/0x6d0 [ 937.876432][T19122] ima_alloc_init_template+0xb6/0x6d0 [ 937.876447][T19122] ? d_absolute_path+0x136/0x1b0 [ 937.876463][T19122] ? __pfx_d_absolute_path+0x10/0x10 [ 937.876481][T19122] ima_add_violation+0x128/0x3c0 [ 937.876498][T19122] ? __pfx_ima_add_violation+0x10/0x10 [ 937.876512][T19122] ? ima_d_path+0x137/0x260 [ 937.876527][T19122] ? __pfx_ima_d_path+0x10/0x10 [ 937.876544][T19122] ? __pfx_down_write+0x10/0x10 [ 937.876565][T19122] process_measurement+0x148f/0x2350 [ 937.876583][T19122] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 937.876597][T19122] ? __pfx_process_measurement+0x10/0x10 [ 937.876610][T19122] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 937.876624][T19122] ? rcu_is_watching+0x12/0xc0 [ 937.876642][T19122] ? hook_file_open+0x24f/0x8f0 [ 937.876667][T19122] ? __pfx_apparmor_file_open+0x10/0x10 [ 937.876680][T19122] ? path_get+0x61/0x80 [ 937.876692][T19122] ? path_get+0x61/0x80 [ 937.876705][T19122] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 937.876721][T19122] ima_file_check+0xcc/0x120 [ 937.876748][T19122] ? __pfx_ima_file_check+0x10/0x10 [ 937.876766][T19122] security_file_post_open+0xc4/0x210 [ 937.876782][T19122] path_openat+0x985/0x4280 [ 937.876798][T19122] ? find_held_lock+0x2b/0x80 [ 937.876812][T19122] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 937.876826][T19122] ? __pfx_path_openat+0x10/0x10 [ 937.876838][T19122] ? rcu_is_watching+0x12/0xc0 [ 937.876851][T19122] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 937.876866][T19122] do_file_open+0x20e/0x430 [ 937.876877][T19122] ? rcu_is_watching+0x12/0xc0 [ 937.876891][T19122] ? __pfx_do_file_open+0x10/0x10 [ 937.876902][T19122] ? __schedule+0x126e/0x6730 [ 937.876914][T19122] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 937.876927][T19122] ? do_getname+0x35/0x390 [ 937.876951][T19122] ? preempt_schedule_irq+0x7b/0x90 [ 937.876965][T19122] ? irqentry_exit+0x24d/0xa00 [ 937.876981][T19122] ? lockdep_hardirqs_on+0x78/0x100 [ 937.876996][T19122] do_open_execat+0xd1/0x360 [ 937.877013][T19122] ? __pfx_do_open_execat+0x10/0x10 [ 937.877035][T19122] alloc_bprm+0x2d/0x9d0 [ 937.877054][T19122] do_execveat_common.isra.0+0x19c/0x580 [ 937.877072][T19122] ? do_getname+0x191/0x390 [ 937.877087][T19122] __ia32_compat_sys_execveat+0xe4/0x130 [ 937.877107][T19122] __do_fast_syscall_32+0xe7/0x970 [ 937.877123][T19122] ? lockdep_hardirqs_on+0x78/0x100 [ 937.877138][T19122] do_fast_syscall_32+0x32/0x70 [ 937.877154][T19122] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 937.877169][T19122] RIP: 0023:0xf7fd2fec [ 937.877185][T19122] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 937.877190][T19122] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000166 [ 937.877201][T19122] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001400 [ 937.877209][T19122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 937.877215][T19122] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 937.877222][T19122] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 937.877228][T19122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 937.877242][T19122] [ 937.878933][ T42] audit: type=1804 audit(1785667244.622:331): pid=19122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3760" name="/newroot/290/file0" dev="tmpfs" ino=1763 res=0 errno=0 [ 938.538242][ T42] audit: type=1800 audit(1785667245.272:332): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310176 res=0 errno=0 [ 938.578276][ T42] audit: type=1800 audit(1785667245.322:333): pid=19138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3761" name="id" dev="configfs" ino=72612 res=0 errno=0 [ 938.623277][ T42] audit: type=1804 audit(1785667245.322:334): pid=19138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3761" name="/newroot/323/config/usb_gadget/g1/functions/midi.usb0/id" dev="configfs" ino=72612 res=1 errno=0 [ 938.657744][ T42] audit: type=1800 audit(1785667245.362:335): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310186 res=0 errno=0 [ 938.772296][T19143] syzkaller0: entered promiscuous mode [ 938.775718][T19143] syzkaller0: entered allmulticast mode [ 938.918328][ T42] audit: type=1800 audit(1785667245.662:336): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310315 res=0 errno=0 [ 939.062251][T19151] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 939.109098][ T42] audit: type=1800 audit(1785667245.852:337): pid=19151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3764" name="attach" dev="sysfs" ino=36704 res=0 errno=0 [ 939.123314][T19151] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 939.126061][T19151] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 939.178184][T19151] vhci_hcd vhci_hcd.0: Device attached [ 939.238845][T13319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.289379][T13319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.466599][ T1042] usb 44-1: SetAddress Request (2) to port 0 [ 939.469179][ T1042] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 939.832529][T19151] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 939.948107][ T5845] usb 42-1: device descriptor read/8, error -110 [ 940.056776][ T5845] usb usb42-port1: attempt power cycle [ 940.196214][ T7279] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 940.350515][ T7279] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 940.356660][ T7279] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.363908][ T7279] usb 5-1: config 0 has no interface number 0 [ 940.365927][ T7279] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 940.377955][ T7279] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 940.385654][ T7279] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 940.395866][ T7279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.402359][ T7279] usb 5-1: config 0 descriptor?? [ 940.410971][ T42] audit: type=1800 audit(1785667247.152:338): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310342 res=0 errno=0 [ 940.421997][T19160] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 940.431301][ T7279] ldusb 5-1:0.55: Interrupt in endpoint not found [ 940.440231][ T42] audit: type=1800 audit(1785667247.162:339): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=310371 res=0 errno=0 [ 940.445203][T19153] vhci_hcd: connection reset by peer [ 940.455721][T13070] vhci_hcd vhci_hcd.3: stop threads [ 940.459763][T13070] vhci_hcd vhci_hcd.3: release socket [ 940.462600][T13070] vhci_hcd vhci_hcd.3: disconnect device [ 940.647750][ T5845] usb usb42-port1: unable to enumerate USB device [ 941.159450][T19168] syzkaller0: entered promiscuous mode [ 941.161944][T19168] syzkaller0: entered allmulticast mode [ 942.413995][T19179] openvswitch: netlink: ct_state flags 0001010a unsupported [ 942.525936][T19181] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 942.538688][T19185] FAULT_INJECTION: forcing a failure. [ 942.538688][T19185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.543487][T19185] CPU: 0 UID: 0 PID: 19185 Comm: syz.4.3777 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.543505][T19185] Tainted: [L]=SOFTLOCKUP [ 942.543510][T19185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 942.543517][T19185] Call Trace: [ 942.543521][T19185] [ 942.543527][T19185] dump_stack_lvl+0x100/0x190 [ 942.543544][T19185] should_fail_ex.cold+0x5/0xa [ 942.543571][T19185] _copy_from_iter+0x1f4/0x1690 [ 942.543592][T19185] ? __pfx__copy_from_iter+0x10/0x10 [ 942.543613][T19185] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 942.543632][T19185] skb_copy_datagram_from_iter+0x11f/0x720 [ 942.543651][T19185] tun_get_user+0x1889/0x3c20 [ 942.543687][T19185] ? __pfx_tun_get_user+0x10/0x10 [ 942.543702][T19185] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 942.543722][T19185] ? find_held_lock+0x2b/0x80 [ 942.543742][T19185] ? tun_get+0x191/0x370 [ 942.543758][T19185] ? tun_get+0x191/0x370 [ 942.543786][T19185] tun_chr_write_iter+0xdc/0x200 [ 942.543805][T19185] vfs_write+0x6ac/0x1050 [ 942.543817][T19185] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 942.543832][T19185] ? __pfx_vfs_write+0x10/0x10 [ 942.543841][T19185] ? find_held_lock+0x2b/0x80 [ 942.543863][T19185] ksys_write+0x12a/0x250 [ 942.543873][T19185] ? __pfx_ksys_write+0x10/0x10 [ 942.543888][T19185] do_int80_emulation+0x14b/0x720 [ 942.543907][T19185] asm_int80_emulation+0x1a/0x20 [ 942.543919][T19185] RIP: 0023:0xf71c73eb [ 942.543929][T19185] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 942.543941][T19185] RSP: 002b:00000000f545c44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 942.543953][T19185] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000200 [ 942.543960][T19185] RDX: 000000000000fef3 RSI: 0000000000000000 RDI: 0000000000000000 [ 942.543967][T19185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 942.543974][T19185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.543982][T19185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 942.543996][T19185] [ 942.937088][T14159] usb 5-1: USB disconnect, device number 36 [ 943.073998][T19197] raw_sendmsg: syz.3.3781 forgot to set AF_INET. Fix it! [ 943.253729][T19197] ceph: No mds server is up or the cluster is laggy [ 943.254386][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 943.254428][ T42] audit: type=1800 audit(1785667249.992:345): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310572 res=0 errno=0 [ 943.504962][T19202] syzkaller0: entered promiscuous mode [ 943.506978][T19202] syzkaller0: entered allmulticast mode [ 944.546063][ T42] audit: type=1800 audit(1785667251.282:346): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310701 res=0 errno=0 [ 944.639599][ T1042] usb 44-1: device descriptor read/8, error -110 [ 945.028219][ T1042] usb usb44-port1: attempt power cycle [ 946.002166][T19232] Cache volume key already in use (9p,syz,) [ 946.015340][ T42] audit: type=1800 audit(1785667252.752:347): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310753 res=0 errno=0 [ 946.087485][ T1042] usb usb44-port1: unable to enumerate USB device [ 946.266605][T14197] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 946.429839][T14197] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 946.447195][T14197] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.462268][T14197] usb 7-1: config 0 has no interface number 0 [ 946.477381][T14197] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 946.481926][T14197] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 946.485905][T14197] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 946.489438][T14197] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.493359][T14197] usb 7-1: config 0 descriptor?? [ 946.513311][T19230] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 946.515826][ T42] audit: type=1800 audit(1785667253.252:348): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310780 res=0 errno=0 [ 946.567635][ T42] audit: type=1800 audit(1785667253.302:349): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=310809 res=0 errno=0 [ 946.585384][T14197] ldusb 7-1:0.55: Interrupt in endpoint not found [ 946.627393][ T42] audit: type=1800 audit(1785667253.362:350): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=310787 res=0 errno=0 [ 946.780506][ T42] audit: type=1800 audit(1785667253.382:351): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=310788 res=0 errno=0 [ 947.032944][ T42] audit: type=1800 audit(1785667253.512:352): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=310789 res=0 errno=0 [ 947.062185][T19243] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 947.066920][ T42] audit: type=1800 audit(1785667253.622:353): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310829 res=0 errno=0 [ 947.111357][ T42] audit: type=1800 audit(1785667253.852:354): pid=19243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3792" name="attach" dev="sysfs" ino=36704 res=0 errno=0 [ 947.140473][T19243] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 947.143299][T19243] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 947.157410][T19243] vhci_hcd vhci_hcd.0: Device attached [ 947.421246][T19243] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 947.439055][ T5845] usb 46-1: SetAddress Request (2) to port 0 [ 947.441789][ T5845] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 947.827748][T19244] vhci_hcd: connection reset by peer [ 947.830583][ T13] vhci_hcd vhci_hcd.4: stop threads [ 947.832858][ T13] vhci_hcd vhci_hcd.4: release socket [ 947.836298][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 947.983095][T19248] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 948.977736][ T5934] usb 7-1: USB disconnect, device number 14 [ 949.148136][ T42] audit: type=1800 audit(1785667255.882:355): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=310991 res=0 errno=0 [ 950.101244][T19274] syzkaller0: entered promiscuous mode [ 950.105090][T19274] syzkaller0: entered allmulticast mode [ 950.164188][T19280] Cache volume key already in use (9p,syz,) [ 950.171051][ T42] audit: type=1800 audit(1785667256.912:356): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=311120 res=0 errno=0 [ 950.915147][T19285] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 951.378314][T19294] veth0: entered promiscuous mode [ 951.497380][T19294] veth0: left promiscuous mode [ 952.146706][ T42] audit: type=1800 audit(1785667258.892:357): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=311257 res=0 errno=0 [ 952.156507][T14197] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 952.327848][T14197] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 952.331081][T14197] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.335170][T14197] usb 9-1: config 0 has no interface number 0 [ 952.342690][T14197] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 952.353060][T14197] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 952.363461][T14197] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 952.371706][T14197] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.388170][T14197] usb 9-1: config 0 descriptor?? [ 952.389443][ T42] audit: type=1800 audit(1785667259.132:358): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=311277 res=0 errno=0 [ 952.396664][T19296] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 952.404561][T19311] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 952.408279][T14197] ldusb 9-1:0.55: Interrupt in endpoint not found [ 952.412189][ T42] audit: type=1800 audit(1785667259.142:359): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=311306 res=0 errno=0 [ 952.428088][ T42] audit: type=1800 audit(1785667259.142:360): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=311284 res=0 errno=0 [ 952.435314][ T42] audit: type=1800 audit(1785667259.142:361): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=311285 res=0 errno=0 [ 952.442266][ T42] audit: type=1800 audit(1785667259.142:362): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=311286 res=0 errno=0 [ 952.451407][ T42] audit: type=1800 audit(1785667259.152:363): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=311326 res=0 errno=0 [ 952.452188][T19311] nfs4: Unknown parameter '\:' [ 952.516223][ T5845] usb 46-1: device descriptor read/8, error -110 [ 952.726250][T14197] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 952.813415][T19315] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 952.909230][T14197] usb 7-1: Using ep0 maxpacket: 32 [ 952.913623][T14197] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 952.917363][T14197] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 952.921023][T14197] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 952.924798][T14197] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 952.928027][ T5845] usb usb46-port1: attempt power cycle [ 952.928993][T14197] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 952.935207][T14197] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 952.941222][T14197] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 952.945382][T14197] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.955355][T14197] usb 7-1: config 0 descriptor?? [ 952.967862][ T42] audit: type=1800 audit(1785667259.712:364): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=311386 res=0 errno=0 [ 953.312379][T19323] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3815'. [ 953.321893][T19323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 953.517036][ T5845] usb usb46-port1: unable to enumerate USB device [ 953.542514][T19313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.554231][T19313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.626556][T19332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3818'. [ 954.267913][T19333] FAULT_INJECTION: forcing a failure. [ 954.267913][T19333] name failslab, interval 1, probability 0, space 0, times 0 [ 954.274696][T19333] CPU: 1 UID: 0 PID: 19333 Comm: syz.3.3818 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.274716][T19333] Tainted: [L]=SOFTLOCKUP [ 954.274720][T19333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 954.274727][T19333] Call Trace: [ 954.274732][T19333] [ 954.274738][T19333] dump_stack_lvl+0x100/0x190 [ 954.274756][T19333] should_fail_ex.cold+0x5/0xa [ 954.274770][T19333] should_failslab+0xc2/0x120 [ 954.274786][T19333] __kmalloc_cache_noprof+0x91/0x6c0 [ 954.274799][T19333] ? lockdep_init_map_type+0x5c/0x250 [ 954.274814][T19333] ? tcf_block_get_ext+0x158/0x1950 [ 954.274833][T19333] tcf_block_get_ext+0x158/0x1950 [ 954.274849][T19333] clsact_init+0x45d/0xda0 [ 954.274866][T19333] ? __pfx_clsact_init+0x10/0x10 [ 954.274879][T19333] qdisc_create+0x47b/0x1060 [ 954.274897][T19333] tc_modify_qdisc+0x1350/0x2120 [ 954.274915][T19333] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 954.274941][T19333] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 954.274956][T19333] rtnetlink_rcv_msg+0x3c9/0xe90 [ 954.274979][T19333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 954.275000][T19333] ? ref_tracker_free+0x37e/0x6c0 [ 954.275014][T19333] netlink_rcv_skb+0x159/0x420 [ 954.275028][T19333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 954.275046][T19333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 954.275064][T19333] ? netlink_deliver_tap+0x1ae/0xcc0 [ 954.275079][T19333] netlink_unicast+0x585/0x850 [ 954.275094][T19333] ? __pfx_netlink_unicast+0x10/0x10 [ 954.275111][T19333] netlink_sendmsg+0x8b0/0xda0 [ 954.275126][T19333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.275142][T19333] ? apparmor_socket_sendmsg+0x15b/0x270 [ 954.275157][T19333] ____sys_sendmsg+0xa4d/0xbe0 [ 954.275170][T19333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.275184][T19333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 954.275209][T19333] ___sys_sendmsg+0x190/0x1e0 [ 954.275231][T19333] ? __pfx____sys_sendmsg+0x10/0x10 [ 954.275263][T19333] ? find_held_lock+0x2b/0x80 [ 954.275300][T19333] __sys_sendmsg+0x160/0x210 [ 954.275326][T19333] ? __pfx___sys_sendmsg+0x10/0x10 [ 954.275358][T19333] ? __pfx_ksys_write+0x10/0x10 [ 954.275381][T19333] __do_fast_syscall_32+0xe7/0x970 [ 954.275408][T19333] ? lockdep_hardirqs_on+0x78/0x100 [ 954.275431][T19333] do_fast_syscall_32+0x32/0x70 [ 954.275455][T19333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 954.275476][T19333] RIP: 0023:0xf707efec [ 954.275497][T19333] Code: Unable to access opcode bytes at 0xf707efc2. [ 954.275505][T19333] RSP: 002b:00000000f544c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 954.275522][T19333] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 954.275533][T19333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 954.275544][T19333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 954.275555][T19333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.275566][T19333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 954.275591][T19333] [ 954.416813][ T5534] usb 9-1: USB disconnect, device number 4 [ 954.488086][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3820'. [ 954.551343][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 954.551356][ T42] audit: type=1800 audit(1785667261.292:371): pid=19324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3811" name="/" dev="fuse" ino=1 res=0 errno=0 [ 954.564341][T14197] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 954.566380][ T42] audit: type=1800 audit(1785667261.302:372): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=311828 res=0 errno=0 [ 954.580002][T14197] usb 7-1: USB disconnect, device number 15 [ 954.583622][T14197] usblp0: removed [ 954.630312][T19340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.763941][ T42] audit: type=1800 audit(1785667261.502:373): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=311925 res=0 errno=0 [ 955.977655][T19340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.101133][T19340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.197873][T19363] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 956.209808][T19340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.356677][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.359690][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.368566][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.391527][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.398390][T12064] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 956.566188][T12064] usb 9-1: Using ep0 maxpacket: 32 [ 956.569761][T12064] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 956.572483][T12064] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 956.575201][T12064] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 956.578930][T12064] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 956.582095][T12064] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 956.585575][T12064] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 956.591341][T12064] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 956.594935][T12064] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.600008][T12064] usb 9-1: config 0 descriptor?? [ 956.603198][ T42] audit: type=1800 audit(1785667263.342:374): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=312305 res=0 errno=0 [ 956.612359][ T42] audit: type=1800 audit(1785667263.352:375): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=312334 res=0 errno=0 [ 956.629120][ T42] audit: type=1800 audit(1785667263.362:376): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=312312 res=0 errno=0 [ 956.635764][ T42] audit: type=1800 audit(1785667263.362:377): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=312313 res=0 errno=0 [ 956.643576][ T42] audit: type=1800 audit(1785667263.362:378): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=312314 res=0 errno=0 [ 956.651743][ T42] audit: type=1800 audit(1785667263.362:379): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=312354 res=0 errno=0 [ 956.745003][ T10] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 956.951113][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 956.975847][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.996561][ T10] usb 5-1: config 0 has no interface number 0 [ 957.016590][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 957.025863][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 957.041643][ T42] audit: type=1800 audit(1785667263.782:380): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=312448 res=0 errno=0 [ 957.042826][T12064] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 957.054392][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 957.058866][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.090169][ T10] usb 5-1: config 0 descriptor?? [ 957.102382][T19377] binder: BINDER_SET_CONTEXT_MGR already set [ 957.105109][T19377] binder: 19376:19377 ioctl 4018620d 80004a80 returned -16 [ 957.105818][T19370] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 957.133516][ T10] ldusb 5-1:0.55: Interrupt in endpoint not found [ 957.355096][T19381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.426162][ C2] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.442252][T14159] usb 9-1: USB disconnect, device number 5 [ 958.453515][T14159] usblp0: removed [ 959.460730][ T7279] usb 5-1: USB disconnect, device number 37 [ 959.750294][T19414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.879217][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 959.879236][ T42] audit: type=1800 audit(1785667266.612:388): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=312851 res=0 errno=0 [ 960.845424][T19427] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 960.866822][ T42] audit: type=1800 audit(1785667267.602:389): pid=19427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3843" name="attach" dev="sysfs" ino=36704 res=0 errno=0 [ 960.887083][T19427] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 960.889697][T19427] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 960.900544][ T42] audit: type=1800 audit(1785667267.632:390): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=312870 res=0 errno=0 [ 960.913794][T19427] vhci_hcd vhci_hcd.0: Device attached [ 960.917304][ T42] audit: type=1800 audit(1785667267.632:391): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=312880 res=0 errno=0 [ 961.003535][T13323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.007758][T13323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.135195][T19427] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 961.197537][ T1042] usb 38-1: SetAddress Request (2) to port 0 [ 961.200003][ T1042] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 961.376946][T19433] vhci_hcd: connection reset by peer [ 961.384126][T13070] vhci_hcd vhci_hcd.0: stop threads [ 961.385909][T13070] vhci_hcd vhci_hcd.0: release socket [ 961.388274][T13070] vhci_hcd vhci_hcd.0: disconnect device [ 961.516148][T12064] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 961.689653][T12064] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 961.692632][T12064] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.695287][T12064] usb 7-1: Product: syz [ 961.697021][T12064] usb 7-1: Manufacturer: syz [ 961.698556][T12064] usb 7-1: SerialNumber: syz [ 961.702352][ T42] audit: type=1800 audit(1785667268.442:392): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=312984 res=0 errno=0 [ 961.710505][ T42] audit: type=1800 audit(1785667268.452:393): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=313016 res=0 errno=0 [ 961.718746][ T42] audit: type=1800 audit(1785667268.452:394): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=312991 res=0 errno=0 [ 961.726535][ T42] audit: type=1800 audit(1785667268.452:395): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=312992 res=0 errno=0 [ 961.924046][ T42] audit: type=1800 audit(1785667268.662:396): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=313052 res=0 errno=0 [ 962.063031][T12064] rtl8150 7-1:1.0: couldn't reset the device [ 962.065666][T12064] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 962.077810][T19447] netlink: 'syz.0.3849': attribute type 6 has an invalid length. [ 962.091246][ T42] audit: type=1800 audit(1785667268.832:397): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=313013 res=0 errno=0 [ 962.095698][T12064] usb 7-1: USB disconnect, device number 16 [ 965.165676][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 965.165687][ T42] audit: type=1800 audit(1785667271.902:403): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=313298 res=0 errno=0 [ 965.181804][ T42] audit: type=1800 audit(1785667271.922:404): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=313308 res=0 errno=0 [ 965.388645][T19491] program syz.3.3860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 965.499881][T19492] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 965.563662][ T42] audit: type=1800 audit(1785667272.302:405): pid=19492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3858" name="attach" dev="sysfs" ino=36704 res=0 errno=0 [ 965.577448][ T42] audit: type=1800 audit(1785667272.312:406): pid=19489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3857" name="attach" dev="sysfs" ino=36704 res=0 errno=0 [ 965.588721][T19492] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 965.591005][T19492] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 965.640372][T19492] vhci_hcd vhci_hcd.0: Device attached [ 965.662241][T19489] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 965.664723][T19489] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 965.729141][T19489] vhci_hcd vhci_hcd.0: Device attached [ 965.842338][T19493] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 966.039267][ T5934] usb 42-1: SetAddress Request (14) to port 0 [ 966.067078][ T5934] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 966.687219][T19494] vhci_hcd: connection reset by peer [ 966.695907][ T13] vhci_hcd vhci_hcd.2: stop threads [ 966.697649][ T13] vhci_hcd vhci_hcd.2: release socket [ 966.706369][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 966.841120][T19495] vhci_hcd: connection reset by peer [ 966.843680][ T13] vhci_hcd vhci_hcd.0: stop threads [ 966.845491][ T13] vhci_hcd vhci_hcd.0: release socket [ 966.849852][ T1042] usb 38-1: device descriptor read/8, error -110 [ 966.849865][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 967.672165][T19506] kexec: Could not allocate control_code_buffer [ 967.688639][ T1042] usb usb38-port1: attempt power cycle [ 968.097355][ T42] audit: type=1800 audit(1785667274.842:407): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=313360 res=0 errno=0 [ 969.806976][ T42] audit: type=1800 audit(1785667276.552:408): pid=19527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3870" name="file1" dev="tmpfs" ino=2094 res=0 errno=0 [ 969.867353][ T1042] usb usb38-port1: unable to enumerate USB device [ 969.992257][ T60] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 970.096168][T18817] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 970.186173][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 970.193006][ T60] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 970.197526][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 970.202729][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 970.207132][ T60] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 970.213429][ T60] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 970.217302][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.708272][ T42] audit: type=1800 audit(1785667277.452:409): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=313395 res=0 errno=0 [ 970.725738][ T42] audit: type=1800 audit(1785667277.452:410): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=313424 res=0 errno=0 [ 970.748589][ T42] audit: type=1800 audit(1785667277.452:411): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=313402 res=0 errno=0 [ 970.766240][ T42] audit: type=1800 audit(1785667277.462:412): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=313403 res=0 errno=0 [ 970.786479][ T42] audit: type=1800 audit(1785667277.462:413): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=313404 res=0 errno=0 [ 970.790467][T18817] usb 9-1: config 0 has an invalid interface number: 205 but max is 0 [ 970.798407][T18817] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 970.802693][T18817] usb 9-1: config 0 has no interface number 0 [ 970.805582][T18817] usb 9-1: config 0 interface 205 has no altsetting 0 [ 970.808530][ T42] audit: type=1800 audit(1785667277.462:414): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=313444 res=0 errno=0 [ 970.818610][T18817] usb 9-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 970.822543][T18817] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.827441][T18817] usb 9-1: Product: syz [ 970.829610][T18817] usb 9-1: Manufacturer: syz [ 970.833235][T18817] usb 9-1: SerialNumber: syz [ 970.968245][ T60] usb 5-1: GET_CAPABILITIES returned 0 [ 970.971731][ T60] usbtmc 5-1:16.0: can't read capabilities [ 970.973820][T18817] usb 9-1: config 0 descriptor?? [ 970.976465][ T42] audit: type=1800 audit(1785667277.722:415): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=313460 res=0 errno=0 [ 970.983391][ T42] audit: type=1800 audit(1785667277.722:416): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=313492 res=0 errno=0 [ 970.986518][T18817] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 970.990431][ T42] audit: type=1800 audit(1785667277.722:417): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=313467 res=0 errno=0 [ 971.001558][ T42] audit: type=1800 audit(1785667277.722:418): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=313468 res=0 errno=0 [ 971.052538][T18817] dvb-usb: bulk message failed: -22 (3/0) [ 971.129505][T18817] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 971.138188][T18817] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 971.146434][ T5934] usb 42-1: device descriptor read/8, error -110 [ 971.151445][T18817] usb 9-1: media controller created [ 971.281432][T18817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 971.328355][T18817] dvb-usb: bulk message failed: -22 (6/0) [ 971.331826][T18817] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 971.356246][T18817] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input38 [ 971.426618][T18817] dvb-usb: schedule remote query interval to 150 msecs. [ 971.428830][T18817] dvb-usb: bulk message failed: -22 (3/0) [ 971.456096][T18817] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 971.548058][ T5934] usb usb42-port1: attempt power cycle [ 971.610983][T18817] dvb-usb: bulk message failed: -22 (1/0) [ 971.625639][T18817] dvb-usb: error while querying for an remote control event. [ 971.759119][T19540] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 971.790736][T18817] dvb-usb: bulk message failed: -22 (1/0) [ 971.792896][T18817] dvb-usb: error while querying for an remote control event. [ 971.956615][ T60] dvb-usb: bulk message failed: -22 (1/0) [ 971.961027][ T60] dvb-usb: error while querying for an remote control event. [ 972.096377][ T60] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 972.118121][ T5934] usb usb42-port1: unable to enumerate USB device [ 972.126180][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 972.130238][ T5934] dvb-usb: error while querying for an remote control event. [ 972.256104][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 972.264547][ T60] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.269962][ T60] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 972.279934][ T60] usb 7-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 972.286315][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.291856][ T60] usb 7-1: Product: syz [ 972.294014][ T60] usb 7-1: Manufacturer: syz [ 972.297074][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 972.299493][ T60] usb 7-1: SerialNumber: syz [ 972.301317][ T5934] dvb-usb: error while querying for an remote control event. [ 972.456158][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 972.464065][ T5934] dvb-usb: error while querying for an remote control event. [ 972.484528][ T7279] usb 9-1: USB disconnect, device number 6 [ 972.496974][ T7279] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 973.020125][ T60] gspca_main: ov519-2.14.0 probing 041e:4068 [ 973.541240][ T60] ov519 7-1:1.0: reg_w 5a failed -71 [ 973.568763][ T10] usb 5-1: USB disconnect, device number 38 [ 975.421319][T19574] netlink: 'syz.2.3883': attribute type 2 has an invalid length. [ 976.863150][ T42] kauditd_printk_skb: 514 callbacks suppressed [ 976.863169][ T42] audit: type=1800 audit(1785667283.602:933): pid=19594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3891" name="attach" dev="sysfs" ino=36704 res=0 errno=0 [ 976.866412][T19594] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 976.875705][T19594] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 976.880701][T19594] vhci_hcd vhci_hcd.0: Device attached [ 976.995357][ T42] audit: type=1800 audit(1785667283.732:934): pid=19602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3893" name="alloc_sleep_millisecs" dev="sysfs" ino=1054 res=0 errno=0 [ 977.065106][T19604] ntfs3(nullb0): Primary boot signature is not NTFS. [ 977.082114][T19604] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 977.136158][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 977.166403][ T5934] usb 44-1: SetAddress Request (6) to port 0 [ 977.171345][ T5934] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 977.255513][T19606] netlink: 'syz.2.3892': attribute type 1 has an invalid length. [ 977.259031][T19606] netlink: 756 bytes leftover after parsing attributes in process `syz.2.3892'. [ 977.310027][ T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 977.314967][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.319491][ T10] usb 5-1: Product: syz [ 977.321677][ T10] usb 5-1: Manufacturer: syz [ 977.324224][ T10] usb 5-1: SerialNumber: syz [ 977.331078][ T42] audit: type=1800 audit(1785667284.072:935): pid=17722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=314254 res=0 errno=0 [ 977.343639][ T42] audit: type=1800 audit(1785667284.072:936): pid=17722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=314286 res=0 errno=0 [ 977.354027][ T42] audit: type=1800 audit(1785667284.082:937): pid=17722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=314261 res=0 errno=0 [ 977.365440][ T42] audit: type=1800 audit(1785667284.082:938): pid=17722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=314262 res=0 errno=0 [ 977.441840][T19600] vhci_hcd: connection reset by peer [ 977.456297][T13070] vhci_hcd vhci_hcd.3: stop threads [ 977.458482][T13070] vhci_hcd vhci_hcd.3: release socket [ 977.460948][T13070] vhci_hcd vhci_hcd.3: disconnect device [ 977.538945][ T42] audit: type=1800 audit(1785667284.282:939): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=314322 res=0 errno=0 [ 977.624584][ T10] rtl8150 5-1:1.0: couldn't reset the device [ 977.628711][ T10] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 977.637160][ T10] usb 5-1: USB disconnect, device number 39 [ 977.638125][ T42] audit: type=1800 audit(1785667284.372:940): pid=17722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=314283 res=0 errno=0 [ 977.651981][ T42] audit: type=1800 audit(1785667284.382:941): pid=17722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=314284 res=0 errno=0 [ 977.659994][ T42] audit: type=1800 audit(1785667284.382:942): pid=17722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=314263 res=0 errno=0 [ 979.484451][T19627] binder: BINDER_SET_CONTEXT_MGR already set [ 979.487244][T19627] binder: 19626:19627 ioctl 4018620d 80004a80 returned -16 [ 979.975402][T19643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3906'. [ 979.980128][T19643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3906'. [ 979.984425][T19643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3906'. [ 982.176195][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 982.176709][ T42] audit: type=1800 audit(1785667288.882:946): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=314708 res=0 errno=0 [ 982.270534][ T5934] usb 44-1: device descriptor read/8, error -110 [ 982.309437][T19712] FAULT_INJECTION: forcing a failure. [ 982.309437][T19712] name failslab, interval 1, probability 0, space 0, times 0 [ 982.313389][T19712] CPU: 3 UID: 0 PID: 19712 Comm: syz.4.3916 Tainted: G L syzkaller #0 PREEMPT(full) [ 982.313407][T19712] Tainted: [L]=SOFTLOCKUP [ 982.313411][T19712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 982.313419][T19712] Call Trace: [ 982.313424][T19712] [ 982.313429][T19712] dump_stack_lvl+0x100/0x190 [ 982.313446][T19712] should_fail_ex.cold+0x5/0xa [ 982.313460][T19712] should_failslab+0xc2/0x120 [ 982.313477][T19712] __kmalloc_cache_noprof+0x91/0x6c0 [ 982.313489][T19712] ? alloc_pipe_info+0x10e/0x590 [ 982.313504][T19712] alloc_pipe_info+0x10e/0x590 [ 982.313517][T19712] splice_direct_to_actor+0x78f/0xa30 [ 982.313531][T19712] ? __pfx_direct_splice_actor+0x10/0x10 [ 982.313544][T19712] ? __pfx_aa_file_perm+0x10/0x10 [ 982.313563][T19712] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 982.313579][T19712] do_splice_direct+0x174/0x240 [ 982.313592][T19712] ? __pfx_do_splice_direct+0x10/0x10 [ 982.313604][T19712] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 982.313618][T19712] ? rw_verify_area+0xce/0x6d0 [ 982.313637][T19712] do_sendfile+0xadc/0xe20 [ 982.313657][T19712] ? __pfx_do_sendfile+0x10/0x10 [ 982.313687][T19712] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 982.313704][T19712] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 982.313719][T19712] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 982.313733][T19712] ? ksys_write+0x1ac/0x250 [ 982.313743][T19712] ? __pfx_ksys_write+0x10/0x10 [ 982.313756][T19712] __do_fast_syscall_32+0xe7/0x970 [ 982.313777][T19712] ? lockdep_hardirqs_on+0x78/0x100 [ 982.313793][T19712] do_fast_syscall_32+0x32/0x70 [ 982.313810][T19712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 982.313824][T19712] RIP: 0023:0xf708efec [ 982.313838][T19712] Code: Unable to access opcode bytes at 0xf708efc2. [ 982.313844][T19712] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 982.313856][T19712] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000005 [ 982.313863][T19712] RDX: 0000000000000000 RSI: 000000000000a006 RDI: 0000000000000000 [ 982.313869][T19712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 982.313876][T19712] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 982.313883][T19712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 982.313896][T19712] [ 982.659919][ T42] audit: type=1804 audit(1785667289.402:947): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3921" name="/newroot/329/file1" dev="tmpfs" ino=1972 res=1 errno=0 [ 982.697770][ T5934] usb usb44-port1: attempt power cycle [ 982.705022][ T42] audit: type=1800 audit(1785667289.442:948): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3921" name="file1" dev="tmpfs" ino=1973 res=0 errno=0 [ 983.255473][T19723] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 983.279401][T19723] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 983.282209][T19723] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 983.286909][T19723] vhci_hcd vhci_hcd.0: Device attached [ 983.288047][ T42] audit: type=1800 audit(1785667290.012:949): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3920" name="attach" dev="sysfs" ino=36704 res=0 errno=0 [ 983.358961][ T5934] usb usb44-port1: unable to enumerate USB device [ 983.440647][T19723] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 983.572693][T19727] syzkaller0: entered promiscuous mode [ 983.575423][T19727] syzkaller0: entered allmulticast mode [ 983.586200][T19529] usb 46-1: SetAddress Request (6) to port 0 [ 983.588943][T19529] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 983.986440][ T60] ov519 7-1:1.0: Can't determine sensor slave IDs [ 984.124138][ T60] ov519 7-1:1.0: OV519 Config failed [ 984.127307][ T60] ov519 7-1:1.0: probe with driver ov519 failed with error -22 [ 984.131724][ T60] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 985.810366][ T60] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 985.815457][ T42] audit: type=1800 audit(1785667292.552:950): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=313749 res=0 errno=0 [ 985.824334][ T60] usb 7-1: USB disconnect, device number 17 [ 985.829639][ T42] audit: type=1800 audit(1785667292.572:951): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=313750 res=0 errno=0 [ 985.840594][T19724] vhci_hcd: connection reset by peer [ 985.842955][T13070] vhci_hcd vhci_hcd.4: stop threads [ 985.844860][T13070] vhci_hcd vhci_hcd.4: release socket [ 985.850260][ T42] audit: type=1800 audit(1785667292.572:952): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=313729 res=0 errno=0 [ 985.858462][T13070] vhci_hcd vhci_hcd.4: disconnect device [ 985.868723][ T42] audit: type=1800 audit(1785667292.572:953): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=313751 res=0 errno=0 [ 985.878378][T17919] udevd[17919]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 985.889068][ T42] audit: type=1800 audit(1785667292.592:954): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30322 res=0 errno=0 [ 986.144248][T19755] syzkaller0: entered promiscuous mode [ 986.149012][T19755] syzkaller0: entered allmulticast mode [ 986.455910][ T42] audit: type=1800 audit(1785667293.192:955): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=315755 res=0 errno=0 [ 987.708823][ T42] audit: type=1800 audit(1785667294.442:956): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=315807 res=0 errno=0 [ 987.769350][ T42] audit: type=1800 audit(1785667294.502:957): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=315826 res=0 errno=0 [ 988.831700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 988.835589][T19784] random: crng reseeded on system resumption [ 989.124328][ T42] audit: type=1800 audit(1785667294.652:958): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=315836 res=0 errno=0 [ 989.506327][T19529] usb 46-1: device descriptor read/8, error -110 [ 989.636725][ T42] audit: type=1800 audit(1785667296.382:959): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=315855 res=0 errno=0 [ 989.657461][ T42] audit: type=1800 audit(1785667296.402:960): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=315867 res=0 errno=0 [ 989.685679][ T42] audit: type=1800 audit(1785667296.422:961): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=315879 res=0 errno=0 [ 989.888230][T19529] usb usb46-port1: attempt power cycle [ 990.477645][T19529] usb usb46-port1: unable to enumerate USB device [ 990.496182][ T60] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 990.668175][ T60] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 990.671934][ T60] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.675770][ T60] usb 7-1: config 0 has no interface number 0 [ 990.682095][ T60] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 990.686699][ T60] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 990.691211][ T60] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 990.694800][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.719117][ T60] usb 7-1: config 0 descriptor?? [ 990.726758][ T42] audit: type=1800 audit(1785667297.462:962): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=315899 res=0 errno=0 [ 990.739660][ T42] audit: type=1800 audit(1785667297.472:963): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=315928 res=0 errno=0 [ 990.746415][T19798] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 990.747684][ T42] audit: type=1800 audit(1785667297.472:964): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=315906 res=0 errno=0 [ 990.757947][ T42] audit: type=1800 audit(1785667297.482:965): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=315907 res=0 errno=0 [ 990.770989][ T60] ldusb 7-1:0.55: Interrupt in endpoint not found [ 992.507560][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.558828][T19809] syzkaller0: entered promiscuous mode [ 992.561108][T19809] syzkaller0: entered allmulticast mode [ 993.338829][T14159] usb 7-1: USB disconnect, device number 18 [ 994.222671][T19842] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 995.297261][T19849] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 995.429949][T19849] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 995.432509][T19849] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 995.433378][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 995.433389][ T42] audit: type=1800 audit(1785667302.162:968): pid=19849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3946" name="attach" dev="sysfs" ino=36704 res=0 errno=0 [ 995.441970][T19849] vhci_hcd vhci_hcd.0: Device attached [ 995.573733][T19849] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 995.716420][ T5934] usb 42-1: SetAddress Request (18) to port 0 [ 995.719101][ T5934] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 995.878593][T19851] vhci_hcd: connection reset by peer [ 995.889388][T10909] vhci_hcd vhci_hcd.2: stop threads [ 995.891137][T10909] vhci_hcd vhci_hcd.2: release socket [ 995.892943][T10909] vhci_hcd vhci_hcd.2: disconnect device [ 998.782188][ T60] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 998.897652][T19873] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3952'. [ 999.223687][ T60] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 999.227318][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.235338][ T60] usb 9-1: Product: syz [ 999.242680][ T60] usb 9-1: Manufacturer: syz [ 999.256179][ T60] usb 9-1: SerialNumber: syz [ 999.393438][ T42] audit: type=1800 audit(1785667306.132:969): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317041 res=0 errno=0 [ 999.402121][ T42] audit: type=1800 audit(1785667306.132:970): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=317073 res=0 errno=0 [ 999.414444][ T42] audit: type=1800 audit(1785667306.142:971): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=317048 res=0 errno=0 [ 999.423411][ T42] audit: type=1800 audit(1785667306.142:972): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=317049 res=0 errno=0 [ 999.624013][T19878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3953'. [ 999.627951][T19878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3953'. [ 999.631703][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3953'. [ 999.635644][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3953'. [ 999.651890][ T42] audit: type=1800 audit(1785667306.392:973): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317109 res=0 errno=0 [ 999.816547][T19882] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 999.857486][ T60] rtl8150 9-1:1.0: couldn't reset the device [ 999.859622][ T60] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 999.866759][ T42] audit: type=1800 audit(1785667306.602:974): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=317070 res=0 errno=0 [ 999.867408][ T60] usb 9-1: USB disconnect, device number 7 [ 999.882685][ T42] audit: type=1800 audit(1785667306.602:975): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=317071 res=0 errno=0 [ 999.895477][ T42] audit: type=1800 audit(1785667306.612:976): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=317050 res=0 errno=0 [ 999.903415][ T42] audit: type=1800 audit(1785667306.622:977): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=317072 res=0 errno=0 [ 1000.706165][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1000.836323][ T5934] usb 42-1: device descriptor read/8, error -110 [ 1000.856230][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1000.860146][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1000.864054][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1000.867251][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.874756][ T10] usb 5-1: config 0 descriptor?? [ 1000.879209][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 1000.879225][ T42] audit: type=1800 audit(1785667307.622:979): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317311 res=0 errno=0 [ 1000.891498][ T42] audit: type=1800 audit(1785667307.622:980): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=317340 res=0 errno=0 [ 1000.900188][ T42] audit: type=1800 audit(1785667307.622:981): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=317318 res=0 errno=0 [ 1000.908515][ T42] audit: type=1800 audit(1785667307.622:982): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=317319 res=0 errno=0 [ 1000.916958][ T42] audit: type=1800 audit(1785667307.622:983): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=317320 res=0 errno=0 [ 1000.925203][ T42] audit: type=1800 audit(1785667307.632:984): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317360 res=0 errno=0 [ 1000.932143][T19908] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3960'. [ 1001.269466][ T5934] usb usb42-port1: attempt power cycle [ 1001.424134][T19915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3963'. [ 1001.521143][ T42] audit: type=1800 audit(1785667308.262:985): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 1001.789535][ T10] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1001.795036][ T42] audit: type=1800 audit(1785667308.532:986): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317377 res=0 errno=0 [ 1001.796934][ T10] usb 5-1: USB disconnect, device number 40 [ 1001.857083][ T5934] usb usb42-port1: unable to enumerate USB device [ 1002.027020][T14159] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1009.391070][T19939] syzkaller0: entered promiscuous mode [ 1009.393011][T19939] syzkaller0: entered allmulticast mode [ 1009.666232][ T42] audit: type=1800 audit(1785667316.402:987): pid=19950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3968" name="alloc_sleep_millisecs" dev="sysfs" ino=1054 res=0 errno=0 [ 1011.283613][ T42] audit: type=1800 audit(1785667317.212:988): pid=19961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3970" name="p_chmask" dev="configfs" ino=77781 res=0 errno=0 [ 1011.892911][T19967] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1014.527180][ T42] audit: type=1800 audit(1785667321.272:989): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317534 res=0 errno=0 [ 1015.137066][T19990] Bluetooth: MGMT ver 1.23 [ 1015.411451][T19990] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1015.662753][ T42] audit: type=1800 audit(1785667322.402:990): pid=19998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3981" name="p_chmask" dev="configfs" ino=77822 res=0 errno=0 [ 1015.775176][T20001] 9pnet_virtio: no channels available for device syz [ 1016.304620][ T42] audit: type=1800 audit(1785667322.942:991): pid=20004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3980" name="alloc_sleep_millisecs" dev="sysfs" ino=1054 res=0 errno=0 [ 1016.654002][T20013] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1017.776748][T20028] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1017.812823][T20028] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1017.980180][ T42] audit: type=1800 audit(1785667324.722:992): pid=20032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3989" name="attach" dev="sysfs" ino=36704 res=0 errno=0 [ 1017.987004][T20032] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1017.990101][T20032] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1018.011081][T20032] vhci_hcd vhci_hcd.0: Device attached [ 1018.047113][T20032] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1018.277579][ T5934] usb 46-1: SetAddress Request (10) to port 0 [ 1018.281368][ T5934] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1018.558393][T20034] vhci_hcd: connection reset by peer [ 1018.562280][T10909] vhci_hcd vhci_hcd.4: stop threads [ 1018.564771][T10909] vhci_hcd vhci_hcd.4: release socket [ 1018.567597][T10909] vhci_hcd vhci_hcd.4: disconnect device [ 1019.180186][T20056] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1019.201912][ T42] audit: type=1800 audit(1785667325.942:993): pid=20056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3994" name="attach" dev="sysfs" ino=36704 res=0 errno=0 [ 1019.203101][T20056] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1019.211699][T20056] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1019.226601][T20056] vhci_hcd vhci_hcd.0: Device attached [ 1019.288463][T20056] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1019.496288][ T60] usb 42-1: SetAddress Request (22) to port 0 [ 1019.506154][ T60] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1019.660010][T20063] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1019.808329][T20057] vhci_hcd: connection reset by peer [ 1019.816681][T10909] vhci_hcd vhci_hcd.2: stop threads [ 1019.819659][T10909] vhci_hcd vhci_hcd.2: release socket [ 1019.824394][T10909] vhci_hcd vhci_hcd.2: disconnect device [ 1019.845401][ T42] audit: type=1800 audit(1785667326.582:994): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317586 res=0 errno=0 [ 1020.999506][ T42] audit: type=1800 audit(1785667327.732:995): pid=20074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3999" name="p_chmask" dev="configfs" ino=79319 res=0 errno=0 [ 1021.523218][ T42] audit: type=1800 audit(1785667328.262:996): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317638 res=0 errno=0 [ 1021.854393][T20082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'. [ 1021.900206][T20082] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1021.904641][T20082] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1021.910684][T20082] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1022.002646][T20082] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1022.044028][T20082] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1022.070357][ T42] audit: type=1800 audit(1785667328.812:997): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26357 res=0 errno=0 [ 1022.192075][ T42] audit: type=1800 audit(1785667328.932:998): pid=20087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26483 res=0 errno=0 [ 1022.338163][ T42] audit: type=1800 audit(1785667329.072:999): pid=20090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4000" name="unbind" dev="sysfs" ino=36672 res=0 errno=0 [ 1022.365727][T20088] vhci_hcd vhci_hcd.0: remove, state 4 [ 1022.393973][T20088] usb usb38: USB disconnect, device number 1 [ 1022.431325][ T42] audit: type=1800 audit(1785667329.172:1000): pid=20090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4000" name="bind" dev="sysfs" ino=36673 res=0 errno=0 [ 1023.316244][T13070] vhci_hcd vhci_hcd.0: stop threads [ 1023.324057][T13070] vhci_hcd vhci_hcd.0: release socket [ 1023.325869][T13070] vhci_hcd vhci_hcd.0: disconnect device [ 1023.331439][T13070] vhci_hcd vhci_hcd.0: stop threads [ 1023.341421][T13070] vhci_hcd vhci_hcd.0: release socket [ 1023.344065][T13070] vhci_hcd vhci_hcd.0: disconnect device [ 1023.352858][T20088] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 1023.356517][T13070] vhci_hcd vhci_hcd.0: stop threads [ 1023.358526][T13070] vhci_hcd vhci_hcd.0: release socket [ 1023.363523][T13070] vhci_hcd vhci_hcd.0: disconnect device [ 1023.375810][T13070] vhci_hcd vhci_hcd.0: stop threads [ 1023.379121][T13070] vhci_hcd vhci_hcd.0: release socket [ 1023.388875][T13070] vhci_hcd vhci_hcd.0: disconnect device [ 1023.392672][T13070] vhci_hcd vhci_hcd.0: stop threads [ 1023.396817][T13070] vhci_hcd vhci_hcd.0: release socket [ 1023.401485][T13070] vhci_hcd vhci_hcd.0: disconnect device [ 1023.408004][T13070] vhci_hcd vhci_hcd.0: stop threads [ 1023.414276][T13070] vhci_hcd vhci_hcd.0: release socket [ 1023.417583][T13070] vhci_hcd vhci_hcd.0: disconnect device [ 1023.430964][T13070] vhci_hcd vhci_hcd.0: stop threads [ 1023.438840][T13070] vhci_hcd vhci_hcd.0: release socket [ 1023.444670][T13070] vhci_hcd vhci_hcd.0: disconnect device [ 1023.451184][T13070] vhci_hcd vhci_hcd.0: stop threads [ 1023.455406][T13070] vhci_hcd vhci_hcd.0: release socket [ 1023.462006][T13070] vhci_hcd vhci_hcd.0: disconnect device [ 1023.499484][ T5934] usb 46-1: device descriptor read/8, error -110 [ 1023.537081][ T42] audit: type=1800 audit(1785667330.282:1001): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26670 res=0 errno=0 [ 1023.550608][T20088] vhci_hcd vhci_hcd.0: remove, state 4 [ 1023.552561][T20088] usb usb37: USB disconnect, device number 1 [ 1023.560034][ T42] audit: type=1800 audit(1785667330.292:1002): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317692 res=0 errno=0 [ 1023.631306][ T42] audit: type=1800 audit(1785667330.372:1003): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317707 res=0 errno=0 [ 1023.679035][T20094] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1023.719468][ T42] audit: type=1800 audit(1785667330.462:1004): pid=20094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4003" name="attach" dev="sysfs" ino=36704 res=0 errno=0 [ 1023.729702][T20094] ================================================================== [ 1023.733220][T20094] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15ca/0x1bd0 [ 1023.736650][T20094] Read of size 8 at addr ffff8880265804f8 by task syz.0.4003/20094 [ 1023.740154][T20094] [ 1023.741421][T20094] CPU: 1 UID: 0 PID: 20094 Comm: syz.0.4003 Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.741452][T20094] Tainted: [L]=SOFTLOCKUP [ 1023.741459][T20094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1023.741479][T20094] Call Trace: [ 1023.741487][T20094] [ 1023.741495][T20094] dump_stack_lvl+0x100/0x190 [ 1023.741521][T20094] print_report+0x13d/0x4b0 [ 1023.741551][T20094] ? __virt_addr_valid+0x239/0x430 [ 1023.741576][T20094] ? __mutex_lock+0x15ca/0x1bd0 [ 1023.741604][T20094] kasan_report+0xdf/0x1c0 [ 1023.741630][T20094] ? __mutex_lock+0x15ca/0x1bd0 [ 1023.741659][T20094] __mutex_lock+0x15ca/0x1bd0 [ 1023.741682][T20094] ? __pfx___schedule+0x10/0x10 [ 1023.741703][T20094] ? attach_store+0x333/0x8f0 [ 1023.741804][T20094] ? __pfx___mutex_lock+0x10/0x10 [ 1023.741832][T20094] ? lockdep_hardirqs_on+0x78/0x100 [ 1023.741860][T20094] ? irqentry_exit+0x24d/0xa00 [ 1023.741890][T20094] ? attach_store+0x333/0x8f0 [ 1023.741912][T20094] attach_store+0x333/0x8f0 [ 1023.741936][T20094] ? __pfx_attach_store+0x10/0x10 [ 1023.741961][T20094] ? find_held_lock+0x2b/0x80 [ 1023.741984][T20094] ? sysfs_file_kobj+0xe4/0x290 [ 1023.742015][T20094] ? sysfs_file_kobj+0xe4/0x290 [ 1023.742041][T20094] ? __pfx_attach_store+0x10/0x10 [ 1023.742062][T20094] dev_attr_store+0x58/0x80 [ 1023.742093][T20094] ? __pfx_dev_attr_store+0x10/0x10 [ 1023.742122][T20094] sysfs_kf_write+0xf2/0x150 [ 1023.742148][T20094] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1023.742171][T20094] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1023.742197][T20094] vfs_write+0x6ac/0x1050 [ 1023.742217][T20094] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1023.742240][T20094] ? __pfx_vfs_write+0x10/0x10 [ 1023.742257][T20094] ? find_held_lock+0x2b/0x80 [ 1023.742287][T20094] ksys_write+0x12a/0x250 [ 1023.742306][T20094] ? __pfx_ksys_write+0x10/0x10 [ 1023.742328][T20094] do_int80_emulation+0x14b/0x720 [ 1023.742367][T20094] asm_int80_emulation+0x1a/0x20 [ 1023.742388][T20094] RIP: 0023:0xf71d73eb [ 1023.742829][T20094] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1023.742851][T20094] RSP: 002b:00000000f5453f9c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1023.742884][T20094] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f5454060 [ 1023.742898][T20094] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 1023.742912][T20094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1023.742924][T20094] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 1023.742937][T20094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1023.742956][T20094] [ 1023.742964][T20094] [ 1023.848484][T20094] Allocated by task 1: [ 1023.850237][T20094] kasan_save_stack+0x30/0x50 [ 1023.852297][T20094] kasan_save_track+0x14/0x30 [ 1023.854320][T20094] __kasan_kmalloc+0xaa/0xb0 [ 1023.856329][T20094] __kmalloc_noprof+0x322/0x820 [ 1023.858428][T20094] __usb_create_hcd+0x5e/0xac0 [ 1023.860554][T20094] vhci_hcd_probe+0x1a5/0x4e0 [ 1023.862586][T20094] platform_probe+0x106/0x1d0 [ 1023.864626][T20094] really_probe+0x241/0xa60 [ 1023.866595][T20094] __driver_probe_device+0x20e/0x450 [ 1023.868850][T20094] driver_probe_device+0x4a/0x140 [ 1023.871019][T20094] __device_attach_driver+0x1df/0x320 [ 1023.873313][T20094] bus_for_each_drv+0x159/0x1e0 [ 1023.875391][T20094] __device_attach+0x1e4/0x4d0 [ 1023.877426][T20094] device_initial_probe+0xaf/0xd0 [ 1023.879570][T20094] bus_probe_device+0x64/0x160 [ 1023.881585][T20094] device_add+0x121d/0x1970 [ 1023.883536][T20094] platform_device_add+0x35a/0x800 [ 1023.885740][T20094] platform_device_register_full+0x5cf/0x830 [ 1023.888284][T20094] vhci_hcd_init+0x1a1/0x2f0 [ 1023.890306][T20094] do_one_initcall+0x11d/0x700 [ 1023.892324][T20094] kernel_init_freeable+0x6ea/0x7b0 [ 1023.894606][T20094] kernel_init+0x1f/0x1e0 [ 1023.896454][T20094] ret_from_fork+0x72b/0xd50 [ 1023.898451][T20094] ret_from_fork_asm+0x1a/0x30 [ 1023.900500][T20094] [ 1023.901514][T20094] Freed by task 20088: [ 1023.903241][T20094] kasan_save_stack+0x30/0x50 [ 1023.905171][T20094] kasan_save_track+0x14/0x30 [ 1023.906628][T20094] kasan_save_free_info+0x3b/0x70 [ 1023.908184][T20094] __kasan_slab_free+0x5f/0x80 [ 1023.909644][T20094] kfree+0x22b/0x6c0 [ 1023.910883][T20094] usb_put_hcd+0x149/0x1f0 [ 1023.912252][T20094] vhci_hcd_remove+0xb5/0x1b0 [ 1023.913718][T20094] platform_remove+0x5f/0x80 [ 1023.915120][T20094] device_remove+0xcb/0x180 [ 1023.916530][T20094] device_release_driver_internal+0x44e/0x620 [ 1023.918382][T20094] unbind_store+0xf8/0x110 [ 1023.919745][T20094] drv_attr_store+0x74/0xb0 [ 1023.921123][T20094] sysfs_kf_write+0xf2/0x150 [ 1023.922577][T20094] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1023.924190][T20094] vfs_write+0x6ac/0x1050 [ 1023.925528][T20094] ksys_write+0x12a/0x250 [ 1023.926848][T20094] __do_fast_syscall_32+0xe7/0x970 [ 1023.928446][T20094] do_fast_syscall_32+0x32/0x70 [ 1023.929946][T20094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1023.931891][T20094] [ 1023.932677][T20094] Last potentially related work creation: [ 1023.934437][T20094] kasan_save_stack+0x30/0x50 [ 1023.935865][T20094] kasan_record_aux_stack+0xa7/0xc0 [ 1023.937405][T20094] insert_work+0x36/0x230 [ 1023.938781][T20094] __queue_work+0x9bc/0x12b0 [ 1023.940235][T20094] queue_work_on+0x1a9/0x1e0 [ 1023.941664][T20094] usb_hcd_giveback_urb+0x330/0x4a0 [ 1023.943271][T20094] unlink1+0x418/0x510 [ 1023.944573][T20094] usb_hcd_unlink_urb+0x131/0x210 [ 1023.946104][T20094] usb_kill_urb+0x121/0x320 [ 1023.947510][T20094] hub_quiesce+0x1e9/0x320 [ 1023.948912][T20094] hub_suspend+0x4ab/0x9e0 [ 1023.950317][T20094] usb_suspend_both+0x288/0x950 [ 1023.951815][T20094] usb_runtime_suspend+0x49/0x120 [ 1023.953356][T20094] __rpm_callback+0xc8/0x620 [ 1023.954809][T20094] rpm_callback+0x16a/0x1b0 [ 1023.956190][T20094] rpm_suspend+0x2f4/0x11a0 [ 1023.957634][T20094] __pm_runtime_suspend+0xba/0x1a0 [ 1023.959221][T20094] usb_runtime_idle+0x7e/0x90 [ 1023.960702][T20094] rpm_idle+0x322/0x790 [ 1023.962008][T20094] pm_runtime_work+0x120/0x150 [ 1023.963489][T20094] process_one_work+0xa23/0x1940 [ 1023.965038][T20094] worker_thread+0x5ef/0xe50 [ 1023.966528][T20094] kthread+0x370/0x450 [ 1023.967789][T20094] ret_from_fork+0x72b/0xd50 [ 1023.969218][T20094] ret_from_fork_asm+0x1a/0x30 [ 1023.970774][T20094] [ 1023.971536][T20094] Second to last potentially related work creation: [ 1023.973537][T20094] kasan_save_stack+0x30/0x50 [ 1023.975022][T20094] kasan_record_aux_stack+0xa7/0xc0 [ 1023.976628][T20094] insert_work+0x36/0x230 [ 1023.977975][T20094] __queue_work+0x9bc/0x12b0 [ 1023.979379][T20094] queue_work_on+0x1a9/0x1e0 [ 1023.981062][T20094] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 1023.983196][T20094] usb_hcd_submit_urb+0xab7/0x2150 [ 1023.985364][T20094] usb_submit_urb+0x827/0x19b0 [ 1023.987335][T20094] usb_start_wait_urb+0x10e/0x580 [ 1023.989384][T20094] usb_control_msg+0x328/0x4b0 [ 1023.991392][T20094] hub_suspend+0x826/0x9e0 [ 1023.993222][T20094] usb_suspend_both+0x288/0x950 [ 1023.995226][T20094] usb_runtime_suspend+0x49/0x120 [ 1023.997319][T20094] __rpm_callback+0xc8/0x620 [ 1023.999228][T20094] rpm_callback+0x16a/0x1b0 [ 1024.001117][T20094] rpm_suspend+0x2f4/0x11a0 [ 1024.002996][T20094] __pm_runtime_suspend+0xba/0x1a0 [ 1024.005138][T20094] usb_runtime_idle+0x7e/0x90 [ 1024.007079][T20094] rpm_idle+0x322/0x790 [ 1024.008790][T20094] pm_runtime_work+0x120/0x150 [ 1024.010803][T20094] process_one_work+0xa23/0x1940 [ 1024.012878][T20094] worker_thread+0x5ef/0xe50 [ 1024.014801][T20094] kthread+0x370/0x450 [ 1024.016501][T20094] ret_from_fork+0x72b/0xd50 [ 1024.018450][T20094] ret_from_fork_asm+0x1a/0x30 [ 1024.020420][T20094] [ 1024.021417][T20094] The buggy address belongs to the object at ffff888026580000 [ 1024.021417][T20094] which belongs to the cache kmalloc-8k of size 8192 [ 1024.027012][T20094] The buggy address is located 1272 bytes inside of [ 1024.027012][T20094] freed 8192-byte region [ffff888026580000, ffff888026582000) [ 1024.032442][T20094] [ 1024.033447][T20094] The buggy address belongs to the physical page: [ 1024.036058][T20094] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26580 [ 1024.039525][T20094] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1024.042838][T20094] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1024.045902][T20094] page_type: f5(slab) [ 1024.047574][T20094] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 1024.050955][T20094] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1024.054428][T20094] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 1024.057927][T20094] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1024.061289][T20094] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1024.064873][T20094] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1024.068487][T20094] page dumped because: kasan: bad access detected [ 1024.071149][T20094] page_owner tracks the page as allocated [ 1024.073544][T20094] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5626878013, free_ts 5419511264 [ 1024.081792][T20094] post_alloc_hook+0xfd/0x120 [ 1024.083809][T20094] get_page_from_freelist+0xf48/0x3530 [ 1024.086126][T20094] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1024.088619][T20094] new_slab+0xa2/0x640 [ 1024.090332][T20094] refill_objects+0xe3/0x410 [ 1024.092018][T20094] __pcs_replace_empty_main+0x376/0x680 [ 1024.094073][T20094] __kvmalloc_node_noprof+0x793/0x970 [ 1024.096322][T20094] drm_gem_get_pages+0x146/0x910 [ 1024.098394][T20094] drm_gem_shmem_get_pages_locked+0x1e6/0x4b0 [ 1024.100933][T20094] drm_gem_shmem_pin_locked+0x224/0x4f0 [ 1024.103256][T20094] drm_gem_shmem_vmap_locked+0x47f/0x860 [ 1024.105655][T20094] drm_gem_vmap_locked+0xc8/0x1c0 [ 1024.107761][T20094] drm_gem_vmap+0x4a/0xa0 [ 1024.109513][T20094] drm_client_buffer_vmap+0x74/0x110 [ 1024.111675][T20094] drm_fbdev_shmem_driver_fbdev_probe+0x344/0xa30 [ 1024.114271][T20094] __drm_fb_helper_initial_config_and_unlock+0xe3c/0x17f0 [ 1024.117267][T20094] page last free pid 60 tgid 60 stack trace: [ 1024.119839][T20094] free_pages_prepare+0x586/0xd80 [ 1024.122002][T20094] __free_contig_range_common+0x14f/0x250 [ 1024.124443][T20094] free_pages_bulk+0x12a/0x200 [ 1024.126537][T20094] vm_area_free_pages+0xad/0x2b0 [ 1024.128687][T20094] vfree+0x107/0x750 [ 1024.130393][T20094] delayed_vfree_work+0x56/0x80 [ 1024.132511][T20094] process_one_work+0xa23/0x1940 [ 1024.134665][T20094] worker_thread+0x5ef/0xe50 [ 1024.136576][T20094] kthread+0x370/0x450 [ 1024.138242][T20094] ret_from_fork+0x72b/0xd50 [ 1024.140135][T20094] ret_from_fork_asm+0x1a/0x30 [ 1024.142133][T20094] [ 1024.143188][T20094] Memory state around the buggy address: [ 1024.145657][T20094] ffff888026580380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1024.149111][T20094] ffff888026580400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1024.152546][T20094] >ffff888026580480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1024.155925][T20094] ^ [ 1024.159298][T20094] ffff888026580500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1024.162727][T20094] ffff888026580580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1024.166164][T20094] ================================================================== [ 1024.174351][ T5934] usb usb46-port1: attempt power cycle [ 1024.183493][T20094] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1024.186762][T20094] CPU: 1 UID: 0 PID: 20094 Comm: syz.0.4003 Tainted: G L syzkaller #0 PREEMPT(full) [ 1024.191402][T20094] Tainted: [L]=SOFTLOCKUP [ 1024.193291][T20094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1024.197658][T20094] Call Trace: [ 1024.199144][T20094] [ 1024.200462][T20094] dump_stack_lvl+0x100/0x190 [ 1024.202553][T20094] vpanic+0x552/0x970 [ 1024.204335][T20094] ? __pfx_vpanic+0x10/0x10 [ 1024.206380][T20094] ? __mutex_lock+0x15ca/0x1bd0 [ 1024.208521][T20094] panic+0xd1/0xe0 [ 1024.210153][T20094] ? __pfx_panic+0x10/0x10 [ 1024.212093][T20094] ? __mutex_lock+0x15ca/0x1bd0 [ 1024.214396][T20094] ? preempt_schedule_common+0x42/0xc0 [ 1024.216869][T20094] check_panic_on_warn.cold+0x19/0x34 [ 1024.219207][T20094] end_report.part.0+0x3a/0x90 [ 1024.221281][T20094] kasan_report.cold+0xe/0x18 [ 1024.223370][T20094] ? __mutex_lock+0x15ca/0x1bd0 [ 1024.225573][T20094] __mutex_lock+0x15ca/0x1bd0 [ 1024.227615][T20094] ? __pfx___schedule+0x10/0x10 [ 1024.229742][T20094] ? attach_store+0x333/0x8f0 [ 1024.231817][T20094] ? __pfx___mutex_lock+0x10/0x10 [ 1024.233983][T20094] ? lockdep_hardirqs_on+0x78/0x100 [ 1024.236276][T20094] ? irqentry_exit+0x24d/0xa00 [ 1024.238399][T20094] ? attach_store+0x333/0x8f0 [ 1024.240433][T20094] attach_store+0x333/0x8f0 [ 1024.242445][T20094] ? __pfx_attach_store+0x10/0x10 [ 1024.244659][T20094] ? find_held_lock+0x2b/0x80 [ 1024.246752][T20094] ? sysfs_file_kobj+0xe4/0x290 [ 1024.248877][T20094] ? sysfs_file_kobj+0xe4/0x290 [ 1024.251021][T20094] ? __pfx_attach_store+0x10/0x10 [ 1024.253227][T20094] dev_attr_store+0x58/0x80 [ 1024.255273][T20094] ? __pfx_dev_attr_store+0x10/0x10 [ 1024.257547][T20094] sysfs_kf_write+0xf2/0x150 [ 1024.259583][T20094] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1024.261876][T20094] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1024.264129][T20094] vfs_write+0x6ac/0x1050 [ 1024.266052][T20094] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1024.268588][T20094] ? __pfx_vfs_write+0x10/0x10 [ 1024.270661][T20094] ? find_held_lock+0x2b/0x80 [ 1024.272724][T20094] ksys_write+0x12a/0x250 [ 1024.274609][T20094] ? __pfx_ksys_write+0x10/0x10 [ 1024.276554][T20094] do_int80_emulation+0x14b/0x720 [ 1024.278557][T20094] asm_int80_emulation+0x1a/0x20 [ 1024.280344][T20094] RIP: 0023:0xf71d73eb [ 1024.281593][T20094] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1024.288790][T20094] RSP: 002b:00000000f5453f9c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1024.291702][T20094] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f5454060 [ 1024.294125][T20094] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 1024.296474][T20094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1024.298872][T20094] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 1024.301249][T20094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1024.303553][T20094] [ 1024.305116][T20094] Kernel Offset: disabled [ 1024.306424][T20094] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:42:11 Registers: info registers vcpu 0 CPU#0 RAX=00000000ffffffff RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e29fddf RDI=ffffffff8c400a80 RBP=ffff88801d7ba540 RSP=ffffc900078ef5a8 R8 =ffffffff8a5ddb25 R9 =0000000000000000 R10=ffffc900078ef820 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000246 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff8bb92a7c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe426c1ce8 CR3=0000000063bdb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000024c00000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000001b1d2 RBX=00000000f71d73eb RCX=ffffc9003500c000 RDX=0000000000080000 RSI=ffffffff81fd9bc2 RDI=00000000f71d73eb RBP=ffffc90005eaee30 RSP=ffffc90005eaec80 R8 =ffffc90005eaed10 R9 =ffffc90005eaee30 R10=0000000000000000 R11=0000000000000012 R12=ffffc90005eaecf0 R13=ffffc90005eaed10 R14=ffffc90005eaed50 R15=ffffc90005eaed30 RIP=ffffffff8209ae00 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7277fe0 CR3=0000000063bdb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000ffffffff RBX=00000000f6ddb428 RCX=0000000081f4c59f RDX=00000000f6ddb428 RSI=0000000081f4c59f RDI=00000000ffffffff RBP=00000000ffffffff RSP=fffffe0000090fd8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000202 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff810014f0 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 0000000058204480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000557df9640000 CR3=00000000738b4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000004000008fd RBX=ffff88801c2d8488 RCX=0000000000000830 RDX=0000000000000004 RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000002 RSP=ffffc900005df8a0 R8 =0000000000000000 R9 =fffffbfff224561a R10=ffffffff9122b0d7 R11=0000000000000000 R12=0000000000000004 R13=1ffff920000bbf18 R14=ffffc900005df8e0 R15=0000000000000010 RIP=ffffffff81b69c1a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080366018 CR3=00000000738b4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9065047ac47dcd6b 8e521c818f88dd38 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 17b76302acec5f15 7b32a6244f49e43c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6dcd4c13f6aa69a8 10a96c888e3f807f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8af5b024c9073b9a 4c2a0a96a0ea8f0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000010c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f8ed8a8752ab010 4bc3d4f0b9a6627c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00161df3e4c3b46a 8cb72af8b6e23b64 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d3c2126da2596f36 000000000000026c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bea58bcd6cdd5426 4e3524df0000026c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5192c266d3542da2 697a21abcdb99fca ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d2e42b8e9e0814e 29c0fb586504ebca ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000