last executing test programs: 1m50.335265811s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem\n', 0x8) 1m47.660819867s ago: executing program 1 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem\n', 0x3) 1m47.660721933s ago: executing program 1 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="c6050000000001", 0x7}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m47.531226719s ago: executing program 1 (id=36): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="f4", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aecf, &(0x7f000001a000)=@vmx={0x1, 0x0, 0x2080}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f000001b000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m47.431256061s ago: executing program 1 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem\n\x00', 0x5) 1m47.431104793s ago: executing program 1 (id=38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x18000, &(0x7f0000000000/0x18000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaeaa, 0x2625a0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000240)="48b80000000001000000488900f4", 0xe}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m47.280311635s ago: executing program 1 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='disk\n', 0x5) 1m46.540900776s ago: executing program 2 (id=53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x18000, &(0x7f0000000000/0x18000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaeaa, 0x2dc6c0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000240)="48b80000000001000000488900f4", 0xe}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m46.428703535s ago: executing program 2 (id=55): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x10000, &(0x7f0000000000/0x10000)=nil}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000001000)={0x50, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001000)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000002000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x10, 0x0, 0x0, 0x2000}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4078ae3f, &(0x7f0000003000)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff}, {"d07ee51100"}}) 1m46.341030461s ago: executing program 3 (id=57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000100)={0x1000, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000140)={0x1000, 0x1000}) 1m46.271160883s ago: executing program 2 (id=58): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) 1m46.27085896s ago: executing program 2 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) 1m46.159272517s ago: executing program 2 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='vp-vdpa\x00', 0x8) write(0xffffffffffffffff, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='vp-vdpa\x00', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 1m46.159165751s ago: executing program 3 (id=61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00ce0a0, &(0x7f0000000000)={0x4, 0x0}) 1m46.058851266s ago: executing program 2 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='mem\n', 0x4) 1m46.058746807s ago: executing program 3 (id=63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0xfec00000, 0x0, 0x120}) 1m45.939969758s ago: executing program 3 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0x0}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x0, &(0x7f0000000200)}) 1m45.861031817s ago: executing program 3 (id=65): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="f4", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aecf, &(0x7f000001a000)=@vmx={0x1, 0x0, 0x2080, {0x1000, 0x2000}}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f000001b000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m45.770437236s ago: executing program 3 (id=66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='core\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='mem\n', 0x4) 1m35.228190333s ago: executing program 32 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem\n', 0x8) 1m32.308681013s ago: executing program 33 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='disk\n', 0x5) 1m31.037275341s ago: executing program 34 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='mem\n', 0x4) 1m30.794808278s ago: executing program 35 (id=66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='core\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='mem\n', 0x4) 1m30.243186811s ago: executing program 4 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x150, 0x0, 0x3, [{{0x4, 0x2, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x7, 0x9, 0x3, 0x6, 0x7, 0x2, 0x2, 0x3, 0x7, 0x8000, 0x0, r1, r2, 0x1, 0x1}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}, {{0x4, 0x3, 0x7fffffff, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x800000004, 0x46a1, 0x6, 0x0, 0x6, 0x1, 0xa, 0x8000, 0xde, 0x0, r2, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) 1m29.33064087s ago: executing program 4 (id=100): munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000db1000/0x4000)=nil, 0x4000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 1m29.249833585s ago: executing program 4 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdpa\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='vp-vdpa\x00', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 1m28.751137382s ago: executing program 4 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00), 0x0) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 1m28.29822394s ago: executing program 4 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdpa\x00', 0x8) write(0xffffffffffffffff, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='vp-vdpa\x00', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 1m28.135676208s ago: executing program 4 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x20, 0x0, 0x7fff8000}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r4, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) close_range(r3, 0xffffffffffffffff, 0x0) 1m28.060506763s ago: executing program 5 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='vfio-pci\x00', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) dup2(0xffffffffffffffff, 0xc8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) 1m27.920782298s ago: executing program 5 (id=108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$tun(r1, &(0x7f0000000a80)={@void, @val={0x2, 0x3, 0x1, 0xe2b, 0x4, 0x7}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x7, 0x0, 0x6, 0x1, 0x0, @rand_addr=0x64010102, @remote}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xc, 0xec, {0x5, 0x4, 0x2, 0x0, 0xffff, 0x64, 0x2, 0x4, 0xc, 0x2, @multicast2, @multicast2}}}}, 0x3a) 1m25.755606649s ago: executing program 5 (id=109): shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01018f97aee9c1bd2fd8c669a7a9a810fcbd85d5940f6af500372fcff310d483aaf515be1900000000000004020000030000000000060400000020725eb3daf1411b9c5bbc06d7eac1652ec62788910be28f41f287aaee73fb3b6438d6762741796d70b8b696b625426f3272155cfb84b76c67150a5a949276f29b9ec89a2463bee6f59fc92b149158dc926446fd1dd45ed962ad42f76991029f624bdd49f9e603a053124e66ef1f998b7fed96dda6980000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x8000000000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) writev(r3, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f00000001c0)={0x1f, 0x8, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) 1m24.800841724s ago: executing program 5 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdpa\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='vp-vdpa\x00', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 1m24.659559279s ago: executing program 5 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='vp-vdpa\x00', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 1m24.060610318s ago: executing program 5 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0x21, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000400), &(0x7f0000000500)=r4}, 0x3e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 1m3.447462281s ago: executing program 36 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x20, 0x0, 0x7fff8000}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r4, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) close_range(r3, 0xffffffffffffffff, 0x0) 1m3.403983161s ago: executing program 37 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0x21, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000400), &(0x7f0000000500)=r4}, 0x3e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 1.929679434s ago: executing program 7 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-v', 0x4) write(0xffffffffffffffff, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='vp-vdp', 0x6) write(0xffffffffffffffff, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='vp-vdpa\x00', 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 1.85997262s ago: executing program 9 (id=893): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 1.859731118s ago: executing program 9 (id=894): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='vfio-pci\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/iommu\x00', 0x2, 0x0) dup2(r3, 0xc8) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/vfio/devices/vfio2\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/vfio/devices/vfio3\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/vfio/devices/vfio4\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/vfio/devices/vfio5\x00', 0x2, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vfio/devices/vfio6\x00', 0x2, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/vfio/devices/vfio7\x00', 0x2, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/vfio/devices/vfio8\x00', 0x2, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vfio/devices/vfio9\x00', 0x2, 0x0) ioctl(r4, 0x3b76, &(0x7f0000000600)="1800000000000000c800"/24) ioctl(0xffffffffffffffff, 0x3b76, &(0x7f0000000600)="1800000000000000c800"/24) ioctl(r5, 0x3b76, &(0x7f0000000600)="1800000000000000c800"/24) ioctl(r6, 0x3b76, &(0x7f0000000600)="1800000000000000c800"/24) ioctl(r7, 0x3b76, &(0x7f0000000600)="1800000000000000c800"/24) ioctl(r8, 0x3b76, &(0x7f0000000600)="1800000000000000c800"/24) ioctl(r9, 0x3b76, &(0x7f0000000600)="1800000000000000c800"/24) ioctl(r10, 0x3b76, &(0x7f0000000600)="1800000000000000c800"/24) ioctl(r11, 0x3b76, &(0x7f0000000600)="1800000000000000c800"/24) ioctl(r12, 0x3b76, &(0x7f0000000600)="1800000000000000c800"/24) 1.807032443s ago: executing program 7 (id=897): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 1.740511474s ago: executing program 7 (id=900): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 1.740093013s ago: executing program 7 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-vdpa\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='vp-vdpa\x00', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='vp-vdpa\x00', 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r8, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 950.359044ms ago: executing program 9 (id=905): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000380)='0', 0x1) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r1, &(0x7f00000004c0)='\n', 0x1) 857.547047ms ago: executing program 7 (id=906): mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000005c40)="00000000090209000101008001120100020000004000800000000000000001cab9", 0x21) 854.860928ms ago: executing program 9 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vp-v', 0x4) write(0xffffffffffffffff, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='vp-vdpa', 0x7) write(0xffffffffffffffff, &(0x7f0000000380)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='vp-vdpa\x00', 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/vhost-vdpa-0\x00', 0x2, 0x0) 854.657953ms ago: executing program 7 (id=908): shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01018f97aee9c1bd2fd8c669a7a9a810fcbd85d5940f6af500372fcff310d483aaf515be1900000000000004020000030000000000060400000020725eb3daf1411b9c5bbc06d7eac1652ec62788910be28f41f287aaee73fb3b6438d6762741796d70b8b696b625426f3272155cfb84b76c67150a5a949276f29b9ec89a2463bee6f59fc92b149158dc926446fd1dd45ed962ad42f76991029f624bdd49f9e603a053124e66ef1f998b7fed96dda6980000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8000000000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) writev(r3, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f00000001c0)={0x1f, 0x8, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) 720.721281ms ago: executing program 9 (id=910): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 644.928992ms ago: executing program 9 (id=911): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001540)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)={0x1, 0x0, [{0x0, 0x5d, &(0x7f00000025c0)=""/93}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="83800377591dd55c"}}) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 580.177904ms ago: executing program 6 (id=914): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 458.583514ms ago: executing program 6 (id=916): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000380)='0', 0x1) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r1, &(0x7f00000004c0)='\n', 0x1) 270.520747ms ago: executing program 6 (id=918): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 210.699783ms ago: executing program 6 (id=920): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 150.335107ms ago: executing program 6 (id=921): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 149.760685ms ago: executing program 8 (id=922): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x3b76, &(0x7f0000000600)="1800000000000000c800"/24) 149.539491ms ago: executing program 6 (id=923): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='vfio-pci\x00', 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) nanosleep(&(0x7f0000000400)={0x2}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) 90.666322ms ago: executing program 8 (id=924): mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000005c40)="00000000090209000101008001120100020000004000800000000000000001cab9", 0x21) 90.477237ms ago: executing program 8 (id=925): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 80.132582ms ago: executing program 8 (id=926): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 195.442µs ago: executing program 8 (id=927): mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 0s ago: executing program 8 (id=928): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0', 0xb) kernel console output (not intermixed with test programs): 64] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.872864][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.883568][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.885820][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.915744][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.944476][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.950322][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.961469][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.963862][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.976753][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.979098][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.993686][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.001502][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.003765][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.020549][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.022793][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.055164][ T5754] Bluetooth: hci3: command tx timeout [ 49.056071][ T5759] Bluetooth: hci0: command tx timeout [ 49.058075][ T5751] Bluetooth: hci2: command tx timeout [ 49.064833][ T5751] Bluetooth: hci1: command tx timeout [ 49.189320][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.201092][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.240200][ T5744] veth0_vlan: entered promiscuous mode [ 49.255848][ T5742] veth0_vlan: entered promiscuous mode [ 49.260604][ T5744] veth1_vlan: entered promiscuous mode [ 49.268132][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.272732][ T5742] veth1_vlan: entered promiscuous mode [ 49.295637][ T5742] veth0_macvtap: entered promiscuous mode [ 49.302501][ T5744] veth0_macvtap: entered promiscuous mode [ 49.309847][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.312674][ T5742] veth1_macvtap: entered promiscuous mode [ 49.320502][ T5744] veth1_macvtap: entered promiscuous mode [ 49.332912][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.351080][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.359329][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.365401][ T5745] veth0_vlan: entered promiscuous mode [ 49.373169][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.379812][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.384058][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.388648][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.397405][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.405934][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.408688][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.412472][ T5745] veth1_vlan: entered promiscuous mode [ 49.416664][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.419370][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.433182][ T5743] veth0_vlan: entered promiscuous mode [ 49.451804][ T5743] veth1_vlan: entered promiscuous mode [ 49.488203][ T5745] veth0_macvtap: entered promiscuous mode [ 49.495490][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.499275][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.514447][ T5745] veth1_macvtap: entered promiscuous mode [ 49.515043][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.519782][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.525758][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.528782][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.545804][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.551920][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.552816][ T5743] veth0_macvtap: entered promiscuous mode [ 49.555106][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.563565][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.569656][ T5743] veth1_macvtap: entered promiscuous mode [ 49.570849][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.578879][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.579735][ T5742] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.581831][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.589022][ T5742] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.594460][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.595928][ T5742] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.597732][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.613212][ T5744] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.614286][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.626869][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.648397][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.651609][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.655589][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.666924][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.675779][ T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.682058][ T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.709312][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.711728][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.722568][ T5896] PM: suspend entry (deep) [ 49.724233][ T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.726770][ T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.746310][ T12] Filesystems sync: 0.021 seconds [ 49.747829][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.750670][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.783959][ T5897] kvm: user requested TSC rate below hardware speed [ 49.827412][ T5901] e1000e 0000:00:02.0 eth1: removed PHC [ 49.924935][ T5901] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 50.547115][ T5896] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.549136][ T5896] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.555597][ T5896] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.559397][ T5896] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.561301][ T5896] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.564761][ T5896] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.567658][ T5896] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.569663][ T5896] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.572313][ T5896] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.577984][ T5896] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.580217][ T5896] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.583775][ T5896] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.766594][ T5949] PM: suspend entry (s2idle) [ 50.768075][ T5949] PM: suspend exit [ 50.774083][ T5951] kernel kvm profiling enabled (shift: 4) [ 51.039578][ T5965] PM: suspend entry (deep) [ 51.041404][ T5965] PM: suspend exit [ 51.094403][ T5967] kvm_intel: VMCS ffff88806f18b000, last attempted VM-entry on CPU 3 [ 51.098251][ T5967] kvm_intel: *** Guest State *** [ 51.101246][ T5967] kvm_intel: CR0: actual=0x0000000080000021, shadow=0x0000000080000001, gh_mask=fffffffffffefff7 [ 51.102873][ T5969] kvm: user requested TSC rate below hardware speed [ 51.105814][ T5967] kvm_intel: CR4: actual=0x0000000000002060, shadow=0x0000000000000020, gh_mask=fffffffffffff871 [ 51.105840][ T5967] kvm_intel: CR3 = 0x0000000000001000 [ 51.105873][ T5967] kvm_intel: PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 51.105909][ T5967] kvm_intel: PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 51.105924][ T5967] kvm_intel: RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 51.105948][ T5967] kvm_intel: RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 51.105995][ T5967] kvm_intel: Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 51.106047][ T5967] kvm_intel: CS: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 51.106112][ T5967] kvm_intel: DS: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 51.137948][ T5967] kvm_intel: SS: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 51.141304][ T5967] kvm_intel: ES: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 51.145722][ T5967] kvm_intel: FS: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 51.149774][ T5967] kvm_intel: GS: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 51.153649][ T5967] kvm_intel: GDTR: limit=0x00000000, base=0x0000000000000000 [ 51.157778][ T5967] kvm_intel: LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 51.161771][ T5967] kvm_intel: IDTR: limit=0x00000000, base=0x0000000000000000 [ 51.165481][ T5967] kvm_intel: TR: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 51.169572][ T5967] kvm_intel: EFER= 0x0000000000001000 [ 51.171342][ T5967] kvm_intel: PAT = 0x0007040600070406 [ 51.173669][ T5967] kvm_intel: DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 51.177798][ T5967] kvm_intel: Interruptibility = 00000000 ActivityState = 00000000 [ 51.180833][ T5967] kvm_intel: *** Host State *** [ 51.185326][ T5967] kvm_intel: RIP = 0xffffffff8bb7c3a0 RSP = 0xffffc90006f1f870 [ 51.188543][ T5967] kvm_intel: CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 51.191745][ T5967] kvm_intel: FSBase=0000000000000000 GSBase=ffff888096ee6000 TRBase=fffffe00000d8000 [ 51.195841][ T5967] kvm_intel: GDTBase=fffffe00000d6000 IDTBase=fffffe0000000000 [ 51.199065][ T5967] kvm_intel: CR0=0000000080050033 CR3=000000006f19a000 CR4=0000000000352ef0 [ 51.202051][ T5967] kvm_intel: Sysenter RSP=fffffe00000d8000 CS:RIP=0010:ffffffff81001df0 [ 51.206189][ T5967] kvm_intel: EFER= 0x0000000000000d01 [ 51.208957][ T5967] kvm_intel: PAT = 0x0407050600070106 [ 51.210691][ T5967] kvm_intel: *** Control State *** [ 51.212924][ T5967] kvm_intel: CPUBased=0xb5986dfa SecondaryExec=0x000000e2 TertiaryExec=0x0000000000000000 [ 51.217587][ T5967] kvm_intel: PinBased=0x0000007f EntryControls=0000d1ff ExitControls=002befff [ 51.218066][ T5972] vfio-pci 0000:00:02.0: resetting [ 51.221334][ T5967] kvm_intel: ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 51.221349][ T5967] kvm_intel: VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 51.221363][ T5967] kvm_intel: VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 51.221373][ T5967] kvm_intel: reason=80000021 qualification=0000000000000000 [ 51.221382][ T5967] kvm_intel: IDTVectoring: info=00000000 errcode=00000000 [ 51.221398][ T5967] kvm_intel: TSC Offset = 0xffffffdfd93353c4 [ 51.221415][ T5967] kvm_intel: EPT pointer = 0x000000006f18905e [ 51.221433][ T5967] kvm_intel: Virtual processor ID = 0x0001 [ 51.273125][ T5972] vfio-pci 0000:00:02.0: reset done [ 51.339751][ T5977] kvm: user requested TSC rate below hardware speed [ 51.396717][ T5980] vfio-pci 0000:00:02.0: No device request channel registered, blocked until released by user [ 51.501102][ T5984] vfio-pci 0000:00:03.0: No device request channel registered, blocked until released by user [ 51.769128][ T6000] kvm: user requested TSC rate below hardware speed [ 51.864713][ T5751] Bluetooth: hci0: command 0x040f tx timeout [ 52.020774][ T6011] kvm_intel: VMCS ffff88806d39e000, last attempted VM-entry on CPU 1 [ 52.025250][ T6011] kvm_intel: *** Guest State *** [ 52.027320][ T6011] kvm_intel: CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffefff7 [ 52.031700][ T6011] kvm_intel: CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=fffffffffffff871 [ 52.036390][ T6011] kvm_intel: CR3 = 0x0000000000000000 [ 52.038651][ T6011] kvm_intel: PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 52.041776][ T6011] kvm_intel: PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 52.046001][ T6011] kvm_intel: RSP = 0x0000000000000000 RIP = 0x0000000000009100 [ 52.049268][ T6011] kvm_intel: RFLAGS=0x00020002 DR7 = 0x0000000000000400 [ 52.052405][ T6011] kvm_intel: Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 52.056094][ T6011] kvm_intel: CS: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 52.060143][ T6011] kvm_intel: DS: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 52.064055][ T6011] kvm_intel: SS: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 52.068429][ T6011] kvm_intel: ES: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 52.072453][ T6011] kvm_intel: FS: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 52.076223][ T6011] kvm_intel: GS: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 52.080262][ T6011] kvm_intel: GDTR: limit=0x00000000, base=0x0000000000000000 [ 52.084040][ T6011] kvm_intel: LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 52.088106][ T6011] kvm_intel: IDTR: limit=0x00000000, base=0x0000000000000000 [ 52.091381][ T6011] kvm_intel: TR: sel=0x0000, attr=0x10001, limit=0x00000000, base=0x0000000000000000 [ 52.094394][ T6011] kvm_intel: EFER= 0x0000000000000000 [ 52.096981][ T6011] kvm_intel: PAT = 0x0007040600070406 [ 52.098757][ T6011] kvm_intel: DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 52.101708][ T6011] kvm_intel: Interruptibility = 00000000 ActivityState = 00000000 [ 52.106124][ T6011] kvm_intel: *** Host State *** [ 52.108287][ T6011] kvm_intel: RIP = 0xffffffff8bb7c3a0 RSP = 0xffffc9000485f870 [ 52.111546][ T6011] kvm_intel: CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 52.115280][ T6011] kvm_intel: FSBase=0000000000000000 GSBase=ffff888096ce6000 TRBase=fffffe000004a000 [ 52.119294][ T6011] kvm_intel: GDTBase=fffffe0000048000 IDTBase=fffffe0000000000 [ 52.122487][ T6011] kvm_intel: CR0=0000000080050033 CR3=000000006d399000 CR4=0000000000352ef0 [ 52.127902][ T6011] kvm_intel: Sysenter RSP=fffffe000004a000 CS:RIP=0010:ffffffff81001df0 [ 52.131446][ T6011] kvm_intel: EFER= 0x0000000000000d01 [ 52.133677][ T6011] kvm_intel: PAT = 0x0407050600070106 [ 52.136089][ T6011] kvm_intel: *** Control State *** [ 52.138333][ T6011] kvm_intel: CPUBased=0xb5986dfa SecondaryExec=0x000000e2 TertiaryExec=0x0000000000000000 [ 52.142329][ T6011] kvm_intel: PinBased=0x0000007f EntryControls=0000d1ff ExitControls=002befff [ 52.146357][ T6011] kvm_intel: ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 52.149653][ T6011] kvm_intel: VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 52.152528][ T6011] kvm_intel: VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 52.155620][ T6011] kvm_intel: reason=80000021 qualification=0000000000000000 [ 52.158188][ T6011] kvm_intel: IDTVectoring: info=00000000 errcode=00000000 [ 52.160552][ T6011] kvm_intel: TSC Offset = 0xffffffdf49d6c8ea [ 52.162441][ T6011] kvm_intel: EPT pointer = 0x000000006d3ad05e [ 52.164355][ T6011] kvm_intel: Virtual processor ID = 0x0001 [ 52.297696][ T6023] PM: suspend entry (deep) [ 52.299130][ T6023] PM: suspend exit [ 52.346022][ T6021] vfio-pci 0000:00:03.0: No device request channel registered, blocked until released by user [ 52.522753][ T6033] PM: suspend entry (deep) [ 52.524183][ T6033] PM: suspend exit [ 52.584642][ T5751] Bluetooth: hci3: command 0x040f tx timeout [ 52.584936][ T5754] Bluetooth: hci1: command 0x040f tx timeout [ 52.654933][ T5754] Bluetooth: hci2: command 0x040f tx timeout [ 53.059951][ T6042] kvm: user requested TSC rate below hardware speed [ 53.132684][ T6047] kvm: user requested TSC rate below hardware speed [ 53.243406][ T6054] PM: suspend entry (deep) [ 53.245046][ T6054] PM: suspend exit [ 53.440151][ T6066] kvm: user requested TSC rate below hardware speed [ 53.751203][ T6084] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 53.934927][ T5754] Bluetooth: hci0: command 0x040f tx timeout [ 54.258862][ T6100] PM: suspend entry (deep) [ 54.260318][ T6100] PM: suspend exit [ 54.654835][ T5754] Bluetooth: hci1: command 0x040f tx timeout [ 54.655452][ T5751] Bluetooth: hci3: command 0x040f tx timeout [ 54.735139][ T5751] Bluetooth: hci2: command 0x040f tx timeout [ 56.015131][ T5751] Bluetooth: hci0: command 0x040f tx timeout [ 56.735666][ T5751] Bluetooth: hci3: command 0x040f tx timeout [ 56.735695][ T5754] Bluetooth: hci1: command 0x040f tx timeout [ 56.814683][ T5751] Bluetooth: hci2: command 0x040f tx timeout [ 58.094710][ T5751] Bluetooth: hci0: command 0x040f tx timeout [ 58.825427][ T5751] Bluetooth: hci3: command 0x040f tx timeout [ 58.826026][ T5754] Bluetooth: hci1: command 0x040f tx timeout [ 58.894809][ T5754] Bluetooth: hci2: command 0x040f tx timeout [ 60.174869][ T5754] Bluetooth: hci0: command 0x040f tx timeout [ 60.894930][ T5754] Bluetooth: hci1: command 0x040f tx timeout [ 60.895046][ T5751] Bluetooth: hci3: command 0x040f tx timeout [ 60.985139][ T5751] Bluetooth: hci2: command 0x040f tx timeout [ 64.856840][ T5754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.861303][ T5754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.865533][ T5754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.869028][ T5754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.872906][ T5754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.201607][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.203975][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.206386][ T6106] bridge_slave_0: entered allmulticast mode [ 65.209644][ T6106] bridge_slave_0: entered promiscuous mode [ 65.213369][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.216047][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.218619][ T6106] bridge_slave_1: entered allmulticast mode [ 65.222076][ T6106] bridge_slave_1: entered promiscuous mode [ 65.240662][ T6106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.245443][ T6106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.262320][ T6106] team0: Port device team_slave_0 added [ 65.265667][ T6106] team0: Port device team_slave_1 added [ 65.288371][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.291260][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.300127][ T6106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.304650][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.306849][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.316508][ T6106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.350054][ T6106] hsr_slave_0: entered promiscuous mode [ 65.352338][ T6106] hsr_slave_1: entered promiscuous mode [ 65.354973][ T6106] debugfs: 'hsr0' already exists in 'hsr' [ 65.357145][ T6106] Cannot create hsr debugfs directory [ 65.459646][ T6106] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.463964][ T6106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.466871][ T6106] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.470625][ T6106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.473288][ T6106] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.477341][ T6106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.480011][ T6106] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.483947][ T6106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.505222][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.507775][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.511176][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.514040][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.564730][ T6106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.572824][ T185] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.576591][ T185] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.583837][ T6106] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.592699][ T185] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.595554][ T185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.603016][ T185] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.605822][ T185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.851813][ T6106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.991549][ T6106] veth0_vlan: entered promiscuous mode [ 65.996979][ T6106] veth1_vlan: entered promiscuous mode [ 66.016877][ T6106] veth0_macvtap: entered promiscuous mode [ 66.023159][ T6106] veth1_macvtap: entered promiscuous mode [ 66.038529][ T6106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.047703][ T6106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.056557][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.060142][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.064485][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.068532][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.113326][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.116253][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.135839][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.139007][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.361354][ T6152] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 66.905490][ T5754] Bluetooth: hci4: command tx timeout [ 67.224361][ T6172] netlink: 72 bytes leftover after parsing attributes in process `syz.4.77'. [ 67.290007][ T6174] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 67.463599][ T6176] vfio-pci 0000:00:02.0: resetting [ 67.498012][ T6176] vfio-pci 0000:00:02.0: reset done [ 67.606065][ T6179] Zero length message leads to an empty skb [ 67.900450][ T5751] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.904192][ T5751] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.909657][ T5751] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.912392][ T5751] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.915068][ T5751] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.200032][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.203178][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.205651][ T6185] bridge_slave_0: entered allmulticast mode [ 68.208368][ T6185] bridge_slave_0: entered promiscuous mode [ 68.212249][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.214515][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.217620][ T6185] bridge_slave_1: entered allmulticast mode [ 68.220257][ T6185] bridge_slave_1: entered promiscuous mode [ 68.237511][ T6185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.241834][ T6185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.258186][ T6185] team0: Port device team_slave_0 added [ 68.261548][ T6185] team0: Port device team_slave_1 added [ 68.274912][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.277318][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.285398][ T6185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.289652][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.291838][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.299649][ T6185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.323134][ T6185] hsr_slave_0: entered promiscuous mode [ 68.325459][ T6185] hsr_slave_1: entered promiscuous mode [ 68.327506][ T6185] debugfs: 'hsr0' already exists in 'hsr' [ 68.329250][ T6185] Cannot create hsr debugfs directory [ 68.422351][ T6185] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.427767][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.431260][ T6185] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.436344][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.439803][ T6185] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.445021][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.448270][ T6185] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.455327][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.479380][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.481928][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.484436][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.486720][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.528934][ T6185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.540228][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.544195][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.554044][ T6185] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.563757][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.566797][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.573461][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.575778][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.621128][ T6212] trusted_key: syz.4.84 sent an empty control message without MSG_MORE. [ 68.823230][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.962196][ T6231] tmpfs: Bad value for 'nr_inodes' [ 68.975502][ T5751] Bluetooth: hci4: command tx timeout [ 68.992111][ T6185] veth0_vlan: entered promiscuous mode [ 69.000527][ T6185] veth1_vlan: entered promiscuous mode [ 69.017267][ T6185] veth0_macvtap: entered promiscuous mode [ 69.022225][ T6185] veth1_macvtap: entered promiscuous mode [ 69.033897][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.042803][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.054364][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.058556][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.068712][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.072463][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.111078][ T5754] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.115502][ T5754] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.118213][ T5754] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.119165][ T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.124390][ T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.125452][ T5754] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.130554][ T5754] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.142900][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.147497][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.328397][ T5754] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.332607][ T5754] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.337497][ T5754] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.341272][ T5754] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.344124][ T5754] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.403575][ T6264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.94'. [ 69.478958][ T6275] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 69.797795][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.800220][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.802761][ T6238] bridge_slave_0: entered allmulticast mode [ 69.807792][ T6238] bridge_slave_0: entered promiscuous mode [ 69.827815][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.834247][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.843061][ T6238] bridge_slave_1: entered allmulticast mode [ 69.849338][ T6238] bridge_slave_1: entered promiscuous mode [ 69.934785][ T5751] Bluetooth: hci5: command tx timeout [ 69.946946][ T6238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.957427][ T6238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.010412][ T6238] team0: Port device team_slave_0 added [ 70.022473][ T6238] team0: Port device team_slave_1 added [ 70.074669][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.079151][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.099740][ T6238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.110078][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.114433][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.134747][ T6238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.231341][ T6238] hsr_slave_0: entered promiscuous mode [ 70.237462][ T6238] hsr_slave_1: entered promiscuous mode [ 70.239814][ T6238] debugfs: 'hsr0' already exists in 'hsr' [ 70.243959][ T6238] Cannot create hsr debugfs directory [ 70.282991][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.285542][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.293767][ T6257] bridge_slave_0: entered allmulticast mode [ 70.296734][ T6257] bridge_slave_0: entered promiscuous mode [ 70.318223][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.321744][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.324287][ T6257] bridge_slave_1: entered allmulticast mode [ 70.328615][ T6257] bridge_slave_1: entered promiscuous mode [ 70.368350][ T6257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.380475][ T6257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.407293][ T6257] team0: Port device team_slave_0 added [ 70.416256][ T6257] team0: Port device team_slave_1 added [ 70.481847][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.486809][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.501950][ T6257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.541753][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.546680][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.562063][ T6257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.634432][ T6257] hsr_slave_0: entered promiscuous mode [ 70.637389][ T6257] hsr_slave_1: entered promiscuous mode [ 70.639536][ T6257] debugfs: 'hsr0' already exists in 'hsr' [ 70.641418][ T6257] Cannot create hsr debugfs directory [ 70.736532][ T6304] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 70.793197][ T6238] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 70.810461][ T6238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.818282][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.820615][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.822037][ T6238] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 70.833960][ T6238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.848729][ T6238] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 70.857417][ T6238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.868441][ T6238] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 70.888945][ T6238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.054826][ T5754] Bluetooth: hci4: command tx timeout [ 71.063730][ T6257] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 71.090766][ T6257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.103621][ T6257] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 71.112883][ T6257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.127248][ T6257] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 71.136821][ T6257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.141518][ T6257] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 71.158629][ T6257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.184581][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.186862][ T6257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.189125][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.191410][ T6257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.202557][ T6321] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 71.215018][ T5754] Bluetooth: hci6: command tx timeout [ 71.231209][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.238352][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.276532][ T6238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.303871][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.375721][ T5754] Bluetooth: hci7: command tx timeout [ 71.389793][ T6238] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.418570][ T6257] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.424343][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.426728][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.441749][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.443988][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.453991][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.456870][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.470795][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.473043][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.573688][ T6327] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 71.740310][ T6330] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 72.018950][ T5754] Bluetooth: hci5: command tx timeout [ 72.067697][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.108'. [ 72.615851][ T6342] syzkaller0: entered promiscuous mode [ 72.617561][ T6342] syzkaller0: entered allmulticast mode [ 73.144718][ T5754] Bluetooth: hci4: command tx timeout [ 73.294660][ T5754] Bluetooth: hci6: command tx timeout [ 73.464710][ T5754] Bluetooth: hci7: command 0x041b tx timeout [ 73.839016][ T6286] syz.5.96 (6286) used greatest stack depth: 18552 bytes left [ 74.095990][ T5751] Bluetooth: hci5: command tx timeout [ 74.213775][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.355697][ T6238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.364892][ T6257] veth0_vlan: entered promiscuous mode [ 74.372397][ T6257] veth1_vlan: entered promiscuous mode [ 74.392107][ T6257] veth0_macvtap: entered promiscuous mode [ 74.395942][ T6257] veth1_macvtap: entered promiscuous mode [ 74.410183][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.420719][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.427310][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.430997][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.435202][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.438764][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.562277][ T6238] veth0_vlan: entered promiscuous mode [ 74.571688][ T6238] veth1_vlan: entered promiscuous mode [ 74.592366][ T6238] veth0_macvtap: entered promiscuous mode [ 74.596847][ T6238] veth1_macvtap: entered promiscuous mode [ 74.606646][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.612658][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.622342][ T5832] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.626527][ T5832] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.629877][ T5832] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.632918][ T5832] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.185088][ T6382] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 75.373843][ T6384] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 75.377235][ T5751] Bluetooth: hci6: command tx timeout [ 75.545056][ T5751] Bluetooth: hci7: command 0x041b tx timeout [ 75.597798][ T6384] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 75.941343][ T5896] Freezing user space processes [ 75.941544][ T1349] cfg80211: failed to load regulatory.db [ 76.174684][ T5751] Bluetooth: hci5: command tx timeout [ 77.454675][ T5751] Bluetooth: hci6: command tx timeout [ 77.614894][ T5751] Bluetooth: hci7: command 0x041b tx timeout [ 79.695110][ T5751] Bluetooth: hci7: command 0x041b tx timeout [ 95.962658][ T5896] Freezing user space processes failed after 20.017 seconds (6 tasks refusing to freeze, wq_busy=0): [ 95.967401][ T5896] task:syz-executor state:S stack:22968 pid:5742 tgid:5742 ppid:1 task_flags:0x40054c flags:0x08080001 [ 95.972517][ T5896] Call Trace: [ 95.973920][ T5896] [ 95.975329][ T5896] __schedule+0x125c/0x6730 [ 95.977239][ T5896] ? __pfx___schedule+0x10/0x10 [ 95.979198][ T5896] ? find_held_lock+0x2b/0x80 [ 95.981163][ T5896] ? schedule+0x225/0x2c0 [ 95.982970][ T5896] schedule+0xdd/0x2c0 [ 95.985488][ T5896] do_wait+0x1a7/0x570 [ 95.987252][ T5896] kernel_wait4+0x16d/0x280 [ 95.989160][ T5896] ? __pfx_kernel_wait4+0x10/0x10 [ 95.991279][ T5896] ? lockdep_hardirqs_on+0x78/0x100 [ 95.993431][ T5896] ? __pfx_child_wait_callback+0x10/0x10 [ 95.996021][ T5896] ? find_held_lock+0x2b/0x80 [ 95.997981][ T5896] ? zap_pid_ns_processes+0x286/0x6a0 [ 96.000238][ T5896] ? zap_pid_ns_processes+0x286/0x6a0 [ 96.002468][ T5896] zap_pid_ns_processes+0x2ca/0x6a0 [ 96.004799][ T5896] ? do_raw_write_lock+0x11e/0x260 [ 96.006950][ T5896] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 96.009348][ T5896] ? do_exit+0x2205/0x2ae0 [ 96.011275][ T5896] ? rcu_is_watching+0x12/0xc0 [ 96.013313][ T5896] do_exit+0x2377/0x2ae0 [ 96.015218][ T5896] ? __pfx_do_exit+0x10/0x10 [ 96.017195][ T5896] ? do_raw_spin_lock+0x128/0x260 [ 96.019294][ T5896] ? find_held_lock+0x2b/0x80 [ 96.021252][ T5896] ? get_signal+0x7e0/0x21e0 [ 96.023168][ T5896] do_group_exit+0xd5/0x2a0 [ 96.025296][ T5896] get_signal+0x1ec7/0x21e0 [ 96.027205][ T5896] ? __pfx_get_signal+0x10/0x10 [ 96.029274][ T5896] ? __fput+0x68d/0xb50 [ 96.031008][ T5896] arch_do_signal_or_restart+0x91/0x7a0 [ 96.033210][ T5896] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 96.035961][ T5896] ? __fput+0x692/0xb50 [ 96.037711][ T5896] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 96.040351][ T5896] exit_to_user_mode_loop+0x139/0x6f0 [ 96.042563][ T5896] ? rcu_is_watching+0x12/0xc0 [ 96.044678][ T5896] do_int80_emulation+0x513/0x720 [ 96.048673][ T5896] asm_int80_emulation+0x1a/0x20 [ 96.050209][ T5896] RIP: 0023:0xf71272eb [ 96.051508][ T5896] RSP: 002b:00000000ffb8fb4c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 96.054118][ T5896] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffb8fce8 [ 96.056682][ T5896] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.059187][ T5896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.061684][ T5896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.064124][ T5896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.066635][ T5896] [ 96.067615][ T5896] task:syz-executor state:S stack:23464 pid:5743 tgid:5743 ppid:1 task_flags:0x40054c flags:0x08080001 [ 96.071208][ T5896] Call Trace: [ 96.072277][ T5896] [ 96.073217][ T5896] __schedule+0x125c/0x6730 [ 96.074738][ T5896] ? __pfx___schedule+0x10/0x10 [ 96.076278][ T5896] ? find_held_lock+0x2b/0x80 [ 96.077754][ T5896] ? schedule+0x225/0x2c0 [ 96.079121][ T5896] schedule+0xdd/0x2c0 [ 96.080374][ T5896] do_wait+0x1a7/0x570 [ 96.081648][ T5896] kernel_wait4+0x16d/0x280 [ 96.083066][ T5896] ? __pfx_kernel_wait4+0x10/0x10 [ 96.084741][ T5896] ? lockdep_hardirqs_on+0x78/0x100 [ 96.086361][ T5896] ? __pfx_child_wait_callback+0x10/0x10 [ 96.088090][ T5896] ? find_held_lock+0x2b/0x80 [ 96.089565][ T5896] ? zap_pid_ns_processes+0x286/0x6a0 [ 96.091208][ T5896] ? zap_pid_ns_processes+0x286/0x6a0 [ 96.092871][ T5896] zap_pid_ns_processes+0x2ca/0x6a0 [ 96.094465][ T5896] ? do_raw_write_lock+0x11e/0x260 [ 96.096251][ T5896] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 96.097978][ T5896] ? do_exit+0x2205/0x2ae0 [ 96.099362][ T5896] ? rcu_is_watching+0x12/0xc0 [ 96.100837][ T5896] do_exit+0x2377/0x2ae0 [ 96.102177][ T5896] ? __pfx_do_exit+0x10/0x10 [ 96.103642][ T5896] ? do_raw_spin_lock+0x128/0x260 [ 96.105301][ T5896] ? find_held_lock+0x2b/0x80 [ 96.106751][ T5896] ? get_signal+0x7e0/0x21e0 [ 96.108181][ T5896] do_group_exit+0xd5/0x2a0 [ 96.109596][ T5896] get_signal+0x1ec7/0x21e0 [ 96.111007][ T5896] ? __pfx_get_signal+0x10/0x10 [ 96.112513][ T5896] ? __fput+0x68d/0xb50 [ 96.113840][ T5896] arch_do_signal_or_restart+0x91/0x7a0 [ 96.115682][ T5896] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 96.117497][ T5896] ? __fput+0x692/0xb50 [ 96.118807][ T5896] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 96.120721][ T5896] exit_to_user_mode_loop+0x139/0x6f0 [ 96.122370][ T5896] ? rcu_is_watching+0x12/0xc0 [ 96.123892][ T5896] do_int80_emulation+0x513/0x720 [ 96.125587][ T5896] asm_int80_emulation+0x1a/0x20 [ 96.127111][ T5896] RIP: 0023:0xf71672eb [ 96.128476][ T5896] RSP: 002b:00000000ffa9daac EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 96.131064][ T5896] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffa9dc48 [ 96.133483][ T5896] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.136006][ T5896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.138314][ T5896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.141139][ T5896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.143551][ T5896] [ 96.144530][ T5896] task:syz-executor state:S stack:22040 pid:5744 tgid:5744 ppid:1 task_flags:0x40054c flags:0x08080001 [ 96.148486][ T5896] Call Trace: [ 96.149842][ T5896] [ 96.150820][ T5896] __schedule+0x125c/0x6730 [ 96.152254][ T5896] ? __pfx___schedule+0x10/0x10 [ 96.153754][ T5896] ? find_held_lock+0x2b/0x80 [ 96.155325][ T5896] ? schedule+0x225/0x2c0 [ 96.156652][ T5896] schedule+0xdd/0x2c0 [ 96.157861][ T5896] do_wait+0x1a7/0x570 [ 96.159103][ T5896] kernel_wait4+0x16d/0x280 [ 96.160517][ T5896] ? __pfx_kernel_wait4+0x10/0x10 [ 96.162086][ T5896] ? lockdep_hardirqs_on+0x78/0x100 [ 96.163653][ T5896] ? __pfx_child_wait_callback+0x10/0x10 [ 96.165409][ T5896] ? find_held_lock+0x2b/0x80 [ 96.166865][ T5896] ? zap_pid_ns_processes+0x286/0x6a0 [ 96.168522][ T5896] ? zap_pid_ns_processes+0x286/0x6a0 [ 96.170180][ T5896] zap_pid_ns_processes+0x2ca/0x6a0 [ 96.171808][ T5896] ? do_raw_write_lock+0x11e/0x260 [ 96.173360][ T5896] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 96.175242][ T5896] ? do_exit+0x2205/0x2ae0 [ 96.176617][ T5896] ? rcu_is_watching+0x12/0xc0 [ 96.178135][ T5896] do_exit+0x2377/0x2ae0 [ 96.179435][ T5896] ? __pfx_do_exit+0x10/0x10 [ 96.180820][ T5896] ? do_raw_spin_lock+0x128/0x260 [ 96.182355][ T5896] ? find_held_lock+0x2b/0x80 [ 96.183828][ T5896] ? get_signal+0x7e0/0x21e0 [ 96.185360][ T5896] do_group_exit+0xd5/0x2a0 [ 96.186778][ T5896] get_signal+0x1ec7/0x21e0 [ 96.188189][ T5896] ? __pfx_get_signal+0x10/0x10 [ 96.189691][ T5896] ? __fput+0x68d/0xb50 [ 96.190972][ T5896] arch_do_signal_or_restart+0x91/0x7a0 [ 96.192660][ T5896] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 96.194309][ T5896] ? __fput+0x692/0xb50 [ 96.195697][ T5896] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 96.197583][ T5896] exit_to_user_mode_loop+0x139/0x6f0 [ 96.199247][ T5896] ? rcu_is_watching+0x12/0xc0 [ 96.200708][ T5896] do_int80_emulation+0x513/0x720 [ 96.202258][ T5896] asm_int80_emulation+0x1a/0x20 [ 96.203788][ T5896] RIP: 0023:0xf71372eb [ 96.205122][ T5896] RSP: 002b:00000000ffdbcbac EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 96.207551][ T5896] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffdbcd48 [ 96.209968][ T5896] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.212373][ T5896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.214843][ T5896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.217266][ T5896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.219671][ T5896] [ 96.220634][ T5896] task:syz-executor state:S stack:23224 pid:5745 tgid:5745 ppid:1 task_flags:0x40054c flags:0x08080001 [ 96.224262][ T5896] Call Trace: [ 96.225582][ T5896] [ 96.226536][ T5896] __schedule+0x125c/0x6730 [ 96.227984][ T5896] ? __pfx___schedule+0x10/0x10 [ 96.229517][ T5896] ? find_held_lock+0x2b/0x80 [ 96.230990][ T5896] ? schedule+0x225/0x2c0 [ 96.232344][ T5896] schedule+0xdd/0x2c0 [ 96.233619][ T5896] do_wait+0x1a7/0x570 [ 96.235005][ T5896] kernel_wait4+0x16d/0x280 [ 96.236483][ T5896] ? __pfx_kernel_wait4+0x10/0x10 [ 96.238115][ T5896] ? lockdep_hardirqs_on+0x78/0x100 [ 96.239751][ T5896] ? __pfx_child_wait_callback+0x10/0x10 [ 96.241501][ T5896] ? find_held_lock+0x2b/0x80 [ 96.242952][ T5896] ? zap_pid_ns_processes+0x286/0x6a0 [ 96.244709][ T5896] ? zap_pid_ns_processes+0x286/0x6a0 [ 96.246357][ T5896] zap_pid_ns_processes+0x2ca/0x6a0 [ 96.247985][ T5896] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 96.249736][ T5896] ? preempt_schedule_thunk+0x16/0x40 [ 96.251497][ T5896] do_exit+0x2377/0x2ae0 [ 96.252811][ T5896] ? __pfx_do_exit+0x10/0x10 [ 96.254246][ T5896] ? do_raw_spin_lock+0x128/0x260 [ 96.256113][ T5896] ? find_held_lock+0x2b/0x80 [ 96.257571][ T5896] ? get_signal+0x7e0/0x21e0 [ 96.259003][ T5896] do_group_exit+0xd5/0x2a0 [ 96.260431][ T5896] get_signal+0x1ec7/0x21e0 [ 96.261843][ T5896] ? __pfx_get_signal+0x10/0x10 [ 96.263353][ T5896] ? __fput+0x68d/0xb50 [ 96.264721][ T5896] arch_do_signal_or_restart+0x91/0x7a0 [ 96.266425][ T5896] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 96.268213][ T5896] ? __fput+0x692/0xb50 [ 96.270222][ T5896] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 96.272182][ T5896] exit_to_user_mode_loop+0x139/0x6f0 [ 96.273822][ T5896] ? rcu_is_watching+0x12/0xc0 [ 96.275414][ T5896] do_int80_emulation+0x513/0x720 [ 96.276938][ T5896] asm_int80_emulation+0x1a/0x20 [ 96.278393][ T5896] RIP: 0023:0xf71b72eb [ 96.279665][ T5896] RSP: 002b:00000000ffa0ab2c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 96.282187][ T5896] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffa0acc8 [ 96.284777][ T5896] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.287196][ T5896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.289604][ T5896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.292012][ T5896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.294424][ T5896] [ 96.295551][ T5896] task:syz-executor state:D stack:19704 pid:6238 tgid:6238 ppid:6229 task_flags:0x400140 flags:0x08080002 [ 96.299097][ T5896] Call Trace: [ 96.300141][ T5896] [ 96.301068][ T5896] __schedule+0x125c/0x6730 [ 96.302473][ T5896] ? do_raw_spin_lock+0x128/0x260 [ 96.304041][ T5896] ? __pfx___schedule+0x10/0x10 [ 96.305620][ T5896] ? find_held_lock+0x2b/0x80 [ 96.307079][ T5896] ? schedule+0x225/0x2c0 [ 96.308418][ T5896] schedule+0xdd/0x2c0 [ 96.309693][ T5896] schedule_preempt_disabled+0x13/0x30 [ 96.311362][ T5896] __mutex_lock+0xccc/0x1bd0 [ 96.312790][ T5896] ? misc_open+0x63/0x450 [ 96.314128][ T5896] ? __pfx___mutex_lock+0x10/0x10 [ 96.315796][ T5896] ? hook_file_open+0x24f/0x8f0 [ 96.317298][ T5896] ? kobject_get_unless_zero+0x156/0x200 [ 96.319010][ T5896] ? find_held_lock+0x2b/0x80 [ 96.320468][ T5896] ? __pfx_misc_open+0x10/0x10 [ 96.321907][ T5896] ? misc_open+0x63/0x450 [ 96.323216][ T5896] misc_open+0x63/0x450 [ 96.325257][ T5896] ? __pfx_misc_open+0x10/0x10 [ 96.326768][ T5896] chrdev_open+0x234/0x6a0 [ 96.328171][ T5896] ? __pfx_apparmor_file_open+0x10/0x10 [ 96.329879][ T5896] ? __pfx_chrdev_open+0x10/0x10 [ 96.331405][ T5896] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 96.333334][ T5896] do_dentry_open+0x6ab/0x14d0 [ 96.334954][ T5896] ? __pfx_chrdev_open+0x10/0x10 [ 96.336516][ T5896] vfs_open+0x82/0x3f0 [ 96.337893][ T5896] path_openat+0x2873/0x4280 [ 96.339368][ T5896] ? __pfx_path_openat+0x10/0x10 [ 96.340904][ T5896] do_file_open+0x20e/0x430 [ 96.342302][ T5896] ? __lock_acquire+0x49f/0x1a40 [ 96.343842][ T5896] ? __pfx_do_file_open+0x10/0x10 [ 96.345497][ T5896] ? _raw_spin_unlock+0x28/0x50 [ 96.346996][ T5896] ? alloc_fd+0x471/0x7a0 [ 96.348337][ T5896] do_sys_openat2+0x10f/0x1e0 [ 96.349825][ T5896] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.351436][ T5896] ? __fput+0x692/0xb50 [ 96.352724][ T5896] __ia32_compat_sys_openat+0x12d/0x210 [ 96.354447][ T5896] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 96.356478][ T5896] do_int80_emulation+0x14b/0x720 [ 96.358023][ T5896] asm_int80_emulation+0x1a/0x20 [ 96.359540][ T5896] RIP: 0023:0xf71772eb [ 96.360795][ T5896] RSP: 002b:00000000ff9791bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 96.363307][ T5896] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7242143 [ 96.365806][ T5896] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.368207][ T5896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.370599][ T5896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.372985][ T5896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.375488][ T5896] [ 96.376461][ T5896] task:syz-executor state:D stack:19784 pid:6257 tgid:6257 ppid:6247 task_flags:0x400140 flags:0x08080002 [ 96.380017][ T5896] Call Trace: [ 96.381051][ T5896] [ 96.382030][ T5896] __schedule+0x125c/0x6730 [ 96.383495][ T5896] ? do_raw_spin_lock+0x128/0x260 [ 96.385175][ T5896] ? __pfx___schedule+0x10/0x10 [ 96.386670][ T5896] ? find_held_lock+0x2b/0x80 [ 96.388122][ T5896] ? schedule+0x225/0x2c0 [ 96.389461][ T5896] schedule+0xdd/0x2c0 [ 96.390717][ T5896] schedule_preempt_disabled+0x13/0x30 [ 96.392373][ T5896] __mutex_lock+0xccc/0x1bd0 [ 96.393802][ T5896] ? misc_open+0x63/0x450 [ 96.395210][ T5896] ? __pfx___mutex_lock+0x10/0x10 [ 96.396781][ T5896] ? hook_file_open+0x24f/0x8f0 [ 96.398282][ T5896] ? kobject_get_unless_zero+0x156/0x200 [ 96.400001][ T5896] ? find_held_lock+0x2b/0x80 [ 96.401447][ T5896] ? __pfx_misc_open+0x10/0x10 [ 96.402912][ T5896] ? misc_open+0x63/0x450 [ 96.404247][ T5896] misc_open+0x63/0x450 [ 96.405642][ T5896] ? __pfx_misc_open+0x10/0x10 [ 96.407111][ T5896] chrdev_open+0x234/0x6a0 [ 96.408486][ T5896] ? __pfx_apparmor_file_open+0x10/0x10 [ 96.410181][ T5896] ? __pfx_chrdev_open+0x10/0x10 [ 96.411702][ T5896] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 96.413669][ T5896] do_dentry_open+0x6ab/0x14d0 [ 96.415986][ T5896] ? __pfx_chrdev_open+0x10/0x10 [ 96.417501][ T5896] vfs_open+0x82/0x3f0 [ 96.418945][ T5896] path_openat+0x2873/0x4280 [ 96.420389][ T5896] ? __pfx_path_openat+0x10/0x10 [ 96.421920][ T5896] do_file_open+0x20e/0x430 [ 96.423326][ T5896] ? __lock_acquire+0x49f/0x1a40 [ 96.424951][ T5896] ? __pfx_do_file_open+0x10/0x10 [ 96.426523][ T5896] ? _raw_spin_unlock+0x28/0x50 [ 96.428041][ T5896] ? alloc_fd+0x471/0x7a0 [ 96.429386][ T5896] do_sys_openat2+0x10f/0x1e0 [ 96.430838][ T5896] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.432437][ T5896] ? __fput+0x692/0xb50 [ 96.433727][ T5896] __ia32_compat_sys_openat+0x12d/0x210 [ 96.435515][ T5896] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 96.437407][ T5896] do_int80_emulation+0x14b/0x720 [ 96.438968][ T5896] asm_int80_emulation+0x1a/0x20 [ 96.440495][ T5896] RIP: 0023:0xf71372eb [ 96.441756][ T5896] RSP: 002b:00000000ffb3a71c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 96.444302][ T5896] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7202143 [ 96.446924][ T5896] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.449358][ T5896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.451768][ T5896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.454174][ T5896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.456706][ T5896] [ 96.460706][ T5896] OOM killer enabled. [ 96.462326][ T5896] Restarting tasks: Starting [ 96.468517][ T5896] Restarting tasks: Done [ 96.472736][ T5896] random: crng reseeded on system resumption [ 96.484931][ T5896] PM: suspend exit [ 96.487069][ T6038] PM: hibernation: hibernation entry [ 96.556089][ T6038] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.558233][ T6038] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.560771][ T6038] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.562700][ T6038] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.565223][ T6038] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 96.567157][ T6038] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 96.586739][ T6038] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 96.606566][ T6038] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 96.610991][ T6038] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 96.646156][ T6038] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 96.651298][ T6038] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 96.653232][ T6038] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 96.658041][ T6038] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 96.713609][ T5832] Filesystems sync: 0.038 seconds [ 96.719152][ T6038] Freezing user space processes [ 96.957011][ T5832] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.011942][ T5832] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.094699][ T5832] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.159889][ T5832] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.260798][ T5832] bridge_slave_1: left allmulticast mode [ 97.263675][ T5832] bridge_slave_1: left promiscuous mode [ 97.269116][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.281113][ T5832] bridge_slave_0: left allmulticast mode [ 97.284326][ T5832] bridge_slave_0: left promiscuous mode [ 97.286892][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.393192][ T5832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.400044][ T5832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.405349][ T5832] bond0 (unregistering): Released all slaves [ 97.703092][ T5832] hsr_slave_0: left promiscuous mode [ 97.705788][ T5832] hsr_slave_1: left promiscuous mode [ 97.707872][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.710157][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.714072][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.716483][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.726921][ T5832] veth1_macvtap: left promiscuous mode [ 97.730064][ T5832] veth0_macvtap: left promiscuous mode [ 97.732491][ T5832] veth1_vlan: left promiscuous mode [ 97.734891][ T5832] veth0_vlan: left promiscuous mode [ 97.877355][ T5832] team0 (unregistering): Port device team_slave_1 removed [ 97.898487][ T5832] team0 (unregistering): Port device team_slave_0 removed [ 98.424312][ T5832] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.476079][ T5832] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.543353][ T5832] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.574832][ T5751] Bluetooth: hci3: command 0x040f tx timeout [ 98.575393][ T5754] Bluetooth: hci1: command 0x040f tx timeout [ 98.575988][ T5759] Bluetooth: hci0: command 0x040f tx timeout [ 98.604223][ T5832] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.654665][ T5754] Bluetooth: hci7: command 0x041b tx timeout [ 98.654862][ T5751] Bluetooth: hci6: command 0x0c1a tx timeout [ 98.688914][ T5832] bridge_slave_1: left allmulticast mode [ 98.690726][ T5832] bridge_slave_1: left promiscuous mode [ 98.693076][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.698169][ T5832] bridge_slave_0: left allmulticast mode [ 98.700017][ T5832] bridge_slave_0: left promiscuous mode [ 98.702477][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.786903][ T5832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.792962][ T5832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.798098][ T5832] bond0 (unregistering): Released all slaves [ 99.086323][ T5832] hsr_slave_0: left promiscuous mode [ 99.089302][ T5832] hsr_slave_1: left promiscuous mode [ 99.092100][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.095263][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.098907][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.101937][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.109500][ T5832] veth1_macvtap: left promiscuous mode [ 99.111605][ T5832] veth0_macvtap: left promiscuous mode [ 99.113399][ T5832] veth1_vlan: left promiscuous mode [ 99.115350][ T5832] veth0_vlan: left promiscuous mode [ 99.271839][ T5832] team0 (unregistering): Port device team_slave_1 removed [ 99.279100][ T5832] team0 (unregistering): Port device team_slave_0 removed [ 100.735122][ T5751] Bluetooth: hci6: command 0x0c1a tx timeout [ 100.735223][ T5754] Bluetooth: hci7: command 0x041b tx timeout [ 102.815026][ T5754] Bluetooth: hci6: command 0x0c1a tx timeout [ 102.824875][ T5754] Bluetooth: hci7: command 0x041b tx timeout [ 116.725153][ T6038] Freezing user space processes failed after 20.004 seconds (8 tasks refusing to freeze, wq_busy=0): [ 116.728758][ T6038] task:syz-executor state:S stack:22968 pid:5742 tgid:5742 ppid:1 task_flags:0x40054c flags:0x08080001 [ 116.732508][ T6038] Call Trace: [ 116.733587][ T6038] [ 116.734656][ T6038] __schedule+0x125c/0x6730 [ 116.736179][ T6038] ? __pfx___schedule+0x10/0x10 [ 116.737978][ T6038] ? find_held_lock+0x2b/0x80 [ 116.739991][ T6038] ? schedule+0x225/0x2c0 [ 116.741593][ T6038] schedule+0xdd/0x2c0 [ 116.742930][ T6038] do_wait+0x1a7/0x570 [ 116.744278][ T6038] kernel_wait4+0x16d/0x280 [ 116.745826][ T6038] ? __pfx_kernel_wait4+0x10/0x10 [ 116.747492][ T6038] ? lockdep_hardirqs_on+0x78/0x100 [ 116.749143][ T6038] ? __pfx_child_wait_callback+0x10/0x10 [ 116.751201][ T6038] ? find_held_lock+0x2b/0x80 [ 116.753119][ T6038] ? zap_pid_ns_processes+0x286/0x6a0 [ 116.754912][ T6038] ? zap_pid_ns_processes+0x286/0x6a0 [ 116.756617][ T6038] zap_pid_ns_processes+0x2ca/0x6a0 [ 116.758281][ T6038] ? do_raw_write_lock+0x11e/0x260 [ 116.759908][ T6038] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 116.761726][ T6038] ? do_exit+0x2205/0x2ae0 [ 116.763196][ T6038] ? rcu_is_watching+0x12/0xc0 [ 116.764806][ T6038] do_exit+0x2377/0x2ae0 [ 116.766213][ T6038] ? __pfx_do_exit+0x10/0x10 [ 116.767715][ T6038] ? do_raw_spin_lock+0x128/0x260 [ 116.769337][ T6038] ? find_held_lock+0x2b/0x80 [ 116.771113][ T6038] ? get_signal+0x7e0/0x21e0 [ 116.772734][ T6038] do_group_exit+0xd5/0x2a0 [ 116.774178][ T6038] get_signal+0x1ec7/0x21e0 [ 116.775736][ T6038] ? __pfx_get_signal+0x10/0x10 [ 116.777308][ T6038] ? __fput+0x68d/0xb50 [ 116.778637][ T6038] arch_do_signal_or_restart+0x91/0x7a0 [ 116.780428][ T6038] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 116.782250][ T6038] ? __fput+0x692/0xb50 [ 116.783593][ T6038] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 116.785643][ T6038] exit_to_user_mode_loop+0x139/0x6f0 [ 116.787398][ T6038] ? rcu_is_watching+0x12/0xc0 [ 116.789122][ T6038] do_int80_emulation+0x513/0x720 [ 116.790916][ T6038] asm_int80_emulation+0x1a/0x20 [ 116.792511][ T6038] RIP: 0023:0xf71272eb [ 116.793795][ T6038] RSP: 002b:00000000ffb8fb4c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 116.796517][ T6038] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffb8fce8 [ 116.798976][ T6038] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.801461][ T6038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.804161][ T6038] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.806679][ T6038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.809202][ T6038] [ 116.810268][ T6038] task:syz-executor state:S stack:23464 pid:5743 tgid:5743 ppid:1 task_flags:0x40054c flags:0x08080001 [ 116.814083][ T6038] Call Trace: [ 116.815243][ T6038] [ 116.816180][ T6038] __schedule+0x125c/0x6730 [ 116.817657][ T6038] ? __pfx___schedule+0x10/0x10 [ 116.819207][ T6038] ? find_held_lock+0x2b/0x80 [ 116.820796][ T6038] ? schedule+0x225/0x2c0 [ 116.822163][ T6038] schedule+0xdd/0x2c0 [ 116.823471][ T6038] do_wait+0x1a7/0x570 [ 116.824834][ T6038] kernel_wait4+0x16d/0x280 [ 116.826313][ T6038] ? __pfx_kernel_wait4+0x10/0x10 [ 116.827921][ T6038] ? lockdep_hardirqs_on+0x78/0x100 [ 116.829585][ T6038] ? __pfx_child_wait_callback+0x10/0x10 [ 116.831380][ T6038] ? find_held_lock+0x2b/0x80 [ 116.832873][ T6038] ? zap_pid_ns_processes+0x286/0x6a0 [ 116.834629][ T6038] ? zap_pid_ns_processes+0x286/0x6a0 [ 116.836384][ T6038] zap_pid_ns_processes+0x2ca/0x6a0 [ 116.838028][ T6038] ? do_raw_write_lock+0x11e/0x260 [ 116.839698][ T6038] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 116.842237][ T6038] ? do_exit+0x2205/0x2ae0 [ 116.843727][ T6038] ? rcu_is_watching+0x12/0xc0 [ 116.845318][ T6038] do_exit+0x2377/0x2ae0 [ 116.846676][ T6038] ? __pfx_do_exit+0x10/0x10 [ 116.848190][ T6038] ? do_raw_spin_lock+0x128/0x260 [ 116.849777][ T6038] ? find_held_lock+0x2b/0x80 [ 116.851415][ T6038] ? get_signal+0x7e0/0x21e0 [ 116.852887][ T6038] do_group_exit+0xd5/0x2a0 [ 116.854334][ T6038] get_signal+0x1ec7/0x21e0 [ 116.855900][ T6038] ? __pfx_get_signal+0x10/0x10 [ 116.857474][ T6038] ? __fput+0x68d/0xb50 [ 116.858823][ T6038] arch_do_signal_or_restart+0x91/0x7a0 [ 116.860843][ T6038] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 116.863210][ T6038] ? __fput+0x692/0xb50 [ 116.864942][ T6038] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 116.867404][ T6038] exit_to_user_mode_loop+0x139/0x6f0 [ 116.869109][ T6038] ? rcu_is_watching+0x12/0xc0 [ 116.870689][ T6038] do_int80_emulation+0x513/0x720 [ 116.872323][ T6038] asm_int80_emulation+0x1a/0x20 [ 116.873928][ T6038] RIP: 0023:0xf71672eb [ 116.875315][ T6038] RSP: 002b:00000000ffa9daac EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 116.877941][ T6038] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffa9dc48 [ 116.880516][ T6038] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.882995][ T6038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.885557][ T6038] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.888081][ T6038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.890734][ T6038] [ 116.891765][ T6038] task:syz-executor state:S stack:23224 pid:5745 tgid:5745 ppid:1 task_flags:0x40054c flags:0x08080001 [ 116.895543][ T6038] Call Trace: [ 116.896616][ T6038] [ 116.897483][ T6038] __schedule+0x125c/0x6730 [ 116.898791][ T6038] ? __pfx___schedule+0x10/0x10 [ 116.900263][ T6038] ? find_held_lock+0x2b/0x80 [ 116.901920][ T6038] ? schedule+0x225/0x2c0 [ 116.903159][ T6038] schedule+0xdd/0x2c0 [ 116.904472][ T6038] do_wait+0x1a7/0x570 [ 116.905780][ T6038] kernel_wait4+0x16d/0x280 [ 116.907092][ T6038] ? __pfx_kernel_wait4+0x10/0x10 [ 116.908520][ T6038] ? lockdep_hardirqs_on+0x78/0x100 [ 116.909971][ T6038] ? __pfx_child_wait_callback+0x10/0x10 [ 116.912009][ T6038] ? find_held_lock+0x2b/0x80 [ 116.913981][ T6038] ? zap_pid_ns_processes+0x286/0x6a0 [ 116.916331][ T6038] ? zap_pid_ns_processes+0x286/0x6a0 [ 116.918576][ T6038] zap_pid_ns_processes+0x2ca/0x6a0 [ 116.920748][ T6038] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 116.923114][ T6038] ? preempt_schedule_thunk+0x16/0x40 [ 116.925509][ T6038] do_exit+0x2377/0x2ae0 [ 116.927305][ T6038] ? __pfx_do_exit+0x10/0x10 [ 116.929272][ T6038] ? do_raw_spin_lock+0x128/0x260 [ 116.931374][ T6038] ? find_held_lock+0x2b/0x80 [ 116.933359][ T6038] ? get_signal+0x7e0/0x21e0 [ 116.935430][ T6038] do_group_exit+0xd5/0x2a0 [ 116.937337][ T6038] get_signal+0x1ec7/0x21e0 [ 116.939264][ T6038] ? __pfx_get_signal+0x10/0x10 [ 116.941294][ T6038] ? __fput+0x68d/0xb50 [ 116.943433][ T6038] arch_do_signal_or_restart+0x91/0x7a0 [ 116.946144][ T6038] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 116.948589][ T6038] ? __fput+0x692/0xb50 [ 116.950342][ T6038] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 116.952933][ T6038] exit_to_user_mode_loop+0x139/0x6f0 [ 116.955302][ T6038] ? rcu_is_watching+0x12/0xc0 [ 116.957348][ T6038] do_int80_emulation+0x513/0x720 [ 116.959511][ T6038] asm_int80_emulation+0x1a/0x20 [ 116.961581][ T6038] RIP: 0023:0xf71b72eb [ 116.963301][ T6038] RSP: 002b:00000000ffa0ab2c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 116.966859][ T6038] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffa0acc8 [ 116.969386][ T6038] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.971836][ T6038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.974232][ T6038] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.976755][ T6038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.979197][ T6038] [ 116.980186][ T6038] task:syz-executor state:S stack:21640 pid:6106 tgid:6106 ppid:1 task_flags:0x40054c flags:0x08080001 [ 116.983784][ T6038] Call Trace: [ 116.984906][ T6038] [ 116.985834][ T6038] __schedule+0x125c/0x6730 [ 116.987266][ T6038] ? __pfx___schedule+0x10/0x10 [ 116.988765][ T6038] ? find_held_lock+0x2b/0x80 [ 116.990229][ T6038] ? schedule+0x225/0x2c0 [ 116.991592][ T6038] schedule+0xdd/0x2c0 [ 116.992854][ T6038] do_wait+0x1a7/0x570 [ 116.994122][ T6038] kernel_wait4+0x16d/0x280 [ 116.995616][ T6038] ? __pfx_kernel_wait4+0x10/0x10 [ 116.997175][ T6038] ? lockdep_hardirqs_on+0x78/0x100 [ 116.998770][ T6038] ? __pfx_child_wait_callback+0x10/0x10 [ 117.000510][ T6038] ? find_held_lock+0x2b/0x80 [ 117.001964][ T6038] ? zap_pid_ns_processes+0x286/0x6a0 [ 117.003629][ T6038] ? zap_pid_ns_processes+0x286/0x6a0 [ 117.005347][ T6038] zap_pid_ns_processes+0x2ca/0x6a0 [ 117.006946][ T6038] ? do_raw_write_lock+0x11e/0x260 [ 117.008539][ T6038] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 117.010317][ T6038] ? do_exit+0x2205/0x2ae0 [ 117.011725][ T6038] ? rcu_is_watching+0x12/0xc0 [ 117.013202][ T6038] do_exit+0x2377/0x2ae0 [ 117.014529][ T6038] ? __pfx_do_exit+0x10/0x10 [ 117.016127][ T6038] ? do_raw_spin_lock+0x128/0x260 [ 117.017686][ T6038] ? find_held_lock+0x2b/0x80 [ 117.019146][ T6038] ? get_signal+0x7e0/0x21e0 [ 117.020611][ T6038] do_group_exit+0xd5/0x2a0 [ 117.022022][ T6038] get_signal+0x1ec7/0x21e0 [ 117.023451][ T6038] ? __pfx_get_signal+0x10/0x10 [ 117.025044][ T6038] ? __fput+0x68d/0xb50 [ 117.026334][ T6038] arch_do_signal_or_restart+0x91/0x7a0 [ 117.028056][ T6038] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 117.029859][ T6038] ? __fput+0x692/0xb50 [ 117.031167][ T6038] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 117.033076][ T6038] exit_to_user_mode_loop+0x139/0x6f0 [ 117.034807][ T6038] ? rcu_is_watching+0x12/0xc0 [ 117.036333][ T6038] do_int80_emulation+0x513/0x720 [ 117.037901][ T6038] asm_int80_emulation+0x1a/0x20 [ 117.039457][ T6038] RIP: 0023:0xf71d72eb [ 117.040733][ T6038] RSP: 002b:00000000ffb0f69c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 117.043270][ T6038] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffb0f838 [ 117.045916][ T6038] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.048350][ T6038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.050767][ T6038] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.053193][ T6038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.055988][ T6038] [ 117.056972][ T6038] task:syz-executor state:D stack:19704 pid:6238 tgid:6238 ppid:6229 task_flags:0x400140 flags:0x08080002 [ 117.060570][ T6038] Call Trace: [ 117.061610][ T6038] [ 117.062537][ T6038] __schedule+0x125c/0x6730 [ 117.063972][ T6038] ? do_raw_spin_lock+0x128/0x260 [ 117.065629][ T6038] ? __pfx___schedule+0x10/0x10 [ 117.067150][ T6038] ? find_held_lock+0x2b/0x80 [ 117.068624][ T6038] ? schedule+0x225/0x2c0 [ 117.069988][ T6038] schedule+0xdd/0x2c0 [ 117.071283][ T6038] schedule_preempt_disabled+0x13/0x30 [ 117.072968][ T6038] __mutex_lock+0xccc/0x1bd0 [ 117.074406][ T6038] ? misc_open+0x63/0x450 [ 117.075917][ T6038] ? __pfx___mutex_lock+0x10/0x10 [ 117.077511][ T6038] ? hook_file_open+0x24f/0x8f0 [ 117.079039][ T6038] ? kobject_get_unless_zero+0x156/0x200 [ 117.080811][ T6038] ? find_held_lock+0x2b/0x80 [ 117.082284][ T6038] ? __pfx_misc_open+0x10/0x10 [ 117.083790][ T6038] ? misc_open+0x63/0x450 [ 117.085220][ T6038] misc_open+0x63/0x450 [ 117.086514][ T6038] ? __pfx_misc_open+0x10/0x10 [ 117.088016][ T6038] chrdev_open+0x234/0x6a0 [ 117.089410][ T6038] ? __pfx_apparmor_file_open+0x10/0x10 [ 117.091115][ T6038] ? __pfx_chrdev_open+0x10/0x10 [ 117.092681][ T6038] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 117.094654][ T6038] do_dentry_open+0x6ab/0x14d0 [ 117.096170][ T6038] ? __pfx_chrdev_open+0x10/0x10 [ 117.097701][ T6038] vfs_open+0x82/0x3f0 [ 117.098976][ T6038] path_openat+0x2873/0x4280 [ 117.100433][ T6038] ? __pfx_path_openat+0x10/0x10 [ 117.101967][ T6038] do_file_open+0x20e/0x430 [ 117.103425][ T6038] ? __lock_acquire+0x49f/0x1a40 [ 117.105057][ T6038] ? __pfx_do_file_open+0x10/0x10 [ 117.106621][ T6038] ? _raw_spin_unlock+0x28/0x50 [ 117.108153][ T6038] ? alloc_fd+0x471/0x7a0 [ 117.109516][ T6038] do_sys_openat2+0x10f/0x1e0 [ 117.110975][ T6038] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.112612][ T6038] ? __fput+0x692/0xb50 [ 117.113910][ T6038] __ia32_compat_sys_openat+0x12d/0x210 [ 117.115756][ T6038] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 117.117629][ T6038] do_int80_emulation+0x14b/0x720 [ 117.119202][ T6038] asm_int80_emulation+0x1a/0x20 [ 117.120696][ T6038] RIP: 0023:0xf71772eb [ 117.121961][ T6038] RSP: 002b:00000000ff9791bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 117.124514][ T6038] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7242143 [ 117.127003][ T6038] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.129440][ T6038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.131865][ T6038] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.134278][ T6038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.136882][ T6038] [ 117.137863][ T6038] task:syz-executor state:D stack:19784 pid:6257 tgid:6257 ppid:6247 task_flags:0x400140 flags:0x08080002 [ 117.141477][ T6038] Call Trace: [ 117.142524][ T6038] [ 117.143468][ T6038] __schedule+0x125c/0x6730 [ 117.144946][ T6038] ? do_raw_spin_lock+0x128/0x260 [ 117.146496][ T6038] ? __pfx___schedule+0x10/0x10 [ 117.148193][ T6038] ? find_held_lock+0x2b/0x80 [ 117.149677][ T6038] ? schedule+0x225/0x2c0 [ 117.151019][ T6038] schedule+0xdd/0x2c0 [ 117.152310][ T6038] schedule_preempt_disabled+0x13/0x30 [ 117.153984][ T6038] __mutex_lock+0xccc/0x1bd0 [ 117.155684][ T6038] ? misc_open+0x63/0x450 [ 117.157038][ T6038] ? __pfx___mutex_lock+0x10/0x10 [ 117.158610][ T6038] ? hook_file_open+0x24f/0x8f0 [ 117.160143][ T6038] ? kobject_get_unless_zero+0x156/0x200 [ 117.161884][ T6038] ? find_held_lock+0x2b/0x80 [ 117.163365][ T6038] ? __pfx_misc_open+0x10/0x10 [ 117.164920][ T6038] ? misc_open+0x63/0x450 [ 117.166260][ T6038] misc_open+0x63/0x450 [ 117.167551][ T6038] ? __pfx_misc_open+0x10/0x10 [ 117.169031][ T6038] chrdev_open+0x234/0x6a0 [ 117.170430][ T6038] ? __pfx_apparmor_file_open+0x10/0x10 [ 117.172149][ T6038] ? __pfx_chrdev_open+0x10/0x10 [ 117.173680][ T6038] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 117.175717][ T6038] do_dentry_open+0x6ab/0x14d0 [ 117.177207][ T6038] ? __pfx_chrdev_open+0x10/0x10 [ 117.178740][ T6038] vfs_open+0x82/0x3f0 [ 117.180070][ T6038] path_openat+0x2873/0x4280 [ 117.181520][ T6038] ? __pfx_path_openat+0x10/0x10 [ 117.183051][ T6038] do_file_open+0x20e/0x430 [ 117.184485][ T6038] ? __lock_acquire+0x49f/0x1a40 [ 117.186113][ T6038] ? __pfx_do_file_open+0x10/0x10 [ 117.187685][ T6038] ? _raw_spin_unlock+0x28/0x50 [ 117.189190][ T6038] ? alloc_fd+0x471/0x7a0 [ 117.190533][ T6038] do_sys_openat2+0x10f/0x1e0 [ 117.192014][ T6038] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.193560][ T6038] ? __fput+0x692/0xb50 [ 117.194886][ T6038] __ia32_compat_sys_openat+0x12d/0x210 [ 117.196649][ T6038] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 117.198484][ T6038] do_int80_emulation+0x14b/0x720 [ 117.200073][ T6038] asm_int80_emulation+0x1a/0x20 [ 117.201614][ T6038] RIP: 0023:0xf71372eb [ 117.202884][ T6038] RSP: 002b:00000000ffb3a71c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 117.205525][ T6038] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7202143 [ 117.207932][ T6038] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.210348][ T6038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.212716][ T6038] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.215171][ T6038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.217603][ T6038] [ 117.218581][ T6038] task:syz-executor state:D stack:28048 pid:6392 tgid:6392 ppid:6390 task_flags:0x400040 flags:0x08080002 [ 117.222190][ T6038] Call Trace: [ 117.223252][ T6038] [ 117.224181][ T6038] __schedule+0x125c/0x6730 [ 117.225708][ T6038] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 117.227607][ T6038] ? __pfx___schedule+0x10/0x10 [ 117.229119][ T6038] ? find_held_lock+0x2b/0x80 [ 117.230583][ T6038] ? schedule+0x225/0x2c0 [ 117.231941][ T6038] schedule+0xdd/0x2c0 [ 117.233202][ T6038] schedule_preempt_disabled+0x13/0x30 [ 117.234943][ T6038] __mutex_lock+0xccc/0x1bd0 [ 117.236404][ T6038] ? misc_open+0x63/0x450 [ 117.237755][ T6038] ? __pfx___mutex_lock+0x10/0x10 [ 117.239326][ T6038] ? hook_file_open+0x24f/0x8f0 [ 117.240843][ T6038] ? kobject_get_unless_zero+0x156/0x200 [ 117.242574][ T6038] ? find_held_lock+0x2b/0x80 [ 117.244057][ T6038] ? __pfx_misc_open+0x10/0x10 [ 117.245624][ T6038] ? misc_open+0x63/0x450 [ 117.246964][ T6038] misc_open+0x63/0x450 [ 117.248283][ T6038] ? __pfx_misc_open+0x10/0x10 [ 117.249777][ T6038] chrdev_open+0x234/0x6a0 [ 117.251362][ T6038] ? __pfx_apparmor_file_open+0x10/0x10 [ 117.253072][ T6038] ? __pfx_chrdev_open+0x10/0x10 [ 117.254816][ T6038] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 117.256808][ T6038] do_dentry_open+0x6ab/0x14d0 [ 117.258288][ T6038] ? __pfx_chrdev_open+0x10/0x10 [ 117.259820][ T6038] vfs_open+0x82/0x3f0 [ 117.261107][ T6038] path_openat+0x2873/0x4280 [ 117.262541][ T6038] ? rcu_is_watching+0x12/0xc0 [ 117.264038][ T6038] ? __up_read+0x333/0x980 [ 117.265536][ T6038] ? __pfx_path_openat+0x10/0x10 [ 117.267056][ T6038] ? __pfx___up_read+0x10/0x10 [ 117.268558][ T6038] ? do_user_addr_fault+0x7de/0x12f0 [ 117.270146][ T6038] ? do_user_addr_fault+0x7de/0x12f0 [ 117.271704][ T6038] do_file_open+0x20e/0x430 [ 117.273087][ T6038] ? __lock_acquire+0x49f/0x1a40 [ 117.274714][ T6038] ? __pfx_do_file_open+0x10/0x10 [ 117.276292][ T6038] ? lockdep_hardirqs_on+0x78/0x100 [ 117.277905][ T6038] ? _raw_spin_unlock+0x28/0x50 [ 117.279423][ T6038] ? alloc_fd+0x471/0x7a0 [ 117.280772][ T6038] do_sys_openat2+0x10f/0x1e0 [ 117.282229][ T6038] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.283851][ T6038] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 117.285805][ T6038] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 117.287808][ T6038] __ia32_compat_sys_openat+0x12d/0x210 [ 117.289625][ T6038] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 117.291519][ T6038] __do_fast_syscall_32+0xe7/0x970 [ 117.293102][ T6038] do_fast_syscall_32+0x32/0x70 [ 117.294665][ T6038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.296644][ T6038] RIP: 0023:0xf7fb4fec [ 117.297909][ T6038] RSP: 002b:00000000ffadb2d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 117.300458][ T6038] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7282098 [ 117.302866][ T6038] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.305382][ T6038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.307819][ T6038] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 117.310237][ T6038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.312670][ T6038] [ 117.313640][ T6038] task:syz-executor state:D stack:28280 pid:6393 tgid:6393 ppid:6391 task_flags:0x400040 flags:0x08080002 [ 117.317349][ T6038] Call Trace: [ 117.318410][ T6038] [ 117.319365][ T6038] __schedule+0x125c/0x6730 [ 117.320789][ T6038] ? do_raw_spin_lock+0x128/0x260 [ 117.322350][ T6038] ? __pfx___schedule+0x10/0x10 [ 117.323873][ T6038] ? find_held_lock+0x2b/0x80 [ 117.325423][ T6038] ? schedule+0x225/0x2c0 [ 117.326765][ T6038] schedule+0xdd/0x2c0 [ 117.328053][ T6038] schedule_preempt_disabled+0x13/0x30 [ 117.329734][ T6038] __mutex_lock+0xccc/0x1bd0 [ 117.331201][ T6038] ? misc_open+0x63/0x450 [ 117.332549][ T6038] ? __pfx___mutex_lock+0x10/0x10 [ 117.334102][ T6038] ? hook_file_open+0x24f/0x8f0 [ 117.335742][ T6038] ? kobject_get_unless_zero+0x156/0x200 [ 117.337467][ T6038] ? find_held_lock+0x2b/0x80 [ 117.338929][ T6038] ? __pfx_misc_open+0x10/0x10 [ 117.340440][ T6038] ? misc_open+0x63/0x450 [ 117.341788][ T6038] misc_open+0x63/0x450 [ 117.343081][ T6038] ? __pfx_misc_open+0x10/0x10 [ 117.344654][ T6038] chrdev_open+0x234/0x6a0 [ 117.346067][ T6038] ? __pfx_apparmor_file_open+0x10/0x10 [ 117.347797][ T6038] ? __pfx_chrdev_open+0x10/0x10 [ 117.349336][ T6038] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 117.351260][ T6038] do_dentry_open+0x6ab/0x14d0 [ 117.352954][ T6038] ? __pfx_chrdev_open+0x10/0x10 [ 117.354482][ T6038] vfs_open+0x82/0x3f0 [ 117.356067][ T6038] path_openat+0x2873/0x4280 [ 117.357511][ T6038] ? rcu_is_watching+0x12/0xc0 [ 117.358989][ T6038] ? __up_read+0x333/0x980 [ 117.360392][ T6038] ? __pfx_path_openat+0x10/0x10 [ 117.361917][ T6038] ? __pfx___up_read+0x10/0x10 [ 117.363414][ T6038] ? do_user_addr_fault+0x7de/0x12f0 [ 117.365127][ T6038] ? do_user_addr_fault+0x7de/0x12f0 [ 117.366763][ T6038] do_file_open+0x20e/0x430 [ 117.368194][ T6038] ? __lock_acquire+0x49f/0x1a40 [ 117.369835][ T6038] ? __pfx_do_file_open+0x10/0x10 [ 117.371479][ T6038] ? lockdep_hardirqs_on+0x78/0x100 [ 117.373126][ T6038] ? _raw_spin_unlock+0x28/0x50 [ 117.374730][ T6038] ? alloc_fd+0x471/0x7a0 [ 117.376121][ T6038] do_sys_openat2+0x10f/0x1e0 [ 117.377607][ T6038] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.379245][ T6038] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 117.381119][ T6038] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 117.383080][ T6038] __ia32_compat_sys_openat+0x12d/0x210 [ 117.384882][ T6038] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 117.386750][ T6038] __do_fast_syscall_32+0xe7/0x970 [ 117.388348][ T6038] do_fast_syscall_32+0x32/0x70 [ 117.389873][ T6038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.391838][ T6038] RIP: 0023:0xf7f52fec [ 117.393102][ T6038] RSP: 002b:00000000ffd7a890 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 117.395764][ T6038] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7222098 [ 117.398176][ T6038] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.400608][ T6038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.403007][ T6038] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 117.405533][ T6038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.407978][ T6038] [ 117.410245][ T6038] OOM killer enabled. [ 117.411579][ T6038] Restarting tasks: Starting [ 117.414989][ T6038] Restarting tasks: Done [ 117.431732][ T6038] PM: hibernation: hibernation exit [ 117.548492][ T6355] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.562780][ T6355] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.567600][ T6355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.570987][ T6355] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 117.572941][ T6355] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 117.592762][ T5759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.597589][ T5759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.598978][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.600827][ T5759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.604343][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.606522][ T5759] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.608479][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.609456][ T5759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.613102][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.617783][ T5754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.643547][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.649728][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.739741][ T5832] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.765955][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.768525][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.778307][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.780800][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.785617][ T5455] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.813542][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.817030][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.891864][ T5832] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.036676][ T5832] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.074330][ T5455] 8021q: adding VLAN 0 to HW filter on device eth4 [ 118.213138][ T5832] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.329051][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3 [ 118.530003][ T6392] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.534267][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.541029][ T6392] bridge_slave_0: entered allmulticast mode [ 118.544718][ T6392] bridge_slave_0: entered promiscuous mode [ 118.561413][ T6392] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.564877][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.568182][ T6392] bridge_slave_1: entered allmulticast mode [ 118.573399][ T6392] bridge_slave_1: entered promiscuous mode [ 118.597300][ T6393] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.612793][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.636313][ T6393] bridge_slave_0: entered allmulticast mode [ 118.642678][ T6393] bridge_slave_0: entered promiscuous mode [ 118.690510][ T6393] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.699195][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.704446][ T6393] bridge_slave_1: entered allmulticast mode [ 118.718551][ T6393] bridge_slave_1: entered promiscuous mode [ 118.807203][ T5832] bridge_slave_1: left allmulticast mode [ 118.809166][ T5832] bridge_slave_1: left promiscuous mode [ 118.815457][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.826705][ T5832] bridge_slave_0: left allmulticast mode [ 118.830271][ T5832] bridge_slave_0: left promiscuous mode [ 118.832661][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.102358][ T5832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.119703][ T5832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.128938][ T5832] bond0 (unregistering): Released all slaves [ 119.161978][ T6392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.184924][ T5455] 8021q: adding VLAN 0 to HW filter on device eth5 [ 119.214092][ T6393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.246740][ T6392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.282688][ T6393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.310629][ T6392] team0: Port device team_slave_0 added [ 119.316052][ T6392] team0: Port device team_slave_1 added [ 119.331939][ T6393] team0: Port device team_slave_0 added [ 119.356166][ T6393] team0: Port device team_slave_1 added [ 119.406959][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.414909][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.434700][ T6392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.589309][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.591588][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.614694][ T5102] Bluetooth: hci7: command 0x041b tx timeout [ 119.616533][ T5102] Bluetooth: hci6: command 0x0c1a tx timeout [ 119.616688][ T6393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.623455][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.634680][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.642690][ T6392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.659960][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.663140][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.674832][ T6393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.694717][ T5102] Bluetooth: hci2: command tx timeout [ 119.704749][ T5102] Bluetooth: hci4: command tx timeout [ 119.776497][ T6392] hsr_slave_0: entered promiscuous mode [ 119.785328][ T6392] hsr_slave_1: entered promiscuous mode [ 119.814026][ T6393] hsr_slave_0: entered promiscuous mode [ 119.825791][ T6393] hsr_slave_1: entered promiscuous mode [ 119.831949][ T6393] debugfs: 'hsr0' already exists in 'hsr' [ 119.845702][ T6393] Cannot create hsr debugfs directory [ 119.888494][ T6442] Set syz1 is full, maxelem 65536 reached [ 119.928279][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2 [ 119.951960][ T5832] hsr_slave_0: left promiscuous mode [ 119.954425][ T5832] hsr_slave_1: left promiscuous mode [ 119.959059][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.962639][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.974077][ T6486] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 119.976021][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.980753][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.998163][ T5832] veth1_macvtap: left promiscuous mode [ 119.999953][ T5832] veth0_macvtap: left promiscuous mode [ 120.002990][ T5832] veth1_vlan: left promiscuous mode [ 120.005666][ T5832] veth0_vlan: left promiscuous mode [ 120.019434][ T6488] file system registered [ 120.033093][ T6488] read descriptors [ 120.059337][ T6257] ffs_data_put(): freeing [ 120.293615][ T5832] team0 (unregistering): Port device team_slave_1 removed [ 120.320116][ T5832] team0 (unregistering): Port device team_slave_0 removed [ 120.339022][ T5102] Bluetooth: hci7: Malformed MSFT vendor event: 0x02 [ 120.619361][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.7.126'. [ 120.707591][ T6511] read descriptors [ 120.742166][ T6257] ffs_data_put(): freeing [ 120.797630][ T5455] 8021q: adding VLAN 0 to HW filter on device eth7 [ 120.861306][ T6515] bridge0: port 3(syz_tun) entered blocking state [ 120.869668][ T6515] bridge0: port 3(syz_tun) entered disabled state [ 120.872751][ T6515] syz_tun: entered allmulticast mode [ 120.878723][ T6515] syz_tun: entered promiscuous mode [ 120.885127][ T6515] bridge0: port 3(syz_tun) entered blocking state [ 120.887983][ T6515] bridge0: port 3(syz_tun) entered forwarding state [ 120.973533][ T5455] 8021q: adding VLAN 0 to HW filter on device eth8 [ 120.977300][ T6392] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 120.985076][ T6392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.989259][ T6392] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 121.004151][ T6392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.009249][ T6392] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 121.015895][ T6392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.018688][ T6392] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 121.025268][ T6392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.048262][ T5832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.078574][ T6522] syzkaller0: entered promiscuous mode [ 121.080350][ T6522] syzkaller0: entered allmulticast mode [ 121.126981][ T6393] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 121.132580][ T6393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.135926][ T6393] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 121.140830][ T6393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.144514][ T6393] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 121.149862][ T6393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.162246][ T6393] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 121.170567][ T6393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.208711][ T5832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.222940][ T6534] Illegal XDP return value 206238115 on prog (id 5) dev syz_tun, expect packet loss! [ 121.281577][ T6548] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 121.312444][ T5832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.334488][ T5455] 8021q: adding VLAN 0 to HW filter on device eth6 [ 121.353878][ T6392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.381300][ T6392] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.396343][ T5832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.414341][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.416612][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.424652][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.426936][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.446270][ T6393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.468858][ T6393] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.478530][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.480725][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.492512][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.494726][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.620129][ T5455] 8021q: adding VLAN 0 to HW filter on device eth9 [ 121.703040][ T5832] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.774803][ T5759] Bluetooth: hci2: command tx timeout [ 121.776981][ T5102] Bluetooth: hci4: command 0x041b tx timeout [ 121.826984][ T5832] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.949788][ T5832] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.990801][ T5455] 8021q: adding VLAN 0 to HW filter on device eth10 [ 122.035541][ T6392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.081503][ T5832] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.093588][ T6393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.240966][ T5455] 8021q: adding VLAN 0 to HW filter on device eth11 [ 122.422292][ T5832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.441586][ T6392] veth0_vlan: entered promiscuous mode [ 122.466168][ T6392] veth1_vlan: entered promiscuous mode [ 122.478071][ T6393] veth0_vlan: entered promiscuous mode [ 122.494341][ T6393] veth1_vlan: entered promiscuous mode [ 122.523327][ T6392] veth0_macvtap: entered promiscuous mode [ 122.543313][ T5832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.562069][ T6392] veth1_macvtap: entered promiscuous mode [ 122.581737][ T5455] 8021q: adding VLAN 0 to HW filter on device eth12 [ 122.588754][ T6393] veth0_macvtap: entered promiscuous mode [ 122.604463][ T6392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.611080][ T6393] veth1_macvtap: entered promiscuous mode [ 122.641971][ T5832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.655030][ T6392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.664486][ T5613] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.667334][ T5613] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.672054][ T5613] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.675037][ T5613] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.680755][ T6393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.697373][ T6393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.720196][ T5613] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.723340][ T5613] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.738997][ T5613] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.742057][ T5613] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.818470][ T5832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.832813][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.840297][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.858543][ T5455] 8021q: adding VLAN 0 to HW filter on device eth13 [ 122.879037][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.888869][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.921793][ T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.934785][ T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.953310][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.961060][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.046096][ T6642] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 123.058062][ T5832] bridge_slave_1: left allmulticast mode [ 123.059843][ T5832] bridge_slave_1: left promiscuous mode [ 123.067750][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.101807][ T5832] bridge_slave_0: left allmulticast mode [ 123.103768][ T5832] bridge_slave_0: left promiscuous mode [ 123.106584][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.283247][ T5832] bridge_slave_1: left allmulticast mode [ 123.286099][ T5832] bridge_slave_1: left promiscuous mode [ 123.290894][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.313303][ T6647] syz.8.142 uses obsolete (PF_INET,SOCK_PACKET) [ 123.325226][ T5832] bridge_slave_0: left allmulticast mode [ 123.327360][ T5832] bridge_slave_0: left promiscuous mode [ 123.329702][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.341640][ T5832] bridge_slave_1: left allmulticast mode [ 123.343921][ T5832] bridge_slave_1: left promiscuous mode [ 123.346596][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.350452][ T5832] bridge_slave_0: left allmulticast mode [ 123.352219][ T5832] bridge_slave_0: left promiscuous mode [ 123.354080][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.539931][ T5832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.548245][ T5832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.552563][ T5832] bond0 (unregistering): Released all slaves [ 123.620369][ T5832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.626256][ T5832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.632569][ T5832] bond0 (unregistering): Released all slaves [ 123.649211][ T6580] Set syz1 is full, maxelem 65536 reached [ 123.709445][ T5832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.716490][ T5832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.721412][ T5832] bond0 (unregistering): Released all slaves [ 123.732018][ T5455] 8021q: adding VLAN 0 to HW filter on device eth14 [ 123.855122][ T5751] Bluetooth: hci2: command tx timeout [ 123.858093][ T5102] Bluetooth: hci4: command 0x041b tx timeout [ 124.029616][ T5455] 8021q: adding VLAN 0 to HW filter on device eth15 [ 124.258196][ T5455] 8021q: adding VLAN 0 to HW filter on device eth16 [ 124.305664][ T6686] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 124.503573][ T6690] syz.7.150 (6690): drop_caches: 2 [ 124.558863][ T6701] binder: 6699:6701 ioctl c0306201 80000040 returned -11 [ 124.565970][ T6701] binder: 6699:6701 ioctl c0306201 800001c0 returned -11 [ 124.569667][ T5832] hsr_slave_0: left promiscuous mode [ 124.576049][ T5832] hsr_slave_1: left promiscuous mode [ 124.578119][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.580836][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.583918][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.586458][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.599387][ T5832] hsr_slave_0: left promiscuous mode [ 124.603584][ T5832] hsr_slave_1: left promiscuous mode [ 124.612046][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.614275][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.620730][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.626046][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.630992][ T6706] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 124.633881][ T5832] hsr_slave_0: left promiscuous mode [ 124.637025][ T5832] hsr_slave_1: left promiscuous mode [ 124.641624][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.644356][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.656521][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.670338][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.696054][ T5832] veth1_macvtap: left promiscuous mode [ 124.702458][ T5832] veth0_macvtap: left promiscuous mode [ 124.704891][ T5832] veth1_vlan: left promiscuous mode [ 124.707199][ T5832] veth0_vlan: left promiscuous mode [ 124.716088][ T5832] veth1_macvtap: left promiscuous mode [ 124.719901][ T5832] veth0_macvtap: left promiscuous mode [ 124.722812][ T5832] veth1_vlan: left promiscuous mode [ 124.725032][ T5832] veth0_vlan: left promiscuous mode [ 124.729305][ T5832] veth1_macvtap: left promiscuous mode [ 124.731594][ T5832] veth0_macvtap: left promiscuous mode [ 124.734070][ T5832] veth1_vlan: left promiscuous mode [ 124.736188][ T6711] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 124.736711][ T5832] veth0_vlan: left promiscuous mode [ 124.794123][ T6709] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 124.883650][ T6714] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 125.071785][ T6726] binder: 6725:6726 ioctl c0306201 80000040 returned -11 [ 125.077607][ T6726] binder: 6725:6726 ioctl c0306201 800001c0 returned -11 [ 125.104278][ T5832] team0 (unregistering): Port device team_slave_1 removed [ 125.115936][ T5832] team0 (unregistering): Port device team_slave_0 removed [ 125.252276][ T6736] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 125.263419][ T6736] vfio-pci 0000:00:02.0: No device request channel registered, blocked until released by user [ 125.388318][ T6740] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 125.433804][ T5832] team0 (unregistering): Port device team_slave_1 removed [ 125.462390][ T5832] team0 (unregistering): Port device team_slave_0 removed [ 125.818347][ T5832] team0 (unregistering): Port device team_slave_1 removed [ 125.831868][ T5832] team0 (unregistering): Port device team_slave_0 removed [ 125.913936][ T5455] 8021q: adding VLAN 0 to HW filter on device eth17 [ 125.936777][ T5751] Bluetooth: hci2: command tx timeout [ 125.940432][ T5102] Bluetooth: hci4: command 0x041b tx timeout [ 126.108082][ T6775] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 126.272432][ T5455] 8021q: adding VLAN 0 to HW filter on device eth18 [ 126.291806][ T6780] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 126.338248][ T6793] binder: 6792:6793 ioctl c0306201 80000640 returned -22 [ 126.341163][ T6793] binder: 6792:6793 ioctl c0306201 800001c0 returned -11 [ 126.488617][ T6804] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 126.554025][ T5455] 8021q: adding VLAN 0 to HW filter on device eth19 [ 126.689746][ T6814] syz.7.190 (6814): drop_caches: 2 [ 126.902267][ T5455] 8021q: adding VLAN 0 to HW filter on device eth20 [ 126.923319][ T6804] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 127.238266][ T5455] 8021q: adding VLAN 0 to HW filter on device eth21 [ 127.394978][ T6856] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 127.540122][ T5455] 8021q: adding VLAN 0 to HW filter on device eth22 [ 127.559104][ T6856] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 127.769466][ T5455] 8021q: adding VLAN 0 to HW filter on device eth23 [ 127.862755][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.9.210'. [ 128.024728][ T5102] Bluetooth: hci4: command 0x041b tx timeout [ 128.094493][ T6909] syz.6.214 (6909): drop_caches: 2 [ 128.172287][ T5455] 8021q: adding VLAN 0 to HW filter on device eth24 [ 128.850585][ T6941] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 129.039926][ T6941] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 130.081329][ T6990] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 130.152107][ T6990] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 130.422725][ T7007] syz.7.237 (7007): drop_caches: 2 [ 130.621014][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.9.240'. [ 130.699703][ T7015] vfio-pci 0000:00:02.0: resetting [ 130.745043][ T7015] vfio-pci 0000:00:02.0: reset done [ 131.143733][ T7028] binder: 7027:7028 ioctl c0306201 80000040 returned -22 [ 131.151656][ T7030] vfio-pci 0000:00:02.0: No device request channel registered, blocked until released by user [ 131.151746][ T7028] binder: 7027:7028 ioctl c0306201 80000640 returned -22 [ 131.160171][ T7028] binder: 7027:7028 ioctl c0306201 800001c0 returned -11 [ 131.422652][ T7041] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 131.474068][ T7048] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 131.501287][ T7041] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 131.630833][ T7048] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 131.741943][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.8.256'. [ 131.782873][ T7065] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 131.888036][ T7071] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 131.952395][ T7071] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 131.999487][ T7079] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 132.075545][ T7084] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 132.127939][ T7079] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 132.267331][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.269995][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.344517][ T7088] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 132.349610][ T7103] binder: 7102:7103 ioctl c0306201 80000040 returned -22 [ 132.352846][ T7103] binder: 7102:7103 ioctl c0306201 80000640 returned -22 [ 132.355570][ T7103] binder: 7102:7103 ioctl c0306201 800001c0 returned -11 [ 132.437524][ T7114] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 132.487165][ T7118] syz.6.276 (7118): drop_caches: 2 [ 132.499230][ T7114] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 132.605786][ T7131] binder: 7130:7131 ioctl c0306201 80000040 returned -22 [ 132.611617][ T7129] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 132.618016][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.282'. [ 132.713865][ T7142] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 132.761516][ T7142] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 132.798625][ T7151] syz.6.288 (7151): drop_caches: 2 [ 132.874077][ T7156] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 132.977891][ T7156] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 133.340085][ T7180] syz.9.300 (7180): drop_caches: 2 [ 133.481733][ T7188] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 133.564156][ T7188] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 133.571626][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.8.305'. [ 133.598846][ T7194] vfio-pci 0000:00:03.0: No device request channel registered, blocked until released by user [ 133.676240][ T7200] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 133.770560][ T7211] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 133.841758][ T7218] binder: 7217:7218 ioctl c0306201 80000040 returned -22 [ 134.100464][ T7237] syz.7.321 (7237): drop_caches: 2 [ 134.260693][ T7252] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 134.322231][ T7252] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 134.603482][ T7292] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 134.691028][ T7292] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 134.715851][ T7297] syz.9.339 (7297): drop_caches: 2 [ 134.808481][ T7319] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 134.850779][ T7319] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 134.934779][ T7339] binder: 7338:7339 ioctl c0306201 80000040 returned -22 [ 134.939531][ T7337] syz.9.354 (7337): drop_caches: 2 [ 135.073318][ T7347] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 135.179021][ T7347] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 135.944500][ T7367] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 136.342136][ T7369] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 136.353600][ T7376] syz.7.366 (7376): drop_caches: 2 [ 136.502566][ T7389] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 136.557755][ T7389] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 137.388746][ T7447] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 137.762599][ T7476] binder: 7475:7476 ioctl c0306201 80000040 returned -22 [ 137.769254][ T7476] binder: 7475:7476 ioctl c0306201 80000640 returned -22 [ 137.773437][ T7476] binder: 7475:7476 ioctl c0306201 800001c0 returned -11 [ 137.977452][ T7486] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 138.190771][ T7495] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 138.354207][ T7500] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 138.413514][ T7506] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 138.501761][ T7525] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 138.544199][ T7525] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 138.652471][ T7533] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 138.763393][ T7551] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 138.817973][ T7554] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 138.858540][ T7560] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 139.067218][ T7591] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 139.075586][ T7597] netlink: 40 bytes leftover after parsing attributes in process `syz.6.450'. [ 139.229129][ T7615] syzkaller0: entered promiscuous mode [ 139.231099][ T7615] syzkaller0: entered allmulticast mode [ 139.341644][ T7629] netlink: 40 bytes leftover after parsing attributes in process `syz.7.463'. [ 139.487580][ T7637] syz.9.468 (7637): drop_caches: 2 [ 139.811067][ T7644] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 140.489338][ T7651] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 140.992864][ T7675] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 141.035715][ T7675] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 141.212601][ T7683] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 141.239938][ T7681] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 141.418962][ T7685] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 141.471113][ T7691] netlink: 20 bytes leftover after parsing attributes in process `syz.9.485'. [ 141.999041][ T7735] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 142.151120][ T7745] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 142.617056][ T7794] binder: 7793:7794 ioctl 4018620d 0 returned -22 [ 142.636178][ T7794] binder: 7793:7794 ioctl c0306201 80000040 returned -22 [ 142.638981][ T7794] binder: 7793:7794 ioctl c0306201 80000640 returned -22 [ 142.643408][ T7794] binder: 7793:7794 ioctl c0306201 800001c0 returned -11 [ 142.753443][ T7816] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 142.864905][ T7825] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 142.884189][ T7828] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 142.962702][ T7843] binder: 7840:7843 ioctl 4018620d 0 returned -22 [ 142.968083][ T7843] binder: 7840:7843 ioctl c0306201 80000040 returned -22 [ 142.970760][ T7843] binder: 7840:7843 ioctl c0306201 80000640 returned -22 [ 142.973346][ T7843] binder: 7840:7843 ioctl c0306201 800001c0 returned -11 [ 142.979623][ T7833] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 143.169067][ T7874] binder: 7873:7874 ioctl c0306201 80000040 returned -22 [ 143.191490][ T7876] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 143.282323][ T7883] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 143.349787][ T7894] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 143.431594][ T7894] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 143.574026][ T7919] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 143.650461][ T7927] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 143.732440][ T7939] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 143.836044][ T7947] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 144.031152][ T7978] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 144.068536][ T7982] vfio-pci 0000:00:02.0: No device request channel registered, blocked until released by user [ 144.117803][ T7986] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 144.836032][ T7988] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 144.936862][ T8025] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 144.987020][ T8023] vfio-pci 0000:00:02.0: resetting [ 145.020304][ T8031] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 145.027440][ T8023] vfio-pci 0000:00:02.0: reset done [ 145.072231][ T8042] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 145.117595][ T8046] vfio-pci 0000:00:02.0: No device request channel registered, blocked until released by user [ 145.147469][ T8047] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 145.161080][ T8051] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 145.209778][ T8049] vfio-pci 0000:00:02.0: No device request channel registered, blocked until released by user [ 145.218063][ T8051] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 145.257119][ T8059] vfio-pci 0000:00:03.0: No device request channel registered, blocked until released by user [ 145.342041][ T8071] binder: 8068:8071 ioctl c0306201 80000040 returned -22 [ 145.966218][ T8049] vfio-pci 0000:00:02.0: Device is currently in use, task "syz.8.593" (8049) blocked until device is released [ 145.971173][ T8059] vfio-pci 0000:00:03.0: Device is currently in use, task "syz.8.593" (8059) blocked until device is released [ 146.084231][ T8093] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 146.166609][ T8097] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 146.179052][ T8101] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 146.263101][ T8103] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 146.284294][ T8111] UDC core: g1: couldn't find an available UDC or it's busy [ 146.493102][ T8128] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 146.505728][ T8130] binder: 8129:8130 ioctl c0306201 0 returned -14 [ 146.510554][ T8130] binder: 8129:8130 ioctl c0306201 80000040 returned -22 [ 146.514047][ T8130] binder: 8129:8130 ioctl c0306201 80000640 returned -22 [ 146.518534][ T8130] binder: 8129:8130 ioctl c0306201 800001c0 returned -11 [ 146.599866][ T8133] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 146.630878][ T8137] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 146.730270][ T8144] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 146.733505][ T8142] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 146.883278][ T8144] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 146.894823][ T8154] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 147.027968][ T8154] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 147.171403][ T8173] syzkaller0: entered promiscuous mode [ 147.173345][ T8173] syzkaller0: entered allmulticast mode [ 147.278309][ T8181] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 147.346801][ T8181] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 148.007429][ T8197] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 148.169963][ T8197] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 148.175482][ T8203] binder: 8202:8203 ioctl c0306201 80000040 returned -22 [ 148.188583][ T8203] binder: 8202:8203 ioctl c0306201 80000640 returned -22 [ 148.202301][ T8203] binder: 8202:8203 ioctl c0306201 800001c0 returned -11 [ 148.216406][ T8206] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 148.390966][ T8208] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 148.579749][ T8219] UDC core: g1: couldn't find an available UDC or it's busy [ 148.668084][ T8220] vfio-pci 0000:00:02.0: resetting [ 148.702898][ T8220] vfio-pci 0000:00:02.0: reset done [ 148.768852][ T8231] vfio-pci 0000:00:02.0: No device request channel registered, blocked until released by user [ 149.484461][ T8249] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 149.580983][ T8258] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 149.753068][ T8269] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 149.922780][ T8285] vfio-pci 0000:00:02.0: No device request channel registered, blocked until released by user [ 150.037907][ T8288] vfio-pci 0000:00:03.0: No device request channel registered, blocked until released by user [ 150.172991][ T8300] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 150.661695][ T8287] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 150.715695][ T8300] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 151.015018][ T8351] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 151.033827][ T8354] vfio-pci 0000:00:03.0: No device request channel registered, blocked until released by user [ 151.388780][ T8373] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 151.809308][ T8389] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 152.318116][ T8421] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 152.325217][ T8421] vfio-pci 0000:00:02.0: No device request channel registered, blocked until released by user [ 153.091595][ T8428] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 153.418283][ T8483] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 153.458815][ T8493] netlink: 40 bytes leftover after parsing attributes in process `syz.7.768'. [ 153.618139][ T8491] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 153.786169][ T8519] vfio-pci 0000:00:03.0: No device request channel registered, blocked until released by user [ 153.973607][ T8528] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 154.177367][ T8528] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 154.603628][ T8562] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 154.717168][ T8566] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 154.746421][ T8569] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 154.803881][ T8569] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 154.952761][ T8580] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 154.963536][ T8580] vfio-pci 0000:00:02.0: No device request channel registered, blocked until released by user [ 155.068443][ T8587] vfio-pci 0000:00:03.0: No device request channel registered, blocked until released by user [ 155.214230][ T8598] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 155.263344][ T8598] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 155.274070][ T8602] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 155.340836][ T8606] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 155.387750][ T8610] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 155.769537][ T8584] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 155.787249][ T8617] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 155.845291][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.9.812'. [ 155.876176][ T8610] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 155.970517][ T8617] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 156.126061][ T8646] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 156.147313][ T8644] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 156.155035][ T8649] vfio-pci 0000:00:03.0: No device request channel registered, blocked until released by user [ 156.187824][ T8646] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 156.233735][ T8651] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 156.330191][ T8656] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 156.389488][ T8663] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 156.444225][ T8663] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 156.583982][ T8683] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 156.589295][ T8679] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 156.645558][ T8683] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 156.789440][ T8707] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 156.814846][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.9.846'. [ 156.818876][ T8707] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 156.842228][ T8713] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 156.892914][ T8713] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 156.937638][ T8718] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 157.070485][ T8748] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 157.086737][ T8752] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 157.155030][ T8757] vfio-pci 0000:00:02.0: resetting [ 157.170811][ T8758] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 157.185263][ T8757] vfio-pci 0000:00:02.0: reset done [ 157.189524][ T8760] vfio-pci 0000:00:02.0: No device request channel registered, blocked until released by user [ 157.209404][ T8765] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 157.376255][ T8780] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 157.417728][ T8780] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 157.783418][ T8802] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 157.826708][ T8802] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 157.931229][ T8765] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 157.934115][ T8812] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 158.022752][ T8766] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 158.036664][ T8823] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 158.107363][ T8823] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 158.208312][ T8841] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 158.232983][ T8841] vfio-pci 0000:00:02.0: No device request channel registered, blocked until released by user [ 158.261679][ T8851] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 159.022201][ T8851] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 159.025480][ T8864] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 159.088141][ T8852] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 159.093520][ T8867] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 159.566271][ T8894] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 159.646389][ T8897] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 159.707624][ T8901] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 159.737543][ T8901] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 159.992140][ T8922] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 159.994306][ T8922] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 159.999669][ T8922] ================================================================== [ 160.002137][ T8922] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x8a/0x90 [ 160.004492][ T8922] Read of size 8 at addr ffff88805aac61f0 by task syz.8.928/8922 [ 160.007851][ T8922] [ 160.009442][ T8922] CPU: 3 UID: 0 PID: 8922 Comm: syz.8.928 Not tainted syzkaller #0 PREEMPT(full) [ 160.009457][ T8922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.009465][ T8922] Call Trace: [ 160.009469][ T8922] [ 160.009474][ T8922] dump_stack_lvl+0x100/0x190 [ 160.009489][ T8922] print_report+0x13d/0x4b0 [ 160.009506][ T8922] ? __virt_addr_valid+0x239/0x430 [ 160.009519][ T8922] ? dummy_free_request+0x8a/0x90 [ 160.009536][ T8922] kasan_report+0xdf/0x1c0 [ 160.009567][ T8922] ? dummy_free_request+0x8a/0x90 [ 160.009585][ T8922] dummy_free_request+0x8a/0x90 [ 160.009602][ T8922] uvc_function_bind+0x181a/0x1939 [ 160.009617][ T8922] ? __pfx_uvc_function_bind+0x10/0x10 [ 160.009629][ T8922] usb_add_function+0x219/0x890 [ 160.009646][ T8922] configfs_composite_bind+0xd83/0x1960 [ 160.009662][ T8922] ? kernfs_create_link+0x1bd/0x240 [ 160.009677][ T8922] gadget_bind_driver+0x28c/0xbf0 [ 160.009688][ T8922] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 160.009704][ T8922] ? __pfx_gadget_bind_driver+0x10/0x10 [ 160.009716][ T8922] really_probe+0x241/0xa60 [ 160.009738][ T8922] __driver_probe_device+0x20e/0x450 [ 160.009757][ T8922] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 160.009780][ T8922] driver_probe_device+0x4a/0x140 [ 160.009808][ T8922] __driver_attach+0x21f/0x5b0 [ 160.009822][ T8922] ? __pfx___driver_attach+0x10/0x10 [ 160.009836][ T8922] bus_for_each_dev+0x13e/0x1d0 [ 160.009849][ T8922] ? __pfx_bus_for_each_dev+0x10/0x10 [ 160.009860][ T8922] ? bus_add_driver+0x2b5/0x5b0 [ 160.009873][ T8922] bus_add_driver+0x305/0x5b0 [ 160.009886][ T8922] driver_register+0x1e2/0x360 [ 160.009903][ T8922] usb_gadget_register_driver_owner+0x132/0x210 [ 160.009915][ T8922] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 160.009931][ T8922] configfs_write_iter+0x302/0x4e0 [ 160.009943][ T8922] vfs_write+0x6ac/0x1050 [ 160.009953][ T8922] ? __pfx_configfs_write_iter+0x10/0x10 [ 160.009964][ T8922] ? __pfx_vfs_write+0x10/0x10 [ 160.009972][ T8922] ? find_held_lock+0x2b/0x80 [ 160.009989][ T8922] ksys_write+0x12a/0x250 [ 160.009998][ T8922] ? __pfx_ksys_write+0x10/0x10 [ 160.010010][ T8922] __do_fast_syscall_32+0xe7/0x970 [ 160.010038][ T8922] do_fast_syscall_32+0x32/0x70 [ 160.010051][ T8922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.010065][ T8922] RIP: 0023:0xf7fb4fec [ 160.010080][ T8922] Code: Unable to access opcode bytes at 0xf7fb4fc2. [ 160.010085][ T8922] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 160.010096][ T8922] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000880 [ 160.010103][ T8922] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 160.010110][ T8922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.010116][ T8922] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 160.010122][ T8922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.010132][ T8922] [ 160.010136][ T8922] [ 160.096713][ T8922] Allocated by task 13: [ 160.097990][ T8922] kasan_save_stack+0x30/0x50 [ 160.099442][ T8922] kasan_save_track+0x14/0x30 [ 160.100881][ T8922] __kasan_kmalloc+0xaa/0xb0 [ 160.102295][ T8922] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 160.103933][ T8922] __hw_addr_create+0x57/0x220 [ 160.105423][ T8922] __hw_addr_add_ex+0x32b/0x650 [ 160.106916][ T8922] dev_mc_add+0xb6/0x110 [ 160.108238][ T8922] igmp6_group_added+0x3e4/0x4c0 [ 160.109767][ T8922] __ipv6_dev_mc_inc+0x701/0xbd0 [ 160.111295][ T8922] addrconf_dad_work+0x276/0x1360 [ 160.112840][ T8922] process_one_work+0xa23/0x1940 [ 160.114357][ T8922] worker_thread+0x5ef/0xe50 [ 160.115793][ T8922] kthread+0x370/0x450 [ 160.117052][ T8922] ret_from_fork+0x72b/0xd50 [ 160.118466][ T8922] ret_from_fork_asm+0x1a/0x30 [ 160.119957][ T8922] [ 160.120703][ T8922] The buggy address belongs to the object at ffff88805aac6100 [ 160.120703][ T8922] which belongs to the cache kmalloc-128 of size 128 [ 160.124891][ T8922] The buggy address is located 136 bytes to the right of [ 160.124891][ T8922] allocated 104-byte region [ffff88805aac6100, ffff88805aac6168) [ 160.129245][ T8922] [ 160.129995][ T8922] The buggy address belongs to the physical page: [ 160.131932][ T8922] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5aac6 [ 160.134534][ T8922] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 160.136743][ T8922] page_type: f5(slab) [ 160.137986][ T8922] raw: 04fff00000000000 ffff88801bc42a00 dead000000000100 dead000000000122 [ 160.140585][ T8922] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 160.143182][ T8922] page dumped because: kasan: bad access detected [ 160.145156][ T8922] page_owner tracks the page as allocated [ 160.146888][ T8922] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6580, tgid 6578 (syz.6.139), ts 121813272810, free_ts 121295317403 [ 160.153159][ T8922] post_alloc_hook+0xfd/0x120 [ 160.154598][ T8922] get_page_from_freelist+0xf48/0x3530 [ 160.156295][ T8922] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 160.158097][ T8922] new_slab+0xa2/0x650 [ 160.159354][ T8922] refill_objects+0xe3/0x410 [ 160.160826][ T8922] __pcs_replace_empty_main+0x376/0x680 [ 160.162512][ T8922] __kmalloc_noprof+0x66d/0x820 [ 160.164017][ T8922] hash_netportnet4_resize+0xd25/0x1e60 [ 160.165730][ T8922] call_ad.isra.0+0x36d/0x940 [ 160.167191][ T8922] ip_set_ad.isra.0+0x3eb/0x8a0 [ 160.168688][ T8922] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 160.170245][ T8922] netlink_rcv_skb+0x159/0x420 [ 160.171717][ T8922] nfnetlink_rcv+0x1b3/0x440 [ 160.173141][ T8922] netlink_unicast+0x585/0x850 [ 160.174608][ T8922] netlink_sendmsg+0x8b0/0xda0 [ 160.176117][ T8922] ____sys_sendmsg+0xa4d/0xbe0 [ 160.177618][ T8922] page last free pid 28 tgid 28 stack trace: [ 160.179446][ T8922] __free_frozen_pages+0x79f/0x1090 [ 160.181044][ T8922] rcu_core+0x5a2/0x10d0 [ 160.182402][ T8922] handle_softirqs+0x1ea/0x9b0 [ 160.183919][ T8922] run_ksoftirqd+0x38/0x60 [ 160.185311][ T8922] smpboot_thread_fn+0x3d3/0xaa0 [ 160.186833][ T8922] kthread+0x370/0x450 [ 160.188064][ T8922] ret_from_fork+0x72b/0xd50 [ 160.189590][ T8922] ret_from_fork_asm+0x1a/0x30 [ 160.190920][ T8922] [ 160.191682][ T8922] Memory state around the buggy address: [ 160.193391][ T8922] ffff88805aac6080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 160.195845][ T8922] ffff88805aac6100: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 160.198272][ T8922] >ffff88805aac6180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 160.200649][ T8922] ^ [ 160.202989][ T8922] ffff88805aac6200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 160.205422][ T8922] ffff88805aac6280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 160.207873][ T8922] ================================================================== [ 160.213464][ T8922] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 160.215706][ T8922] CPU: 3 UID: 0 PID: 8922 Comm: syz.8.928 Not tainted syzkaller #0 PREEMPT(full) [ 160.218397][ T8922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.221383][ T8922] Call Trace: [ 160.222433][ T8922] [ 160.223380][ T8922] dump_stack_lvl+0x100/0x190 [ 160.224871][ T8922] vpanic+0x552/0x970 [ 160.226078][ T8922] ? __pfx_vpanic+0x10/0x10 [ 160.227462][ T8922] ? dummy_free_request+0x8a/0x90 [ 160.228985][ T8922] panic+0xd1/0xe0 [ 160.230115][ T8922] ? __pfx_panic+0x10/0x10 [ 160.231491][ T8922] ? dummy_free_request+0x8a/0x90 [ 160.233040][ T8922] ? preempt_schedule_common+0x42/0xc0 [ 160.234736][ T8922] check_panic_on_warn.cold+0x19/0x34 [ 160.236393][ T8922] end_report.part.0+0x3a/0x90 [ 160.237870][ T8922] kasan_report.cold+0xe/0x18 [ 160.239330][ T8922] ? dummy_free_request+0x8a/0x90 [ 160.240882][ T8922] dummy_free_request+0x8a/0x90 [ 160.242376][ T8922] uvc_function_bind+0x181a/0x1939 [ 160.243964][ T8922] ? __pfx_uvc_function_bind+0x10/0x10 [ 160.245728][ T8922] usb_add_function+0x219/0x890 [ 160.247560][ T8922] configfs_composite_bind+0xd83/0x1960 [ 160.249277][ T8922] ? kernfs_create_link+0x1bd/0x240 [ 160.250894][ T8922] gadget_bind_driver+0x28c/0xbf0 [ 160.252444][ T8922] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 160.254163][ T8922] ? __pfx_gadget_bind_driver+0x10/0x10 [ 160.255879][ T8922] really_probe+0x241/0xa60 [ 160.257278][ T8922] __driver_probe_device+0x20e/0x450 [ 160.258899][ T8922] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 160.260713][ T8922] driver_probe_device+0x4a/0x140 [ 160.262239][ T8922] __driver_attach+0x21f/0x5b0 [ 160.263708][ T8922] ? __pfx___driver_attach+0x10/0x10 [ 160.265346][ T8922] bus_for_each_dev+0x13e/0x1d0 [ 160.266845][ T8922] ? __pfx_bus_for_each_dev+0x10/0x10 [ 160.268493][ T8922] ? bus_add_driver+0x2b5/0x5b0 [ 160.270017][ T8922] bus_add_driver+0x305/0x5b0 [ 160.271496][ T8922] driver_register+0x1e2/0x360 [ 160.272988][ T8922] usb_gadget_register_driver_owner+0x132/0x210 [ 160.275060][ T8922] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 160.276788][ T8922] configfs_write_iter+0x302/0x4e0 [ 160.278359][ T8922] vfs_write+0x6ac/0x1050 [ 160.279707][ T8922] ? __pfx_configfs_write_iter+0x10/0x10 [ 160.281431][ T8922] ? __pfx_vfs_write+0x10/0x10 [ 160.282915][ T8922] ? find_held_lock+0x2b/0x80 [ 160.284389][ T8922] ksys_write+0x12a/0x250 [ 160.285746][ T8922] ? __pfx_ksys_write+0x10/0x10 [ 160.287249][ T8922] __do_fast_syscall_32+0xe7/0x970 [ 160.288821][ T8922] do_fast_syscall_32+0x32/0x70 [ 160.290329][ T8922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.292269][ T8922] RIP: 0023:0xf7fb4fec [ 160.293537][ T8922] Code: Unable to access opcode bytes at 0xf7fb4fc2. [ 160.295574][ T8922] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 160.298101][ T8922] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000880 [ 160.300503][ T8922] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 160.302900][ T8922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.305301][ T8922] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 160.307691][ T8922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.310103][ T8922] [ 160.311667][ T8922] Kernel Offset: disabled [ 160.312980][ T8922] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:35:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000192419 RBX=ffffffff8e891480 RCX=ffffffff8bb832d5 RDX=0000000000000000 RSI=ffffffff8e1a7b8e RDI=ffffffff8c400880 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb8189f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096be6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2b6047 CR3=000000006c008000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000015bb93 RBX=ffff88801c73a540 RCX=ffffffff8bb832d5 RDX=0000000000000000 RSI=ffffffff8e1a7b8e RDI=ffffffff8c400880 RBP=ffffed10038e74a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb8189f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f6a190 CR3=000000006c008000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff84fc7f41 RDX=ffff8880293d4a80 RSI=ffff88802942ae00 RDI=ffffc90003ef7880 RBP=ffff88802942ae00 RSP=ffffc90003ef7398 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffc90003ef7880 R13=0000000000000000 R14=0000000000000000 R15=ffff888021a3ae90 RIP=ffffffff84fc66e2 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa2fde0b300 ffffffff 00c00000 GS =0000 ffff888096de6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555cddd46f40 CR3=000000004cdd4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=828ed0f7db957b20 e68b3e8512b16d4b 828ed0f7db957b20 e68b3e8512b16d4b 828ed0f7db957b20 e68b3e8512b16d4b 828ed0f7db957b20 e68b3e8512b16d4b ZMM18=0b26c9eb9ebd8732 ca7b8e5f1da0beeb 0b26c9eb9ebd8732 ca7b8e5f1da0beeb 0b26c9eb9ebd8732 ca7b8e5f1da0beeb 0b26c9eb9ebd8732 ca7b8e5f1da0beeb ZMM19=7a06000000000000 0000000000000004 7a06000000000000 0000000000000003 7a06000000000000 0000000000000002 7a06000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d080280030fffff ffff020008000180 0200020fffffffff 020a0144f4007366 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73797301ffffffff fffffffff3080180 03007379732f2e01 ffffffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f308000307fe0800 000201c708000601 43f0007379732f2e 01ffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0819800300766564 2f2e01ffffffffff fffffff308188003 07fe080018800201 ZMM25=ca7b8e5fca7b8e5f ca7b8e5fca7b8e5f ca7b8e5fca7b8e5f ca7b8e5fca7b8e5f ca7b8e5fca7b8e5f ca7b8e5fca7b8e5f ca7b8e5fca7b8e5f ca7b8e5fca7b8e5f ZMM26=9ebd87329ebd8732 9ebd87329ebd8732 9ebd87329ebd8732 9ebd87329ebd8732 9ebd87329ebd8732 9ebd87329ebd8732 9ebd87329ebd8732 9ebd87329ebd8732 ZMM27=0b26c9eb0b26c9eb 0b26c9eb0b26c9eb 0b26c9eb0b26c9eb 0b26c9eb0b26c9eb 0b26c9eb0b26c9eb 0b26c9eb0b26c9eb 0b26c9eb0b26c9eb 0b26c9eb0b26c9eb ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7906000079060000 7906000079060000 7906000079060000 7906000079060000 7906000079060000 7906000079060000 7906000079060000 7906000079060000 info registers vcpu 3 CPU#3 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85a10995 RDI=ffffffff9b9f01a0 RBP=ffffffff9b9f0160 RSP=ffffc9000c397298 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032393854 R12=0000000000000000 R13=0000000000000005 R14=ffffffff9b6f01f8 R15=0000000000000000 RIP=ffffffff85a109bf RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ee6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f729e853 CR3=000000004a782000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000