last executing test programs: 10.653022303s ago: executing program 3 (id=2067): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000580)={@rand_addr, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000500)="11f9a8c185572bb1a871f06fdc", 0xd}], 0x1, &(0x7f0000000600)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r3, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}}}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@cipso={0x86, 0x4e, 0x0, [{0x7, 0x5, "56c6b9"}, {0x0, 0x9, "3a1e018e653933"}, {0x7, 0x12, "eac700ef8ad8a6ab8e49ab6e7bb8d649"}, {0x6, 0x6, "5afd5d1b"}, {0x1, 0x4, "9203"}, {0x5, 0xf, "7202223a259ce9849f54198098"}, {0xd5e772d691f93c4f, 0x8, "03d552ec7b24"}, {0x0, 0x7, "71a8d10350"}]}, @timestamp={0x44, 0xc, 0x61, 0x0, 0x3, [0x200, 0x0]}, @cipso={0x86, 0x1a, 0x1, [{0x2, 0x8, "77a5ef04a7f8"}, {0x2, 0x4, "9475"}, {0x0, 0x8, "827ca8b5e8da"}]}, @cipso={0x86, 0x5e, 0x3, [{0x0, 0x3, '|'}, {0x5, 0x6, "329e1ac4"}, {0x7, 0x5, "8d80cb"}, {0x6, 0xe, "13f9c1c82e65d3c3b2bbdc9e"}, {0x7, 0x5, "f04196"}, {0x7, 0x5, "c83762"}, {0x1, 0x12, "dbcb792cb2086b6895183ff2aec57f4c"}, {0x0, 0xd, "f4b69f6af0ac215ee92ad8"}, {0x1, 0x11, "d1ad65356d963c34a3974cdaaa421e"}, {0x6, 0x2}]}]}}}], 0xf8}, 0x18000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x48, 0x0, &(0x7f0000000200)=[@exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x3f9, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x41) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000006800010006000000fddbdf2500000300000000000c000200010000000400000008000500", @ANYRES32=0x0, @ANYBLOB="ffaa49bf863efbe6ebf2ac16baf3109e08c7008c6bf90eb25d027a131f4749e22b499ed2a9a18ab4547867805f059220cdc8a0d933ece66c99c55d5cb7eb7424a3d972c14dca42a96c984801a4ea6b271abcf80000000000000035dae4729e70641f55e0"], 0x2c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r7, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 9.174293266s ago: executing program 3 (id=2070): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x9, 0x2, 0x0, 0x70bd27}, 0x10}, 0x1, 0x7}, 0x0) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xd]}, 0x8, 0x800) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r3 = signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r5, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x815) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000100)={0x3, 0x84}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x81, &(0x7f0000006680)) listxattr(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r9, 0x40187014, &(0x7f0000000000)={0x1, 0x0, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 8.098312101s ago: executing program 3 (id=2077): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r5, 0x9}}, 0x10) socket$packet(0x11, 0x3, 0x300) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) socketpair$unix(0x1, 0x3, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, 0x0, &(0x7f0000000140)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, r8, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0xc0}}}, &(0x7f0000000300)) 6.31437844s ago: executing program 0 (id=2088): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000580)={@rand_addr, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000500)="11f9a8c185572bb1a871f06fdc", 0xd}], 0x1, &(0x7f0000000600)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r3, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}}}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@cipso={0x86, 0x4e, 0x0, [{0x7, 0x5, "56c6b9"}, {0x0, 0x9, "3a1e018e653933"}, {0x7, 0x12, "eac700ef8ad8a6ab8e49ab6e7bb8d649"}, {0x6, 0x6, "5afd5d1b"}, {0x1, 0x4, "9203"}, {0x5, 0xf, "7202223a259ce9849f54198098"}, {0xd5e772d691f93c4f, 0x8, "03d552ec7b24"}, {0x0, 0x7, "71a8d10350"}]}, @timestamp={0x44, 0xc, 0x61, 0x0, 0x3, [0x200, 0x0]}, @cipso={0x86, 0x1a, 0x1, [{0x2, 0x8, "77a5ef04a7f8"}, {0x2, 0x4, "9475"}, {0x0, 0x8, "827ca8b5e8da"}]}, @cipso={0x86, 0x5e, 0x3, [{0x0, 0x3, '|'}, {0x5, 0x6, "329e1ac4"}, {0x7, 0x5, "8d80cb"}, {0x6, 0xe, "13f9c1c82e65d3c3b2bbdc9e"}, {0x7, 0x5, "f04196"}, {0x7, 0x5, "c83762"}, {0x1, 0x12, "dbcb792cb2086b6895183ff2aec57f4c"}, {0x0, 0xd, "f4b69f6af0ac215ee92ad8"}, {0x1, 0x11, "d1ad65356d963c34a3974cdaaa421e"}, {0x6, 0x2}]}]}}}], 0xf8}, 0x18000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x48, 0x0, &(0x7f0000000200)=[@exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x3f9, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x41) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000006800010006000000fddbdf2500000300000000000c000200010000000400000008000500", @ANYRES32=0x0, @ANYBLOB="ffaa49bf863efbe6ebf2ac16baf3109e08c7008c6bf90eb25d027a131f4749e22b499ed2a9a18ab4547867805f059220cdc8a0d933ece66c99c55d5cb7eb7424a3d972c14dca42a96c984801a4ea6b271abcf80000000000000035dae4729e70641f55e0"], 0x2c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r7, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 5.89082786s ago: executing program 3 (id=2081): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc9e, 0x0, 0x0, 0x0, 0xde9e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf5e}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0xe) 5.817586802s ago: executing program 2 (id=2082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x15, 0x4, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1d, 0x20, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_output, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @ringbuf_query, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41100, 0x5c, '\x00', r3, @lsm, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x5, 0x4, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x81}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="5da2040000000000140012800c0001006d6163767461700004000280"], 0x34}}, 0xc0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000002540)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000940)="badf400307f475c13eee563c3d578b51e361ea7f420dd4b8549dfc7a6b83d1b309f67387e01c1f06c1cd1a337cf96eba3a8c5af6fb65fd2a4cc34973777cb4d0dc3c4a90d1a176b30099a101503fef029060d52d16e63d44e1d197f86d64df4677ca2c514421539e4666c0afb29b2b6a3156a05b7ab783dc2ad1d9c0bbb0617f4ad26c10a98f743fcd2fc855ef1ea11c6d116fc8839658ebcf3447e900ff8922e65eb0dac8e014bb9c200314a4b42eb57c1e69d9fcd8b58cd5d4059509d028cc28ad845461ce258106146781f11f0d0885a272d3dd55e771eaa35602cf5fefddd02f694849909bf0", 0xe8}], 0x1, 0x0, 0x0, 0x400c040}}, {{&(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="6f00617c15a19c88dd70", 0xa}, {&(0x7f0000001c40)="6b1bf899359b155414416411c2867b4cd62bcd739bac3539aceac65430817e34f5ab5bc547db3cf1cb3908fbd67a7ec28556fa15134dd92250a08e6e8229317f8722d4c04c2547082c6330d3d700aadd5eb3532920be6d155fb5672a5a2e06458b2dfd5720f3a1ee4dfdf6951ccec515bff52059f1183440fe60caf77bfa96e31fc2eb6b2485c504cdb24b6649f8e5813fc61fdf61187456087689c4a8a55bd8013b226ddff6da77143f96684e03bd36f6558b394dfdf7e6f5f89a7d732ca09d655f2f663b64d2c55f00d56a33c60e12bb6996bb44627a0ccad8973bccc49d0b083ddce718721a7d727b17", 0xeb}, {&(0x7f0000001d40)="08aa781f0e0c9f50b1bf7cb021c793a8faff51ae5fed7fa4090ed678962415266898d16fa07fef2472bab027d6d9e5567b95b69dcb305a228d065c93260dca0cc246d775a76d1498118af8e4bf79645db3e053da006ebf7dd7c2c35b1e0cee21801eab985564ac55094620e9339e44b486975f5e0f7da94f70e12f5fa8644fce792eb6d7a422a08a839d948451f7827194c0e41d0e40d170b2bbf82ea8aebd3d0b2149291cdcb52430eab36318453cd532b8622a4ddc9a4d87a444940a1bd92e5a5707f488fe276598ecbef9", 0xcc}, {&(0x7f0000001e40)="b5f3417601b4bfbf57f57ed2d402c19e579be1cb6ecef56b35549512888782fae59063", 0x23}], 0x5, &(0x7f0000001ec0)=[@cred={{0x18, 0x1, 0x2, {r6, 0x0, 0xffffffffffffffff}}}], 0x18, 0x40}}, {{&(0x7f0000001f00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002480)=[{&(0x7f0000002040)="cceb8c3705f17f0917e61cdd48830173f841d0ddfe092bd4ff91dcda8ff465fa39e5bc11ece709909d011b22b9bebb34b873d4a99c2053703e73e9e919874195b9925f9f46f9236f462b2d5bc139cfda5ab5bc699b71c27002fcbfcde11ad14bfa71f560f08a256a302a16b45994d8da84b03d9b0f791f8085329830a0f1a0723db5c6a7a10a8454d60dcf19864785919fbd92e7984048e10c55e6a5848e09e2b1fa96d33bdef56449", 0xa9}, {&(0x7f0000002140)="b2515ae61c462a0ad95b285a56b302d7b18cf94b0f95b550488951cab35c91fb6551000053fe35a2ef19adeb4b6e5cfd6ccfc491f9312e151ff128612b0a2aec8362bcd5434c248f5cb3f1a9ee2f081b44a4bb850265521f33147d6bf19646c62d4fb781a04b9d7b5c81c797d453a24db3617af5464b996d7e7ec187", 0x7c}, {&(0x7f00000021c0)="247a23122f2b75e6df67fa06ac752b01f74d2dfc2e1e74b9d84afd4a4f912f492465c6bfb73e9eed56daaa95f311e700797f2c7f435b1443e458534c98827d702f89965e412b8387f62f9ba2c9704305279081989dd5f36953b77cb95903f4b9f3d2ce6620c6fff184719014cd2c481cf81dd8fb213643955aa99e69f07c903d828b5a2f5b705a24462fbf7d77f84a3c57194285fe54cbe5ee1c515e048c2df6a308507399a480f1e325608b7c6c6cb2b41fabfdea9b22ad4394e4b93b0c472ca28a46b4fad37845d52364be489d02a20f57c78d508247b73c2102e487", 0xdd}, {&(0x7f00000022c0)="e322e857dd576702fabc0bcda4f6ce0aab8a66a2df64ceadf2e5eb382b7e57159177f4b93331a50912d07664a919474022cd138ee0cd60974ea1d115cb6fa273027e243e59a2bd40434201", 0x4b}, {&(0x7f0000002340)="e7cc03dbfb708ca2cbd6f24859b3acd92ec449fd80a078842cf142ee84274c295f57ff23ee909826e79573de382b3fca8c65bfe64bb55010a99c06730aedf8ccecded37a13641fb2269e377d95005af859a4de31edb356d7f3ad31cc6b0f6ced3c5e1e9d5ca629cc65ba14d0552aada20eff95ebf11d09af9267f5673cd1e437255e9795a9c3b04f6a2793eea9b4628a3b8539fca43c9ca72d094683ddc5c690f3edb131942865f4694c81b419c907", 0xaf}, {&(0x7f0000002400)="5560b1aeaa97ac5191974a5c3b3b346cfd6f1b3466730cb74a840ed6810187c970fc8b67f5de9a719d0b93d78399db5482613b86b26460bb2904f8d88fb34334c3858ae9d12cf1f0f401927b04fa78beb7a739a941bff5dc7358c06d8f69f6adfa52937d11d8404632740ff187007b7b77ab7776e6c31e9970c0b00b114e", 0x7e}], 0x6, &(0x7f00000024c0)=ANY=[@ANYBLOB="180000030000000000000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="1c0000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32], 0x50, 0x4004}}], 0x3, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r1, &(0x7f0000000180), 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES16=r5, @ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x40008000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 5.175112858s ago: executing program 1 (id=2083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) capset(&(0x7f0000a31000), &(0x7f0000000200)={0x0, 0xb, 0x0, 0x0, 0x0, 0xff}) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x40) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) mount(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0xfffffff0, 0x0) r11 = openat$hpet(0xffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$KVM_TDX_INIT_VM(r11, 0xc004aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f00000002c0)={0x8000000000000000, 0x26c2, [0x1, 0x101, 0x3, 0x5, 0x9, 0x8], [0x8000000000000001, 0xfffffffffffffff9, 0x7, 0x9, 0x7fff, 0x3], [0x5, 0x4, 0x2, 0x800, 0x80, 0x3], '\x00', {0x3, 0x0, [{0xb, 0x2, 0x1, 0x6, 0x80000000, 0x7, 0x10}, {0x8000001d, 0xd, 0x5, 0x3, 0x5, 0x8, 0x5}, {0x7, 0x400, 0x2, 0x6, 0x8, 0xfffffff0, 0xa8}]}}}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r12 = accept4$phonet_pipe(r2, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x800) setsockopt$PNPIPE_INITSTATE(r12, 0x113, 0x4, &(0x7f0000000180)=0x1, 0x4) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x3}) 5.107247368s ago: executing program 2 (id=2084): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfcb, 0x1042, 0x1, 0x354}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000340)=[@ioring_restriction_register_op={0x0, 0x2}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240), 0x0) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, &(0x7f0000000380)="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", 0x129) 5.106489326s ago: executing program 0 (id=2085): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r0, 0x2000, 0x300) 4.973078895s ago: executing program 0 (id=2086): fsopen(&(0x7f0000000040)='afs\x00', 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) readv(r0, &(0x7f0000000ec0)=[{&(0x7f0000000700)=""/230, 0xe6}], 0x1) readv(r0, &(0x7f0000000040), 0x2000000000000213) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000100)=0x5, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) ioctl$VT_DISALLOCATE(r8, 0x5608) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) openat$cgroup_root(0xffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 4.807302861s ago: executing program 2 (id=2087): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1ddf2708ce41dd41fd679ecf"], 0x7) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x1401, 0x4, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r1 = getpid() sched_setaffinity(r1, 0xffffffffffffff43, &(0x7f00000002c0)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1e3) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000280)={0x5c, @multicast2, 0x4e24, 0x4, 'nq\x00', 0x28, 0x3, 0x5d}, 0x2c) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='0', 0x1) 4.295089233s ago: executing program 1 (id=2089): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x8009, 0x7, 0x7, 0x1, 0x3, 0x9a, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0xa, 0x2400000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) 3.174965809s ago: executing program 1 (id=2090): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003b000103a28b00000000000005000010"], 0x14}}, 0xc048) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="791010000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x3}]}, 0x8) bind$bt_hci(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) fsetxattr(r2, &(0x7f0000000180)=@known='trusted.overlay.redirect\x00', &(0x7f0000000240)='\x00', 0x1, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000600000000200000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4d0916cb7a186d2a2e55ba48ad3f796547502777ff87f76b395c692150689bb4a628a9f3aa873e97ebd2a2089456afed727eaa0e6eaaad8669a20c12065b35a5", 0x39}, 0x48, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) kexec_load(0x6181, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="61b004d5c699fe7ea24ddd9b063737efaa5d265a6939f3cff8ff4419451bc2ffdfcc71a33b5ec82fc3ca15c06224f7e068bf3ea0cf55a09f689e1babafa71afa8f27c0241c8423a785aa0afc93a0a774c3f07b3d0a75ba127388aa6d33a7ba4d3dd85779f1b2de7791528706530ed799e70bcd8f7718459865625c3e49116f36fb16d2cdb387739e1fef78793094cfcadbe988d4bd1675546d67debdb6f37e9931d171271080d026a0d786739550a869aa274c76f6ed", 0xb6, 0x0, 0x6}], 0x150000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x41000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x7, 0xd}, {0x99f8d1e5a676aae2, 0x3000, 0x8, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x200000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x4, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0xfe, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0xf000, 0x6000, 0xc, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x1, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0x50008, 0x0, 0xfee7afff, 0x114, 0x0, 0xf801, 0x0, [0x80000005, 0x0, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$UI_GET_VERSION(r8, 0x8004552d, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 2.695077555s ago: executing program 2 (id=2091): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r5, 0x9}}, 0x10) socket$packet(0x11, 0x3, 0x300) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) socketpair$unix(0x1, 0x3, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, 0x0, &(0x7f0000000140)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, r8, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0xc0}}}, &(0x7f0000000300)) 2.625218448s ago: executing program 1 (id=2092): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1ddf2708ce41dd41fd679ecf"], 0x7) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x1401, 0x4, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1e3) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='0', 0x1) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) 1.8467067s ago: executing program 0 (id=2093): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x59, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000090000000000000003000000c24a0001ffffffff850000002a0000009500000000000000f37ef53f987645ff67d58ccefe84345754a8785560184e3e8b25e9c54cbf98cb120326fe6b46bb9e0425478a257521baf00b985475f01666fc14b9da27c30975377603b86b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = creat(0x0, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000001c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x1, 0x0, 0x81d, 0xf1, {{0x42, 0x4, 0x1, 0x9, 0x108, 0x65, 0x0, 0x3, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_addr={0x44, 0x2c, 0xd4, 0x1, 0xb, [{@multicast2, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xfffff800}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x401}, {@broadcast, 0xfffffff0}]}, @cipso={0x86, 0x7a, 0x2, [{0x7, 0x4, "e4d9"}, {0x5, 0x10, "bdee870512d01952779e5ab12783"}, {0x7, 0xd, "b633c5a82851670c5f824d"}, {0x5, 0xa, "8fc621ced69bd372"}, {0x1, 0xb, "cf372495c6a6afd311"}, {0x1, 0x12, "9ee2e2ac0e228d63c48e474de8d2fd41"}, {0x5, 0x9, "9375ca0a5b1139"}, {0x2, 0xe, "2bd9c1e858d7cc8154ccb3ea"}, {0xc6943a1488decff4, 0x8, "619663837f8d"}, {0x1, 0xd, "6c8702bcb7a2796af0823e"}]}, @timestamp_prespec={0x44, 0x14, 0x6c, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010101, 0xf}]}, @noop, @end, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x0, 0xf, "f25c8b43768a06ca64fd6ac12a"}, {0x1, 0x2}, {0x0, 0x11, "01ec702898677bc833e08f9b60caa9"}, {0x7, 0x6, "b41d4ea8"}, {0x4, 0x6, "0795d443"}]}]}}}}}) fstat(r2, &(0x7f00000003c0)) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4) 1.842714977s ago: executing program 3 (id=2094): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000, @rand_addr=0xfffffffd}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}]}, 0x38}, 0x1, 0x7}, 0x0) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xd]}, 0x8, 0x800) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r3 = signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r5, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x815) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000100)={0x3, 0x84}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x81, &(0x7f0000006680)) listxattr(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r9, 0x40187014, &(0x7f0000000000)={0x1, 0x0, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 1.23804955s ago: executing program 0 (id=2095): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001840)=ANY=[], 0x0) 1.203120582s ago: executing program 1 (id=2096): r0 = socket$rxrpc(0x21, 0x2, 0xa) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000069243279f92445cab5c9f940b4e32717e9549044fd98eb1ac224c8d9026595abb5802a4f16c4daad6bbb55363339cf55d1335", @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf2501000000080002000100000014000c0020010000000000000000000000000001080008000400000008000700", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32, @ANYBLOB="080004006401010005000d0002000000"], 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x200840) ioctl$EVIOCGBITKEY(r9, 0x80404521, &(0x7f0000001500)=""/4096) 975.41245ms ago: executing program 0 (id=2097): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="28213d5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6d27", 0x62) r1 = socket(0x1e, 0x1, 0x0) openat$null(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x11, &(0x7f0000000700)="02000000097effff", 0x8) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, 0x0, 0xffffffffffffff3d) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='vhci_hcd.0\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 882.820743ms ago: executing program 2 (id=2098): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000340)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x101801) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000004c0)={0xa, 0x0, 0x0, {0x0, 0x759bc414, 0x800007, 0x20003}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ff"], 0x38}}, 0x4040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$COMEDI_BUFINFO(0xffffffffffffffff, 0xc02c640e, &(0x7f0000000240)={0x10, 0x0, 0x1ff, 0x9, 0x9f, 0x800, 0x80000001}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x4, 0x0, 0x24}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x3}}, &(0x7f0000000200)={0x0, 0x1c, 0x34}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) 778.329007ms ago: executing program 3 (id=2099): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000580)={@rand_addr, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000500)="11f9a8c185572bb1a871f06fdc", 0xd}], 0x1, &(0x7f0000000600)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r3, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}}}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@cipso={0x86, 0x4e, 0x0, [{0x7, 0x5, "56c6b9"}, {0x0, 0x9, "3a1e018e653933"}, {0x7, 0x12, "eac700ef8ad8a6ab8e49ab6e7bb8d649"}, {0x6, 0x6, "5afd5d1b"}, {0x1, 0x4, "9203"}, {0x5, 0xf, "7202223a259ce9849f54198098"}, {0xd5e772d691f93c4f, 0x8, "03d552ec7b24"}, {0x0, 0x7, "71a8d10350"}]}, @timestamp={0x44, 0xc, 0x61, 0x0, 0x3, [0x200, 0x0]}, @cipso={0x86, 0x1a, 0x1, [{0x2, 0x8, "77a5ef04a7f8"}, {0x2, 0x4, "9475"}, {0x0, 0x8, "827ca8b5e8da"}]}, @cipso={0x86, 0x5c, 0x3, [{0x5, 0x7, "329e1ac451"}, {0x7, 0x5, "8d80cb"}, {0x6, 0xe, "13f9c1c82e65d3c3b2bbdc9e"}, {0x7, 0x5, "f04196"}, {0x7, 0x5, "c83762"}, {0x1, 0x12, "dbcb792cb2086b6895183ff2aec57f4c"}, {0x0, 0xd, "f4b69f6af0ac215ee92ad8"}, {0x1, 0x11, "d1ad65356d963c34a3974cdaaa421e"}, {0x6, 0x2}]}]}}}], 0xf4}, 0x18000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x48, 0x0, &(0x7f0000000200)=[@exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x3f9, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x41) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000006800010006000000fddbdf2500000300000000000c000200010000000400000008000500", @ANYRES32=0x0, @ANYBLOB="ffaa49bf863efbe6ebf2ac16baf3109e08c7008c6bf90eb25d027a131f4749e22b499ed2a9a18ab4547867805f059220cdc8a0d933ece66c99c55d5cb7eb7424a3d972c14dca42a96c984801a4ea6b271abcf80000000000000035dae4729e70641f55e0"], 0x2c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r7, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 635.390979ms ago: executing program 2 (id=2100): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003b000103a28b00000000000005000010"], 0x14}}, 0xc048) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="791010000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x3}]}, 0x8) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) fsetxattr(r2, 0x0, &(0x7f0000000240)='\x00', 0x1, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000600000000200000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4d0916cb7a186d2a2e55ba48ad3f796547502777ff87f76b395c692150689bb4a628a9f3aa873e97ebd2a2089456afed727eaa0e6eaaad8669a20c12065b35a5", 0x39}, 0x48, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) kexec_load(0x6181, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="61b004d5c699fe7ea24ddd9b063737efaa5d265a6939f3cff8ff4419451bc2ffdfcc71a33b5ec82fc3ca15c06224f7e068bf3ea0cf55a09f689e1babafa71afa8f27c0241c8423a785aa0afc93a0a774c3f07b3d0a75ba127388aa6d33a7ba4d3dd85779f1b2de7791528706530ed799e70bcd8f7718459865625c3e49116f36fb16d2cdb387739e1fef78793094cfcadbe988d4bd1675546d67debdb6f37e9931d171271080d026a0d786739550a869aa274c76f6ed", 0xb6, 0x0, 0x6}], 0x150000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x41000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x7, 0xd}, {0x99f8d1e5a676aae2, 0x3000, 0x8, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x200000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x4, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0xfe, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0xf000, 0x6000, 0xc, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x1, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0x50008, 0x0, 0xfee7afff, 0x114, 0x0, 0xf801, 0x0, [0x80000005, 0x0, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$UI_GET_VERSION(r8, 0x8004552d, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 0s ago: executing program 1 (id=2101): mount(0x0, 0x0, &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x1, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xb, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r5 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x80000, 0x0) fanotify_mark(r1, 0x408, 0x22, r3, 0x0) fanotify_mark(r1, 0x80, 0x0, r3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r6 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r6, 0x80044dfd, &(0x7f0000000080)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) ioctl$SG_BLKTRACESETUP(r5, 0xc0401273, &(0x7f0000000140)={'\x00', 0xffff, 0x9c, 0xc, 0x1, 0x6, r7}) r8 = syz_open_dev$vbi(0x0, 0x3, 0x2) write(r8, 0x0, 0x0) r9 = syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r10 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0xb, "d5883806da95f58b91"}]}}}}}}, 0x4e) kernel console output (not intermixed with test programs): [ 361.705591][ T5840] veth1_macvtap: left promiscuous mode [ 361.705650][ T5840] veth0_macvtap: left promiscuous mode [ 361.705750][ T5840] veth1_vlan: left promiscuous mode [ 361.705830][ T5840] veth0_vlan: left promiscuous mode [ 361.883585][T11253] vhci_hcd: connection closed [ 361.886024][T11212] vhci_hcd vhci_hcd.2: stop threads [ 361.889266][T11212] vhci_hcd vhci_hcd.2: release socket [ 361.894386][T11212] vhci_hcd vhci_hcd.2: disconnect device [ 361.935799][ T5840] team0 (unregistering): Port device team_slave_1 removed [ 361.949712][ T5840] team0 (unregistering): Port device team_slave_0 removed [ 362.015052][ T1167] smbdirect: ib_dev[syz2] removed [ 362.067561][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.071055][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.081094][ T7105] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 362.096030][ T6013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.098508][ T6013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.478299][ T5840] IPVS: stop unused estimator thread 0... [ 362.931008][ T5107] Bluetooth: hci4: command tx timeout [ 362.971043][T11271] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 363.002452][T11269] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 363.004575][T11269] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 363.014708][T11269] vhci_hcd vhci_hcd.0: Device attached [ 363.134482][ T7105] usb 8-1: config 0 has an invalid interface number: 205 but max is 0 [ 363.141374][ T7105] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.145849][ T7105] usb 8-1: config 0 has no interface number 0 [ 363.147873][ T7105] usb 8-1: config 0 interface 205 has no altsetting 0 [ 363.156112][ T7105] usb 8-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 363.160591][ T7105] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.169396][ T7105] usb 8-1: Product: syz [ 363.171428][ T7105] usb 8-1: Manufacturer: syz [ 363.173346][ T7105] usb 8-1: SerialNumber: syz [ 363.178605][ T7105] usb 8-1: config 0 descriptor?? [ 363.188285][ T7105] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 363.193719][ T7105] dvb-usb: bulk message failed: -22 (3/0) [ 363.225220][ T7105] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 363.229629][ T7105] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 363.238974][ T7105] usb 8-1: media controller created [ 363.244877][ T7105] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.256389][T11269] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 363.261791][ T7105] dvb-usb: bulk message failed: -22 (6/0) [ 363.270928][ T7105] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 363.277133][ T7105] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input10 [ 363.291816][ T7105] dvb-usb: schedule remote query interval to 150 msecs. [ 363.296105][ T7105] dvb-usb: bulk message failed: -22 (3/0) [ 363.331309][ T7105] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 363.341109][ T29] usb 40-1: SetAddress Request (2) to port 0 [ 363.343052][ T29] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 363.731015][ T24] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 363.834856][T11274] vhci_hcd: connection reset by peer [ 363.836840][ T5796] vhci_hcd vhci_hcd.1: stop threads [ 363.838514][ T5796] vhci_hcd vhci_hcd.1: release socket [ 363.840611][ T5796] vhci_hcd vhci_hcd.1: disconnect device [ 363.882628][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 363.885615][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.888988][ T24] usb 5-1: config 0 has no interface number 0 [ 363.892506][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 363.897448][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 363.902343][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 363.906237][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.912005][ T24] usb 5-1: config 0 descriptor?? [ 363.916117][T11281] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 363.920412][ T24] ldusb 5-1:0.55: Interrupt in endpoint not found [ 364.035507][ T7105] dvb-usb: bulk message failed: -22 (1/0) [ 364.705383][T11284] syz.2.1533: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 364.709828][T11284] CPU: 3 UID: 0 PID: 11284 Comm: syz.2.1533 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.709848][T11284] Tainted: [L]=SOFTLOCKUP [ 364.709852][T11284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 364.709860][T11284] Call Trace: [ 364.709866][T11284] [ 364.709871][T11284] dump_stack_lvl+0x100/0x190 [ 364.709890][T11284] warn_alloc.cold+0x94/0xa8 [ 364.709903][T11284] ? __pfx_warn_alloc+0x10/0x10 [ 364.709926][T11284] ? find_held_lock+0x2b/0x80 [ 364.709945][T11284] ? psi_memstall_leave+0x19c/0x360 [ 364.709967][T11284] ? psi_memstall_leave+0x1e6/0x360 [ 364.709988][T11284] ? psi_memstall_leave+0x1eb/0x360 [ 364.710007][T11284] ? lockdep_hardirqs_on+0x78/0x100 [ 364.710033][T11284] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 364.710066][T11284] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 364.710088][T11284] ? irqentry_exit+0x24d/0xa00 [ 364.710108][T11284] ? lockdep_hardirqs_on+0x78/0x100 [ 364.710139][T11284] ? policy_nodemask+0x346/0x4f0 [ 364.710161][T11284] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.710185][T11284] ? policy_nodemask+0xed/0x4f0 [ 364.710207][T11284] alloc_pages_mpol+0x1fb/0x540 [ 364.710231][T11284] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 364.710252][T11284] ? alloc_frozen_pages_noprof+0x4a/0x160 [ 364.710268][T11284] ? __sanitizer_cov_trace_pc+0x54/0x70 [ 364.710293][T11284] alloc_pages_noprof+0x1a/0x160 [ 364.710309][T11284] kimage_alloc_pages+0x72/0x380 [ 364.710336][T11284] kimage_alloc_control_pages+0x157/0xa20 [ 364.710380][T11284] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 364.710399][T11284] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 364.710428][T11284] do_kexec_load+0x275/0x810 [ 364.710453][T11284] ? __pfx_do_kexec_load+0x10/0x10 [ 364.710475][T11284] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 364.710495][T11284] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 364.710513][T11284] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 364.710531][T11284] ? syscall_user_dispatch+0x76/0x130 [ 364.710547][T11284] __do_fast_syscall_32+0xe7/0x970 [ 364.710566][T11284] do_fast_syscall_32+0x32/0x70 [ 364.710582][T11284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.710598][T11284] RIP: 0023:0xf706efec [ 364.710614][T11284] Code: Unable to access opcode bytes at 0xf706efc2. [ 364.710620][T11284] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011b [ 364.710632][T11284] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 364.710639][T11284] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 364.710646][T11284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.710652][T11284] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 364.710659][T11284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.710672][T11284] [ 364.710691][T11284] Mem-Info: [ 364.805429][T11284] active_anon:288 inactive_anon:1129 isolated_anon:0 [ 364.805429][T11284] active_file:530 inactive_file:5649 isolated_file:0 [ 364.805429][T11284] unevictable:1768 dirty:2 writeback:4 [ 364.805429][T11284] slab_reclaimable:6408 slab_unreclaimable:56322 [ 364.805429][T11284] mapped:23218 shmem:2745 pagetables:1202 [ 364.805429][T11284] sec_pagetables:308 bounce:0 [ 364.805429][T11284] kernel_misc_reclaimable:0 [ 364.805429][T11284] free:18548 free_pcp:318 free_cma:0 [ 364.820078][T11284] Node 0 active_anon:64kB inactive_anon:76kB active_file:0kB inactive_file:124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7680kB pagetables:1176kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 364.833416][T11284] Node 1 active_anon:1088kB inactive_anon:4440kB active_file:2120kB inactive_file:22472kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:92828kB dirty:0kB writeback:16kB shmem:9444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5540kB pagetables:3632kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 364.845538][T11284] Node 0 DMA free:1864kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:80kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 364.855301][T11284] lowmem_reserve[]: 0 280 280 280 280 [ 364.857086][T11284] Node 0 DMA32 free:12884kB boost:6144kB min:18916kB low:22108kB high:25300kB reserved_highatomic:2048KB free_highatomic:1904KB active_anon:64kB inactive_anon:76kB active_file:0kB inactive_file:124kB unevictable:1536kB writepending:8kB zspages:3396kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:144kB local_pcp:0kB free_cma:0kB [ 364.861612][ T7105] dvb-usb: error while querying for an remote control event. [ 364.870389][T11284] lowmem_reserve[]: 0 0 0 0 0 [ 364.872932][T11284] Node 1 DMA32 free:59244kB boost:8192kB min:55336kB low:67120kB high:78904kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1188kB inactive_anon:4240kB active_file:2120kB inactive_file:22472kB unevictable:5536kB writepending:16kB zspages:3452kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1640kB local_pcp:236kB free_cma:0kB [ 364.884354][T11284] lowmem_reserve[]: 0 0 0 0 0 [ 364.886369][T11284] Node 0 DMA: 2*4kB (UM) 3*8kB (M) 3*16kB (M) 4*32kB (UM) 8*64kB (UM) 3*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1872kB [ 364.892877][T11284] Node 0 DMA32: 29*4kB (UE) 39*8kB (UMEH) 26*16kB (UMEH) 72*32kB (UMEH) 60*64kB (UMEH) 18*128kB (UMEH) 6*256kB (UMH) 2*512kB (U) 1*1024kB (H) 0*2048kB 0*4096kB = 12876kB [ 364.896454][ T5847] usb 8-1: USB disconnect, device number 37 [ 364.930167][T11284] Node 1 DMA32: 255*4kB (UME) 849*8kB (UME) 567*16kB (UME) 287*32kB (ME) 125*64kB (UME) 50*128kB (ME) 26*256kB (ME) 19*512kB (M) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 60948kB [ 364.931870][ T5847] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 364.963037][T11284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.983243][T11284] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 364.989552][T11284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.004778][T11284] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.014219][ T5107] Bluetooth: hci4: command tx timeout [ 365.020884][T11284] 7907 total pagecache pages [ 365.022402][T11284] 376 pages in swap cache [ 365.028722][T11284] Free swap = 100372kB [ 365.030049][T11284] Total swap = 124996kB [ 365.036610][T11284] 524155 pages RAM [ 365.038654][T11284] 0 pages HighMem/MovableOnly [ 365.049874][T11284] 211540 pages reserved [ 365.058319][T11284] 0 pages cma reserved [ 365.299641][T11294] binder: BINDER_SET_CONTEXT_MGR already set [ 365.302154][T11294] binder: 11292:11294 ioctl 4018620d 80004a80 returned -16 [ 365.581268][T11284] kexec: Could not allocate control_code_buffer [ 366.121411][T11306] syzkaller0: entered promiscuous mode [ 366.123601][T11306] syzkaller0: entered allmulticast mode [ 366.380997][ T5847] usb 7-1: new low-speed USB device number 47 using dummy_hcd [ 366.483128][ T848] usb 5-1: USB disconnect, device number 52 [ 366.570934][ T5847] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 366.582602][ T5847] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.615298][ T5847] usb 7-1: config 0 has no interface number 0 [ 366.639257][ T5847] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 366.669247][ T5847] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 366.700028][ T5847] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 366.711050][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.790918][ T5847] usb 7-1: config 0 descriptor?? [ 366.809939][T11307] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 366.862632][ T5847] ldusb 7-1:0.55: Interrupt in endpoint not found [ 366.954070][T11313] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1543'. [ 366.969901][T11313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.871805][T11326] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 368.451032][ T29] usb 40-1: device descriptor read/8, error -110 [ 368.540979][ T9] usb 8-1: new low-speed USB device number 38 using dummy_hcd [ 368.692417][ T24] usb 7-1: USB disconnect, device number 47 [ 368.693789][ T9] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 368.703199][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.708066][ T9] usb 8-1: config 0 has no interface number 0 [ 368.710557][ T9] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.719351][ T9] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 368.731016][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 368.734775][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.743939][ T9] usb 8-1: config 0 descriptor?? [ 368.749310][T11336] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 368.757865][ T9] ldusb 8-1:0.55: Interrupt in endpoint not found [ 368.786104][T11322] kexec: Could not allocate control_code_buffer [ 368.852895][ T29] usb usb40-port1: attempt power cycle [ 369.435938][ T29] usb usb40-port1: unable to enumerate USB device [ 371.185591][ T24] usb 8-1: USB disconnect, device number 38 [ 374.604753][T11363] kexec: Could not allocate control_code_buffer [ 374.751002][ T848] usb 7-1: new low-speed USB device number 48 using dummy_hcd [ 375.821212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 376.092869][ T848] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 376.096350][ T848] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.100299][ T848] usb 7-1: config 0 has no interface number 0 [ 376.104789][ T848] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.113963][ T848] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 376.122321][ T848] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 376.128568][ T848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.136312][ T848] usb 7-1: config 0 descriptor?? [ 376.140602][T11386] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 376.148760][ T848] ldusb 7-1:0.55: Interrupt in endpoint not found [ 376.452002][ T24] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 376.603006][ T24] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 376.605732][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.609715][ T24] usb 6-1: config 0 has no interface number 0 [ 376.611789][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.616085][ T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 376.619658][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 376.622776][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.628446][ T24] usb 6-1: config 0 descriptor?? [ 376.631115][T11402] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 376.638753][ T24] ldusb 6-1:0.55: Interrupt in endpoint not found [ 377.091069][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 377.243994][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 377.246971][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.249509][ T24] usb 5-1: Product: syz [ 377.251042][ T24] usb 5-1: Manufacturer: syz [ 377.252511][ T24] usb 5-1: SerialNumber: syz [ 377.340589][T11413] loop6: detected capacity change from 0 to 2640 [ 377.343358][T11413] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.345901][T11413] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.348475][T11413] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.351778][T11413] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.354371][T11413] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.357018][T11413] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.359466][T11413] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.362511][T11413] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.365562][T11413] ldm_validate_partition_table(): Disk read failed. [ 377.368131][T11413] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.371444][T11413] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.374570][T11413] Dev loop6: unable to read RDB block 0 [ 377.376506][T11413] loop6: unable to read partition table [ 377.378481][T11413] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 377.454685][ T41] usb 7-1: USB disconnect, device number 48 [ 377.562511][ T24] rtl8150 5-1:1.0: couldn't reset the device [ 377.565123][ T24] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 377.571861][ T24] usb 5-1: USB disconnect, device number 53 [ 377.760979][ T5898] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 377.934673][ T5898] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 377.938669][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.942332][ T5898] usb 8-1: Product: syz [ 377.944026][ T5898] usb 8-1: Manufacturer: syz [ 377.945887][ T5898] usb 8-1: SerialNumber: syz [ 378.144671][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.147765][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.326468][ T5898] rtl8150 8-1:1.0: couldn't reset the device [ 378.328874][ T5898] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 378.336989][ T5898] usb 8-1: USB disconnect, device number 39 [ 379.028444][ T5898] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 379.177624][ T29] usb 6-1: USB disconnect, device number 7 [ 379.191637][ T5898] usb 8-1: Using ep0 maxpacket: 32 [ 379.196857][ T5898] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 379.200078][ T5898] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 379.203212][ T5898] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 379.206350][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 379.210439][ T5898] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 379.214750][ T5898] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 379.220231][ T5898] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 379.225738][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.234360][ T5898] usb 8-1: config 0 descriptor?? [ 379.456804][ T5898] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 379.991039][ T5750] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 380.142553][ T5750] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 380.146073][ T5750] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.150421][ T5750] usb 6-1: config 0 has no interface number 0 [ 380.153569][ T5750] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.157946][ T5750] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 380.162944][ T5750] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 380.166762][ T5750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.176586][ T5750] usb 6-1: config 0 descriptor?? [ 380.181421][T11433] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 380.187002][ T5750] ldusb 6-1:0.55: Interrupt in endpoint not found [ 380.505085][T11442] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 380.544560][T11442] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 380.546676][T11442] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 380.553392][T11442] vhci_hcd vhci_hcd.0: Device attached [ 380.770586][ T5750] usb 8-1: USB disconnect, device number 40 [ 380.778146][ T5750] usblp0: removed [ 380.880968][ T29] usb 42-1: SetAddress Request (7) to port 0 [ 380.882989][ T29] usb 42-1: new SuperSpeed USB device number 7 using vhci_hcd [ 381.025524][T11443] vhci_hcd: connection reset by peer [ 381.027882][ T5796] vhci_hcd vhci_hcd.2: stop threads [ 381.030247][ T5796] vhci_hcd vhci_hcd.2: release socket [ 381.032682][ T5796] vhci_hcd vhci_hcd.2: disconnect device [ 381.401333][T11447] netlink: 'syz.3.1585': attribute type 2 has an invalid length. [ 381.760975][ T41] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 381.846524][T11451] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 381.944212][ T41] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 381.949066][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.951844][ T41] usb 8-1: Product: syz [ 381.953168][ T41] usb 8-1: Manufacturer: syz [ 381.954762][ T41] usb 8-1: SerialNumber: syz [ 382.219065][ T41] rtl8150 8-1:1.0: couldn't reset the device [ 382.221710][ T41] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 382.229921][ T41] usb 8-1: USB disconnect, device number 41 [ 382.371060][ T7865] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 382.452593][ T7105] usb 6-1: USB disconnect, device number 8 [ 382.541037][ T7865] usb 7-1: Using ep0 maxpacket: 32 [ 382.544967][ T7865] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 382.548521][ T7865] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 382.552421][ T7865] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 382.560954][ T7865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 382.564600][ T7865] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 382.568178][ T7865] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 382.573242][ T7865] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 382.578343][ T7865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.584314][ T7865] usb 7-1: config 0 descriptor?? [ 382.710901][ T41] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 382.928007][ T41] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 382.943437][ T41] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.949736][ T41] usb 5-1: config 0 has no interface number 0 [ 382.954308][ T41] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.960415][ T41] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 382.966586][ T41] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 382.970167][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.977108][ T41] usb 5-1: config 0 descriptor?? [ 382.981000][T11458] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 382.987733][ T41] ldusb 5-1:0.55: Interrupt in endpoint not found [ 383.421239][T11456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.426834][T11456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.075652][ T7865] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 384.091309][ T7865] usb 7-1: USB disconnect, device number 49 [ 384.097499][ T7865] usblp0: removed [ 384.537779][T11478] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 384.550684][T11478] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 384.553308][T11478] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 384.558363][T11478] vhci_hcd vhci_hcd.0: Device attached [ 384.871140][ T848] usb 40-1: SetAddress Request (6) to port 0 [ 384.875795][ T848] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 385.479930][ T5750] usb 5-1: USB disconnect, device number 54 [ 385.788498][T11491] binder: BINDER_SET_CONTEXT_MGR already set [ 385.802199][T11491] binder: 11490:11491 ioctl 4018620d 80004a80 returned -16 [ 385.910415][T11479] vhci_hcd: connection reset by peer [ 385.916652][ T5796] vhci_hcd vhci_hcd.1: stop threads [ 385.920974][ T5796] vhci_hcd vhci_hcd.1: release socket [ 385.931615][ T5796] vhci_hcd vhci_hcd.1: disconnect device [ 385.983752][ T29] usb 42-1: device descriptor read/8, error -110 [ 386.202285][ T7105] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 386.426421][ T7105] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 386.431156][ T7105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.434652][ T7105] usb 5-1: Product: syz [ 386.436567][ T7105] usb 5-1: Manufacturer: syz [ 386.438671][ T7105] usb 5-1: SerialNumber: syz [ 387.377332][ T29] usb usb42-port1: attempt power cycle [ 387.442208][ T7105] rtl8150 5-1:1.0: couldn't reset the device [ 387.451065][ T7105] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 387.489263][ T7105] usb 5-1: USB disconnect, device number 55 [ 387.563793][T11513] syzkaller0: entered promiscuous mode [ 387.565723][T11513] syzkaller0: entered allmulticast mode [ 387.590581][T11514] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 387.611846][T11514] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 387.614481][T11514] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 387.620227][T11514] vhci_hcd vhci_hcd.0: Device attached [ 387.698267][T11514] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 387.741341][ T29] usb 42-1: SetAddress Request (9) to port 0 [ 387.748537][ T29] usb 42-1: new SuperSpeed USB device number 9 using vhci_hcd [ 388.042615][T11515] vhci_hcd: connection reset by peer [ 388.046108][ T5796] vhci_hcd vhci_hcd.2: stop threads [ 388.048419][ T5796] vhci_hcd vhci_hcd.2: release socket [ 388.050760][ T5796] vhci_hcd vhci_hcd.2: disconnect device [ 388.219176][T11525] infiniband syz1: set active [ 388.221080][T11525] infiniband syz1: added bridge_slave_1 [ 388.236699][T11525] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 388.241476][ T7105] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 388.244577][T11525] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 388.250311][T11525] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 388.276450][T11525] RDS/IB: syz1: added [ 388.278327][T11525] smc: adding ib device syz1 with port count 1 [ 388.281435][T11525] smc: ib device syz1 port 1 has no pnetid [ 388.423457][ T7105] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 388.427219][ T7105] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.431846][ T7105] usb 6-1: config 0 has no interface number 0 [ 388.434780][ T7105] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 388.439298][ T7105] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 388.444006][ T7105] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 388.447806][ T7105] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.454694][ T7105] usb 6-1: config 0 descriptor?? [ 388.458624][T11523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.463854][ T7105] ldusb 6-1:0.55: Interrupt in endpoint not found [ 389.739871][T11543] syzkaller0: entered promiscuous mode [ 389.742310][T11543] syzkaller0: entered allmulticast mode [ 389.981718][ T848] usb 40-1: device descriptor read/8, error -110 [ 390.305072][T11548] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 390.398952][ T848] usb usb40-port1: attempt power cycle [ 390.977174][ T9] usb 6-1: USB disconnect, device number 9 [ 390.980892][ T848] usb usb40-port1: unable to enumerate USB device [ 391.058101][ T57] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 391.258261][ T57] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 391.262141][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.265577][ T57] usb 5-1: Product: syz [ 391.267322][ T57] usb 5-1: Manufacturer: syz [ 391.277514][ T57] usb 5-1: SerialNumber: syz [ 391.993138][T11558] warn_alloc: 1 callbacks suppressed [ 391.993153][T11558] syz.1.1614: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 392.001247][T11558] CPU: 3 UID: 0 PID: 11558 Comm: syz.1.1614 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.001277][T11558] Tainted: [L]=SOFTLOCKUP [ 392.001283][T11558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.001294][T11558] Call Trace: [ 392.001301][T11558] [ 392.001309][T11558] dump_stack_lvl+0x100/0x190 [ 392.001335][T11558] warn_alloc.cold+0x94/0xa8 [ 392.001355][T11558] ? __pfx_warn_alloc+0x10/0x10 [ 392.001375][T11558] ? find_held_lock+0x2b/0x80 [ 392.001398][T11558] ? psi_memstall_leave+0x19c/0x360 [ 392.001425][T11558] ? psi_memstall_leave+0x1e6/0x360 [ 392.001451][T11558] ? psi_memstall_leave+0x1eb/0x360 [ 392.001474][T11558] ? lockdep_hardirqs_on+0x78/0x100 [ 392.001504][T11558] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 392.001530][T11558] ? find_held_lock+0x2b/0x80 [ 392.001557][T11558] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 392.001581][T11558] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 392.001604][T11558] ? rcu_is_watching+0x12/0xc0 [ 392.001626][T11558] ? trace_sched_exit_tp+0x120/0x160 [ 392.001650][T11558] ? __schedule+0x126e/0x6730 [ 392.001681][T11558] ? irqentry_exit+0x24d/0xa00 [ 392.001703][T11558] ? lockdep_hardirqs_on+0x78/0x100 [ 392.001723][T11558] ? irqentry_exit+0x24d/0xa00 [ 392.001742][T11558] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 392.001767][T11558] ? policy_nodemask+0xed/0x4f0 [ 392.001792][T11558] alloc_pages_mpol+0x1fb/0x540 [ 392.001819][T11558] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 392.001843][T11558] ? alloc_frozen_pages_noprof+0x118/0x160 [ 392.001860][T11558] ? __sanitizer_cov_trace_pc+0x3f/0x70 [ 392.001892][T11558] alloc_pages_noprof+0x1a/0x160 [ 392.001915][T11558] kimage_alloc_pages+0x72/0x380 [ 392.001945][T11558] kimage_alloc_control_pages+0x157/0xa20 [ 392.001976][T11558] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 392.001996][T11558] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 392.002029][T11558] do_kexec_load+0x275/0x810 [ 392.002059][T11558] ? __pfx_do_kexec_load+0x10/0x10 [ 392.002094][T11558] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 392.002127][T11558] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 392.002155][T11558] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 392.002183][T11558] ? syscall_user_dispatch+0x76/0x130 [ 392.002208][T11558] __do_fast_syscall_32+0xe7/0x970 [ 392.002237][T11558] do_fast_syscall_32+0x32/0x70 [ 392.002280][T11558] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 392.002303][T11558] RIP: 0023:0xf7fe8fec [ 392.002326][T11558] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 392.002334][T11558] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000011b [ 392.002352][T11558] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 392.002363][T11558] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 392.002374][T11558] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 392.002385][T11558] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 392.002396][T11558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 392.002419][T11558] [ 392.002518][T11558] Mem-Info: [ 392.118435][T11558] active_anon:3583 inactive_anon:249 isolated_anon:0 [ 392.118435][T11558] active_file:1467 inactive_file:6433 isolated_file:0 [ 392.118435][T11558] unevictable:1768 dirty:11 writeback:0 [ 392.118435][T11558] slab_reclaimable:6301 slab_unreclaimable:59721 [ 392.118435][T11558] mapped:26475 shmem:4590 pagetables:1198 [ 392.118435][T11558] sec_pagetables:317 bounce:0 [ 392.118435][T11558] kernel_misc_reclaimable:0 [ 392.118435][T11558] free:25185 free_pcp:116 free_cma:0 [ 392.135979][T11558] Node 0 active_anon:200kB inactive_anon:680kB active_file:12kB inactive_file:248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:764kB dirty:4kB writeback:0kB shmem:2212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7584kB pagetables:1168kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 392.148834][T11558] Node 1 active_anon:3680kB inactive_anon:10620kB active_file:5192kB inactive_file:23304kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:105036kB dirty:40kB writeback:0kB shmem:16148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5692kB pagetables:3624kB sec_pagetables:132kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 392.155347][ T848] IPVS: starting estimator thread 0... [ 392.162148][T11558] Node 0 DMA free:1892kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:152kB active_file:8kB inactive_file:240kB unevictable:0kB writepending:0kB zspages:80kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 392.175792][T11558] lowmem_reserve[]: 0 280 280 280 280 [ 392.178223][T11558] Node 0 DMA32 free:22668kB boost:8192kB min:20964kB low:24156kB high:27348kB reserved_highatomic:2048KB free_highatomic:1904KB active_anon:236kB inactive_anon:508kB active_file:4kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:2732kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 392.190056][T11558] lowmem_reserve[]: 0 0 0 0 0 [ 392.192070][T11558] Node 1 DMA32 free:81248kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3980kB inactive_anon:10400kB active_file:5192kB inactive_file:18704kB unevictable:5536kB writepending:40kB zspages:3364kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2328kB local_pcp:0kB free_cma:0kB [ 392.204557][T11558] lowmem_reserve[]: 0 0 0 0 0 [ 392.206755][T11558] Node 0 DMA: 2*4kB (UM) 8*8kB (U) 8*16kB (UM) 7*32kB (UM) 10*64kB (UM) 0*128kB 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1832kB [ 392.213646][T11558] Node 0 DMA32: 9*4kB (UME) 39*8kB (EH) 124*16kB (UMEH) 131*32kB (UMEH) 93*64kB (UMEH) 40*128kB (UMEH) 10*256kB (UMH) 3*512kB (UM) 1*1024kB (H) 0*2048kB 0*4096kB = 22716kB [ 392.221021][T11558] Node 1 DMA32: 488*4kB (ME) 685*8kB (ME) 445*16kB (UME) 306*32kB (UME) 172*64kB (ME) 87*128kB (UME) 42*256kB (UME) 31*512kB (UM) 8*1024kB (M) 0*2048kB 0*4096kB = 81304kB [ 392.228011][T11558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.232258][T11558] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.236044][T11558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.239654][T11558] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.243740][T11558] 11426 total pagecache pages [ 392.245688][T11558] 832 pages in swap cache [ 392.247491][T11558] Free swap = 100024kB [ 392.249195][T11558] Total swap = 124996kB [ 392.251168][T11567] IPVS: using max 28 ests per chain, 67200 per kthread [ 392.254200][T11558] 524155 pages RAM [ 392.255730][T11558] 0 pages HighMem/MovableOnly [ 392.257800][T11558] 211540 pages reserved [ 392.259444][T11558] 0 pages cma reserved [ 392.421673][ T57] rtl8150 5-1:1.0: couldn't reset the device [ 392.423927][ T57] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 392.771573][T11558] kexec: Could not allocate control_code_buffer [ 392.865062][ T29] usb 42-1: device descriptor read/8, error -110 [ 393.279766][ T29] usb usb42-port1: unable to enumerate USB device [ 393.678370][ T7105] usb 5-1: USB disconnect, device number 56 [ 393.916798][T11578] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 393.919210][T11578] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 393.940799][T11578] vhci_hcd vhci_hcd.0: Device attached [ 394.221010][ T9] usb 42-1: SetAddress Request (11) to port 0 [ 394.226297][ T9] usb 42-1: new SuperSpeed USB device number 11 using vhci_hcd [ 394.492868][T11580] vhci_hcd: connection reset by peer [ 394.495599][ T5796] vhci_hcd vhci_hcd.2: stop threads [ 394.498092][ T5796] vhci_hcd vhci_hcd.2: release socket [ 394.500537][ T5796] vhci_hcd vhci_hcd.2: disconnect device [ 394.780984][ T5750] usb 8-1: new low-speed USB device number 42 using dummy_hcd [ 394.932394][ T5750] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 394.935155][ T5750] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.938350][ T5750] usb 8-1: config 0 has no interface number 0 [ 394.940330][ T5750] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 394.944157][ T5750] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 394.947709][ T5750] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 394.950563][ T5750] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.955068][ T5750] usb 8-1: config 0 descriptor?? [ 394.957314][T11591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.961701][ T5750] ldusb 8-1:0.55: Interrupt in endpoint not found [ 395.647708][T11600] syzkaller0: entered promiscuous mode [ 395.649586][T11600] syzkaller0: entered allmulticast mode [ 397.537492][ T41] usb 8-1: USB disconnect, device number 42 [ 399.786822][ T9] usb 42-1: device descriptor read/8, error -110 [ 400.183038][ T9] usb usb42-port1: attempt power cycle [ 400.240990][ T41] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 400.410925][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 400.416883][ T41] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.421218][ T41] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.427494][ T41] usb 8-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 400.431431][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.434898][ T41] usb 8-1: Product: syz [ 400.436718][ T41] usb 8-1: Manufacturer: syz [ 400.438780][ T41] usb 8-1: SerialNumber: syz [ 400.657486][T11637] vlan2: entered promiscuous mode [ 400.659403][T11637] macvtap0: entered promiscuous mode [ 400.756837][T11641] ntfs3(nullb0): Primary boot signature is not NTFS. [ 400.760034][T11641] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 400.880468][ T41] gspca_main: ov519-2.14.0 probing 041e:4068 [ 400.892728][ T41] ov519 8-1:1.0: reg_w 5a failed -71 [ 400.964344][T11644] netlink: 'syz.1.1636': attribute type 1 has an invalid length. [ 400.967943][T11644] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1636'. [ 401.171727][ T9] usb usb42-port1: unable to enumerate USB device [ 402.485213][T11659] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1642'. [ 404.909107][ T848] IPVS: starting estimator thread 0... [ 405.000989][T11687] IPVS: using max 29 ests per chain, 69600 per kthread [ 405.623929][T11704] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1652'. [ 408.308429][ T42] audit: type=1326 audit(1785667303.701:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.1.1658" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x0 [ 408.406360][T11731] vhci_hcd vhci_hcd.0: remove, state 4 [ 408.412644][T11731] usb usb38: USB disconnect, device number 1 [ 408.498753][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.503431][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.509018][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.512276][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.514539][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.516841][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.524165][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.526489][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.528915][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.532814][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.535104][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.537492][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.540156][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.542373][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.544211][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.548659][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.550316][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.553395][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.556751][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.559484][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.562425][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.566148][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.568377][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.571204][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.573217][T11731] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 408.607634][T11735] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 408.616137][T11731] vhci_hcd vhci_hcd.0: remove, state 4 [ 408.618638][T11731] usb usb37: USB disconnect, device number 1 [ 408.621051][ T5896] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 408.627044][T11735] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 408.629832][T11735] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 408.637127][T11735] vhci_hcd vhci_hcd.0: Device attached [ 408.656131][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.658344][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.661666][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.664664][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.666656][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.670563][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.672905][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.674603][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.677427][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.683315][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.685030][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.689484][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.692178][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.694482][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.696239][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.700223][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.704187][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.705920][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.709216][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.710957][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.714299][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.724629][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 408.726573][ T5796] vhci_hcd vhci_hcd.0: release socket [ 408.728315][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 408.732175][T11731] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 408.752321][ T5896] usb 5-1: device descriptor read/64, error -71 [ 408.764574][T11732] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 408.785083][T11735] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 408.791834][T11732] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 1 [ 408.794931][T11732] vhci_hcd vhci_hcd.0: created sysfs vhci_hcd.0 [ 408.802283][T11732] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 408.806115][T11732] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 408.809578][T11732] usb usb1: Product: USB/IP Virtual Host Controller [ 408.812142][T11732] usb usb1: Manufacturer: Linux syzkaller vhci_hcd [ 408.814603][T11732] usb usb1: SerialNumber: vhci_hcd.0 [ 408.845098][T11732] hub 1-0:1.0: USB hub found [ 408.853428][T11732] hub 1-0:1.0: 8 ports detected [ 408.917076][T11732] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 408.928122][T11732] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 37 [ 408.934530][ T29] usb 42-1: SetAddress Request (15) to port 0 [ 408.946982][T11732] usb usb37: We don't know the algorithms for LPM for this host, disabling LPM. [ 408.956414][T11732] usb usb37: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 7.02 [ 408.959583][T11732] usb usb37: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 408.962512][T11732] usb usb37: Product: USB/IP Virtual Host Controller [ 408.964848][T11732] usb usb37: Manufacturer: Linux syzkaller vhci_hcd [ 408.967190][T11732] usb usb37: SerialNumber: vhci_hcd.0 [ 408.980114][T11732] hub 37-0:1.0: USB hub found [ 408.984848][T11732] hub 37-0:1.0: 8 ports detected [ 408.997299][ T29] usb 42-1: new SuperSpeed USB device number 15 using vhci_hcd [ 409.011853][ T5896] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 409.257320][T11737] vhci_hcd: connection reset by peer [ 409.260919][ T5896] usb 5-1: device descriptor read/64, error -71 [ 409.267360][ T5840] vhci_hcd vhci_hcd.2: stop threads [ 409.269593][ T5840] vhci_hcd vhci_hcd.2: release socket [ 409.272177][ T5840] vhci_hcd vhci_hcd.2: disconnect device [ 409.377592][T11753] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 409.382131][ T5896] usb usb5-port1: attempt power cycle [ 409.395968][T11753] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 409.398225][T11753] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 409.404887][T11753] vhci_hcd vhci_hcd.0: Device attached [ 409.499427][T11753] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 409.681056][ T57] usb 44-1: SetAddress Request (14) to port 0 [ 409.683791][ T57] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 409.740966][ T5896] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 409.768138][ T5896] usb 5-1: device descriptor read/8, error -71 [ 409.910505][T11759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1664'. [ 409.955445][T11754] vhci_hcd: connection reset by peer [ 409.957956][ T5840] vhci_hcd vhci_hcd.3: stop threads [ 409.962782][ T5840] vhci_hcd vhci_hcd.3: release socket [ 409.966968][ T5840] vhci_hcd vhci_hcd.3: disconnect device [ 410.085833][ T5896] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 410.143237][ T5896] usb 5-1: device descriptor read/8, error -71 [ 410.490958][ T41] ov519 8-1:1.0: Can't determine sensor slave IDs [ 410.493793][ T41] ov519 8-1:1.0: OV519 Config failed [ 410.496300][ T41] ov519 8-1:1.0: probe with driver ov519 failed with error -22 [ 410.500202][ T41] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 410.542762][ T41] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 410.550636][ T41] usb 8-1: USB disconnect, device number 43 [ 410.577344][T10425] udevd[10425]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.216093][ T5896] usb usb5-port1: unable to enumerate USB device [ 411.355975][T11773] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 412.406004][T11762] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 412.408145][T11762] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 412.418488][T11762] vhci_hcd vhci_hcd.0: Device attached [ 412.482854][T11762] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 412.793896][T11795] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 412.796061][T11795] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 412.800302][T11795] vhci_hcd vhci_hcd.0: Device attached [ 413.060977][ T41] usb 37-1: SetAddress Request (2) to port 0 [ 413.062957][ T41] usb 37-1: new SuperSpeed USB device number 2 using vhci_hcd [ 413.345820][T11801] vhci_hcd: connection reset by peer [ 413.348526][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 413.351101][ T5796] vhci_hcd vhci_hcd.0: release socket [ 413.353557][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 413.464331][T11811] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 413.466310][T11811] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 413.468914][T11811] vhci_hcd vhci_hcd.0: Device attached [ 413.923421][T11795] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 413.934669][T11814] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 413.988464][T11789] vhci_hcd: connection closed [ 413.988935][ T5796] vhci_hcd vhci_hcd.2: stop threads [ 413.992818][ T5796] vhci_hcd vhci_hcd.2: release socket [ 413.996233][ T5796] vhci_hcd vhci_hcd.2: disconnect device [ 414.051214][ T29] usb 42-1: device descriptor read/8, error -110 [ 414.415855][T11812] vhci_hcd: connection closed [ 414.416086][ T5796] vhci_hcd vhci_hcd.3: stop threads [ 414.420311][ T5796] vhci_hcd vhci_hcd.3: release socket [ 414.422757][ T5796] vhci_hcd vhci_hcd.3: disconnect device [ 414.472324][ T29] usb usb42-port1: attempt power cycle [ 414.581725][T11825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1679'. [ 414.589678][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1679'. [ 414.668760][T11831] random: crng reseeded on system resumption [ 414.771049][ T57] usb 44-1: device descriptor read/8, error -110 [ 415.051619][ T29] usb usb42-port1: unable to enumerate USB device [ 415.189726][ T57] usb usb44-port1: attempt power cycle [ 416.451927][T11848] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 416.572596][T11859] 9pnet_virtio: no channels available for device syz [ 416.732521][ T57] usb usb44-port1: unable to enumerate USB device [ 417.196377][T11867] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 417.688646][T11872] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 417.691398][T11872] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 417.699417][T11872] vhci_hcd vhci_hcd.0: Device attached [ 417.715720][T11867] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 418.084025][T11876] vhci_hcd: connection closed [ 418.084343][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 418.087726][ T5796] vhci_hcd vhci_hcd.0: release socket [ 418.089732][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 418.131034][ T41] usb 37-1: device descriptor read/8, error -110 [ 418.531899][ T41] usb usb37-port1: attempt power cycle [ 418.876545][T11897] FAULT_INJECTION: forcing a failure. [ 418.876545][T11897] name failslab, interval 1, probability 0, space 0, times 0 [ 418.882833][T11897] CPU: 3 UID: 0 PID: 11897 Comm: syz.0.1694 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.882862][T11897] Tainted: [L]=SOFTLOCKUP [ 418.882867][T11897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 418.882877][T11897] Call Trace: [ 418.882882][T11897] [ 418.882887][T11897] dump_stack_lvl+0x100/0x190 [ 418.882906][T11897] should_fail_ex.cold+0x5/0xa [ 418.882920][T11897] should_failslab+0xc2/0x120 [ 418.882937][T11897] kmem_cache_alloc_noprof+0x91/0x6a0 [ 418.882950][T11897] ? vhost_task_create+0x1db/0x370 [ 418.882968][T11897] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 418.882996][T11897] ? kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 418.883018][T11897] ? alloc_pid+0x1bd/0x1910 [ 418.883036][T11897] alloc_pid+0x1bd/0x1910 [ 418.883053][T11897] ? __pfx_alloc_pid+0x10/0x10 [ 418.883074][T11897] ? __lock_acquire+0x49f/0x1a40 [ 418.883099][T11897] ? fpu_clone+0x226/0x7a0 [ 418.883128][T11897] ? copy_thread+0x729/0xbe0 [ 418.883143][T11897] copy_process+0x5485/0x8030 [ 418.883166][T11897] ? __pfx_copy_process+0x10/0x10 [ 418.883179][T11897] ? __kasan_kmalloc+0xaa/0xb0 [ 418.883196][T11897] ? lockdep_init_map_type+0x5c/0x250 [ 418.883207][T11897] ? lockdep_init_map_type+0x5c/0x250 [ 418.883218][T11897] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 418.883239][T11897] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 418.883259][T11897] vhost_task_create+0x1db/0x370 [ 418.883276][T11897] ? __pfx_vhost_task_create+0x10/0x10 [ 418.883297][T11897] ? __pfx_vhost_task_fn+0x10/0x10 [ 418.883315][T11897] ? __pfx___mutex_lock+0x10/0x10 [ 418.883336][T11897] kvm_mmu_post_init_vm+0x1b3/0x360 [ 418.883352][T11897] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 418.883368][T11897] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 418.883394][T11897] kvm_vcpu_ioctl+0x730/0x1700 [ 418.883412][T11897] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 418.883455][T11897] ? tomoyo_path_number_perm+0x188/0x580 [ 418.883497][T11897] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 418.883514][T11897] ? get_pid_task+0x106/0x250 [ 418.883531][T11897] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 418.883549][T11897] ? do_vfs_ioctl+0x226/0x13e0 [ 418.883567][T11897] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 418.883589][T11897] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 418.883601][T11897] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 418.883615][T11897] ? __fget_files+0x21f/0x3d0 [ 418.883629][T11897] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 418.883641][T11897] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 418.883659][T11897] __do_fast_syscall_32+0xe7/0x970 [ 418.883676][T11897] ? lockdep_hardirqs_on+0x78/0x100 [ 418.883692][T11897] do_fast_syscall_32+0x32/0x70 [ 418.883708][T11897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.883723][T11897] RIP: 0023:0xf7fc4fec [ 418.883739][T11897] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 418.883744][T11897] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 418.883756][T11897] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 418.883763][T11897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 418.883770][T11897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 418.883776][T11897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.883782][T11897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 418.883806][T11897] [ 419.092173][ T41] usb usb37-port1: unable to enumerate USB device [ 421.444670][T11930] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 421.455619][T11930] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 421.458208][T11930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 421.461345][T11930] vhci_hcd vhci_hcd.0: Device attached [ 421.480876][T11930] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 421.750963][T11768] usb 37-1: SetAddress Request (6) to port 0 [ 421.756426][T11768] usb 37-1: new SuperSpeed USB device number 6 using vhci_hcd [ 421.917760][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1703'. [ 421.984684][T11941] siw: device registration error -23 [ 422.086155][T11931] vhci_hcd: connection reset by peer [ 422.120926][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 422.124067][ T5796] vhci_hcd vhci_hcd.0: release socket [ 422.132124][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 425.499514][T11990] 9pnet_virtio: no channels available for device syz [ 425.577445][T11993] 9pnet_virtio: no channels available for device syz [ 426.851732][T11768] usb 37-1: device descriptor read/8, error -110 [ 426.880972][ T5750] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 427.033950][ T5750] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 427.037889][ T5750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.044149][ T5750] usb 7-1: Product: syz [ 427.045467][ T5750] usb 7-1: Manufacturer: syz [ 427.049184][ T5750] usb 7-1: SerialNumber: syz [ 427.261465][T11768] usb usb37-port1: attempt power cycle [ 427.421500][ T5750] rtl8150 7-1:1.0: couldn't reset the device [ 427.424060][ T5750] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 427.448192][ T5750] usb 7-1: USB disconnect, device number 50 [ 427.947747][T11768] usb usb37-port1: unable to enumerate USB device [ 431.480306][T12069] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 432.046093][T12087] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 432.263281][T12087] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 433.358124][T12077] kexec: Could not allocate control_code_buffer [ 434.891682][T12097] kexec: Could not allocate control_code_buffer [ 435.857098][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 436.043433][T12116] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 436.476929][ T29] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 436.596151][T12143] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 436.833389][T12143] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 437.531650][T12121] kexec: Could not allocate control_code_buffer [ 437.735491][T12170] overlay: filesystem on ./file0 is read-only [ 437.817700][T12173] FAULT_INJECTION: forcing a failure. [ 437.817700][T12173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.823557][T12173] CPU: 3 UID: 0 PID: 12173 Comm: syz.2.1758 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.823577][T12173] Tainted: [L]=SOFTLOCKUP [ 437.823581][T12173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 437.823588][T12173] Call Trace: [ 437.823612][T12173] [ 437.823617][T12173] dump_stack_lvl+0x100/0x190 [ 437.823663][T12173] should_fail_ex.cold+0x5/0xa [ 437.823683][T12173] _copy_to_user+0x32/0xd0 [ 437.823706][T12173] simple_read_from_buffer+0xcb/0x170 [ 437.823726][T12173] proc_fail_nth_read+0x1af/0x230 [ 437.823742][T12173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.823758][T12173] ? rw_verify_area+0xce/0x6d0 [ 437.823781][T12173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.823796][T12173] vfs_read+0x1e4/0xb40 [ 437.823808][T12173] ? __pfx_vfs_read+0x10/0x10 [ 437.823817][T12173] ? find_held_lock+0x2b/0x80 [ 437.823838][T12173] ? __fget_files+0x215/0x3d0 [ 437.823852][T12173] ? __fget_files+0x21f/0x3d0 [ 437.823865][T12173] ksys_read+0x12a/0x250 [ 437.823875][T12173] ? __pfx_ksys_read+0x10/0x10 [ 437.823889][T12173] do_int80_emulation+0x14b/0x720 [ 437.823946][T12173] asm_int80_emulation+0x1a/0x20 [ 437.823959][T12173] RIP: 0023:0xf71a73eb [ 437.823969][T12173] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 437.823979][T12173] RSP: 002b:00000000f545d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 437.824009][T12173] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545d5d0 [ 437.824016][T12173] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 437.824023][T12173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.824029][T12173] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 437.824036][T12173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.824050][T12173] [ 438.373702][ T5848] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 439.572847][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.575525][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.533256][T12209] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 446.266959][T12209] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 446.926957][T12216] kexec: Could not allocate control_code_buffer [ 447.704796][T12237] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 447.706935][T12237] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 447.720926][T12237] vhci_hcd vhci_hcd.0: Device attached [ 447.789787][T12242] netlink: zone id is out of range [ 447.791655][T12237] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 447.796098][T12242] netlink: zone id is out of range [ 447.797846][T12242] netlink: zone id is out of range [ 447.799860][T12242] netlink: zone id is out of range [ 447.804324][T12242] netlink: zone id is out of range [ 447.808740][T12242] netlink: zone id is out of range [ 447.810554][T12242] netlink: zone id is out of range [ 447.813770][T12242] netlink: zone id is out of range [ 447.816648][T12242] netlink: zone id is out of range [ 447.823138][T12242] netlink: zone id is out of range [ 448.000998][ T29] usb 44-1: SetAddress Request (18) to port 0 [ 448.014909][ T29] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 448.359924][T12238] vhci_hcd: connection reset by peer [ 448.379644][ T5796] vhci_hcd vhci_hcd.3: stop threads [ 448.381404][ T5796] vhci_hcd vhci_hcd.3: release socket [ 448.383190][ T5796] vhci_hcd vhci_hcd.3: disconnect device [ 449.351003][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 449.514619][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 449.518339][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.521650][ T9] usb 5-1: Product: syz [ 449.522992][ T9] usb 5-1: Manufacturer: syz [ 449.524976][ T9] usb 5-1: SerialNumber: syz [ 450.199138][ T9] rtl8150 5-1:1.0: couldn't reset the device [ 450.203676][ T9] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 450.315034][ T9] usb 5-1: USB disconnect, device number 61 [ 450.996774][T12272] kexec: Could not allocate control_code_buffer [ 455.262998][ T29] usb 44-1: device descriptor read/8, error -110 [ 455.552841][T12293] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 455.679698][ T29] usb usb44-port1: attempt power cycle [ 456.180009][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 456.205441][T12310] FAULT_INJECTION: forcing a failure. [ 456.205441][T12310] name failslab, interval 1, probability 0, space 0, times 0 [ 456.214879][T12310] CPU: 3 UID: 0 PID: 12310 Comm: syz.1.1787 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.214913][T12310] Tainted: [L]=SOFTLOCKUP [ 456.214919][T12310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 456.214930][T12310] Call Trace: [ 456.214940][T12310] [ 456.214948][T12310] dump_stack_lvl+0x100/0x190 [ 456.214976][T12310] should_fail_ex.cold+0x5/0xa [ 456.214996][T12310] should_failslab+0xc2/0x120 [ 456.215037][T12310] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 456.215070][T12310] ? kstrdup_const+0x63/0x80 [ 456.215108][T12310] kstrdup+0x51/0xe0 [ 456.215128][T12310] kstrdup_const+0x63/0x80 [ 456.215146][T12310] kvasprintf_const+0x164/0x1a0 [ 456.215163][T12310] kobject_set_name_vargs+0x5a/0x140 [ 456.215187][T12310] dev_set_name+0xc7/0x100 [ 456.215214][T12310] ? __pfx_dev_set_name+0x10/0x10 [ 456.215234][T12310] ? down_write+0x146/0x1f0 [ 456.215303][T12310] ? __pfx_down_write+0x10/0x10 [ 456.215322][T12310] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 456.215342][T12310] ib_register_device+0x790/0xd20 [ 456.215393][T12310] ? lockdep_init_map_type+0x5c/0x250 [ 456.215411][T12310] siw_newlink+0xb44/0xe70 [ 456.215436][T12310] nldev_newlink+0x3b0/0x620 [ 456.215459][T12310] ? __pfx_nldev_newlink+0x10/0x10 [ 456.215538][T12310] ? __pfx___might_resched+0x10/0x10 [ 456.215577][T12310] ? security_capable+0x80/0x260 [ 456.215596][T12310] ? ns_capable+0xd2/0xf0 [ 456.215618][T12310] ? __pfx_nldev_newlink+0x10/0x10 [ 456.215634][T12310] rdma_nl_rcv_msg+0x392/0x6f0 [ 456.215661][T12310] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 456.215689][T12310] ? __lock_acquire+0x49f/0x1a40 [ 456.215717][T12310] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 456.215747][T12310] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 456.215781][T12310] ? netlink_deliver_tap+0x1ae/0xcc0 [ 456.215828][T12310] netlink_unicast+0x585/0x850 [ 456.215849][T12310] ? __pfx_netlink_unicast+0x10/0x10 [ 456.215872][T12310] netlink_sendmsg+0x8b0/0xda0 [ 456.215894][T12310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.215915][T12310] ? apparmor_socket_sendmsg+0x15b/0x270 [ 456.215937][T12310] ____sys_sendmsg+0xa4d/0xbe0 [ 456.215970][T12310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.215989][T12310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.216015][T12310] ___sys_sendmsg+0x190/0x1e0 [ 456.216035][T12310] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.216063][T12310] ? find_held_lock+0x2b/0x80 [ 456.216103][T12310] __sys_sendmsg+0x160/0x210 [ 456.216134][T12310] ? __pfx___sys_sendmsg+0x10/0x10 [ 456.216162][T12310] ? __pfx_ksys_write+0x10/0x10 [ 456.216182][T12310] __do_fast_syscall_32+0xe7/0x970 [ 456.216207][T12310] ? lockdep_hardirqs_on+0x78/0x100 [ 456.216230][T12310] do_fast_syscall_32+0x32/0x70 [ 456.216252][T12310] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.216273][T12310] RIP: 0023:0xf7fe8fec [ 456.216299][T12310] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 456.216306][T12310] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 456.216322][T12310] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800000c0 [ 456.216332][T12310] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 456.216341][T12310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.216350][T12310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.216359][T12310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.216380][T12310] [ 456.217681][T12310] siw: device registration error -12 [ 456.844837][ T29] usb usb44-port1: unable to enumerate USB device [ 456.876400][T12317] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 456.983062][T12317] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 456.990369][T12317] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 457.050354][T12317] vhci_hcd vhci_hcd.0: Device attached [ 457.371046][T11768] usb 42-1: SetAddress Request (19) to port 0 [ 457.373510][T11768] usb 42-1: new SuperSpeed USB device number 19 using vhci_hcd [ 457.513424][ T41] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 457.542744][T12317] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 457.841295][T12314] kexec: Could not allocate control_code_buffer [ 458.061589][ T41] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 458.071356][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.076605][ T41] usb 5-1: Product: syz [ 458.091593][ T41] usb 5-1: Manufacturer: syz [ 458.094578][ T41] usb 5-1: SerialNumber: syz [ 458.220953][T12319] vhci_hcd: connection reset by peer [ 458.223825][ T5796] vhci_hcd vhci_hcd.2: stop threads [ 458.225844][ T5796] vhci_hcd vhci_hcd.2: release socket [ 458.228270][ T5796] vhci_hcd vhci_hcd.2: disconnect device [ 458.752677][ T41] rtl8150 5-1:1.0: couldn't reset the device [ 458.757020][ T41] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 458.855417][ T41] usb 5-1: USB disconnect, device number 62 [ 459.939540][T12343] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 462.531480][T11768] usb 42-1: device descriptor read/8, error -110 [ 462.723473][T12355] IPVS: set_ctl: invalid protocol: 137 172.20.20.35:20000 [ 462.989020][T11768] usb usb42-port1: attempt power cycle [ 463.078360][T12362] syzkaller0: entered promiscuous mode [ 463.085714][T12362] syzkaller0: entered allmulticast mode [ 463.572032][T11768] usb usb42-port1: unable to enumerate USB device [ 463.955617][ T24] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 464.126974][ T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 464.158570][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.191424][ T24] usb 7-1: config 0 has no interface number 0 [ 464.195384][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 464.235143][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 464.247656][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 464.262097][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.285011][ T24] usb 7-1: config 0 descriptor?? [ 464.291866][T12370] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 464.299779][ T24] ldusb 7-1:0.55: Interrupt in endpoint not found [ 464.306115][T12373] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 466.586618][ T5855] usb 7-1: USB disconnect, device number 51 [ 469.376787][T12392] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 469.380037][T12392] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 469.394937][T12392] vhci_hcd vhci_hcd.0: Device attached [ 469.702265][T12395] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 469.739461][ T29] usb 42-1: SetAddress Request (23) to port 0 [ 469.743071][ T29] usb 42-1: new SuperSpeed USB device number 23 using vhci_hcd [ 469.966839][T12393] vhci_hcd: connection reset by peer [ 469.972573][ T5796] vhci_hcd vhci_hcd.2: stop threads [ 469.986450][ T5796] vhci_hcd vhci_hcd.2: release socket [ 469.990744][ T5796] vhci_hcd vhci_hcd.2: disconnect device [ 474.781322][ T29] usb 42-1: device descriptor read/8, error -110 [ 475.165415][T12402] FAULT_INJECTION: forcing a failure. [ 475.165415][T12402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.172095][ T29] usb usb42-port1: attempt power cycle [ 475.200334][T12402] CPU: 3 UID: 0 PID: 12402 Comm: syz.3.1808 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.200364][T12402] Tainted: [L]=SOFTLOCKUP [ 475.200372][T12402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.200381][T12402] Call Trace: [ 475.200388][T12402] [ 475.200394][T12402] dump_stack_lvl+0x100/0x190 [ 475.200424][T12402] should_fail_ex.cold+0x5/0xa [ 475.200496][T12402] _copy_from_user+0x2e/0xd0 [ 475.200526][T12402] copy_mount_options+0x76/0x190 [ 475.200575][T12402] __ia32_sys_mount+0x1ab/0x310 [ 475.200595][T12402] ? __pfx___ia32_sys_mount+0x10/0x10 [ 475.200616][T12402] ? ksys_write+0x1ac/0x250 [ 475.200633][T12402] ? __pfx_ksys_write+0x10/0x10 [ 475.200656][T12402] __do_fast_syscall_32+0xe7/0x970 [ 475.200682][T12402] ? lockdep_hardirqs_on+0x78/0x100 [ 475.200706][T12402] do_fast_syscall_32+0x32/0x70 [ 475.200728][T12402] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.200751][T12402] RIP: 0023:0xf707efec [ 475.200773][T12402] Code: Unable to access opcode bytes at 0xf707efc2. [ 475.200780][T12402] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 475.200812][T12402] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 475.200827][T12402] RDX: 0000000080004500 RSI: 0000000000000000 RDI: 0000000080000100 [ 475.200839][T12402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.200848][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.200858][T12402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.200882][T12402] [ 475.256863][T12402] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 475.830281][ T29] usb usb42-port1: unable to enumerate USB device [ 476.283475][ T5855] usb 8-1: new low-speed USB device number 44 using dummy_hcd [ 476.453928][ T5855] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 476.457242][ T5855] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.463551][ T5855] usb 8-1: config 0 has no interface number 0 [ 476.466972][ T5855] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 476.483247][ T5855] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 476.489130][ T5855] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 476.501759][ T5855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.508465][ T5855] usb 8-1: config 0 descriptor?? [ 476.539256][T12420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 476.546650][ T5855] ldusb 8-1:0.55: Interrupt in endpoint not found [ 477.893917][ T5107] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 478.601578][ T29] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 478.674785][T11768] usb 8-1: USB disconnect, device number 44 [ 478.762917][ T29] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 478.774140][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.782797][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.810565][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 478.884555][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.899778][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.908513][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 478.930707][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.948092][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.980334][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 478.995171][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 479.011800][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 479.017715][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 479.027985][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 479.034837][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 479.050356][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 479.067806][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 479.078494][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 479.091281][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 479.115946][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 479.129874][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 479.133798][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 479.155449][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 479.163731][ T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 479.168159][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 479.183642][ T29] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 479.188885][ T29] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 479.195373][ T29] usb 7-1: Product: syz [ 479.205661][ T29] usb 7-1: Manufacturer: syz [ 479.208549][ T29] usb 7-1: SerialNumber: syz [ 479.217236][ T29] usb 7-1: config 0 descriptor?? [ 479.257248][ T29] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 480.245640][T12437] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 480.504164][T12442] syzkaller0: entered promiscuous mode [ 480.518095][T12442] syzkaller0: entered allmulticast mode [ 481.337202][T12455] FAULT_INJECTION: forcing a failure. [ 481.337202][T12455] name failslab, interval 1, probability 0, space 0, times 0 [ 481.353025][T12455] CPU: 0 UID: 0 PID: 12455 Comm: syz.3.1821 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.353090][T12455] Tainted: [L]=SOFTLOCKUP [ 481.353097][T12455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 481.353109][T12455] Call Trace: [ 481.353117][T12455] [ 481.353125][T12455] dump_stack_lvl+0x100/0x190 [ 481.353154][T12455] should_fail_ex.cold+0x5/0xa [ 481.353178][T12455] should_failslab+0xc2/0x120 [ 481.353205][T12455] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 481.353231][T12455] ? __d_alloc+0x35/0xa50 [ 481.353256][T12455] __d_alloc+0x35/0xa50 [ 481.353280][T12455] d_alloc+0x4a/0x1e0 [ 481.353302][T12455] lookup_one_qstr_excl+0x171/0x250 [ 481.353333][T12455] ? mnt_get_write_access+0x52/0x2f0 [ 481.353360][T12455] __start_renaming+0x16d/0x520 [ 481.353389][T12455] filename_renameat2+0x538/0xa60 [ 481.353421][T12455] ? __pfx_filename_renameat2+0x10/0x10 [ 481.353450][T12455] ? __might_fault+0xc5/0x140 [ 481.353486][T12455] ? do_getname+0x191/0x390 [ 481.353511][T12455] __ia32_sys_rename+0x80/0xb0 [ 481.353534][T12455] __do_fast_syscall_32+0xe7/0x970 [ 481.353561][T12455] ? lockdep_hardirqs_on+0x78/0x100 [ 481.353586][T12455] do_fast_syscall_32+0x32/0x70 [ 481.353611][T12455] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 481.353636][T12455] RIP: 0023:0xf707efec [ 481.353659][T12455] Code: Unable to access opcode bytes at 0xf707efc2. [ 481.353668][T12455] RSP: 002b:00000000f544c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000026 [ 481.353688][T12455] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000080000140 [ 481.353699][T12455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 481.353709][T12455] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.353718][T12455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.353729][T12455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.353754][T12455] [ 482.909348][ T5848] usb 7-1: USB disconnect, device number 52 [ 482.929353][ T5848] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 483.514130][ T5847] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 483.731867][ T5847] usb 6-1: Using ep0 maxpacket: 16 [ 483.783267][ T5847] usb 6-1: config 0 has an invalid interface number: 87 but max is 0 [ 483.793477][ T5847] usb 6-1: config 0 has no interface number 0 [ 483.796178][ T5847] usb 6-1: New USB device found, idVendor=19d2, idProduct=0010, bcdDevice=77.c8 [ 483.821284][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.864192][ T5847] usb 6-1: config 0 descriptor?? [ 484.777286][ T5847] option 6-1:0.87: GSM modem (1-port) converter detected [ 484.799814][ T5847] usb 6-1: USB disconnect, device number 10 [ 484.816541][ T5847] option 6-1:0.87: device disconnected [ 486.211494][T11768] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 486.465623][T11768] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 486.468913][T11768] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.474287][T11768] usb 6-1: config 0 has no interface number 0 [ 486.480674][T11768] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 486.489493][T11768] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 486.509332][T11768] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 486.514485][T11768] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.521791][T11768] usb 6-1: config 0 descriptor?? [ 486.526963][T12473] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 486.537064][T11768] ldusb 6-1:0.55: Interrupt in endpoint not found [ 488.769296][T11768] usb 6-1: USB disconnect, device number 11 [ 493.745265][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'. [ 493.876532][ T5855] usb 8-1: new low-speed USB device number 45 using dummy_hcd [ 494.224962][ T5855] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 494.228972][ T5855] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.288969][ T5855] usb 8-1: config 0 has no interface number 0 [ 494.299382][ T5855] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 494.459415][ T5855] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 494.464282][ T5855] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 494.480166][ T5855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.500510][ T5855] usb 8-1: config 0 descriptor?? [ 494.518426][T12494] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 494.527613][ T5855] ldusb 8-1:0.55: Interrupt in endpoint not found [ 495.251162][T12516] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 495.255850][T12516] xt_TPROXY: Can be used only with -p tcp or -p udp [ 495.569938][T12518] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 495.573116][T12518] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 495.595528][T12518] vhci_hcd vhci_hcd.0: Device attached [ 495.764910][T12527] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 495.862419][ T9] usb 40-1: SetAddress Request (10) to port 0 [ 495.922266][ T9] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 495.941941][T12526] vhci_hcd: connection closed [ 495.943288][T12528] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 495.954526][ T5796] vhci_hcd vhci_hcd.1: stop threads [ 495.956279][ T5796] vhci_hcd vhci_hcd.1: release socket [ 495.958205][ T5796] vhci_hcd vhci_hcd.1: disconnect device [ 496.311325][ T5848] usb 8-1: USB disconnect, device number 45 [ 496.497827][T12537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 496.531105][T12537] IPv6: NLM_F_CREATE should be set when creating new route [ 496.648691][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'. [ 496.956803][T12545] syzkaller0: entered promiscuous mode [ 496.961783][T12545] syzkaller0: entered allmulticast mode [ 498.029195][T12558] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 498.031733][T12558] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 498.051608][T12558] vhci_hcd vhci_hcd.0: Device attached [ 498.334460][T12558] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 498.354920][ T29] usb 37-1: SetAddress Request (10) to port 0 [ 498.360755][ T29] usb 37-1: new SuperSpeed USB device number 10 using vhci_hcd [ 500.581238][T12559] vhci_hcd: connection reset by peer [ 500.585493][T11212] vhci_hcd vhci_hcd.0: stop threads [ 500.588179][T11212] vhci_hcd vhci_hcd.0: release socket [ 500.625349][T11212] vhci_hcd vhci_hcd.0: disconnect device [ 501.025965][ T5855] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 501.032762][ T9] usb 40-1: device descriptor read/8, error -110 [ 501.061824][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.099807][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.263605][ T5855] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 501.269206][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.274157][ T5855] usb 7-1: Product: syz [ 501.276453][ T5855] usb 7-1: Manufacturer: syz [ 501.285531][ T5855] usb 7-1: SerialNumber: syz [ 501.567733][ T9] usb usb40-port1: attempt power cycle [ 502.151959][ T9] usb usb40-port1: unable to enumerate USB device [ 502.451856][ T5855] rtl8150 7-1:1.0: couldn't reset the device [ 502.461047][ T5855] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 503.547879][ T29] usb 37-1: device descriptor read/8, error -110 [ 503.996651][ T29] usb usb37-port1: attempt power cycle [ 504.669397][ T29] usb usb37-port1: unable to enumerate USB device [ 509.100413][ T5896] usb 7-1: USB disconnect, device number 53 [ 509.261728][T12589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1851'. [ 509.267444][T12589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1851'. [ 509.327462][T12590] overlayfs: failed to resolve './file2': -2 [ 509.662264][T12589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1851'. [ 509.666222][T12589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1851'. [ 510.077121][T12589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1851'. [ 510.119773][T12589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1851'. [ 510.374088][T12609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1857'. [ 511.289650][T12618] syzkaller0: entered promiscuous mode [ 511.306100][T12618] syzkaller0: entered allmulticast mode [ 512.966646][ T5896] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 513.171209][ T5896] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 513.176470][ T5896] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 513.214452][ T5896] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 513.244260][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.247962][ T5896] usb 5-1: Product: syz [ 513.277984][ T5896] usb 5-1: Manufacturer: syz [ 513.282368][ T5896] usb 5-1: SerialNumber: syz [ 513.341633][ T5896] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 513.547296][ T5896] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 513.697115][ T5896] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 516.308381][T12637] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 516.327746][T11768] usb 5-1: USB disconnect, device number 63 [ 516.342294][T11768] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 516.380787][T11768] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 516.390050][T11768] ti_usb_3410_5052 5-1:2.0: device disconnected [ 519.031413][T12668] overlayfs: failed to resolve './file0': -2 [ 523.614005][ T5107] Bluetooth: hci4: command 0x0406 tx timeout [ 525.337704][ T5755] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 525.779272][ T5750] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 526.067586][ T5750] usb 8-1: Using ep0 maxpacket: 32 [ 526.319000][ T5750] usb 8-1: config index 0 descriptor too short (expected 12315, got 27) [ 526.348055][ T5750] usb 8-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 526.351844][ T5750] usb 8-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 526.368969][ T5750] usb 8-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 526.550140][ T5750] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 526.553593][ T5750] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 526.556583][ T5750] usb 8-1: Product: syz [ 526.564053][ T5750] usb 8-1: Manufacturer: syz [ 526.638729][ T5750] usb 8-1: SerialNumber: syz [ 526.918882][ T5750] usb 8-1: USB disconnect, device number 46 [ 527.367382][ T5755] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 527.411350][ T5750] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 527.596795][ T5750] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 527.658485][ T5750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.676649][ T5750] usb 7-1: Product: syz [ 527.679238][ T5750] usb 7-1: Manufacturer: syz [ 527.693285][ T5750] usb 7-1: SerialNumber: syz [ 528.151570][ T5750] rtl8150 7-1:1.0: couldn't reset the device [ 528.155375][ T5750] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 528.169948][ T5750] usb 7-1: USB disconnect, device number 54 [ 530.301588][T12747] syzkaller0: entered promiscuous mode [ 530.321615][T12747] syzkaller0: entered allmulticast mode [ 530.359971][T12752] FAULT_INJECTION: forcing a failure. [ 530.359971][T12752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.364397][T12747] fuse: fd is not a fuse device [ 530.365261][T12752] CPU: 2 UID: 0 PID: 12752 Comm: syz.1.1893 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.365287][T12752] Tainted: [L]=SOFTLOCKUP [ 530.365293][T12752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 530.365302][T12752] Call Trace: [ 530.365308][T12752] [ 530.365315][T12752] dump_stack_lvl+0x100/0x190 [ 530.365341][T12752] should_fail_ex.cold+0x5/0xa [ 530.365359][T12752] _copy_from_user+0x2e/0xd0 [ 530.365384][T12752] memdup_user+0x6b/0xe0 [ 530.365404][T12752] strndup_user+0x78/0xe0 [ 530.365424][T12752] __ia32_sys_mount+0x136/0x310 [ 530.365444][T12752] ? __pfx___ia32_sys_mount+0x10/0x10 [ 530.365462][T12752] ? ksys_write+0x1ac/0x250 [ 530.365477][T12752] ? __pfx_ksys_write+0x10/0x10 [ 530.365494][T12752] __do_fast_syscall_32+0xe7/0x970 [ 530.365515][T12752] ? lockdep_hardirqs_on+0x78/0x100 [ 530.365537][T12752] do_fast_syscall_32+0x32/0x70 [ 530.365559][T12752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 530.365580][T12752] RIP: 0023:0xf7fe8fec [ 530.365601][T12752] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 530.365609][T12752] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 530.365625][T12752] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 530.365635][T12752] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000080000440 [ 530.365644][T12752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 530.365654][T12752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.365664][T12752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 530.365685][T12752] [ 530.457550][T12754] misc userio: The device must be registered before sending interrupts [ 531.550001][T12756] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.570197][T12756] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.159804][T12756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.198050][T12756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.140486][T12756] vlan2: left promiscuous mode [ 533.144877][T12756] macvtap0: left promiscuous mode [ 533.365204][T11212] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.369582][T11212] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.400299][T11212] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.461060][T11212] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.787011][T12813] UDC core: g1: couldn't find an available UDC or it's busy [ 536.558357][T12828] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 536.729844][T12832] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 540.480223][ T5755] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 540.691054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 540.767440][T12862] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 540.935017][T12866] fuse: Bad value for 'user_id' [ 540.937450][T12866] fuse: Bad value for 'user_id' [ 541.207551][T12866] Process accounting resumed [ 541.768411][ T24] usb 8-1: new low-speed USB device number 47 using dummy_hcd [ 541.862982][T12883] overlayfs: upper fs does not support file handles, falling back to index=off. [ 541.893971][T12883] evm: overlay not supported [ 541.922961][T12884] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 542.008876][T12884] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 542.011785][T12884] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 542.052671][ T24] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 542.055636][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.060281][ T24] usb 8-1: config 0 has no interface number 0 [ 542.067084][T12884] vhci_hcd vhci_hcd.0: Device attached [ 542.077426][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 542.261074][ T24] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 542.303544][T12888] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 542.329010][ T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 542.333243][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.353088][ T24] usb 8-1: config 0 descriptor?? [ 542.366395][T12872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 542.381445][T11768] usb 37-1: SetAddress Request (14) to port 0 [ 542.394794][T11768] usb 37-1: new SuperSpeed USB device number 14 using vhci_hcd [ 542.395512][ T24] ldusb 8-1:0.55: Interrupt in endpoint not found [ 543.021039][T12886] vhci_hcd: connection reset by peer [ 543.024031][T11212] vhci_hcd vhci_hcd.0: stop threads [ 543.026451][T11212] vhci_hcd vhci_hcd.0: release socket [ 543.031503][T11212] vhci_hcd vhci_hcd.0: disconnect device [ 543.067595][ T5755] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 543.908492][T12904] FAULT_INJECTION: forcing a failure. [ 543.908492][T12904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.913942][T12904] CPU: 1 UID: 0 PID: 12904 Comm: syz.0.1925 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.913975][T12904] Tainted: [L]=SOFTLOCKUP [ 543.913982][T12904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 543.913992][T12904] Call Trace: [ 543.914000][T12904] [ 543.914008][T12904] dump_stack_lvl+0x100/0x190 [ 543.914037][T12904] should_fail_ex.cold+0x5/0xa [ 543.914066][T12904] _copy_to_user+0x32/0xd0 [ 543.914098][T12904] simple_read_from_buffer+0xcb/0x170 [ 543.914132][T12904] proc_fail_nth_read+0x1af/0x230 [ 543.914159][T12904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 543.914185][T12904] ? rw_verify_area+0xce/0x6d0 [ 543.914212][T12904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 543.914237][T12904] vfs_read+0x1e4/0xb40 [ 543.914257][T12904] ? __pfx_vfs_read+0x10/0x10 [ 543.914294][T12904] ? find_held_lock+0x2b/0x80 [ 543.914317][T12904] ? __fget_files+0x215/0x3d0 [ 543.914339][T12904] ? __fget_files+0x21f/0x3d0 [ 543.914364][T12904] ksys_read+0x12a/0x250 [ 543.914382][T12904] ? __pfx_ksys_read+0x10/0x10 [ 543.914406][T12904] do_int80_emulation+0x14b/0x720 [ 543.914439][T12904] asm_int80_emulation+0x1a/0x20 [ 543.914459][T12904] RIP: 0023:0xf71c73eb [ 543.914476][T12904] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 543.914494][T12904] RSP: 002b:00000000f54004bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 543.914515][T12904] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f54005d0 [ 543.914527][T12904] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 543.914537][T12904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 543.914549][T12904] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 543.914559][T12904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 543.914582][T12904] [ 544.353102][T12911] 9p: Bad value for 'wfdno' [ 544.359388][ T5750] usb 8-1: USB disconnect, device number 47 [ 544.541106][ T24] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 544.734876][ T24] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 544.741110][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.744798][ T24] usb 7-1: Product: syz [ 544.746769][ T24] usb 7-1: Manufacturer: syz [ 544.751738][ T24] usb 7-1: SerialNumber: syz [ 544.911167][ T5750] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 545.111807][ T5750] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 545.118329][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.129582][ T5750] usb 5-1: Product: syz [ 545.133658][ T5750] usb 5-1: Manufacturer: syz [ 545.136851][ T5750] usb 5-1: SerialNumber: syz [ 545.169701][ T24] rtl8150 7-1:1.0: couldn't reset the device [ 545.172391][ T24] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 545.206555][ T24] usb 7-1: USB disconnect, device number 55 [ 545.735001][ T5750] rtl8150 5-1:1.0: couldn't reset the device [ 545.739786][ T5750] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 545.765967][ T5750] usb 5-1: USB disconnect, device number 64 [ 545.948767][T12931] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 546.008339][T12931] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 546.013478][T12931] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 546.018184][T12931] vhci_hcd vhci_hcd.0: Device attached [ 546.367835][ T5831] usb 44-1: SetAddress Request (22) to port 0 [ 546.371948][ T5831] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 546.845748][T12937] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 547.121227][T12933] vhci_hcd: connection reset by peer [ 547.124134][ T5796] vhci_hcd vhci_hcd.3: stop threads [ 547.128046][ T5796] vhci_hcd vhci_hcd.3: release socket [ 547.131138][ T5796] vhci_hcd vhci_hcd.3: disconnect device [ 547.405283][ T5755] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 547.501130][T11768] usb 37-1: device descriptor read/8, error -110 [ 547.718328][T12959] binder: 12957:12959 unknown command 0 [ 547.722046][T12959] binder: 12957:12959 ioctl c0306201 80000240 returned -22 [ 547.776262][ T5896] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 547.901896][T11768] usb usb37-port1: attempt power cycle [ 547.948291][ T5896] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 547.951948][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.979527][ T5896] usb 5-1: config 0 has no interface number 0 [ 547.999810][ T5896] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 548.004793][ T5896] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 548.010669][ T5896] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 548.016695][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.024933][ T5896] usb 5-1: config 0 descriptor?? [ 548.038778][T12953] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 548.045889][ T5896] ldusb 5-1:0.55: Interrupt in endpoint not found [ 548.121841][ T10] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 548.338745][ T10] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 548.353194][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.366541][ T10] usb 8-1: Product: syz [ 548.380536][ T10] usb 8-1: Manufacturer: syz [ 548.382905][ T10] usb 8-1: SerialNumber: syz [ 548.492069][T11768] usb usb37-port1: unable to enumerate USB device [ 549.122956][ T10] rtl8150 8-1:1.0: couldn't reset the device [ 549.126120][ T10] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 549.348029][ T10] usb 8-1: USB disconnect, device number 48 [ 550.424033][ T29] usb 5-1: USB disconnect, device number 65 [ 551.411084][ T5831] usb 44-1: device descriptor read/8, error -110 [ 551.860583][ T5831] usb usb44-port1: attempt power cycle [ 552.341206][T13020] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 552.343884][T13020] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 552.369912][T13020] vhci_hcd vhci_hcd.0: Device attached [ 552.379024][ T7865] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 552.537035][ T5831] usb 44-1: SetAddress Request (25) to port 0 [ 552.542889][ T5831] usb 44-1: new SuperSpeed USB device number 25 using vhci_hcd [ 552.624528][ T7865] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 552.815134][ T7865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.832862][ T7865] usb 5-1: Product: syz [ 552.837078][ T7865] usb 5-1: Manufacturer: syz [ 552.839294][ T7865] usb 5-1: SerialNumber: syz [ 552.912290][T13022] vhci_hcd: connection reset by peer [ 552.919148][ T5796] vhci_hcd vhci_hcd.3: stop threads [ 552.922108][ T5796] vhci_hcd vhci_hcd.3: release socket [ 552.925239][ T5796] vhci_hcd vhci_hcd.3: disconnect device [ 553.240553][ T7865] rtl8150 5-1:1.0: couldn't reset the device [ 553.243475][ T7865] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 553.267449][ T7865] usb 5-1: USB disconnect, device number 66 [ 553.275023][ T5755] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 553.390965][ T55] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 553.577259][ T55] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 553.589014][ T55] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.601709][ T55] usb 7-1: config 0 has no interface number 0 [ 553.605378][ T55] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 553.610778][ T55] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 553.635018][ T55] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 553.639207][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.653211][ T55] usb 7-1: config 0 descriptor?? [ 553.657483][T13037] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 553.664371][ T55] ldusb 7-1:0.55: Interrupt in endpoint not found [ 553.990432][T13046] xt_policy: output policy not valid in PREROUTING and INPUT [ 556.326304][ T10] usb 7-1: USB disconnect, device number 56 [ 556.343356][ T9] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 557.201412][ T9] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 557.205248][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.235560][ T9] usb 8-1: Product: syz [ 557.239870][ T9] usb 8-1: Manufacturer: syz [ 557.242074][ T9] usb 8-1: SerialNumber: syz [ 557.664707][ T5831] usb 44-1: device descriptor read/8, error -110 [ 557.837723][ T5831] usb usb44-port1: unable to enumerate USB device [ 558.422440][ T9] rtl8150 8-1:1.0: couldn't reset the device [ 558.427262][ T9] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 558.442420][ T9] usb 8-1: USB disconnect, device number 49 [ 558.548320][T13092] net_ratelimit: 9 callbacks suppressed [ 558.548344][T13092] netlink: set zone limit has 4 unknown bytes [ 559.617252][T13115] syzkaller0: entered promiscuous mode [ 559.649291][T13115] syzkaller0: entered allmulticast mode [ 560.115192][T13120] FAULT_INJECTION: forcing a failure. [ 560.115192][T13120] name failslab, interval 1, probability 0, space 0, times 0 [ 560.171730][T13120] CPU: 1 UID: 0 PID: 13120 Comm: syz.3.1985 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.171764][T13120] Tainted: [L]=SOFTLOCKUP [ 560.171770][T13120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 560.171779][T13120] Call Trace: [ 560.171787][T13120] [ 560.171794][T13120] dump_stack_lvl+0x100/0x190 [ 560.171820][T13120] should_fail_ex.cold+0x5/0xa [ 560.171840][T13120] should_failslab+0xc2/0x120 [ 560.171864][T13120] __kvmalloc_node_noprof+0x116/0x970 [ 560.171888][T13120] ? bucket_table_alloc.isra.0+0x88/0x460 [ 560.171914][T13120] bucket_table_alloc.isra.0+0x88/0x460 [ 560.171939][T13120] __rhashtable_init_noprof+0x43a/0x890 [ 560.171965][T13120] __rhltable_init_noprof+0x28/0x70 [ 560.171986][T13120] ? wiphy_new_nm+0x19d7/0x21a0 [ 560.172065][T13120] sta_info_init+0x6d/0x160 [ 560.172100][T13120] ieee80211_alloc_hw_nm+0x86b/0x22e0 [ 560.172127][T13120] ? __local_bh_enable_ip+0x9e/0x120 [ 560.172149][T13120] mac80211_hwsim_new_radio+0x1de/0x64c0 [ 560.172209][T13120] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 560.172245][T13120] ? __nla_validate_parse+0x1e7/0x28b0 [ 560.172264][T13120] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 560.172295][T13120] hwsim_new_radio_nl+0xc6b/0x13f0 [ 560.172321][T13120] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 560.172352][T13120] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 560.172380][T13120] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 560.172409][T13120] genl_family_rcv_msg_doit+0x214/0x300 [ 560.172435][T13120] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 560.172457][T13120] ? genl_get_cmd+0x3e7/0x760 [ 560.172484][T13120] ? bpf_lsm_capable+0x9/0x10 [ 560.172512][T13120] ? security_capable+0x80/0x260 [ 560.172533][T13120] ? ns_capable+0xd2/0xf0 [ 560.172553][T13120] genl_rcv_msg+0x560/0x800 [ 560.172578][T13120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 560.172601][T13120] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 560.172634][T13120] netlink_rcv_skb+0x159/0x420 [ 560.172654][T13120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 560.172678][T13120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 560.172707][T13120] ? netlink_deliver_tap+0x1ae/0xcc0 [ 560.172754][T13120] genl_rcv+0x28/0x40 [ 560.172776][T13120] netlink_unicast+0x585/0x850 [ 560.172800][T13120] ? __pfx_netlink_unicast+0x10/0x10 [ 560.172827][T13120] netlink_sendmsg+0x8b0/0xda0 [ 560.172851][T13120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.172885][T13120] ? apparmor_socket_sendmsg+0x15b/0x270 [ 560.172908][T13120] ____sys_sendmsg+0xa4d/0xbe0 [ 560.172929][T13120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.172951][T13120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 560.172980][T13120] ___sys_sendmsg+0x190/0x1e0 [ 560.173002][T13120] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.173032][T13120] ? find_held_lock+0x2b/0x80 [ 560.173075][T13120] __sys_sendmsg+0x160/0x210 [ 560.173101][T13120] ? __pfx___sys_sendmsg+0x10/0x10 [ 560.173163][T13120] ? __pfx_ksys_write+0x10/0x10 [ 560.173185][T13120] __do_fast_syscall_32+0xe7/0x970 [ 560.173212][T13120] ? lockdep_hardirqs_on+0x78/0x100 [ 560.173237][T13120] do_fast_syscall_32+0x32/0x70 [ 560.173261][T13120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 560.173284][T13120] RIP: 0023:0xf707efec [ 560.173308][T13120] Code: Unable to access opcode bytes at 0xf707efc2. [ 560.173317][T13120] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 560.173335][T13120] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 560.173346][T13120] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 560.173356][T13120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 560.173365][T13120] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 560.173375][T13120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 560.173398][T13120] [ 560.936010][T13122] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 562.468772][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.480456][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.736316][T13177] pim6reg99999999: entered allmulticast mode [ 563.987096][ T5855] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 564.165061][ T5855] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 564.178488][ T5855] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 564.230598][ T5855] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 564.261600][ T5855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.275275][ T5855] usb 8-1: Product: syz [ 564.291423][ T5855] usb 8-1: Manufacturer: syz [ 564.308744][ T5855] usb 8-1: SerialNumber: syz [ 564.362721][ T5855] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 564.387578][ T5855] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 564.429435][ T5855] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 564.552144][T13184] FAULT_INJECTION: forcing a failure. [ 564.552144][T13184] name failslab, interval 1, probability 0, space 0, times 0 [ 564.569654][T13184] CPU: 3 UID: 0 PID: 13184 Comm: syz.0.2006 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.569685][T13184] Tainted: [L]=SOFTLOCKUP [ 564.569691][T13184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 564.569701][T13184] Call Trace: [ 564.569708][T13184] [ 564.569715][T13184] dump_stack_lvl+0x100/0x190 [ 564.569743][T13184] should_fail_ex.cold+0x5/0xa [ 564.569765][T13184] should_failslab+0xc2/0x120 [ 564.569789][T13184] __kmalloc_cache_noprof+0x91/0x6c0 [ 564.569809][T13184] ? xfrm_policy_alloc+0x9f/0x420 [ 564.569859][T13184] xfrm_policy_alloc+0x9f/0x420 [ 564.569881][T13184] pfkey_spdadd+0x32e/0x15d0 [ 564.569921][T13184] ? __pfx_pfkey_spdadd+0x10/0x10 [ 564.569944][T13184] ? kfree_skbmem+0x19f/0x210 [ 564.569963][T13184] ? sk_skb_reason_drop+0x114/0x1b0 [ 564.569991][T13184] ? pfkey_broadcast+0x28c/0x420 [ 564.570017][T13184] ? __pfx_pfkey_spdadd+0x10/0x10 [ 564.570041][T13184] pfkey_process+0x5c3/0x810 [ 564.570068][T13184] ? __pfx_pfkey_process+0x10/0x10 [ 564.570120][T13184] ? pfkey_sendmsg+0x41a/0x840 [ 564.570160][T13184] ? __pfx___alloc_skb+0x10/0x10 [ 564.570189][T13184] pfkey_sendmsg+0x428/0x840 [ 564.570219][T13184] ____sys_sendmsg+0xa4d/0xbe0 [ 564.570237][T13184] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 564.570262][T13184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.570290][T13184] ___sys_sendmsg+0x190/0x1e0 [ 564.570310][T13184] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.570341][T13184] ? find_held_lock+0x2b/0x80 [ 564.570377][T13184] __sys_sendmsg+0x160/0x210 [ 564.570402][T13184] ? __pfx___sys_sendmsg+0x10/0x10 [ 564.570433][T13184] ? __pfx_ksys_write+0x10/0x10 [ 564.570456][T13184] __do_fast_syscall_32+0xe7/0x970 [ 564.570483][T13184] ? lockdep_hardirqs_on+0x78/0x100 [ 564.570507][T13184] do_fast_syscall_32+0x32/0x70 [ 564.570530][T13184] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 564.570553][T13184] RIP: 0023:0xf7fc4fec [ 564.570578][T13184] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 564.570585][T13184] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 564.570603][T13184] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 564.570613][T13184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.570623][T13184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.570633][T13184] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 564.570643][T13184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.570666][T13184] [ 564.610081][T13177] 9pnet_virtio: no channels available for device c::: [ 564.711838][T13186] syzkaller0: entered promiscuous mode [ 564.826345][T13186] syzkaller0: entered allmulticast mode [ 566.783145][ T5107] Bluetooth: hci3: command 0x1003 tx timeout [ 566.791797][ T5755] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 566.977715][ T9] usb 8-1: USB disconnect, device number 50 [ 567.045344][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 567.283400][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 567.329961][ T9] ti_usb_3410_5052 8-1:2.0: device disconnected [ 567.791462][ T9] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 567.807028][T11768] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 567.969412][T11768] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 567.980774][T11768] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.025592][T11768] usb 6-1: Product: syz [ 568.030554][T11768] usb 6-1: Manufacturer: syz [ 568.052351][T11768] usb 6-1: SerialNumber: syz [ 568.098170][T13219] syzkaller0: entered promiscuous mode [ 568.120390][T13219] syzkaller0: entered allmulticast mode [ 568.132168][ T9] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 568.144781][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.155037][ T9] usb 8-1: Product: syz [ 568.174539][ T9] usb 8-1: Manufacturer: syz [ 568.177709][ T9] usb 8-1: SerialNumber: syz [ 569.706383][ T9] rtl8150 8-1:1.0: couldn't reset the device [ 569.742934][ T9] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 571.015921][T11768] rtl8150 6-1:1.0: couldn't reset the device [ 571.020597][T11768] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 571.031513][T11768] usb 6-1: USB disconnect, device number 12 [ 571.171007][ T5755] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 579.875453][ T5855] usb 8-1: USB disconnect, device number 51 [ 580.511793][ T42] audit: type=1326 audit(1785667475.911:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13264 comm="syz.1.2029" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x0 [ 581.475847][T11768] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 581.646178][T11768] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 581.661204][T11768] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.669814][T11768] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 581.678731][T11768] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.687863][T11768] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.703775][T11768] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 581.715560][T11768] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 581.727229][T11768] usb 5-1: Product: syz [ 581.747041][T11768] usb 5-1: Manufacturer: syz [ 581.766007][T11768] cdc_wdm 5-1:1.0: skipping garbage [ 581.776632][T11768] cdc_wdm 5-1:1.0: skipping garbage [ 581.793360][T11768] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 581.801246][T11768] cdc_wdm 5-1:1.0: Unknown control protocol [ 581.951305][ T5896] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 581.983447][T11768] usb 5-1: USB disconnect, device number 67 [ 581.999419][T13276] cdc_wdm 5-1:1.0: Error submitting int urb - -19 [ 582.158944][ T5896] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 582.163277][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.215758][ T5896] usb 6-1: Product: syz [ 582.236390][ T5896] usb 6-1: Manufacturer: syz [ 582.238529][ T5896] usb 6-1: SerialNumber: syz [ 582.968963][ T5896] rtl8150 6-1:1.0: couldn't reset the device [ 582.994215][ T5896] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 583.061641][T13302] binder: 13301:13302 ioctl 4018620d 0 returned -22 [ 583.228466][ T5896] usb 6-1: USB disconnect, device number 13 [ 583.686348][ T5896] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 583.867750][ T5896] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 583.874725][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.880564][ T5896] usb 5-1: Product: syz [ 583.883964][ T5896] usb 5-1: Manufacturer: syz [ 583.888282][ T5896] usb 5-1: SerialNumber: syz [ 583.962582][ T5755] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 584.374855][ T5896] rtl8150 5-1:1.0: couldn't reset the device [ 584.378222][ T5896] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 584.400291][ T5896] usb 5-1: USB disconnect, device number 68 [ 585.922285][ T5896] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 586.103037][ T5896] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 586.110702][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.144511][ T5896] usb 7-1: Product: syz [ 586.146219][ T5896] usb 7-1: Manufacturer: syz [ 586.156531][ T5896] usb 7-1: SerialNumber: syz [ 586.801659][T13341] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 586.818474][T13350] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 586.841900][ T5896] rtl8150 7-1:1.0: couldn't reset the device [ 586.871331][ T5896] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 586.931273][ T5896] usb 7-1: USB disconnect, device number 57 [ 588.751053][ T7865] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 588.914327][ T7865] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 588.959051][ T7865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.962833][ T7865] usb 5-1: Product: syz [ 588.965475][ T7865] usb 5-1: Manufacturer: syz [ 588.967717][ T7865] usb 5-1: SerialNumber: syz [ 589.444268][T13372] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 589.603229][ T7865] rtl8150 5-1:1.0: couldn't reset the device [ 589.608328][ T7865] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 589.640490][ T7865] usb 5-1: USB disconnect, device number 69 [ 589.656602][T13374] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 589.668911][T13374] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 589.673317][T13374] vhci_hcd vhci_hcd.0: Device attached [ 589.971689][ T29] usb 44-1: SetAddress Request (26) to port 0 [ 590.078544][ T29] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 590.197554][T13372] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 590.854735][T13386] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 590.857026][T13386] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 590.866945][T13386] vhci_hcd vhci_hcd.0: Device attached [ 590.906514][T13386] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 591.107646][T13388] vhci_hcd: connection closed [ 591.127717][T11212] vhci_hcd vhci_hcd.2: stop threads [ 591.131476][T11212] vhci_hcd vhci_hcd.2: release socket [ 591.133345][T11212] vhci_hcd vhci_hcd.2: disconnect device [ 591.179670][T11768] usb 42-1: enqueue for inactive port 0 [ 591.231394][T13375] vhci_hcd: connection reset by peer [ 591.234726][T11212] vhci_hcd vhci_hcd.3: stop threads [ 591.237159][T11212] vhci_hcd vhci_hcd.3: release socket [ 591.242845][T11212] vhci_hcd vhci_hcd.3: disconnect device [ 591.708797][T11768] usb usb42-port1: attempt power cycle [ 592.328049][T11768] usb usb42-port1: unable to enumerate USB device [ 593.852210][T13412] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 593.870051][T13412] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 593.872724][T13412] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 593.876145][T13412] vhci_hcd vhci_hcd.0: Device attached [ 594.052700][T13412] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 594.085248][ T5755] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 594.212175][T11768] usb 37-1: SetAddress Request (18) to port 0 [ 594.225194][T11768] usb 37-1: new SuperSpeed USB device number 18 using vhci_hcd [ 594.651099][T13417] vhci_hcd: connection reset by peer [ 594.654838][T11212] vhci_hcd vhci_hcd.0: stop threads [ 594.657204][T11212] vhci_hcd vhci_hcd.0: release socket [ 594.681474][T11212] vhci_hcd vhci_hcd.0: disconnect device [ 595.262773][ T29] usb 44-1: device descriptor read/8, error -110 [ 595.672332][ T29] usb usb44-port1: attempt power cycle [ 595.888934][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 595.919110][T13438] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 595.937175][T13438] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 595.942896][T13438] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 595.943348][T13441] ªªªªªª: renamed from vlan0 [ 595.949489][T13438] vhci_hcd vhci_hcd.0: Device attached [ 596.012048][T13438] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 596.228106][T13444] vhci_hcd: connection closed [ 596.228446][T11212] vhci_hcd vhci_hcd.0: stop threads [ 596.233256][T11212] vhci_hcd vhci_hcd.0: release socket [ 596.237283][T11212] vhci_hcd vhci_hcd.0: disconnect device [ 596.452896][ T29] usb usb44-port1: unable to enumerate USB device [ 599.341055][T11768] usb 37-1: device descriptor read/8, error -110 [ 599.506209][T13481] syzkaller0: entered promiscuous mode [ 599.508869][T13481] syzkaller0: entered allmulticast mode [ 599.558434][T13492] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 599.762082][T11768] usb usb37-port1: attempt power cycle [ 599.817567][T13498] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 599.820074][T13498] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 599.856093][T13498] vhci_hcd vhci_hcd.0: Device attached [ 600.143369][ T57] usb 44-1: SetAddress Request (30) to port 0 [ 600.143429][ T57] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd [ 600.175212][T13492] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 600.398347][T11768] usb usb37-port1: unable to enumerate USB device [ 600.937873][T13500] vhci_hcd: connection reset by peer [ 600.938372][T11212] vhci_hcd vhci_hcd.3: stop threads [ 600.938401][T11212] vhci_hcd vhci_hcd.3: release socket [ 600.938452][T11212] vhci_hcd vhci_hcd.3: disconnect device [ 601.395892][T13522] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 602.177358][ T5755] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 603.631358][T13547] vhci_hcd vhci_hcd.0: remove, state 4 [ 603.634040][T13547] usb usb37: USB disconnect, device number 1 [ 603.887725][T11212] vhci_hcd vhci_hcd.0: stop threads [ 603.889896][T11212] vhci_hcd vhci_hcd.0: release socket [ 603.997133][T11212] vhci_hcd vhci_hcd.0: disconnect device [ 604.005067][T11212] vhci_hcd vhci_hcd.0: stop threads [ 604.013583][T11212] vhci_hcd vhci_hcd.0: release socket [ 604.016439][T11212] vhci_hcd vhci_hcd.0: disconnect device [ 604.056163][T11212] vhci_hcd vhci_hcd.0: stop threads [ 604.063736][T11212] vhci_hcd vhci_hcd.0: release socket [ 604.065865][T11212] vhci_hcd vhci_hcd.0: disconnect device [ 604.138123][T11212] vhci_hcd vhci_hcd.0: stop threads [ 604.140243][T11212] vhci_hcd vhci_hcd.0: release socket [ 604.142870][T11212] vhci_hcd vhci_hcd.0: disconnect device [ 604.161939][T11212] vhci_hcd vhci_hcd.0: stop threads [ 604.164182][T11212] vhci_hcd vhci_hcd.0: release socket [ 604.166506][T11212] vhci_hcd vhci_hcd.0: disconnect device [ 604.169314][T11212] vhci_hcd vhci_hcd.0: stop threads [ 604.172306][T11212] vhci_hcd vhci_hcd.0: release socket [ 604.174996][T11212] vhci_hcd vhci_hcd.0: disconnect device [ 604.179127][T11212] vhci_hcd vhci_hcd.0: stop threads [ 604.183949][T11212] vhci_hcd vhci_hcd.0: release socket [ 604.195226][T11212] vhci_hcd vhci_hcd.0: disconnect device [ 604.202857][T11212] vhci_hcd vhci_hcd.0: stop threads [ 604.208334][T11212] vhci_hcd vhci_hcd.0: release socket [ 604.214119][T11212] vhci_hcd vhci_hcd.0: disconnect device [ 604.218821][T13547] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 604.380197][T13547] vhci_hcd vhci_hcd.0: remove, state 4 [ 604.382730][T13547] usb usb1: USB disconnect, device number 1 [ 604.567187][T13547] vhci_hcd vhci_hcd.0: USB bus 1 deregistered [ 604.580190][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 604.640489][T13551] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 604.672549][ T5796] ================================================================== [ 604.676007][ T5796] BUG: KASAN: slab-use-after-free in vhci_shutdown_connection.cold+0x2f1/0x37c [ 604.691457][ T5796] Read of size 8 at addr ffff888024e20530 by task kworker/u32:2/5796 [ 604.695684][ T5796] [ 604.696771][ T5796] CPU: 1 UID: 0 PID: 5796 Comm: kworker/u32:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.696799][ T5796] Tainted: [L]=SOFTLOCKUP [ 604.696806][ T5796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 604.696820][ T5796] Workqueue: usbip_event event_handler [ 604.696876][ T5796] Call Trace: [ 604.696885][ T5796] [ 604.696893][ T5796] dump_stack_lvl+0x100/0x190 [ 604.696914][ T5796] print_report+0x13d/0x4b0 [ 604.696938][ T5796] ? __virt_addr_valid+0x239/0x430 [ 604.696968][ T5796] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 604.696992][ T5796] kasan_report+0xdf/0x1c0 [ 604.697017][ T5796] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 604.697043][ T5796] vhci_shutdown_connection.cold+0x2f1/0x37c [ 604.697069][ T5796] event_handler+0x216/0x570 [ 604.697090][ T5796] process_one_work+0xa23/0x1940 [ 604.697121][ T5796] ? __pfx_process_one_work+0x10/0x10 [ 604.697148][ T5796] ? __pfx_event_handler+0x10/0x10 [ 604.697167][ T5796] worker_thread+0x5ef/0xe50 [ 604.697194][ T5796] ? kthread+0x13a/0x450 [ 604.697215][ T5796] ? __pfx_worker_thread+0x10/0x10 [ 604.697238][ T5796] kthread+0x370/0x450 [ 604.697258][ T5796] ? __pfx_kthread+0x10/0x10 [ 604.697279][ T5796] ret_from_fork+0x72b/0xd50 [ 604.697316][ T5796] ? __pfx_ret_from_fork+0x10/0x10 [ 604.697335][ T5796] ? __switch_to+0x800/0x10f0 [ 604.697367][ T5796] ? __pfx_kthread+0x10/0x10 [ 604.697388][ T5796] ret_from_fork_asm+0x1a/0x30 [ 604.697415][ T5796] [ 604.697421][ T5796] [ 604.821571][T13551] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 1 [ 604.832164][ T5796] Allocated by task 11732: [ 604.832183][ T5796] kasan_save_stack+0x30/0x50 [ 604.832208][ T5796] kasan_save_track+0x14/0x30 [ 604.832223][ T5796] __kasan_kmalloc+0xaa/0xb0 [ 604.832238][ T5796] __kmalloc_noprof+0x322/0x820 [ 604.832254][ T5796] __usb_create_hcd+0x5e/0xac0 [ 604.832292][ T5796] vhci_hcd_probe+0xf3/0x4e0 [ 604.832308][ T5796] platform_probe+0x106/0x1d0 [ 604.832323][ T5796] really_probe+0x241/0xa60 [ 604.832340][ T5796] __driver_probe_device+0x20e/0x450 [ 604.832359][ T5796] device_driver_attach+0xd1/0x220 [ 604.832377][ T5796] bind_store+0xf4/0x190 [ 604.832390][ T5796] drv_attr_store+0x74/0xb0 [ 604.832402][ T5796] sysfs_kf_write+0xf2/0x150 [ 604.832422][ T5796] kernfs_fop_write_iter+0x3e0/0x5f0 [ 604.832442][ T5796] vfs_write+0x6ac/0x1050 [ 604.832454][ T5796] ksys_write+0x12a/0x250 [ 604.832465][ T5796] __do_fast_syscall_32+0xe7/0x970 [ 604.832487][ T5796] do_fast_syscall_32+0x32/0x70 [ 604.832504][ T5796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.832522][ T5796] [ 604.832526][ T5796] Freed by task 13547: [ 604.832532][ T5796] kasan_save_stack+0x30/0x50 [ 604.832548][ T5796] kasan_save_track+0x14/0x30 [ 604.832563][ T5796] kasan_save_free_info+0x3b/0x70 [ 604.832575][ T5796] __kasan_slab_free+0x5f/0x80 [ 604.832591][ T5796] kfree+0x22b/0x6c0 [ 604.832602][ T5796] usb_put_hcd+0x149/0x1f0 [ 604.832621][ T5796] vhci_hcd_remove+0x107/0x1b0 [ 604.832636][ T5796] platform_remove+0x5f/0x80 [ 604.832649][ T5796] device_remove+0xcb/0x180 [ 604.832665][ T5796] device_release_driver_internal+0x44e/0x620 [ 604.832685][ T5796] unbind_store+0xf8/0x110 [ 604.832699][ T5796] drv_attr_store+0x74/0xb0 [ 604.832710][ T5796] sysfs_kf_write+0xf2/0x150 [ 604.832726][ T5796] kernfs_fop_write_iter+0x3e0/0x5f0 [ 604.832740][ T5796] vfs_write+0x6ac/0x1050 [ 604.832751][ T5796] ksys_write+0x12a/0x250 [ 604.832761][ T5796] __do_fast_syscall_32+0xe7/0x970 [ 604.832779][ T5796] do_fast_syscall_32+0x32/0x70 [ 604.832797][ T5796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.832813][ T5796] [ 604.832816][ T5796] Last potentially related work creation: [ 604.832822][ T5796] kasan_save_stack+0x30/0x50 [ 604.832837][ T5796] kasan_record_aux_stack+0xa7/0xc0 [ 604.832849][ T5796] insert_work+0x36/0x230 [ 604.832866][ T5796] __queue_work+0x9bc/0x12b0 [ 604.832884][ T5796] queue_work_on+0x1a9/0x1e0 [ 604.832902][ T5796] usb_hcd_giveback_urb+0x330/0x4a0 [ 604.832914][ T5796] unlink1+0x418/0x510 [ 604.832924][ T5796] usb_hcd_flush_endpoint+0x253/0x400 [ 604.832937][ T5796] usb_disable_interface+0x1ce/0x4c0 [ 604.832955][ T5796] usb_unbind_interface+0x3ce/0x9e0 [ 604.832975][ T5796] device_remove+0x12a/0x180 [ 604.832991][ T5796] device_release_driver_internal+0x44e/0x620 [ 604.833010][ T5796] usb_driver_release_interface+0x10e/0x190 [ 604.833031][ T5796] proc_disconnect_claim+0x21b/0x390 [ 604.833044][ T5796] usbdev_ioctl+0xbf5/0x3aa0 [ 604.833057][ T5796] compat_ptr_ioctl+0x6e/0xa0 [ 604.833075][ T5796] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 604.833093][ T5796] __do_fast_syscall_32+0xe7/0x970 [ 604.833111][ T5796] do_fast_syscall_32+0x32/0x70 [ 604.833128][ T5796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.833144][ T5796] [ 604.833147][ T5796] Second to last potentially related work creation: [ 604.833164][ T5796] kasan_save_stack+0x30/0x50 [ 604.833180][ T5796] kasan_record_aux_stack+0xa7/0xc0 [ 604.833192][ T5796] insert_work+0x36/0x230 [ 604.833208][ T5796] __queue_work+0x9bc/0x12b0 [ 604.833227][ T5796] queue_work_on+0x1a9/0x1e0 [ 604.833245][ T5796] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 604.833256][ T5796] usb_hcd_submit_urb+0xab7/0x2150 [ 604.833268][ T5796] usb_submit_urb+0x827/0x19b0 [ 604.833285][ T5796] usb_start_wait_urb+0x10e/0x580 [ 604.833300][ T5796] usb_control_msg+0x328/0x4b0 [ 604.833314][ T5796] hub_ext_port_status+0x152/0x600 [ 604.833328][ T5796] hub_activate+0x6e5/0x1c40 [ 604.833343][ T5796] hub_resume+0xb0/0x400 [ 604.833357][ T5796] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 604.833376][ T5796] usb_resume_both+0x53a/0x7f0 [ 604.833395][ T5796] __rpm_callback+0xc8/0x620 [ 604.833413][ T5796] rpm_callback+0x16a/0x1b0 [ 604.833430][ T5796] rpm_resume+0xd13/0x1320 [ 604.833446][ T5796] __pm_runtime_resume+0xb6/0x170 [ 604.833465][ T5796] usb_autoresume_device+0x23/0xe0 [ 604.833477][ T5796] usbdev_open+0x228/0x870 [ 604.833488][ T5796] chrdev_open+0x234/0x6a0 [ 604.833502][ T5796] do_dentry_open+0x6ab/0x14d0 [ 604.833514][ T5796] vfs_open+0x82/0x3f0 [ 604.833529][ T5796] path_openat+0x2873/0x4280 [ 604.833541][ T5796] do_file_open+0x20e/0x430 [ 604.833553][ T5796] do_sys_openat2+0x10f/0x1e0 [ 604.833569][ T5796] __ia32_compat_sys_openat+0x12d/0x210 [ 604.833587][ T5796] do_int80_emulation+0x14b/0x720 [ 604.833604][ T5796] asm_int80_emulation+0x1a/0x20 [ 604.833616][ T5796] [ 604.833619][ T5796] The buggy address belongs to the object at ffff888024e20000 [ 604.833619][ T5796] which belongs to the cache kmalloc-8k of size 8192 [ 604.833631][ T5796] The buggy address is located 1328 bytes inside of [ 604.833631][ T5796] freed 8192-byte region [ffff888024e20000, ffff888024e22000) [ 604.833645][ T5796] [ 604.833649][ T5796] The buggy address belongs to the physical page: [ 604.833657][ T5796] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24e20 [ 604.833669][ T5796] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 604.833681][ T5796] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 604.833695][ T5796] page_type: f5(slab) [ 604.833707][ T5796] raw: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 604.833719][ T5796] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 604.833732][ T5796] head: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 604.833743][ T5796] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 604.833755][ T5796] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 604.833767][ T5796] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 604.833775][ T5796] page dumped because: kasan: bad access detected [ 604.833782][ T5796] page_owner tracks the page as allocated [ 604.833787][ T5796] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5754, tgid 5754 (syz-executor), ts 55298664728, free_ts 52582885895 [ 604.833823][ T5796] post_alloc_hook+0xfd/0x120 [ 604.833836][ T5796] get_page_from_freelist+0xf48/0x3530 [ 604.833850][ T5796] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 604.833866][ T5796] new_slab+0xa2/0x640 [ 604.833877][ T5796] refill_objects+0xe3/0x410 [ 604.833890][ T5796] __pcs_replace_empty_main+0x376/0x680 [ 604.833903][ T5796] __kvmalloc_node_noprof+0x793/0x970 [ 604.833919][ T5796] wg_packet_queue_init+0x9a/0x360 [ 604.833941][ T5796] wg_newlink+0x332/0x7a0 [ 604.833959][ T5796] rtnl_newlink+0x1499/0x2380 [ 604.833983][ T5796] rtnetlink_rcv_msg+0x95e/0xe90 [ 604.834003][ T5796] netlink_rcv_skb+0x159/0x420 [ 604.834021][ T5796] netlink_unicast+0x585/0x850 [ 604.834035][ T5796] netlink_sendmsg+0x8b0/0xda0 [ 604.834049][ T5796] __sys_sendto+0x48b/0x4e0 [ 604.834067][ T5796] __ia32_compat_sys_socketcall+0x59a/0x770 [ 604.834089][ T5796] page last free pid 5731 tgid 5731 stack trace: [ 604.845451][ T5896] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 604.846450][ T5796] __free_frozen_pages+0x79f/0x1090 [ 604.846487][ T5796] qlist_free_all+0x47/0xf0 [ 604.846503][ T5796] kasan_quarantine_reduce+0x1a0/0x1f0 [ 604.846521][ T5796] __kasan_slab_alloc+0x69/0x90 [ 604.846540][ T5796] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 604.851259][T13551] vhci_hcd vhci_hcd.0: created sysfs vhci_hcd.0 [ 604.854492][ T5796] __alloc_skb+0x140/0x710 [ 604.854523][ T5796] tcp_stream_alloc_skb+0x34/0x660 [ 604.854571][ T5796] tcp_sendmsg_locked+0x13b2/0x44d0 [ 604.854620][ T5796] tcp_sendmsg+0x2e/0x50 [ 604.854642][ T5796] inet_sendmsg+0xb9/0x140 [ 604.854679][ T5796] sock_write_iter+0x4ea/0x5b0 [ 604.854696][ T5796] vfs_write+0x6ac/0x1050 [ 604.854709][ T5796] ksys_write+0x1f8/0x250 [ 604.854723][ T5796] do_syscall_64+0x115/0x840 [ 604.854744][ T5796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.854762][ T5796] [ 604.854768][ T5796] Memory state around the buggy address: [ 604.854778][ T5796] ffff888024e20400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 604.854791][ T5796] ffff888024e20480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 604.854804][ T5796] >ffff888024e20500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 604.854813][ T5796] ^ [ 604.854822][ T5796] ffff888024e20580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 604.854833][ T5796] ffff888024e20600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 604.854842][ T5796] ================================================================== [ 604.922888][ T5796] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 604.922913][ T5796] CPU: 1 UID: 0 PID: 5796 Comm: kworker/u32:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.922941][ T5796] Tainted: [L]=SOFTLOCKUP [ 604.922947][ T5796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 604.922960][ T5796] Workqueue: usbip_event event_handler [ 604.922987][ T5796] Call Trace: [ 604.922997][ T5796] [ 604.923005][ T5796] dump_stack_lvl+0x100/0x190 [ 604.923025][ T5796] vpanic+0x552/0x970 [ 604.923041][ T5796] ? __pfx_vpanic+0x10/0x10 [ 604.923058][ T5796] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 604.923083][ T5796] panic+0xd1/0xe0 [ 604.923097][ T5796] ? __pfx_panic+0x10/0x10 [ 604.923112][ T5796] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 604.923135][ T5796] ? preempt_schedule_common+0x42/0xc0 [ 604.923158][ T5796] ? check_panic_on_warn+0x1f/0x90 [ 604.923183][ T5796] check_panic_on_warn.cold+0x19/0x34 [ 604.923199][ T5796] end_report.part.0+0x3a/0x90 [ 604.923222][ T5796] kasan_report.cold+0xe/0x18 [ 604.923245][ T5796] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 604.923271][ T5796] vhci_shutdown_connection.cold+0x2f1/0x37c [ 604.923295][ T5796] event_handler+0x216/0x570 [ 604.923314][ T5796] process_one_work+0xa23/0x1940 [ 604.923348][ T5796] ? __pfx_process_one_work+0x10/0x10 [ 604.923374][ T5796] ? __pfx_event_handler+0x10/0x10 [ 604.923393][ T5796] worker_thread+0x5ef/0xe50 [ 604.923419][ T5796] ? kthread+0x13a/0x450 [ 604.923439][ T5796] ? __pfx_worker_thread+0x10/0x10 [ 604.923461][ T5796] kthread+0x370/0x450 [ 604.923481][ T5796] ? __pfx_kthread+0x10/0x10 [ 604.923518][ T5796] ret_from_fork+0x72b/0xd50 [ 604.923541][ T5796] ? __pfx_ret_from_fork+0x10/0x10 [ 604.923561][ T5796] ? __switch_to+0x800/0x10f0 [ 604.923587][ T5796] ? __pfx_kthread+0x10/0x10 [ 604.923608][ T5796] ret_from_fork_asm+0x1a/0x30 [ 604.923633][ T5796] [ 604.925251][ T5796] Kernel Offset: disabled VM DIAGNOSIS: 10:45:01 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffc90021b97878 RDX=ffffc90021b97818 RSI=ffffffff8e183b3c RDI=ffffc90021b977e0 RBP=ffffc90021b97828 RSP=ffffc90021b97720 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000b826 R12=fffff52004372efe R13=ffffc90021b977e0 R14=ffffc90021b977e0 R15=ffffc90021b977e8 RIP=ffffffff81b80392 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3e6820 CR3=000000004e9ef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000c9400000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a131f5 RDI=ffffffff9b9f71a0 RBP=ffffffff9b9f7160 RSP=ffffc900042cf5d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6534323038386552 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b6f71e3 R15=ffffffff85a13190 RIP=ffffffff85a1321f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 000fffff 00400000 DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff888096cdf000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fda190 CR3=00000000642a4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000c9400000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000009c8a23 RBX=ffff88801c7fca80 RCX=ffffffff8bb922d5 RDX=0000000000000000 RSI=ffffffff8e1a99ad RDI=ffffffff8c400a80 RBP=ffffed10038ff950 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed100568678d R10=ffff88802b433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bb9089f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73baf50 CR3=000000006e96a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff888053a7c1d8 RCX=ffffffff82845ca6 RDX=1ffff1100cfd9aab RSI=ffffffff82844cc4 RDI=ffff888053a7c1e0 RBP=ffff888067ecd558 RSP=ffffc9000410f4e8 R8 =0000000000000004 R9 =000000000000000b R10=0000000000000007 R11=0000000000000000 R12=ffff888079abba98 R13=ffff88804ba25c00 R14=000002b49e000002 R15=ffff888053a7c1e0 RIP=ffffffff85256657 RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa430f41300 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561bc93b8000 CR3=0000000045dd5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000083d 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc08000488032008 0006080020080006 0074c83600000be3 0000001900000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000023808000601 01f600080018035e 0800100301080008 0301080000030808 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002800226080006 0101ea0008000280 0300080002080014 08000601749e0480 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0202a0c608000401 0f98000000000000 00000000000001ff ffffffffffffffe7 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0804b80301080004 b00305da080004a0 0304080004980301 80080004900301ff ZMM24=82fa606e82fa606e 82fa606e82fa606e 82fa606e82fa606e 82fa606e82fa606e 82fa606e82fa606e 82fa606e82fa606e 82fa606e82fa606e 82fa606e82fa606e ZMM25=6a49b9106a49b910 6a49b9106a49b910 6a49b9106a49b910 6a49b9106a49b910 6a49b9106a49b910 6a49b9106a49b910 6a49b9106a49b910 6a49b9106a49b910 ZMM26=7c5d96617c5d9661 7c5d96617c5d9661 7c5d96617c5d9661 7c5d96617c5d9661 7c5d96617c5d9661 7c5d96617c5d9661 7c5d96617c5d9661 7c5d96617c5d9661 ZMM27=b54d09f8b54d09f8 b54d09f8b54d09f8 b54d09f8b54d09f8 b54d09f8b54d09f8 b54d09f8b54d09f8 b54d09f8b54d09f8 b54d09f8b54d09f8 b54d09f8b54d09f8 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7010000070100000 7010000070100000 7010000070100000 7010000070100000 7010000070100000 7010000070100000 7010000070100000 7010000070100000