last executing test programs: 9.036808931s ago: executing program 3 (id=42): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 8.93241566s ago: executing program 3 (id=43): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x18, 0x68, 0x401}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x34, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x34}}, 0x0) 8.86035448s ago: executing program 3 (id=44): mknod$loop(0x0, 0xfff, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x800000, &(0x7f00000003c0)=ANY=[]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x0, 0x5, 0xfe, 0x7, 0xfd}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) 7.981531858s ago: executing program 3 (id=46): r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x88000, 0x0) ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x16) socket$nl_generic(0x10, 0x3, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_setup(0x267, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) close(0x3) accept4(r1, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x7, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) close(r2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x346}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf912, 0x2, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x1367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 7.513458567s ago: executing program 1 (id=47): memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) prctl$PR_SET_KEEPCAPS(0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0xffffffff, 0x175100) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="cbe40cad68a2add09d750f2c3da06e281079d920cbefb2865f99bba5b47894a611063f71a381eede0b614915c7d2359a1811575c2c532146541e3834f19efdc9397f15d5957a3f6d36299997a4ca1eb04637f408fd5fff825df8f8144135f7a7e1a2715cd47ed907660455ea2bdb4ebc86df2e3384c63175a411e52542298cd0f98826957b15cc4b5f5f75cd943b6e2323a716d395e32e224e52c857e57044d0d994b7529c47d60e6756f12f159441d86bb6676d227316b770791fb49a42518de8cd5dd07b1ce03aa810f9bcf0ac374928fa3a1463157a6e40ff360a6c8a46352759fbcb3d3fe3ef63468f26c8917b094c21", 0xf2}, {&(0x7f00000005c0)="f6ae0510ccea0b14787a1318aad31d3488b66e13346d4b720aa295f5c75276540e22c9f6b6bf7edf155af1819e8090105f6472ab9534ab61a6dc755ab2da2a3f769db125f4d2af9bc8200dc490aedbf9ceca5cefff2fdfa101a2decdf6dccbc8e5", 0x61}, {&(0x7f0000000680)="27caecf0c8ae4bae7d2d314b768c4da9c7b6e43333ebf957b547ba4550679c87ebdd054ba16a859cc9da1696c7b8202199784a45a2a5170f32aeb552ccdd1dc5b61a628d96f4b74948d000be7066aa4be329e52bbff6371ff70584fedb83ac3dac1434a617b6f00fef814d4b68f6e22edefb243bed909ce217989df332b0cf5d50dd46d0c09c2c22dc7369b4875f37f4664df781239b4c495e6c11d8a59f1e", 0x9f}, {&(0x7f0000000740)="a7ce85bbcba0fd26330657310de6da67c4dc189fbd348daec2644a653208b077e1551d596de048c31de2155a7cdfc9580f1a240206c6f1c55baeff9941e88ef646b2abfa99d15c901f3b511a384c56491863d9bfbcc14b290d5c3b26a0aed0abddb1be71dbd9dbd869f46ec2d9a3456e75b56eefaf54088c5ef1ad00000000000000ece6646d6a5cc8d9fd", 0x8b}, {&(0x7f0000000800)="ea3b332f73fed100a4d7803b8396f426066ab80d0c3e5ace6ae9436cdf962507443091391347", 0x26}, {&(0x7f0000000840)="2cac473bef3e51cd5fbef3c4a244f86a1a2267d8d99054d903d7e2e9b09296400ff4d43dd03d2205147cde9af314043d4dc7be892408ac14b3bf7d0f2fd31d71823fe4c0d338b0084de2aaad8abdbd3367c5f374e000b00859afb30774dcef9a3c105d2681076b49a71d0fa186068f01072da6878a925de5d705df0e42026d688e8c6782681b5d26325d849a7c15d4c599605a295fc1bc039b92effc8877b4bfd82eb446ba38eff1168765d218864e4587ddecd76795685e9513aa3fd41c1c", 0xbf}, {&(0x7f0000000ac0)="fee9351450f754903fac24af2d341de750725d4518ae57857190811b10cf11383d34afdac16661d8e55468d0809c6dff8d001c44cf20d53415fd0c6e39706c8c2139d573f1d029000bd93b114b3e88daf7f5b81c6f9d44ec0c9c8c59282b9d061bbe8e214b992a6b746ad48e97e2e17a797007aa54b9cdcc9dff34c37b0bd20f913ff99ac523248156b40b869799dfe4752cb34f4b3d522c5b00d4c4cdb74c12d960fae41379b95f46de6ffb88901ad79d7999bc7d5614909b41d8f201f9c484", 0xc0}, {&(0x7f0000000980)="e0f3dfcebcd3beffe091dd43c64a35ab0877f62e09a4396f79b38df691b3a2e9f25efd136ce685aee3dc5bf0b3891195b1f3006c160355b6b19dff3d7f812acaef97c9889e222f5118", 0x49}, {&(0x7f0000000a00)="5e20493d292bb8895edb8411ae92957901c90d55e834ada387ccd395a93ab0dbbc0d1f834493fa5444e16cf64947944bad7f4b2a5e269a2065d1508e02", 0x3d}], 0x9) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, r5, 0x0, 0x276) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x15, 0x0, 0x3, 0x3000006, 'U\x00', "1575a859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "fa0700f22b42a3023be516d1"]}) 7.246685355s ago: executing program 1 (id=48): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x2, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x4008, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) unlinkat(r0, &(0x7f0000000540)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000016c0)=ANY=[@ANYBLOB="340000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000140012800b00010067656a657665000004000280"], 0x34}}, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r4, r9, &(0x7f00000005c0)={0x0, 0x1460, 0x10, 0x3, 0xb2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca33, 0x0, 0x6, 0x273, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e3c, 0x400, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf39, 0x1000, 0x3, 0x102c4, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x1000, 0x2, 0x29f, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x5c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x0, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)}, 0x40) 6.393845618s ago: executing program 0 (id=50): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200420014000300002fb96dbcf706e105", 0x13}, {&(0x7f0000000040)="00000000000000a0c8d49250", 0xc}], 0x2}, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x90}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 5.05058111s ago: executing program 1 (id=51): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000005c0)={0x2, 0x0, @pic={0x1, 0x2, 0xc, 0x4, 0x36, 0x0, 0x4, 0x88, 0x8, 0x10, 0x7, 0x3, 0x7, 0x7, 0xf8, 0x2}}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, 0x0, &(0x7f0000000480)) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) r7 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x442802, 0x0) getpeername$l2tp6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x20) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 4.232943655s ago: executing program 2 (id=53): r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x88000, 0x0) ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x16) socket$nl_generic(0x10, 0x3, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_setup(0x267, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) close(0x3) accept4(r1, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x7, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) close(r2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x346}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf912, 0x2, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x1367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4.11278992s ago: executing program 0 (id=54): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x94) file_setattr(0xffffffffffffffff, &(0x7f0000000000)='my_configfs/nullb\x00', &(0x7f0000000080)={0x1290, 0x9, 0x4, 0xf292, 0x20}, 0xffffffffffffffe9, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.933347266s ago: executing program 0 (id=55): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = socket(0x10, 0x80000, 0x0) getsockopt(r0, 0x0, 0x29, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) r1 = socket(0x2, 0x805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa843, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x1000, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000240)=""/149) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ec7aba000c1100fe800000c000000000000000000000aafe8000000000000000000000000000aa00004e22000c907803000000"], 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000b14000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2000, 0x2}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r5, 0xf903}, 0x8) r6 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x1, 0x3, @mcast2, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r6, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r7}, 0x38) 3.878392479s ago: executing program 3 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x7, 0x1a, 0xaa, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c0001800600060065580000203302801c33118004"], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) write(r2, &(0x7f0000000440)="bb245f34e2bf5a720e36ca51bddbd51a0b2926f1fe225c8b56f17a3c87e262e9e0f9e0f6c66d88d6c90695c6c5cd45e515196ab4511ece245d07dd0c86ae912a2b294fcc4adf839540da537313fcc3d29074d8d964425a814905aa8422366431efad7c2a1e8832890361e8ab2ce807289949aac2790264ca6f514f332cb27e773385443aaa90fae4d79c153f255eb97c00ef96d5769a5f91ea0b89c5e3df1fc39c89946945ef580381e0661ef9cd4c486a", 0xb1) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xd, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1d7754ade5ead57c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x24004000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002800)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="110223010000340200000600000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000"], 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) read(0xffffffffffffffff, &(0x7f0000001680)=""/4096, 0x1000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r7, 0x8010aebc, &(0x7f0000000040)={0x40000, 0x102000}) syz_emit_ethernet(0x3e, &(0x7f0000001640)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a1b8100000000000000ff020000000081000000000000080001040000000008907800"/62], 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@local}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) writev(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000002680)="9574f65a074297a18e66fe7e75ef5716a0742da75b8e33d0ffb37b168c3149333c9705c3f7e0e5ea5c45655c735c00ae6b9cab909d112595d23ea2de4bf68e37e72859ebdd8285b0ac4003586b9cb875fe141dc9ce30610eb230be339e17037ed07d7da6d0a45a7b1e0a734324a2c7842b3238ee073d2e6957b2b3acbdb7c5d2ea069c713a1fc2b0abd2f5ffe88fb8ea445de9c16b", 0x95}, {&(0x7f0000002740)="d8d42e52ccf08fad4bb6c3d8dd7cf061e4e510310b3cb08339288e6a48ea7c98a52ff153d55768dae063d81d7b6c98ae3211de90ed43fbe22e6c52214ed375479d17ed11a594e7", 0x47}], 0x2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe372, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x91ce, 0x4f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) 3.685394687s ago: executing program 1 (id=57): getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x40002042, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r2, 0x0, 0x0) write(r2, &(0x7f0000000700)='\x00'/32, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PREF={0x5, 0x14, 0x3}]}, 0x24}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2a00, 0x0) lseek(r4, 0x6, 0x4) write(r2, 0x0, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000040)='./mnt/test2\x00', &(0x7f00000000c0)={0x100, 0xf0, 0x32}, 0x18) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x334, 0x103500) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, 0x0) 3.164986687s ago: executing program 2 (id=58): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03020000000000002bc051f8d5e65e4984480000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000002900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a0501000000000000000007000007090002005b797a31000000000900010073797a3000000000100003800c000080080003400000000214000000100001000000"], 0xc0}}, 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r5, 0x1, 0xb, 0x0, &(0x7f0000000140)) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @loopback}, 0x10) ioctl$MEMREADOOB64(r4, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0}) 2.85052892s ago: executing program 2 (id=59): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x40000004}}, 0x10) listen(r0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x198, 0x30, 0xffff, 0x2, 0x0, {}, [{0x184, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x114, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x1, 0x20000000, 0x8001, 0x1a1d}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0xc6, 0x6, "279b640c9d90a2a62489dea8d133324e4e46893e8a83e93dd724e80e15b809ef089cee1338107dfe75fcedb491ade459a3240b2d466779f66e6bbb0b03c0facce9ea3e58066f14132217340559e7013d31659e8d09c98b38207725a5a47f186bb0345382b3719b32dd50f8587af98ccb96a2c823d714cb3afa0c91e5fc60b68206c59fad39c7ff0b370cd98201f7b2d78f904df2b4151a6fbcbdfd9c0337e247d3210fd36baa114e6b541dc9bcde73d68614cad6881494ba513c290c4e5b6bbe07ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x198}}, 0x0) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2837f2d0e539d92a3aec3c854f8a74e077813755e9d2899369167d7f8f6e3dfb5395cd01999dded66b041c69d68e42b6f18bdc4868508b18987f5fb573245ac9a4ef1aee04110b745158e2c22324bd163ed9d64f14c79a3b"]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffffc, 0x2422212, 0xc5ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.313879737s ago: executing program 1 (id=60): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200420014000300002fb96dbcf706e105", 0x13}, {&(0x7f0000000040)="00000000000000a0c8d49250", 0xc}], 0x2}, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x90}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 2.119958765s ago: executing program 0 (id=61): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}, {&(0x7f00000005c0)="4fb82b77c9eb16722e61a5827bdd4f2da0a1b2e35158278d43874ef64a2c6cd3c22bb3941aec5bea368bec35d8b2afacf75ad8093ca604dc62a20872854925a4f05b53d372fdfb1c1ffe507cfd730842f8441015ba94386170a1", 0x5a}], 0x2) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x6}, {{&(0x7f0000000200)=@can, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=""/4096, 0x1000}, 0x34}], 0x2, 0x2001, 0x0) 2.031224671s ago: executing program 0 (id=62): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe80f2ffffff000000000000000000aa3a00020000000000000000"], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x800, 0x0, 0x1000000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00001f00010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x2000413, &(0x7f0000019080)=ANY=[]) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0xfff, {0x7, 0x29, 0xcf940281, 0xa00010, 0x1, 0x3a76, 0x10, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0xffffffffffffff9f, 0x10000000000, 0x8, 0x40000000000003, 0xfffffffffffffffe, 0x0, 0x35741061, 0x52, 0xa593e9c1ca988eda, 0xfffffff8, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a", @ANYRES8], 0x38}}, 0x6004000) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c"], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x1) 1.809316244s ago: executing program 2 (id=63): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffe0, 0x2}, {0x0, 0xc}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044801}, 0x20008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = socket$kcm(0x23, 0x5, 0x0) listen(r5, 0x800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r7, 0x0, 0x0, 0x80, 0x0, 0x0) 1.287501582s ago: executing program 3 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18842, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r1, 0x26, &(0x7f00000002c0)={0x0, 0x0, 0xff34}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0xb0}, 0x1, 0x0, 0x0, 0x4084}, 0x40800) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000380)=0x7, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x4000000}) write(r4, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) 1.250057386s ago: executing program 2 (id=65): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f00000005c0)={0x2, 0x0, @pic={0x1, 0x2, 0xc, 0x4, 0x36, 0x0, 0x4, 0x88, 0x8, 0x10, 0x7, 0x3, 0x7, 0x7, 0xf8, 0x2}}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, 0x0, &(0x7f0000000480)) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x442802, 0x0) getpeername$l2tp6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x20) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 828.882859ms ago: executing program 0 (id=66): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r0, &(0x7f0000001200)={0x2020}, 0x2020) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) epoll_create1(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x7, "abacd211112c7b9ca5fa07558139ede6dc06000ee04200"}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 666.045338ms ago: executing program 1 (id=67): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r0, &(0x7f0000001200)={0x2020}, 0x2020) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 0s ago: executing program 2 (id=68): r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x88000, 0x0) ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x16) socket$nl_generic(0x10, 0x3, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_setup(0x267, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) close(0x3) accept4(r1, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x7, 0x2) socket$packet(0x11, 0x2, 0x300) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x346}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf912, 0x2, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x1367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:64424' (ED25519) to the list of known hosts. [ 58.611850][ T5731] cgroup: Unknown subsys name 'net' [ 58.779999][ T5731] cgroup: Unknown subsys name 'cpuset' [ 58.789892][ T5731] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.235697][ T5731] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.014444][ T5755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.017445][ T5756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.018555][ T5754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.019787][ T5756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.025739][ T5755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.027491][ T5758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.029539][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.033650][ T5755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.034374][ T5758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.035044][ T5758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.036328][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.039662][ T5754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.045363][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.046439][ T5758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.048616][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.049248][ T5758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.049842][ T5758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.053700][ T5755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.053957][ T5746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.054797][ T5746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.069760][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.074270][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.080489][ T5740] bridge_slave_0: entered allmulticast mode [ 68.085519][ T5740] bridge_slave_0: entered promiscuous mode [ 68.134620][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.137404][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.140368][ T5740] bridge_slave_1: entered allmulticast mode [ 68.144083][ T5740] bridge_slave_1: entered promiscuous mode [ 68.160293][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.163850][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.167115][ T5741] bridge_slave_0: entered allmulticast mode [ 68.175003][ T5741] bridge_slave_0: entered promiscuous mode [ 68.180224][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.183404][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.186961][ T5741] bridge_slave_1: entered allmulticast mode [ 68.190941][ T5741] bridge_slave_1: entered promiscuous mode [ 68.246001][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.249760][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.253327][ T5742] bridge_slave_0: entered allmulticast mode [ 68.257323][ T5742] bridge_slave_0: entered promiscuous mode [ 68.297575][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.300525][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.303390][ T5742] bridge_slave_1: entered allmulticast mode [ 68.307786][ T5742] bridge_slave_1: entered promiscuous mode [ 68.317248][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.326195][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.333656][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.392224][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.412397][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.415631][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.419289][ T5743] bridge_slave_0: entered allmulticast mode [ 68.422579][ T5743] bridge_slave_0: entered promiscuous mode [ 68.428288][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.444326][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.476930][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.479857][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.482726][ T5743] bridge_slave_1: entered allmulticast mode [ 68.486373][ T5743] bridge_slave_1: entered promiscuous mode [ 68.491125][ T5741] team0: Port device team_slave_0 added [ 68.494727][ T5740] team0: Port device team_slave_0 added [ 68.498689][ T5742] team0: Port device team_slave_0 added [ 68.510948][ T5742] team0: Port device team_slave_1 added [ 68.514253][ T5741] team0: Port device team_slave_1 added [ 68.518823][ T5740] team0: Port device team_slave_1 added [ 68.568295][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.593402][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.596294][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.606769][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.623797][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.627025][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.637165][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.644453][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.649526][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.655020][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.666531][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.673369][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.676233][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.686459][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.708753][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.711043][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.721030][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.727415][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.730237][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.740575][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.797852][ T5743] team0: Port device team_slave_0 added [ 68.833928][ T5743] team0: Port device team_slave_1 added [ 68.851302][ T5742] hsr_slave_0: entered promiscuous mode [ 68.856270][ T5742] hsr_slave_1: entered promiscuous mode [ 68.864937][ T5740] hsr_slave_0: entered promiscuous mode [ 68.868400][ T5740] hsr_slave_1: entered promiscuous mode [ 68.871478][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 68.873966][ T5740] Cannot create hsr debugfs directory [ 68.926854][ T5741] hsr_slave_0: entered promiscuous mode [ 68.930652][ T5741] hsr_slave_1: entered promiscuous mode [ 68.934236][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 68.937236][ T5741] Cannot create hsr debugfs directory [ 68.961017][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.964030][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.974827][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.981288][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.984226][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.995085][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.107593][ T5752] Bluetooth: hci2: command tx timeout [ 69.107597][ T5746] Bluetooth: hci1: command tx timeout [ 69.107975][ T5754] Bluetooth: hci3: command tx timeout [ 69.117087][ T5752] Bluetooth: hci0: command tx timeout [ 69.134396][ T5743] hsr_slave_0: entered promiscuous mode [ 69.140314][ T5743] hsr_slave_1: entered promiscuous mode [ 69.146306][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 69.149606][ T5743] Cannot create hsr debugfs directory [ 69.435724][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.448695][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.453212][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.460673][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.464652][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.471152][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.474251][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.482106][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.564277][ T5740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.571788][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.579411][ T5740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.586501][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.590242][ T5740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.597572][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.601716][ T5740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.607550][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.697794][ T5743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.705030][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.708971][ T5743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.714651][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.717923][ T5743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.724894][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.728504][ T5743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.733153][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.827566][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.835140][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.843295][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.864103][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.874176][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.879372][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.885615][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.890403][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.900059][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.967037][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.999998][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.003841][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.025725][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.028993][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.064675][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.115980][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.129603][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.147665][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.150540][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.211046][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.214446][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.232988][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.253467][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.266741][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.269867][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.294004][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.297319][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.368996][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.401254][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.404331][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.420159][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.423200][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.780864][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.853702][ T5742] veth0_vlan: entered promiscuous mode [ 70.865145][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.877877][ T5742] veth1_vlan: entered promiscuous mode [ 70.921747][ T5742] veth0_macvtap: entered promiscuous mode [ 70.930219][ T5742] veth1_macvtap: entered promiscuous mode [ 70.958943][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.963170][ T5740] veth0_vlan: entered promiscuous mode [ 70.977853][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.996493][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.001456][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.009822][ T5740] veth1_vlan: entered promiscuous mode [ 71.086606][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.124396][ T5743] veth0_vlan: entered promiscuous mode [ 71.140149][ T5740] veth0_macvtap: entered promiscuous mode [ 71.171732][ T5741] veth0_vlan: entered promiscuous mode [ 71.173376][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.176876][ T5740] veth1_macvtap: entered promiscuous mode [ 71.179015][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.183999][ T5743] veth1_vlan: entered promiscuous mode [ 71.186061][ T5752] Bluetooth: hci1: command tx timeout [ 71.186686][ T5754] Bluetooth: hci0: command tx timeout [ 71.186735][ T65] Bluetooth: hci3: command tx timeout [ 71.187208][ T5746] Bluetooth: hci2: command tx timeout [ 71.196206][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.230769][ T5741] veth1_vlan: entered promiscuous mode [ 71.247835][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.253726][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.255002][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.257933][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.289148][ T5743] veth0_macvtap: entered promiscuous mode [ 71.296245][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.307613][ T5743] veth1_macvtap: entered promiscuous mode [ 71.323643][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.331418][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.341657][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.362885][ T5742] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 71.380070][ T5742] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 71.382228][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.390445][ T5741] veth0_macvtap: entered promiscuous mode [ 71.390613][ T5742] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 71.399272][ T5741] veth1_macvtap: entered promiscuous mode [ 71.417980][ T5742] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 71.428339][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.432180][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.445990][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.461243][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.465676][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.497883][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.524488][ T607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.527640][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.530792][ T607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.541484][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.546214][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.603705][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.608080][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.636366][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.668367][ T607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.671724][ T607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.686546][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.693017][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.736668][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.747655][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.754671][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.805641][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.811750][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.828225][ T5844] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.866311][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.896477][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.900410][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.948353][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.963199][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.970650][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'. [ 71.977106][ T5844] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 71.984126][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 71.989513][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 71.994265][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 72.007283][ T5844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.010845][ T5844] usb 8-1: Product: syz [ 72.012978][ T5844] usb 8-1: Manufacturer: syz [ 72.015414][ T5844] usb 8-1: SerialNumber: syz [ 72.027341][ T5844] usb 8-1: config 0 descriptor?? [ 72.310621][ T5912] nd_pmem pfn0.0: probe with driver nd_pmem failed with error -16 [ 72.368754][ T5844] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 72.544943][ T5901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.551455][ T5901] usb 8-1: Couldn't submit interrupt_out_urb -90 [ 72.658722][ T5915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.201390][ T5917] sctp: [Deprecated]: syz.0.6 (pid 5917) Use of int in max_burst socket option. [ 73.201390][ T5917] Use struct sctp_assoc_value instead [ 73.266562][ T5754] Bluetooth: hci0: command tx timeout [ 73.267407][ T5752] Bluetooth: hci2: command tx timeout [ 73.267443][ T5746] Bluetooth: hci3: command tx timeout [ 73.276194][ T5754] Bluetooth: hci1: command tx timeout [ 73.495874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.515934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.735924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 74.305877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 74.645941][ T853] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 74.798587][ T853] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 74.803085][ T853] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 74.809794][ T853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.814897][ T853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.820643][ T853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.825258][ T853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.829636][ T853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.834408][ T853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.838970][ T853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.843149][ T853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.848445][ T853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.852667][ T853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.856772][ T853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.861497][ T853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.865924][ T853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.870117][ T853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.874759][ T853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.881388][ T853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.885476][ T853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.890365][ T853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.894448][ T853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.898860][ T853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.903463][ T853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.907709][ T853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.911675][ T853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.916824][ T853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.922452][ T853] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 74.926100][ T853] usb 6-1: Product: syz [ 74.927833][ T853] usb 6-1: Manufacturer: syz [ 74.929897][ T853] usb 6-1: SerialNumber: syz [ 74.940501][ T853] usb 6-1: config 0 descriptor?? [ 74.953636][ T853] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1 [ 75.255938][ T5929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.299210][ T5929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.346388][ T5754] Bluetooth: hci0: command tx timeout [ 75.349297][ T5752] Bluetooth: hci1: command tx timeout [ 75.353699][ T5921] Console: switching to colour dummy device 80x25 [ 75.357318][ T5754] Bluetooth: hci2: command tx timeout [ 75.357354][ T5754] Bluetooth: hci3: command tx timeout [ 75.378109][ T5928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.453888][ T5529] usb 8-1: USB disconnect, device number 2 [ 75.467791][ T5844] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 75.558330][ T5928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.629155][ T5844] usb 5-1: not running at top speed; connect to a high speed hub [ 75.632670][ T5844] usb 5-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 75.640691][ T5844] usb 5-1: config 11 has an invalid interface number: 31 but max is 2 [ 75.644249][ T5844] usb 5-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 75.648854][ T5844] usb 5-1: config 11 has an invalid interface number: 188 but max is 2 [ 75.652889][ T5844] usb 5-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 75.657943][ T5844] usb 5-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 75.661812][ T5844] usb 5-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 75.665711][ T5844] usb 5-1: config 11 has an invalid interface number: 201 but max is 2 [ 75.670987][ T5844] usb 5-1: config 11 has no interface number 0 [ 75.674519][ T5844] usb 5-1: config 11 has no interface number 1 [ 75.678524][ T5844] usb 5-1: config 11 has no interface number 2 [ 75.681272][ T5844] usb 5-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 75.686641][ T5844] usb 5-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 75.689763][ T5925] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 75.691775][ T5844] usb 5-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 75.691805][ T5844] usb 5-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 75.691829][ T5844] usb 5-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 75.691847][ T5844] usb 5-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 75.691865][ T5844] usb 5-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 75.691936][ T5844] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 75.691957][ T5844] usb 5-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 75.691979][ T5844] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 75.691999][ T5844] usb 5-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 75.692021][ T5844] usb 5-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 75.743224][ T5925] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 75.758212][ T5844] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 75.764084][ T5925] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 75.767837][ T5844] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 75.783727][ T5925] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 75.788822][ T5844] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 75.788848][ T5844] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 75.788867][ T5844] usb 5-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 75.788941][ T5844] usb 5-1: config 11 interface 201 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 75.788958][ T5844] usb 5-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 75.788974][ T5844] usb 5-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 75.788991][ T5844] usb 5-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 75.789009][ T5844] usb 5-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 75.789095][ T5844] usb 5-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 75.789113][ T5844] usb 5-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 75.789130][ T5844] usb 5-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 75.789148][ T5844] usb 5-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 75.789166][ T5844] usb 5-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 75.789183][ T5844] usb 5-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 75.789201][ T5844] usb 5-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 75.789221][ T5844] usb 5-1: config 11 interface 201 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 75.789242][ T5844] usb 5-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 75.789259][ T5844] usb 5-1: config 11 interface 31 has no altsetting 0 [ 75.789275][ T5844] usb 5-1: config 11 interface 188 has no altsetting 0 [ 75.789289][ T5844] usb 5-1: config 11 interface 201 has no altsetting 0 [ 75.793182][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.793211][ T5844] usb 5-1: Product: 㰁 [ 75.793224][ T5844] usb 5-1: Manufacturer: Ч [ 75.793237][ T5844] usb 5-1: SerialNumber: Ў [ 75.865905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 75.873822][ T5925] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 75.920989][ T5925] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 46221 usecs [ 75.950257][ T5925] pci 0000:00:01.0: Adding to iommu group 1 [ 75.972174][ T5925] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 75.975069][ T5925] pci 0000:00:01.0: vgaarb: bridge control possible [ 75.977838][ T5925] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 76.014052][ T5925] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 76.047907][ T5925] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 76.079862][ T5925] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 76.128757][ T5928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.164551][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 76.173945][ T5925] [drm] Found bochs VGA, ID 0xb0c5. [ 76.176554][ T5925] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 76.181641][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 76.204437][ T5925] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 76.211284][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 76.223942][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 76.226033][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.232309][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.239978][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.247854][ T5917] Zero length message leads to an empty skb [ 76.256884][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.338285][ T5928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.412804][ T5844] usb 5-1: USB disconnect, device number 2 [ 76.596663][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.596712][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.616299][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.640579][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.736181][ T5844] usb 6-1: USB disconnect, device number 2 [ 76.740851][ T5844] yurex 6-1:0.0: USB YUREX #1 now disconnected [ 76.807812][ T5925] Console: switching to colour frame buffer device 160x50 [ 76.932043][ T5925] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 77.226242][ T5529] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.371454][ T5944] sctp: [Deprecated]: syz.1.13 (pid 5944) Use of int in max_burst socket option. [ 77.371454][ T5944] Use struct sctp_assoc_value instead [ 77.378132][ T5529] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 77.396036][ T5529] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 77.401255][ T5529] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.408570][ T5529] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.418421][ T5529] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.423036][ T5529] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.428345][ T5529] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.432509][ T5529] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.440472][ T5529] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.444921][ T5529] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.449690][ T5529] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.454184][ T5529] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.458675][ T5529] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.462938][ T5529] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.468550][ T5529] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.471898][ T5529] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.475495][ T5529] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.479214][ T5529] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.482527][ T5529] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.486860][ T5529] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.490016][ T5529] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.494286][ T5529] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.501206][ T5529] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.508357][ T5529] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.511884][ T5529] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.515712][ T5529] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.520660][ T5529] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 77.525365][ T5529] usb 5-1: Product: syz [ 77.527735][ T5529] usb 5-1: Manufacturer: syz [ 77.529846][ T5529] usb 5-1: SerialNumber: syz [ 77.537649][ T5529] usb 5-1: config 0 descriptor?? [ 77.554612][ T5529] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 77.572856][ T5946] netlink: 'syz.2.14': attribute type 9 has an invalid length. [ 77.609096][ T5946] Can't find a SQUASHFS superblock on nullb0 [ 77.636020][ T29] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 77.797823][ T29] usb 6-1: not running at top speed; connect to a high speed hub [ 77.803699][ T29] usb 6-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 77.820724][ T29] usb 6-1: config 11 has an invalid interface number: 31 but max is 2 [ 77.824313][ T29] usb 6-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 77.832090][ T29] usb 6-1: config 11 has an invalid interface number: 188 but max is 2 [ 77.834061][ T5954] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 77.836295][ T29] usb 6-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 77.847844][ T29] usb 6-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 77.854674][ T29] usb 6-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 77.859667][ T5942] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.865326][ T29] usb 6-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 77.865938][ T5942] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.873553][ T29] usb 6-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 77.880253][ T29] usb 6-1: config 11 has no interface number 0 [ 77.884176][ T29] usb 6-1: config 11 has no interface number 1 [ 77.887493][ T29] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 77.892874][ T29] usb 6-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 77.898486][ T29] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 77.903251][ T29] usb 6-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 77.908922][ T29] usb 6-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 77.910511][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.913578][ T29] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 77.913605][ T29] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 77.922493][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.926822][ T29] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 77.935267][ T29] usb 6-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 77.941389][ T29] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 77.947250][ T29] usb 6-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 77.951705][ T29] usb 6-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 77.957005][ T29] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 77.961995][ T29] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 77.967056][ T29] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 77.973884][ T29] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 77.978913][ T29] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 77.984192][ T29] usb 6-1: config 11 interface 31 has no altsetting 0 [ 77.988313][ T29] usb 6-1: config 11 interface 188 has no altsetting 0 [ 77.994494][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.998782][ T29] usb 6-1: Product: 㰁 [ 78.000721][ T29] usb 6-1: Manufacturer: Ч [ 78.002780][ T29] usb 6-1: SerialNumber: Ў [ 78.023225][ T5942] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.027997][ T5942] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.131010][ T5942] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.134916][ T5942] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.137395][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 78.370332][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 78.399222][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 78.442247][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 78.575776][ T5942] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.580369][ T5942] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.941066][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 78.988550][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.995990][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.999387][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.003903][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.086045][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.089570][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.093087][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.097368][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.101114][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.104647][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.110335][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.115108][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.202088][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 80.557463][ T5440] usb 5-1: USB disconnect, device number 3 [ 80.582051][ T5440] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 81.056775][ T29] usb 6-1: USB disconnect, device number 3 [ 81.123590][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 81.308051][ T5984] overlayfs: failed to resolve './file0/file0': -2 [ 81.642077][ T6002] sctp: [Deprecated]: syz.3.23 (pid 6002) Use of int in max_burst socket option. [ 81.642077][ T6002] Use struct sctp_assoc_value instead [ 81.722149][ T6000] netlink: 'syz.2.22': attribute type 4 has an invalid length. [ 81.834729][ T6004] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 81.838089][ T6004] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.24'. [ 81.865597][ T6004] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.920370][ T5440] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 81.933824][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 81.996330][ T57] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 82.201606][ T57] usb 7-1: Using ep0 maxpacket: 32 [ 82.211252][ T57] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 82.220352][ T57] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.224400][ T57] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.232992][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.291442][ T57] usb 7-1: config 0 descriptor?? [ 82.350839][ T57] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 82.921652][ T5440] usb 8-1: not running at top speed; connect to a high speed hub [ 83.332660][ T5440] usb 8-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 83.344336][ T5440] usb 8-1: config 11 has an invalid interface number: 31 but max is 2 [ 83.351050][ T5440] usb 8-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 83.354814][ T5440] usb 8-1: config 11 has an invalid interface number: 188 but max is 2 [ 83.358274][ T5440] usb 8-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 83.362050][ T5440] usb 8-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 83.365490][ T5440] usb 8-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 83.369228][ T5440] usb 8-1: config 11 has an invalid interface number: 201 but max is 2 [ 83.372604][ T5440] usb 8-1: config 11 has no interface number 0 [ 83.375153][ T5440] usb 8-1: config 11 has no interface number 1 [ 83.380258][ T5440] usb 8-1: config 11 has no interface number 2 [ 83.384612][ T5440] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 83.401863][ T5440] usb 8-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 83.407423][ T5440] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 83.411885][ T5440] usb 8-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 83.418329][ T5440] usb 8-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 83.431611][ T5440] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 83.438413][ T5440] usb 8-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 83.442881][ T5440] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 83.448000][ T5440] usb 8-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 83.453195][ T5440] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 83.457787][ T5440] usb 8-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 83.462495][ T5440] usb 8-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 83.467214][ T5440] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 83.471836][ T5440] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 83.476745][ T5440] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 83.481850][ T5440] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 83.486671][ T5440] usb 8-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 83.490913][ T5440] usb 8-1: config 11 interface 201 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 83.495140][ T5440] usb 8-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 83.496517][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 83.499874][ T5440] usb 8-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 83.508483][ T5440] usb 8-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 83.513096][ T5440] usb 8-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 83.517742][ T5440] usb 8-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 83.522660][ T5440] usb 8-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 83.527337][ T5440] usb 8-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 83.531287][ T5440] usb 8-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 83.553620][ T5440] usb 8-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 83.564921][ T5440] usb 8-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 83.570998][ T5440] usb 8-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 83.575685][ T5440] usb 8-1: config 11 interface 201 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 83.580686][ T5440] usb 8-1: config 11 interface 201 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 83.595465][ T5440] usb 8-1: config 11 interface 31 has no altsetting 0 [ 83.599332][ T5440] usb 8-1: config 11 interface 188 has no altsetting 0 [ 83.603645][ T5440] usb 8-1: config 11 interface 201 has no altsetting 0 [ 83.628266][ T5440] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.632714][ T5440] usb 8-1: Product: 㰁 [ 83.634594][ T5440] usb 8-1: Manufacturer: Ч [ 83.637783][ T5440] usb 8-1: SerialNumber: Ў [ 83.656221][ T5836] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.806976][ T5836] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 83.812346][ T5836] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 83.819074][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.823237][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.828419][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.832944][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.838762][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.843408][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.849452][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.853522][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.863597][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.869411][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.873564][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.878760][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.882899][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.887796][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.892692][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.897948][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.902006][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.907930][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.913500][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.917856][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.922155][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.926757][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.932169][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.938867][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.944710][ T5836] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 83.949007][ T5836] usb 5-1: Product: syz [ 83.950905][ T5836] usb 5-1: Manufacturer: syz [ 83.953067][ T5836] usb 5-1: SerialNumber: syz [ 83.959642][ T5836] usb 5-1: config 0 descriptor?? [ 83.972254][ T5836] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 84.138785][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 84.143090][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 84.186069][ T5821] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.190316][ T5821] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.194626][ T5821] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.198436][ T5821] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.237414][ T6052] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.243150][ T6052] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.311824][ T6073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.320411][ T6073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.323039][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 84.328492][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 84.612662][ T5836] usb 7-1: USB disconnect, device number 2 [ 84.730835][ T6052] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.735678][ T6052] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.821461][ T6052] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.827062][ T5440] usb 8-1: USB disconnect, device number 3 [ 84.827453][ T6052] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.908138][ T6052] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.912902][ T6052] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.038075][ T5821] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.041661][ T5821] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.046008][ T5821] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.052204][ T5821] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.057669][ T5821] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.063104][ T5821] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.069157][ T5821] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.073358][ T5821] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.073633][ T57] usb 5-1: USB disconnect, device number 4 [ 85.086791][ T57] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 85.124532][ T6079] syz.3.31 uses obsolete (PF_INET,SOCK_PACKET) [ 85.157363][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 85.203563][ T6079] netlink: 'syz.3.31': attribute type 2 has an invalid length. [ 85.216087][ T1038] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 85.316806][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 85.320733][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 85.329293][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.333145][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.338036][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.342528][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.351705][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.356384][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.360452][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.364206][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.368942][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.372780][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.376795][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.381090][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.385291][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.389260][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.393268][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.398967][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.402419][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.406658][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.407076][ T1038] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 85.409969][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.414395][ T1038] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 85.416270][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.421764][ T1038] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 85.424546][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.427772][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.428935][ T1038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.431252][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.441085][ T1038] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 85.442182][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.450171][ T24] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 85.453049][ T24] usb 7-1: Product: syz [ 85.454414][ T24] usb 7-1: Manufacturer: syz [ 85.455063][ T1038] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 85.456702][ T24] usb 7-1: SerialNumber: syz [ 85.470323][ T24] usb 7-1: config 0 descriptor?? [ 85.479178][ T24] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 85.732373][ T6075] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.762584][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.772915][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.860085][ T6077] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 85.865404][ T6077] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 85.877611][ T6077] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 85.904156][ T6075] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.945658][ T6077] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 85.966367][ T6077] SPCP8x5 ttyUSB0: Set UART format 0x100 failed (error = -32) [ 85.975658][ T6077] Bluetooth: MGMT ver 1.23 [ 86.004666][ T6088] input: syz1 as /devices/virtual/input/input6 [ 86.010410][ T6088] input: failed to attach handler leds to device input6, error: -6 [ 86.092902][ T6075] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.247706][ T6075] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.393586][ T6091] syzkaller0: entered promiscuous mode [ 86.396386][ T6091] syzkaller0: entered allmulticast mode [ 86.496455][ T5821] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.505956][ T5821] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.513576][ T5821] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.541222][ T5836] usb 7-1: USB disconnect, device number 3 [ 86.556731][ T5836] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 86.586646][ T5821] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.707140][ T1255] Bluetooth: hci4: Frame reassembly failed (-84) [ 86.711641][ T6094] program syz.0.34 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.828406][ T1351] cfg80211: failed to load regulatory.db [ 86.926387][ T57] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.078626][ T57] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 87.092333][ T57] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 87.101051][ T57] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.110306][ T57] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.118016][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.123714][ T57] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.127372][ T57] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.133026][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.137992][ T57] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.141865][ T57] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.146754][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.151806][ T57] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.156680][ T57] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.161431][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.166167][ T57] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.170427][ T57] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.175415][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.180283][ T57] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.184175][ T57] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.189856][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.196535][ T57] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.200482][ T57] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.205005][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.209343][ T57] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.214692][ T57] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.219720][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.225926][ T57] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 87.229962][ T57] usb 8-1: Product: syz [ 87.232082][ T57] usb 8-1: Manufacturer: syz [ 87.234527][ T57] usb 8-1: SerialNumber: syz [ 87.239961][ T57] usb 8-1: config 0 descriptor?? [ 87.252340][ T57] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 87.476382][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 87.518861][ T6096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.524618][ T6096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.545983][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.549828][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.632181][ T6096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.636770][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 87.636812][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 87.638581][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.642913][ T6096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.645552][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.645585][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.647993][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.669128][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.673618][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.677709][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.681751][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.686558][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.690548][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.694554][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.699611][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.704353][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.708914][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.713621][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.720553][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.728436][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.737917][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.742828][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.746953][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.752981][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.757619][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.762517][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.764349][ T6096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.767039][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 87.771053][ T6096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.781119][ T24] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 87.784624][ T24] usb 7-1: Product: syz [ 87.786489][ T24] usb 7-1: Manufacturer: syz [ 87.788461][ T24] usb 7-1: SerialNumber: syz [ 87.793980][ T24] usb 7-1: config 0 descriptor?? [ 87.805527][ T24] yurex 7-1:0.0: USB YUREX device now attached to Yurex #1 [ 87.868542][ T6096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.873049][ T6096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.973325][ T5529] usb 6-1: USB disconnect, device number 4 [ 88.022690][ T5529] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 88.029216][ T5529] spcp8x5 6-1:1.0: device disconnected [ 88.073099][ T6101] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.114738][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.119658][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.123081][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.128186][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.132124][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.139614][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.144610][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.148429][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.158453][ T6101] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.165717][ T5836] usb 8-1: USB disconnect, device number 4 [ 88.177625][ T5836] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 88.196120][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.200100][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.261760][ T6101] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.354764][ T6101] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.709508][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 88.715608][ T5754] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.732311][ T6110] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 88.735411][ T6110] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.39'. [ 88.829071][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 89.006244][ T42] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 89.177970][ T42] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 89.184225][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 89.192764][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.197247][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 89.208815][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.211998][ T42] usb 6-1: Product: syz [ 89.213771][ T42] usb 6-1: Manufacturer: syz [ 89.218895][ T42] usb 6-1: SerialNumber: syz [ 89.241884][ T42] usb 6-1: config 0 descriptor?? [ 89.469215][ T42] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 89.664194][ T6112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.669359][ T6112] usb 6-1: Couldn't submit interrupt_out_urb -90 [ 89.693155][ T6112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.788578][ T6063] usb 6-1: USB disconnect, device number 5 [ 89.818097][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 90.076900][ T5821] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.080104][ T5821] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.096043][ T5821] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.098733][ T5821] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.213287][ T6063] usb 7-1: USB disconnect, device number 4 [ 90.239629][ T6063] yurex 7-1:0.0: USB YUREX #1 now disconnected [ 92.409967][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.415453][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.498056][ T6166] cdrom: dropping to single frame dma [ 92.543637][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.555112][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.748401][ T5821] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.757359][ T5821] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.778274][ T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.806719][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.818436][ T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.833186][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.840767][ T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.854077][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.872084][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 93.217039][ T6182] input: syz1 as /devices/virtual/input/input7 [ 93.228735][ T6182] input: failed to attach handler leds to device input7, error: -6 [ 94.329104][ T6208] jffs2: notice: (6208) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.388853][ T5836] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 94.566736][ T5836] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 94.580985][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 94.584891][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 94.592244][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 94.602858][ T5836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.606296][ T5836] usb 8-1: Product: syz [ 94.607821][ T5836] usb 8-1: Manufacturer: syz [ 94.609698][ T5836] usb 8-1: SerialNumber: syz [ 94.617055][ T5836] usb 8-1: config 0 descriptor?? [ 94.761084][ T6211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.58'. [ 94.773931][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 94.787382][ T6211] pimreg3: entered allmulticast mode [ 94.797260][ T6211] 0x000000000000-0x000000020000 : "" [ 94.819683][ T6211] ftl_cs: FTL header not found. [ 94.858750][ T5836] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 95.055190][ T6204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.086207][ T6204] usb 8-1: Couldn't submit interrupt_out_urb -90 [ 95.267975][ T6204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.437950][ T6217] fuse: Bad value for 'fd' [ 95.834355][ T24] usb 8-1: USB disconnect, device number 5 [ 96.057773][ T6224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'. [ 96.162699][ T6233] input: syz1 as /devices/virtual/input/input8 [ 96.165219][ T6233] input: failed to attach handler leds to device input8, error: -6 [ 96.647322][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 97.146046][ T6241] vhci_hcd vhci_hcd.0: remove, state 4 [ 97.188076][ T6241] usb usb38: USB disconnect, device number 1 [ 97.915035][ T12] vhci_hcd vhci_hcd.0: stop threads [ 97.915282][ T6241] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 97.919576][ T12] vhci_hcd vhci_hcd.0: release socket [ 97.921626][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 97.925639][ T12] vhci_hcd vhci_hcd.0: stop threads [ 97.928538][ T12] vhci_hcd vhci_hcd.0: release socket [ 97.930452][ T6241] vhci_hcd vhci_hcd.0: remove, state 4 [ 97.930509][ T6241] usb usb37: USB disconnect, device number 1 [ 97.935661][ T12] ================================================================== [ 97.939144][ T12] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x44/0x456 [ 97.942943][ T12] Read of size 4 at addr ffff8880222b86a0 by task kworker/u32:0/12 [ 97.947899][ T12] [ 97.949323][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 97.949346][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.949371][ T12] Workqueue: usbip_event event_handler [ 97.949465][ T12] Call Trace: [ 97.949473][ T12] [ 97.949481][ T12] dump_stack_lvl+0x100/0x190 [ 97.949516][ T12] print_report+0x13d/0x4b0 [ 97.949545][ T12] ? __virt_addr_valid+0x239/0x430 [ 97.949583][ T12] ? vhci_cleanup_unlink_list+0x44/0x456 [ 97.949610][ T12] kasan_report+0xdf/0x1c0 [ 97.949684][ T12] ? vhci_cleanup_unlink_list+0x44/0x456 [ 97.949711][ T12] vhci_cleanup_unlink_list+0x44/0x456 [ 97.949739][ T12] vhci_shutdown_connection.cold+0x165/0x37c [ 97.949769][ T12] event_handler+0x216/0x570 [ 97.949792][ T12] process_one_work+0xac7/0x1b10 [ 97.949819][ T12] ? __pfx_process_one_work+0x10/0x10 [ 97.949843][ T12] ? __pfx_event_handler+0x10/0x10 [ 97.949865][ T12] worker_thread+0x5ef/0xe50 [ 97.949888][ T12] ? kthread+0x13a/0x450 [ 97.949905][ T12] ? __pfx_worker_thread+0x10/0x10 [ 97.949924][ T12] kthread+0x373/0x450 [ 97.949940][ T12] ? __pfx_kthread+0x10/0x10 [ 97.949957][ T12] ret_from_fork+0x730/0xd60 [ 97.949986][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 97.950012][ T12] ? __switch_to+0x800/0x10f0 [ 97.950031][ T12] ? __pfx_kthread+0x10/0x10 [ 97.950046][ T12] ret_from_fork_asm+0x1a/0x30 [ 97.950077][ T12] [ 97.950084][ T12] [ 98.004615][ T12] Allocated by task 1: [ 98.006093][ T12] kasan_save_stack+0x30/0x50 [ 98.007796][ T12] kasan_save_track+0x14/0x30 [ 98.010121][ T12] __kasan_kmalloc+0xaa/0xb0 [ 98.011765][ T12] __kmalloc_noprof+0x324/0x820 [ 98.013671][ T12] __usb_create_hcd+0x5e/0xac0 [ 98.015578][ T12] vhci_hcd_probe+0x1a5/0x4e0 [ 98.017406][ T12] platform_probe+0x106/0x1d0 [ 98.019139][ T12] really_probe+0x241/0xa60 [ 98.020565][ T12] __driver_probe_device+0x210/0x460 [ 98.022465][ T12] driver_probe_device+0x4a/0x140 [ 98.024315][ T12] __device_attach_driver+0x1df/0x320 [ 98.026255][ T12] bus_for_each_drv+0x159/0x1e0 [ 98.027978][ T12] __device_attach+0x1e4/0x4d0 [ 98.029696][ T12] device_initial_probe+0xaf/0xd0 [ 98.031671][ T12] bus_probe_device+0x64/0x160 [ 98.033532][ T12] device_add+0x121d/0x1970 [ 98.035361][ T12] platform_device_add+0x35a/0x800 [ 98.037411][ T12] platform_device_register_full+0x507/0x720 [ 98.039655][ T12] vhci_hcd_init+0x1a1/0x2f0 [ 98.041318][ T12] do_one_initcall+0x11c/0x6f0 [ 98.042935][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 98.044659][ T12] kernel_init+0x21/0x1e0 [ 98.046287][ T12] ret_from_fork+0x730/0xd60 [ 98.047916][ T12] ret_from_fork_asm+0x1a/0x30 [ 98.049712][ T12] [ 98.050508][ T12] Freed by task 6241: [ 98.051878][ T12] kasan_save_stack+0x30/0x50 [ 98.053634][ T12] kasan_save_track+0x14/0x30 [ 98.055429][ T12] kasan_save_free_info+0x3b/0x70 [ 98.057320][ T12] __kasan_slab_free+0x5f/0x80 [ 98.059095][ T12] kfree+0x22b/0x6c0 [ 98.060379][ T12] usb_put_hcd+0x149/0x1f0 [ 98.061773][ T12] vhci_hcd_remove+0xb5/0x1b0 [ 98.063461][ T12] platform_remove+0x5f/0x80 [ 98.064959][ T12] device_remove+0xcb/0x180 [ 98.066430][ T12] device_release_driver_internal+0x44e/0x620 [ 98.068303][ T12] unbind_store+0xf8/0x110 [ 98.069593][ T12] drv_attr_store+0x74/0xb0 [ 98.071000][ T12] sysfs_kf_write+0xf2/0x150 [ 98.072719][ T12] kernfs_fop_write_iter+0x3e0/0x5f0 [ 98.074762][ T12] vfs_write+0x6af/0x1050 [ 98.076543][ T12] ksys_write+0x12a/0x250 [ 98.078076][ T12] __do_fast_syscall_32+0x13a/0x8b0 [ 98.079936][ T12] do_fast_syscall_32+0x32/0x70 [ 98.081842][ T12] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.084351][ T12] [ 98.085386][ T12] Last potentially related work creation: [ 98.087800][ T12] kasan_save_stack+0x30/0x50 [ 98.089547][ T12] kasan_record_aux_stack+0xa7/0xc0 [ 98.091534][ T12] insert_work+0x36/0x230 [ 98.093261][ T12] __queue_work+0xa60/0x1370 [ 98.095060][ T12] queue_work_on+0x1a9/0x1e0 [ 98.097049][ T12] usb_hcd_giveback_urb+0x330/0x4a0 [ 98.099621][ T12] unlink1+0x418/0x510 [ 98.100745][ T6241] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 98.101311][ T12] usb_hcd_unlink_urb+0x131/0x210 [ 98.101334][ T12] usb_kill_urb+0x121/0x320 [ 98.101350][ T12] hub_quiesce+0x1e9/0x320 [ 98.101372][ T12] hub_suspend+0x4ab/0x9e0 [ 98.111436][ T12] usb_suspend_both+0x288/0x950 [ 98.113515][ T12] usb_runtime_suspend+0x49/0x120 [ 98.115658][ T12] __rpm_callback+0xc8/0x620 [ 98.117309][ T12] rpm_callback+0x11f/0x150 [ 98.119165][ T12] rpm_suspend+0x2f4/0x1220 [ 98.121010][ T12] __pm_runtime_suspend+0xba/0x1a0 [ 98.123101][ T12] usb_runtime_idle+0x7e/0x90 [ 98.125090][ T12] rpm_idle+0x322/0x790 [ 98.126896][ T12] pm_runtime_work+0x120/0x150 [ 98.128881][ T12] process_one_work+0xac7/0x1b10 [ 98.130783][ T12] worker_thread+0x5ef/0xe50 [ 98.132692][ T12] kthread+0x373/0x450 [ 98.134382][ T12] ret_from_fork+0x730/0xd60 [ 98.136450][ T12] ret_from_fork_asm+0x1a/0x30 [ 98.138642][ T12] [ 98.139943][ T12] Second to last potentially related work creation: [ 98.142964][ T12] kasan_save_stack+0x30/0x50 [ 98.144974][ T12] kasan_record_aux_stack+0xa7/0xc0 [ 98.147196][ T12] insert_work+0x36/0x230 [ 98.148997][ T12] __queue_work+0xa60/0x1370 [ 98.150739][ T12] queue_work_on+0x1a9/0x1e0 [ 98.152738][ T12] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 98.154935][ T12] usb_hcd_submit_urb+0xab7/0x2150 [ 98.157325][ T12] usb_submit_urb+0x827/0x19b0 [ 98.159404][ T12] usb_start_wait_urb+0x10e/0x580 [ 98.161656][ T12] usb_control_msg+0x328/0x4b0 [ 98.163838][ T12] hub_suspend+0x826/0x9e0 [ 98.165840][ T12] usb_suspend_both+0x288/0x950 [ 98.167946][ T12] usb_runtime_suspend+0x49/0x120 [ 98.170032][ T12] __rpm_callback+0xc8/0x620 [ 98.171947][ T12] rpm_callback+0x11f/0x150 [ 98.173853][ T12] rpm_suspend+0x2f4/0x1220 [ 98.175758][ T12] __pm_runtime_suspend+0xba/0x1a0 [ 98.177899][ T12] usb_runtime_idle+0x7e/0x90 [ 98.179830][ T12] rpm_idle+0x322/0x790 [ 98.181475][ T12] pm_runtime_work+0x120/0x150 [ 98.183518][ T12] process_one_work+0xac7/0x1b10 [ 98.185703][ T12] worker_thread+0x5ef/0xe50 [ 98.187794][ T12] kthread+0x373/0x450 [ 98.189540][ T12] ret_from_fork+0x730/0xd60 [ 98.191444][ T12] ret_from_fork_asm+0x1a/0x30 [ 98.193444][ T12] [ 98.194442][ T12] The buggy address belongs to the object at ffff8880222b8000 [ 98.194442][ T12] which belongs to the cache kmalloc-8k of size 8192 [ 98.199994][ T12] The buggy address is located 1696 bytes inside of [ 98.199994][ T12] freed 8192-byte region [ffff8880222b8000, ffff8880222ba000) [ 98.205867][ T12] [ 98.206894][ T12] The buggy address belongs to the physical page: [ 98.209527][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x222b8 [ 98.213156][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 98.216588][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 98.219697][ T12] page_type: f5(slab) [ 98.221218][ T12] raw: 00fff00000000040 ffff88801c043180 dead000000000100 dead000000000122 [ 98.224467][ T12] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 98.227908][ T12] head: 00fff00000000040 ffff88801c043180 dead000000000100 dead000000000122 [ 98.231438][ T12] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 98.235148][ T12] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 98.238775][ T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 98.242363][ T12] page dumped because: kasan: bad access detected [ 98.245009][ T12] page_owner tracks the page as allocated [ 98.247348][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5243765215 [ 98.255411][ T12] post_alloc_hook+0xfd/0x120 [ 98.257379][ T12] get_page_from_freelist+0x110d/0x35b0 [ 98.259611][ T12] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 98.261988][ T12] new_slab+0xa5/0x640 [ 98.263701][ T12] refill_objects+0xe3/0x410 [ 98.265561][ T12] __pcs_replace_empty_main+0x372/0x680 [ 98.267808][ T12] __kmalloc_cache_noprof+0x47b/0x6b0 [ 98.270098][ T12] mr_table_alloc+0x61/0x3e0 [ 98.272049][ T12] ipmr_net_init+0x41c/0x5e0 [ 98.273957][ T12] ops_init+0x1e2/0x5f0 [ 98.275687][ T12] register_pernet_operations+0x3cb/0x740 [ 98.278141][ T12] register_pernet_subsys+0x28/0x40 [ 98.280398][ T12] ip_mr_init+0x5f/0x150 [ 98.282273][ T12] inet_init+0x4e6/0x640 [ 98.284054][ T12] do_one_initcall+0x11c/0x6f0 [ 98.286078][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 98.288182][ T12] page_owner free stack trace missing [ 98.290307][ T12] [ 98.291285][ T12] Memory state around the buggy address: [ 98.293617][ T12] ffff8880222b8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.297025][ T12] ffff8880222b8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.300636][ T12] >ffff8880222b8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.304003][ T12] ^ [ 98.306077][ T12] ffff8880222b8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.309260][ T12] ffff8880222b8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.312491][ T12] ================================================================== [ 98.318394][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.321629][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 98.326217][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.330580][ T12] Workqueue: usbip_event event_handler [ 98.332809][ T12] Call Trace: [ 98.334128][ T12] [ 98.335344][ T12] dump_stack_lvl+0x100/0x190 [ 98.337345][ T12] vpanic+0x553/0x970 [ 98.338946][ T12] ? __pfx_vpanic+0x10/0x10 [ 98.340567][ T12] ? vhci_cleanup_unlink_list+0x44/0x456 [ 98.342661][ T12] panic+0xd1/0xe0 [ 98.344081][ T12] ? __pfx_panic+0x10/0x10 [ 98.345738][ T12] ? vhci_cleanup_unlink_list+0x44/0x456 [ 98.347816][ T12] ? preempt_schedule_common+0x3c/0xb0 [ 98.349976][ T12] check_panic_on_warn.cold+0x19/0x34 [ 98.351948][ T12] end_report.part.0+0x3a/0x90 [ 98.353839][ T12] kasan_report.cold+0xe/0x18 [ 98.355838][ T12] ? vhci_cleanup_unlink_list+0x44/0x456 [ 98.358483][ T12] vhci_cleanup_unlink_list+0x44/0x456 [ 98.360842][ T12] vhci_shutdown_connection.cold+0x165/0x37c [ 98.363416][ T12] event_handler+0x216/0x570 [ 98.365293][ T12] process_one_work+0xac7/0x1b10 [ 98.367320][ T12] ? __pfx_process_one_work+0x10/0x10 [ 98.369448][ T12] ? __pfx_event_handler+0x10/0x10 [ 98.371397][ T12] worker_thread+0x5ef/0xe50 [ 98.373293][ T12] ? kthread+0x13a/0x450 [ 98.375111][ T12] ? __pfx_worker_thread+0x10/0x10 [ 98.377290][ T12] kthread+0x373/0x450 [ 98.378958][ T12] ? __pfx_kthread+0x10/0x10 [ 98.380940][ T12] ret_from_fork+0x730/0xd60 [ 98.383031][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 98.385199][ T12] ? __switch_to+0x800/0x10f0 [ 98.387259][ T12] ? __pfx_kthread+0x10/0x10 [ 98.389283][ T12] ret_from_fork_asm+0x1a/0x30 [ 98.391349][ T12] [ 98.393357][ T12] Kernel Offset: disabled [ 98.395208][ T12] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:43:23 Registers: info registers vcpu 0 CPU#0 RAX=000000000016335d RBX=ffffffff8ea91500 RCX=ffffffff8bc45115 RDX=0000000000000001 RSI=ffffffff8e3d62c8 RDI=ffffffff8c615180 RBP=fffffbfff1d522a0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bc436bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880969a9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080004000 CR3=0000000052209000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a7db75 RDI=ffffffff9bc0cca0 RBP=ffffffff9bc0cc60 RSP=ffffc900001e7540 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b90c224 R15=ffffffff85a7db10 RIP=ffffffff85a7db9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096aa9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000033b0fff8 CR3=0000000051ba3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=8000000000000000 RBX=0000000000000018 RCX=ffffffff821af870 RDX=0000000000000000 RSI=ffffffff821af87e RDI=ffff888021a2cb00 RBP=0000000000000000 RSP=ffffc90005657280 R8 =0000000000000004 R9 =0000000000000018 R10=0000000000000018 R11=0000000000000001 R12=00000000f6fcefec R13=dffffc0000000000 R14=0000000000000018 R15=ffff888021a2cb00 RIP=ffffffff820a5e00 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ba9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f2a190 CR3=000000005084e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000d0b75 RBX=ffff88801cb0a580 RCX=ffffffff8bc45115 RDX=0000000000000001 RSI=ffffffff8e3d62c8 RDI=ffffffff8c615180 RBP=ffffed10039614b0 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bc436bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ca9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000033c1cff8 CR3=000000004be3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000