last executing test programs: 1m30.407972465s ago: executing program 3 (id=779): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x1ff, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xfd, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000800)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "3ce7b9286b574dc2720ef6057772f09df9d3421eee34e003", "047b90670593e17881953d1e429031066797feb6632a4cea988cc9256fe11df4"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10042, 0x0) 1m30.350840834s ago: executing program 3 (id=781): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x198, 0x30, 0xffff, 0x2, 0x0, {}, [{0x184, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x114, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x1, 0x20000000, 0x8001, 0x1a1d}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0xc6, 0x6, "279b640c9d90a2a62489dea8d133324e4e46893e8a83e93dd724e80e15b809ef089cee1338107dfe75fcedb491ade459a3240b2d466779f66e6bbb0b03c0facce9ea3e58066f14132217340559e7013d31659e8d09c98b38207725a5a47f186bb0345382b3719b32dd50f8587af98ccb96a2c823d714cb3afa0c91e5fc60b68206c59fad39c7ff0b370cd98201f7b2d78f904df2b4151a6fbcbdfd9c0337e247d3210fd36baa114e6b541dc9bcde73d68614cad6881494ba513c290c4e5b6bbe07ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x198}}, 0x0) accept4(r0, 0x0, &(0x7f00000001c0), 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffffc, 0x2422212, 0xc5ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x3}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m29.430816818s ago: executing program 3 (id=784): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x5) connect$inet6(r1, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @private1, 0x200}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m29.35080491s ago: executing program 3 (id=785): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m29.34945918s ago: executing program 3 (id=786): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df", 0x24, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x138, 0x30, 0xffff, 0x2, 0x0, {}, [{0x124, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0xb4, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x1, 0x20000000, 0x8001, 0x1a1d}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x65, 0x6, "279b640c9d90a2a62489dea8d133324e4e46893e8a83e93dd724e80e15b809ef089cee1338107dfe75fcedb491ade459a3240b2d466779f66e6bbb0b03c0facce9ea3e58066f14132217340559e7013d31659e8d09c98b38207725a5a47f186bb0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x138}}, 0x0) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffffc, 0x2422212, 0xc5ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x3}}, 0x50) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m28.980030861s ago: executing program 3 (id=788): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) 1m28.959306328s ago: executing program 32 (id=788): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) 1m26.566093954s ago: executing program 4 (id=797): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000d00)=ANY=[@ANYBLOB="4018c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0xc0) 1m24.678229874s ago: executing program 4 (id=808): times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x2, 0x8, 0xd780, 0xa1, 0x0, 0x6, 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setns(0xc9, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000040), 0x2c}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000240), 0x4) bind$rds(r4, &(0x7f0000000440)={0x2, 0x4e22, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) exit(0x1ff) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) connect$rds(r3, &(0x7f0000000500)={0x2, 0x4e22, @loopback}, 0x10) sendto(r3, &(0x7f0000000600)='hello world', 0xb, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='N', 0x1, 0x7f7ffffe) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000000ede4e423", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r8, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) 1m23.770401506s ago: executing program 4 (id=813): r0 = socket$alg(0x26, 0x5, 0x0) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) 1m22.836278584s ago: executing program 4 (id=822): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m22.790724869s ago: executing program 4 (id=823): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x198, 0x30, 0xffff, 0x2, 0x0, {}, [{0x184, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x114, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x1, 0x20000000, 0x8001, 0x1a1d}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0xc6, 0x6, "279b640c9d90a2a62489dea8d133324e4e46893e8a83e93dd724e80e15b809ef089cee1338107dfe75fcedb491ade459a3240b2d466779f66e6bbb0b03c0facce9ea3e58066f14132217340559e7013d31659e8d09c98b38207725a5a47f186bb0345382b3719b32dd50f8587af98ccb96a2c823d714cb3afa0c91e5fc60b68206c59fad39c7ff0b370cd98201f7b2d78f904df2b4151a6fbcbdfd9c0337e247d3210fd36baa114e6b541dc9bcde73d68614cad6881494ba513c290c4e5b6bbe07ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x198}}, 0x0) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffffc, 0x2422212, 0xc5ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x3}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m22.530854915s ago: executing program 4 (id=824): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 1m22.484025598s ago: executing program 33 (id=824): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 56.999109391s ago: executing program 0 (id=990): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1}, 0x6e) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_clone(0x4220400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 56.910789505s ago: executing program 0 (id=991): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x80000000}, 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 56.03064779s ago: executing program 0 (id=996): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x198, 0x30, 0xffff, 0x2, 0x0, {}, [{0x184, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x114, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x1, 0x20000000, 0x8001, 0x1a1d}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0xc6, 0x6, "279b640c9d90a2a62489dea8d133324e4e46893e8a83e93dd724e80e15b809ef089cee1338107dfe75fcedb491ade459a3240b2d466779f66e6bbb0b03c0facce9ea3e58066f14132217340559e7013d31659e8d09c98b38207725a5a47f186bb0345382b3719b32dd50f8587af98ccb96a2c823d714cb3afa0c91e5fc60b68206c59fad39c7ff0b370cd98201f7b2d78f904df2b4151a6fbcbdfd9c0337e247d3210fd36baa114e6b541dc9bcde73d68614cad6881494ba513c290c4e5b6bbe07ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x198}}, 0x0) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, 0x0, 0x0) write$FUSE_INIT(r8, 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 55.157255578s ago: executing program 0 (id=1001): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 55.060250959s ago: executing program 0 (id=1003): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x198, 0x30, 0xffff, 0x2, 0x0, {}, [{0x184, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x114, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x1, 0x20000000, 0x8001, 0x1a1d}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0xc6, 0x6, "279b640c9d90a2a62489dea8d133324e4e46893e8a83e93dd724e80e15b809ef089cee1338107dfe75fcedb491ade459a3240b2d466779f66e6bbb0b03c0facce9ea3e58066f14132217340559e7013d31659e8d09c98b38207725a5a47f186bb0345382b3719b32dd50f8587af98ccb96a2c823d714cb3afa0c91e5fc60b68206c59fad39c7ff0b370cd98201f7b2d78f904df2b4151a6fbcbdfd9c0337e247d3210fd36baa114e6b541dc9bcde73d68614cad6881494ba513c290c4e5b6bbe07ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x198}}, 0x0) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) mkdirat(0xffffffffffffff9c, 0x0, 0x137) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffffc, 0x2422212, 0xc5ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x3}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 54.76010063s ago: executing program 0 (id=1005): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f0000000340)={0x20, 0x10, 0xb, "7c36d11ebfa341661cb769"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 54.759981358s ago: executing program 34 (id=1005): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f0000000340)={0x20, 0x10, 0xb, "7c36d11ebfa341661cb769"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 16.470458721s ago: executing program 6 (id=1268): syz_ublk_setup_io_uring(0x7c0, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 16.38192774s ago: executing program 6 (id=1271): r0 = socket$alg(0x26, 0x5, 0x0) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) 14.380272118s ago: executing program 6 (id=1279): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000000400000000000000018000000c0000", @ANYRES32], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 11.337049722s ago: executing program 6 (id=1290): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x0, 0x0, 0x19, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x3, {0x1, 0xf}, 0x2}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x206c}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) 11.048156817s ago: executing program 6 (id=1286): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 10.853258921s ago: executing program 6 (id=1287): r0 = socket$alg(0x26, 0x5, 0x0) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) 10.239617495s ago: executing program 5 (id=1298): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000240)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000100)='./file1\x00', 0xc0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, 0x0) 10.140280425s ago: executing program 5 (id=1299): r0 = socket$alg(0x26, 0x5, 0x0) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040), 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) 9.200659481s ago: executing program 5 (id=1305): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = msgget$private(0x0, 0x40a) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x200000000000, 0x1, 0x8, 0x7f, 0x3}) 8.329655563s ago: executing program 5 (id=1313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000000, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000300)="b8180000000f01c10f01d9c3", 0xc}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.157954898s ago: executing program 5 (id=1314): r0 = socket$alg(0x26, 0x5, 0x0) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af000000", 0x17) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) 7.172803827s ago: executing program 5 (id=1324): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0x67, ' \x00\x00\x00\x00L'}}, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) 2.990476945s ago: executing program 2 (id=1346): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000600), 0x2008800, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x300040ac, 0x0, 0xffff, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa8f86, 0x1) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) lseek(r2, 0xfffffffffffffff9, 0x4) 2.87269403s ago: executing program 2 (id=1347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x2004001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2.754539213s ago: executing program 2 (id=1348): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000", 0x14) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = msgget$private(0x0, 0x40a) msgrcv(r1, 0x0, 0x0, 0x3, 0x2000) msgsnd(r1, &(0x7f0000000080)={0x1}, 0x4, 0x800) 2.670373611s ago: executing program 2 (id=1349): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000000c0)={0x8, 'vlan1\x00', {'erspan0\x00'}, 0x7fff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x11c) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) 2.668284661s ago: executing program 2 (id=1350): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x198, 0x30, 0xffff, 0x2, 0x0, {}, [{0x184, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x114, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x1, 0x20000000, 0x8001, 0x1a1d}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0xc6, 0x6, "279b640c9d90a2a62489dea8d133324e4e46893e8a83e93dd724e80e15b809ef089cee1338107dfe75fcedb491ade459a3240b2d466779f66e6bbb0b03c0facce9ea3e58066f14132217340559e7013d31659e8d09c98b38207725a5a47f186bb0345382b3719b32dd50f8587af98ccb96a2c823d714cb3afa0c91e5fc60b68206c59fad39c7ff0b370cd98201f7b2d78f904df2b4151a6fbcbdfd9c0337e247d3210fd36baa114e6b541dc9bcde73d68614cad6881494ba513c290c4e5b6bbe07ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x198}}, 0x0) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffffc, 0x2422212, 0xc5ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x3}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.753348736s ago: executing program 2 (id=1352): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) 754.375906ms ago: executing program 1 (id=1356): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="05000000020801000000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000800d00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}}, 0x0) 704.957393ms ago: executing program 1 (id=1357): syz_open_dev$vim2m(&(0x7f0000000580), 0x7fffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r0, r2, &(0x7f0000000200)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c8b, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x43, 0xffffffff}}], 0x1, 0x0, 0x0) 460.079915ms ago: executing program 1 (id=1358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x903, 0x70bd2e, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0xffe0, 0xa}, {0x6, 0xfff1}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x8000) 370.350068ms ago: executing program 1 (id=1359): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) 293.246881ms ago: executing program 1 (id=1360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4090, 0xffa}], 0x1}, 0xfff}], 0x26, 0x10022, 0x0) 0s ago: executing program 1 (id=1361): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='0', 0x1) kernel console output (not intermixed with test programs): n invalid descriptor of length 0, skipping remainder of the config [ 127.834801][ T5939] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 127.838137][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.022054][ T7518] comedi comedi3: dt2817: I/O base address or length out of range [ 128.138934][ T7520] netlink: 'syz.3.585': attribute type 12 has an invalid length. [ 128.142260][ T7520] netlink: 'syz.3.585': attribute type 29 has an invalid length. [ 128.145441][ T7520] netlink: 148 bytes leftover after parsing attributes in process `syz.3.585'. [ 128.149047][ T7520] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 128.152310][ T7520] netlink: 'syz.3.585': attribute type 2 has an invalid length. [ 128.155276][ T7520] netlink: 11 bytes leftover after parsing attributes in process `syz.3.585'. [ 128.422188][ T7525] comedi comedi3: dt2817: I/O base address or length out of range [ 128.731402][ T846] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 128.912661][ T846] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 128.917880][ T846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.923922][ T846] usb 5-1: config 0 descriptor?? [ 129.153434][ T61] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 129.274586][ T846] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 129.277910][ T846] [drm:udl_init] *ERROR* Selecting channel failed [ 129.285236][ T846] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 129.287684][ T846] [drm] Initialized udl on minor 2 [ 129.289831][ T846] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 129.292836][ T846] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 129.297168][ T846] usb 5-1: USB disconnect, device number 13 [ 129.300375][ T5939] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 129.304323][ T5939] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 129.331223][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 129.333346][ T61] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 129.336978][ T61] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.340398][ T61] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.343743][ T61] usb 8-1: config 0 interface 0 has no altsetting 0 [ 129.345797][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.349752][ T61] usb 8-1: config 0 descriptor?? [ 129.765975][ T61] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 129.768164][ T61] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 129.770401][ T61] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 129.772632][ T61] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 129.774802][ T61] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 129.778187][ T61] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 129.829453][ T846] usb 7-1: USB disconnect, device number 16 [ 129.862696][ T7543] netlink: 56 bytes leftover after parsing attributes in process `syz.2.593'. [ 129.926985][ T7545] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.969127][ T5939] usb 8-1: USB disconnect, device number 15 [ 130.061408][ T6718] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 130.166896][ T7549] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 130.213511][ T5879] usb 6-1: USB disconnect, device number 15 [ 130.243886][ T6718] usb 5-1: Using ep0 maxpacket: 8 [ 130.247734][ T6718] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 130.253141][ T6718] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 130.256820][ T6718] usb 5-1: config 0 has no interface number 0 [ 130.259487][ T6718] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.265044][ T6718] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 130.269459][ T6718] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.274532][ T6718] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.279908][ T6718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.285831][ T6718] usb 5-1: config 0 descriptor?? [ 130.304427][ T6718] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 130.508640][ T5879] usb 5-1: USB disconnect, device number 14 [ 130.519946][ T5879] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 130.981339][ T5879] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 131.131964][ T5879] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.136737][ T5879] usb 8-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 131.140892][ T5879] usb 8-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 131.144406][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.311265][ T1350] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 131.484388][ T1350] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.487595][ T1350] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 131.493068][ T1350] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 131.495914][ T1350] usb 5-1: config 100 has no interface number 0 [ 131.497965][ T1350] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 131.501499][ T1350] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 131.505221][ T1350] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 131.508463][ T1350] usb 5-1: config 100 interface 173 has no altsetting 0 [ 131.513256][ T1350] usb 5-1: string descriptor 0 read error: -22 [ 131.515614][ T1350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.520469][ T7567] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.525722][ T1350] metro_usb 5-1:100.173: Metrologic USB to Serial converter detected [ 131.655627][ T1350] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 131.726735][ T7580] comedi comedi3: dt2817: I/O base address or length out of range [ 131.750522][ T7567] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 131.763790][ T61] usb 5-1: USB disconnect, device number 15 [ 131.774516][ T61] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 131.786601][ T61] metro_usb 5-1:100.173: device disconnected [ 131.853752][ T6718] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 132.011815][ T6718] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.016217][ T6718] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 132.019606][ T6718] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 132.023120][ T6718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.304621][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.307220][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.571312][ T6718] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 132.581942][ T7595] comedi comedi3: dt2817: I/O base address or length out of range [ 132.731273][ T6718] usb 5-1: Using ep0 maxpacket: 8 [ 132.733455][ T6718] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.737678][ T6718] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 132.741107][ T6718] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.745238][ T6718] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.749117][ T6718] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.753248][ T6718] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.757272][ T6718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.971525][ T6718] usb 5-1: usb_control_msg returned -32 [ 132.973964][ T6718] usbtmc 5-1:16.0: can't read capabilities [ 133.389322][ T7598] syzkaller1: entered promiscuous mode [ 133.391869][ T7598] syzkaller1: entered allmulticast mode [ 133.537511][ T846] usb 8-1: USB disconnect, device number 16 [ 133.752699][ T7608] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 133.970669][ T6718] usb 5-1: USB disconnect, device number 16 [ 134.339771][ T6718] usb 7-1: USB disconnect, device number 17 [ 134.518249][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 134.540054][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 134.551363][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.554343][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.557032][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.559582][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.722050][ T6718] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 134.873842][ T6718] usb 7-1: Using ep0 maxpacket: 8 [ 134.876434][ T6718] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 134.880571][ T6718] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.884372][ T6718] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.887482][ T6718] usb 7-1: config 0 interface 0 has no altsetting 0 [ 134.889532][ T6718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.894479][ T6718] usb 7-1: config 0 descriptor?? [ 135.307695][ T6718] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 135.312018][ T61] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 135.318763][ T6718] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 135.321928][ T6718] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 135.325265][ T6718] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 135.328837][ T6718] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 135.332302][ T6718] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 135.471706][ T61] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.475332][ T61] usb 8-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 135.478409][ T61] usb 8-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 135.481473][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.513133][ T5838] usb 7-1: USB disconnect, device number 18 [ 136.075071][ T7651] comedi comedi3: dt2817: I/O base address or length out of range [ 136.451297][ T5879] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 136.601890][ T5879] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 136.606039][ T5879] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.609562][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.823157][ T5879] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 136.827785][ T5879] wwan wwan0: port wwan0qmi0 attached [ 136.920282][ T7662] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 136.920282][ T7662] [ 137.027621][ T5879] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, fa:13:a5:75:36:1d [ 137.221435][ T5939] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 137.226156][ T5879] usb 7-1: USB disconnect, device number 19 [ 137.229794][ T5879] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 137.307582][ T5879] wwan wwan0: port wwan0qmi0 disconnected [ 137.381729][ T5939] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.385410][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.388790][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.392734][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.396446][ T5939] usb 5-1: config 0 descriptor?? [ 137.784342][ T7691] syzkaller1: entered promiscuous mode [ 137.786917][ T7691] syzkaller1: entered allmulticast mode [ 137.806577][ T5939] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 137.812147][ T5939] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0926:3333.000F/input/input20 [ 137.861252][ T61] usb 8-1: USB disconnect, device number 17 [ 137.920428][ T5939] keytouch 0003:0926:3333.000F: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 138.011106][ T5879] usb 5-1: USB disconnect, device number 17 [ 138.046180][ T7703] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 138.054046][ T7703] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 138.611357][ T5879] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 138.762959][ T5879] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 138.767884][ T5879] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.772588][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.783334][ T5879] as10x_usb: device has been detected [ 138.786491][ T5879] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 138.798504][ T5879] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 138.814017][ T5879] as10x_usb: error during firmware upload part1 [ 138.817131][ T5879] Registered device Abilis Systems DVB-Titan [ 139.001361][ T5736] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 139.041586][ T7723] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 139.063426][ T6718] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 139.181825][ T5736] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.185418][ T5736] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 139.188808][ T5736] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 139.191747][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.231748][ T6718] usb 6-1: Using ep0 maxpacket: 16 [ 139.234350][ T6718] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 139.238209][ T6718] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 139.242675][ T6718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.247746][ T6718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.252918][ T6718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.257895][ T6718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.263251][ T6718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.268294][ T6718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.273363][ T6718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.278368][ T6718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.284263][ T6718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 139.287710][ T6718] usb 6-1: SerialNumber: syz [ 139.293030][ T6718] usb 6-1: config 0 descriptor?? [ 139.299121][ T6718] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input21 [ 139.361443][ T61] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 139.512022][ T61] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 139.516831][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.522482][ T61] usb 7-1: config 0 descriptor?? [ 139.551121][ T5125] bcm5974 6-1:0.0: could not read from device [ 139.560957][ T7721] bcm5974 6-1:0.0: could not read from device [ 139.562314][ T6718] usb 6-1: USB disconnect, device number 16 [ 139.568986][ T5125] bcm5974 6-1:0.0: could not read from device [ 139.752377][ T7733] comedi comedi3: dt2817: I/O base address or length out of range [ 139.903099][ T61] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 139.906711][ T61] [drm:udl_init] *ERROR* Selecting channel failed [ 139.916323][ T61] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 139.918523][ T61] [drm] Initialized udl on minor 2 [ 139.920764][ T61] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 139.923662][ T61] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 139.927645][ T61] usb 7-1: USB disconnect, device number 20 [ 139.929905][ T6718] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 139.933552][ T6718] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 140.660709][ T846] usb 8-1: USB disconnect, device number 18 [ 140.747966][ T846] Unregistered device Abilis Systems DVB-Titan [ 140.752795][ T846] as10x_usb: device has been disconnected [ 141.087718][ T7751] netlink: 52 bytes leftover after parsing attributes in process `syz.1.660'. [ 141.560069][ T846] usb 5-1: USB disconnect, device number 18 [ 141.591280][ T5736] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 141.762183][ T7765] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.763786][ T7768] fuse: Bad value for 'fd' [ 141.764299][ T7765] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.769147][ T7765] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.771106][ T7765] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.815935][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 142.031751][ T5736] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 142.035601][ T5736] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 142.039269][ T5736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.042875][ T5736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.046210][ T5736] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 142.051306][ T5736] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 142.098240][ T5736] usb 6-1: Manufacturer: syz [ 142.101942][ T5736] usb 6-1: config 0 descriptor?? [ 142.333511][ T7781] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 142.333511][ T7781] [ 142.517753][ T5736] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 142.528054][ T5736] appleir 0003:05AC:8243.0010: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 142.802698][ T5736] usb 6-1: USB disconnect, device number 17 [ 143.821560][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.821607][ T5730] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.824019][ T5739] Bluetooth: hci0: command 0x2016 tx timeout [ 143.828604][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.011352][ T61] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 144.192026][ T61] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.196741][ T61] usb 8-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 144.200601][ T61] usb 8-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 144.203592][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.303355][ T6718] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 144.704204][ T6718] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 144.709016][ T6718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.715328][ T6718] usb 5-1: config 0 descriptor?? [ 144.772133][ T7819] comedi comedi3: dt2817: I/O base address or length out of range [ 145.122792][ T6718] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 145.125311][ T6718] [drm:udl_init] *ERROR* Selecting channel failed [ 145.136878][ T6718] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 145.139659][ T6718] [drm] Initialized udl on minor 2 [ 145.141869][ T6718] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 145.145138][ T6718] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 145.148851][ T6718] usb 5-1: USB disconnect, device number 19 [ 145.151657][ T61] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 145.574967][ T42] audit: type=1800 audit(1787472584.592:5): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.682" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 145.729586][ T7838] binder: 7837:7838 ioctl c0306201 80000080 returned -14 [ 145.734398][ T7838] binder: 7837:7838 ioctl c0306201 80000000 returned -22 [ 146.552476][ T41] usb 8-1: USB disconnect, device number 19 [ 146.921370][ T41] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 147.071992][ T41] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 147.076759][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.082384][ T41] usb 8-1: config 0 descriptor?? [ 147.821353][ T5739] Bluetooth: hci4: command 0x1003 tx timeout [ 147.821372][ T5742] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 149.021403][ T7852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 149.021827][ T5742] Bluetooth: hci0: command 0x2016 tx timeout [ 149.903884][ T7852] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.906301][ T7852] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.908401][ T7852] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.927441][ T41] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 149.932234][ T41] [drm:udl_init] *ERROR* Selecting channel failed [ 149.955959][ T41] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 149.958079][ T41] [drm] Initialized udl on minor 2 [ 149.960487][ T41] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 149.964208][ T41] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 149.966634][ T7872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 149.972456][ T41] usb 8-1: USB disconnect, device number 20 [ 149.975445][ T5736] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 149.979615][ T5736] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 149.983393][ T7872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 150.281276][ T41] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 150.441260][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 150.445652][ T41] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.451769][ T41] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 150.455533][ T41] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.459841][ T41] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.463230][ T5736] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 150.465719][ T41] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.472412][ T41] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.476883][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.622356][ T5736] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 150.632770][ T5736] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 150.635365][ T5736] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.638549][ T5736] usb 6-1: config 0 has no interfaces? [ 150.640305][ T5736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.656913][ T5736] usb 6-1: config 0 descriptor?? [ 150.689552][ T41] usb 8-1: usb_control_msg returned -32 [ 150.693095][ T41] usbtmc 8-1:16.0: can't read capabilities [ 150.864688][ T41] usb 6-1: USB disconnect, device number 18 [ 150.891467][ T846] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 151.062754][ T846] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 151.067212][ T846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.076283][ T846] usb 7-1: config 0 descriptor?? [ 151.111277][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.396966][ T7903] usbtmc 8-1:16.0: usb_clear_halt returned -32 [ 151.481248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 151.501295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 151.567580][ T846] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 151.571532][ T846] [drm:udl_init] *ERROR* Selecting channel failed [ 151.585767][ T846] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 151.588613][ T846] [drm] Initialized udl on minor 2 [ 151.591967][ T846] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.595408][ T846] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 151.600472][ T10] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.601074][ T41] usb 8-1: USB disconnect, device number 21 [ 151.606355][ T10] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.611107][ T10] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 151.613777][ T846] usb 7-1: USB disconnect, device number 21 [ 151.991355][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.993269][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.078441][ T7912] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3232572832 (12930291328 ns) > initial count (691901412 ns). Using initial count to start timer. [ 152.452843][ T41] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 152.631755][ T41] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.635777][ T41] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 152.639141][ T41] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 152.642362][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.202027][ T7946] comedi comedi3: dt2817: I/O base address or length out of range [ 153.524503][ T7952] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3232572832 (12930291328 ns) > initial count (691901412 ns). Using initial count to start timer. [ 153.841924][ T7958] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 155.041982][ T846] usb 5-1: USB disconnect, device number 20 [ 155.371277][ T6718] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 155.531732][ T6718] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 155.535939][ T6718] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.748091][ T6718] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 155.999632][ T846] usb 8-1: USB disconnect, device number 22 [ 156.901262][ T6718] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 157.051251][ T6718] usb 5-1: Using ep0 maxpacket: 8 [ 157.111765][ T6718] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 157.115460][ T6718] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 157.118132][ T6718] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 157.120749][ T6718] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 157.124084][ T6718] usb 5-1: config 250 has no interface number 0 [ 157.126100][ T6718] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 157.129630][ T6718] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 157.133126][ T6718] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 157.136766][ T6718] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 157.139974][ T6718] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 157.144249][ T6718] usb 5-1: config 250 interface 228 has no altsetting 0 [ 157.147654][ T6718] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 157.150264][ T6718] usb 5-1: Product: syz [ 157.151786][ T6718] usb 5-1: SerialNumber: syz [ 157.157874][ T6718] hub 5-1:250.228: bad descriptor, ignoring hub [ 157.161080][ T6718] hub 5-1:250.228: probe with driver hub failed with error -5 [ 157.181266][ T61] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 157.331893][ T61] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.335747][ T61] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 157.339125][ T61] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 157.342496][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.362208][ T6718] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 21 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 157.912896][ T8032] comedi comedi3: dt2817: I/O base address or length out of range [ 158.275711][ T8012] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 158.660743][ C3] usblp0: nonzero read bulk status received: -71 [ 158.728792][ T8041] netlink: 'syz.3.749': attribute type 1 has an invalid length. [ 158.749967][ T8041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.763199][ T8041] bond1: (slave ip6erspan0): making interface the new active one [ 158.769080][ T8041] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 158.874510][ T61] usb 5-1: USB disconnect, device number 21 [ 158.878515][ T61] usblp0: removed [ 158.956853][ T8052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.753'. [ 158.959716][ T8052] netlink: 'syz.3.753': attribute type 1 has an invalid length. [ 158.962922][ T8052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.753'. [ 159.091318][ T1350] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 159.241854][ T1350] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 159.245554][ T1350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.456267][ T1350] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 159.478908][ T8059] net_ratelimit: 630 callbacks suppressed [ 159.478918][ T8059] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 159.584572][ T8063] syzkaller1: entered promiscuous mode [ 159.586337][ T8063] syzkaller1: entered allmulticast mode [ 159.641275][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 159.708935][ T846] usb 6-1: USB disconnect, device number 19 [ 159.744171][ T5939] usb 7-1: USB disconnect, device number 22 [ 159.802059][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 159.805812][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.809508][ T10] usb 5-1: config 0 descriptor?? [ 160.247290][ T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 160.249873][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 160.255603][ T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 160.257799][ T10] [drm] Initialized udl on minor 2 [ 160.259927][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 160.262645][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 160.267153][ T10] usb 5-1: USB disconnect, device number 22 [ 160.269114][ T5939] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 160.272991][ T5939] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 160.855794][ T8088] vivid-000: disconnect [ 160.890168][ T8088] vivid-000: reconnect [ 161.505557][ T6718] kernel read not supported for file /dsp1 (pid: 6718 comm: kworker/3:4) [ 162.501328][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 162.673407][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 162.678931][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.896319][ T10] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 163.148806][ T10] usb 7-1: USB disconnect, device number 23 [ 164.171563][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 164.342109][ T10] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 164.346065][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.349734][ T10] usb 7-1: config 0 descriptor?? [ 164.404400][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.411324][ T1350] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 164.512256][ T5736] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 164.528797][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.561293][ T1350] usb 5-1: Using ep0 maxpacket: 8 [ 164.571427][ T1350] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.575217][ T1350] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 164.578430][ T1350] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.582631][ T1350] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.586523][ T1350] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.587526][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.590371][ T1350] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.594016][ T5739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.597145][ T1350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.599929][ T5739] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.609008][ T5739] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.616262][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.647555][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.692837][ T5736] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.696607][ T5736] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 164.699800][ T5736] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 164.703644][ T5736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.739075][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.793422][ T10] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 164.796050][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 164.801687][ T10] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 164.803813][ T10] [drm] Initialized udl on minor 2 [ 164.807717][ T10] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 164.813672][ T10] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 164.814527][ T1350] usb 5-1: usb_control_msg returned -32 [ 164.817768][ T10] usb 7-1: USB disconnect, device number 24 [ 164.819765][ T1350] usbtmc 5-1:16.0: can't read capabilities [ 164.819819][ T846] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 164.826054][ T846] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 164.965250][ T13] bridge_slave_1: left allmulticast mode [ 164.967608][ T13] bridge_slave_1: left promiscuous mode [ 164.970433][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.978656][ T13] bridge_slave_0: left allmulticast mode [ 164.980424][ T13] bridge_slave_0: left promiscuous mode [ 164.982804][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.062115][ T13] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 165.150081][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.155776][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.160837][ T13] bond0 (unregistering): Released all slaves [ 165.171069][ T13] bond1 (unregistering): Released all slaves [ 165.240623][ T8152] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.244206][ T8152] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.246462][ T8152] bridge_slave_0: entered allmulticast mode [ 165.249008][ T8152] bridge_slave_0: entered promiscuous mode [ 165.252959][ T8152] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.255214][ T8152] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.261484][ T8152] bridge_slave_1: entered allmulticast mode [ 165.265889][ T8152] bridge_slave_1: entered promiscuous mode [ 165.271760][ T8177] comedi comedi3: dt2817: I/O base address or length out of range [ 165.304774][ T8152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.310248][ T8152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.338439][ T8152] team0: Port device team_slave_0 added [ 165.345869][ T8152] team0: Port device team_slave_1 added [ 165.550465][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 165.635060][ T8152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.637312][ T8152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.647360][ T8152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.651657][ T8152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.655161][ T8152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.663195][ T8152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.685578][ T13] hsr_slave_0: left promiscuous mode [ 165.693944][ T13] hsr_slave_1: left promiscuous mode [ 165.698249][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.701743][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.706814][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.709929][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.728073][ T13] veth1_macvtap: left promiscuous mode [ 165.731004][ T13] veth0_macvtap: left promiscuous mode [ 165.733895][ T13] veth1_vlan: left promiscuous mode [ 165.736190][ T13] veth0_vlan: left promiscuous mode [ 165.799273][ T846] usb 5-1: USB disconnect, device number 23 [ 165.946681][ T13] team0 (unregistering): Port device team_slave_1 removed [ 165.958012][ T13] team0 (unregistering): Port device team_slave_0 removed [ 166.026734][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 166.048667][ T8152] hsr_slave_0: entered promiscuous mode [ 166.050890][ T8152] hsr_slave_1: entered promiscuous mode [ 166.053481][ T8152] debugfs: 'hsr0' already exists in 'hsr' [ 166.055414][ T8152] Cannot create hsr debugfs directory [ 166.158372][ T8152] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.167686][ T8152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.170339][ T8152] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.185012][ T8152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.187742][ T8152] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.192330][ T8152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.195043][ T8152] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.199095][ T8152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.230008][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 166.286993][ T8152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.296665][ T8152] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.302449][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.304744][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.313972][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.316855][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.386724][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 166.576375][ T8152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.701778][ T5742] Bluetooth: hci1: command tx timeout [ 166.704449][ T8152] veth0_vlan: entered promiscuous mode [ 166.710143][ T8152] veth1_vlan: entered promiscuous mode [ 166.731513][ T8152] veth0_macvtap: entered promiscuous mode [ 166.735369][ T8152] veth1_macvtap: entered promiscuous mode [ 166.743398][ T8152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.749108][ T8152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.755696][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.820847][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.825628][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.831495][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.835549][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.849996][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.852452][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.856890][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.088173][ T41] usb 6-1: USB disconnect, device number 20 [ 167.141287][ T6718] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 167.292193][ T6718] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.296594][ T6718] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 167.305562][ T6718] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 167.311960][ T6718] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 167.315844][ T6718] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 167.323030][ T6718] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 167.331500][ T6718] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.335094][ T6718] usb 9-1: Product: syz [ 167.336849][ T6718] usb 9-1: Manufacturer: syz [ 167.346775][ T6718] cdc_wdm 9-1:1.0: skipping garbage [ 167.348365][ T6718] cdc_wdm 9-1:1.0: skipping garbage [ 167.355063][ T6718] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 167.357016][ T6718] cdc_wdm 9-1:1.0: Unknown control protocol [ 167.960606][ C3] cdc_wdm 9-1:1.0: Unexpected error -71 [ 167.963254][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 167.966167][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 167.968468][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 167.970476][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 167.973498][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 167.975555][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 167.977642][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 167.979646][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 167.981806][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 167.983879][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 167.986005][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 167.988254][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 167.990940][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 167.993611][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 167.996309][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 167.999009][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 168.004641][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 168.007376][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 168.010858][ T6718] usb 9-1: USB disconnect, device number 2 [ 168.013383][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 168.013395][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 168.013405][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 168.030560][ T8264] device-mapper: ioctl: Invalid ioctl structure: name m, dev f802 [ 168.087938][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 168.301272][ T846] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 168.471916][ T846] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 168.475580][ T846] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 168.478788][ T846] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 168.482037][ T846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.491322][ T846] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 168.497492][ T846] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 168.781341][ T5742] Bluetooth: hci1: command tx timeout [ 168.891900][ T8268] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 168.896126][ T8268] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 168.899610][ T8268] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 168.982306][ T8268] SPCP8x5 ttyUSB0: Set UART format 0x1709 failed (error = -32) [ 169.102402][ T41] usb 6-1: USB disconnect, device number 21 [ 169.111511][ T41] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 169.115399][ T41] spcp8x5 6-1:1.0: device disconnected [ 170.031280][ T41] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 170.211659][ T41] usb 6-1: Using ep0 maxpacket: 8 [ 170.213848][ T41] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 170.217716][ T41] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 170.220269][ T41] usb 6-1: config 0 has no interface number 0 [ 170.222252][ T41] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.227731][ T41] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 170.231122][ T41] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.234434][ T41] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.238349][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.242408][ T41] usb 6-1: config 0 descriptor?? [ 170.246737][ T41] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 170.479337][ T61] usb 6-1: USB disconnect, device number 22 [ 170.481280][ C3] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 170.490668][ T61] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 170.904523][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.987058][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.040982][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.047691][ T8328] input: syz0 as /devices/virtual/input/input22 [ 171.047844][ T5739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.057660][ T5739] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.064536][ T5739] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.067789][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.083707][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.237070][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.515358][ T13] bridge_slave_1: left allmulticast mode [ 171.517292][ T13] bridge_slave_1: left promiscuous mode [ 171.519162][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.526190][ T13] bridge_slave_0: left allmulticast mode [ 171.528023][ T13] bridge_slave_0: left promiscuous mode [ 171.529876][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.669614][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.679170][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.683240][ T13] bond0 (unregistering): Released all slaves [ 171.695764][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 171.754666][ T846] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 171.847701][ T8326] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.849977][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.853714][ T8326] bridge_slave_0: entered allmulticast mode [ 171.859236][ T8326] bridge_slave_0: entered promiscuous mode [ 171.870132][ T8326] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.872756][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.876813][ T8326] bridge_slave_1: entered allmulticast mode [ 171.887760][ T8326] bridge_slave_1: entered promiscuous mode [ 171.916772][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7 [ 171.920337][ T8326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.921963][ T846] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 171.925134][ T8326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.927333][ T846] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 171.932262][ T846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.935679][ T846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.938747][ T846] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 171.944233][ T8326] team0: Port device team_slave_0 added [ 171.945150][ T846] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 171.948724][ T846] usb 5-1: Manufacturer: syz [ 171.948788][ T8326] team0: Port device team_slave_1 added [ 171.956522][ T846] usb 5-1: config 0 descriptor?? [ 171.983603][ T8326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.985865][ T8326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.993758][ T8326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.011310][ T13] hsr_slave_0: left promiscuous mode [ 172.019001][ T13] hsr_slave_1: left promiscuous mode [ 172.026233][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.030959][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.036217][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.041251][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.065572][ T13] veth1_macvtap: left promiscuous mode [ 172.067376][ T13] veth0_macvtap: left promiscuous mode [ 172.072258][ T13] veth1_vlan: left promiscuous mode [ 172.074030][ T13] veth0_vlan: left promiscuous mode [ 172.295635][ T13] team0 (unregistering): Port device team_slave_1 removed [ 172.309551][ T13] team0 (unregistering): Port device team_slave_0 removed [ 172.371348][ T41] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 172.377951][ T846] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 172.379167][ T8384] fuse: Bad value for 'fd' [ 172.388535][ T846] appleir 0003:05AC:8243.0011: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 172.437376][ T8326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.442796][ T8326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.453995][ T8326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.468424][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8 [ 172.517243][ T8326] hsr_slave_0: entered promiscuous mode [ 172.522236][ T8326] hsr_slave_1: entered promiscuous mode [ 172.524617][ T8326] debugfs: 'hsr0' already exists in 'hsr' [ 172.526733][ T8326] Cannot create hsr debugfs directory [ 172.531514][ T41] usb 6-1: Using ep0 maxpacket: 8 [ 172.535730][ T41] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 172.540357][ T41] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 172.545825][ T41] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.549703][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.569126][ T41] kobil_sct 6-1:1.0: KOBIL USB smart card terminal converter detected [ 172.585153][ T41] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 172.689671][ T8326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.696895][ T8326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.700314][ T8326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.706081][ T8326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.715833][ T8326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.724640][ T8326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.728606][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9 [ 172.737328][ T8326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.747470][ T8326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.806426][ T8326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.824606][ T8326] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.835701][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.838004][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.846584][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.848828][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.122909][ T8326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.191363][ T5742] Bluetooth: hci1: command tx timeout [ 173.339036][ T6718] usb 6-1: USB disconnect, device number 23 [ 173.351917][ T6718] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 173.360208][ T6718] kobil_sct 6-1:1.0: device disconnected [ 173.381782][ T8326] veth0_vlan: entered promiscuous mode [ 173.389298][ T8326] veth1_vlan: entered promiscuous mode [ 173.414135][ T8326] veth0_macvtap: entered promiscuous mode [ 173.419819][ T8326] veth1_macvtap: entered promiscuous mode [ 173.434666][ T8326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.444411][ T8326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.454559][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.458129][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.473188][ T8406] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.481013][ T8406] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.538023][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.540556][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.565672][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.568171][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.679654][ T8461] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 174.681812][ T8461] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.685638][ T8461] vhci_hcd vhci_hcd.0: Device attached [ 174.685638][ T8463] vhci_hcd: xmit failed -107 [ 174.692778][ T13] vhci_hcd vhci_hcd.0: stop threads [ 174.695660][ T13] vhci_hcd vhci_hcd.0: release socket [ 174.697810][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 174.847946][ T42] audit: type=1804 audit(1787472613.862:6): pid=8468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.847" name="/newroot/216/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=6769 res=1 errno=0 [ 174.866779][ T10] usb 5-1: reset high-speed USB device number 24 using dummy_hcd [ 175.032899][ T10] usb 5-1: device firmware changed [ 175.036033][ T6718] usb 5-1: USB disconnect, device number 24 [ 175.181889][ T6718] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 175.271362][ T5742] Bluetooth: hci1: command tx timeout [ 175.342220][ T6718] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 175.349078][ T6718] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 175.352978][ T6718] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 175.357097][ T6718] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 175.361108][ T6718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.369129][ T8459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.382028][ T6718] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 175.399413][ T6718] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 175.589217][ T8459] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 175.596921][ T854] usb 5-1: USB disconnect, device number 25 [ 175.607864][ T854] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 175.620640][ T854] cyberjack 5-1:1.0: device disconnected [ 176.371392][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 176.411390][ T5815] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 176.522696][ T10] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 176.528223][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.532975][ T10] usb 10-1: config 0 descriptor?? [ 176.562095][ T5815] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 176.566818][ T5815] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.570251][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 176.574207][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.580692][ T5815] opticon 5-1:1.0: opticon converter detected [ 176.586906][ T5815] usb 5-1: opticon converter now attached to ttyUSB0 [ 176.748587][ T8490] batman_adv: batadv0: Adding interface: macvtap1 [ 176.750697][ T8490] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.760052][ T8490] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 176.783577][ T8490] batman_adv: batadv0: Removing interface: macvtap1 [ 176.840355][ T8492] opticon ttyUSB0: usb_serial_generic_submit_read_urb - usb_submit_urb failed: -90 [ 176.881324][ T854] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 177.031660][ T854] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 177.035123][ T854] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.037948][ T854] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 177.042748][ T5879] usb 5-1: USB disconnect, device number 26 [ 177.043116][ T854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.047236][ T854] usb 7-1: Product: syz [ 177.048447][ T854] usb 7-1: Manufacturer: syz [ 177.049781][ T854] usb 7-1: SerialNumber: syz [ 177.052400][ T5879] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 177.055232][ T5879] opticon 5-1:1.0: device disconnected [ 177.260316][ T854] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 177.341343][ T5742] Bluetooth: hci1: command tx timeout [ 177.514563][ T854] usb 7-1: USB disconnect, device number 25 [ 177.519382][ T854] usblp0: removed [ 178.061279][ T5815] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 178.152756][ T10] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 178.161395][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 178.186815][ T10] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 178.191373][ T10] [drm] Initialized udl on minor 2 [ 178.201734][ T10] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 178.206164][ T10] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 178.212773][ T5815] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.221359][ T5815] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 178.224842][ T10] usb 10-1: USB disconnect, device number 2 [ 178.228936][ T5815] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 178.235691][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.241625][ T846] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 178.322052][ T5879] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 178.481277][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 178.483396][ T5879] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 178.487033][ T5879] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 178.489691][ T5879] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 178.492389][ T5879] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 178.495101][ T5879] usb 7-1: config 250 has no interface number 0 [ 178.497121][ T5879] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 178.500708][ T5879] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 178.504122][ T5879] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 178.507877][ T5879] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 178.511229][ T5879] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 178.515539][ T5879] usb 7-1: config 250 interface 228 has no altsetting 0 [ 178.518919][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 178.521796][ T5879] usb 7-1: Product: syz [ 178.523108][ T5879] usb 7-1: SerialNumber: syz [ 178.530215][ T5879] hub 7-1:250.228: bad descriptor, ignoring hub [ 178.532649][ T5879] hub 7-1:250.228: probe with driver hub failed with error -5 [ 178.732315][ T5879] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 178.811595][ T8543] fuse: Bad value for 'fd' [ 178.813338][ T8544] comedi comedi3: dt2817: I/O base address or length out of range [ 179.331660][ T8528] usb 7-1: reset high-speed USB device number 26 using dummy_hcd [ 179.421330][ T5742] Bluetooth: hci1: command tx timeout [ 179.701776][ C0] usblp0: nonzero read bulk status received: -71 [ 179.861323][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 179.926095][ T5815] usb 7-1: USB disconnect, device number 26 [ 179.932241][ T5815] usblp0: removed [ 180.022911][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.026523][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.029939][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.033483][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.037456][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.041146][ T10] usb 6-1: config 0 descriptor?? [ 180.456640][ T10] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 180.588043][ T5838] usb 5-1: USB disconnect, device number 27 [ 180.681307][ T5815] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 180.832423][ T5815] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 180.836506][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.840275][ T5815] usb 7-1: config 0 descriptor?? [ 181.099704][ T8593] loop7: detected capacity change from 0 to 16384 [ 181.223570][ T5815] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 181.227999][ T5815] [drm:udl_init] *ERROR* Selecting channel failed [ 181.237858][ T5815] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 181.240360][ T5815] [drm] Initialized udl on minor 2 [ 181.243591][ T5815] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 181.249415][ T5815] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 181.256295][ T10] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 181.258802][ T5815] usb 7-1: USB disconnect, device number 27 [ 181.263713][ T10] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 181.271594][ T10] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 181.302057][ T8597] loop7: detected capacity change from 16384 to 16320 [ 181.416309][ T8599] process 'syz.5.883' launched './file2' with NULL argv: empty string added [ 181.887871][ T8616] loop5: detected capacity change from 0 to 7 [ 181.895208][ T8616] Dev loop5: unable to read RDB block 7 [ 181.897542][ T8616] loop5: unable to read partition table [ 181.899706][ T8616] loop5: partition table beyond EOD, truncated [ 181.902276][ T8616] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 182.478816][ T5815] usb 6-1: USB disconnect, device number 24 [ 182.921333][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 183.082095][ T10] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 183.086512][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.093287][ T10] usb 7-1: config 0 descriptor?? [ 183.470176][ T10] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 183.474912][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 183.484284][ T10] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 183.487110][ T10] [drm] Initialized udl on minor 2 [ 183.494620][ T10] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 183.498251][ T10] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 183.506220][ T10] usb 7-1: USB disconnect, device number 28 [ 183.509124][ T5815] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 183.515963][ T5815] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 183.923389][ T8672] input: syz0 as /devices/virtual/input/input23 [ 184.471284][ T41] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 184.623509][ T41] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.628530][ T41] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 184.634289][ T41] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 184.637781][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.201990][ T8714] comedi comedi3: dt2817: I/O base address or length out of range [ 185.401298][ T41] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 185.552208][ T41] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 185.556562][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.563222][ T41] usb 7-1: config 0 descriptor?? [ 185.932831][ T41] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 185.935504][ T41] [drm:udl_init] *ERROR* Selecting channel failed [ 185.942265][ T41] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 185.944719][ T41] [drm] Initialized udl on minor 2 [ 185.947679][ T41] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 185.951082][ T41] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 185.955699][ T5879] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 185.959088][ T41] usb 7-1: USB disconnect, device number 29 [ 185.963073][ T5879] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 186.106243][ T8725] binder: 8724:8725 ioctl c0306201 800003c0 returned -14 [ 186.116906][ T42] audit: type=1326 audit(1787472625.132:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.1.920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 186.133128][ T42] audit: type=1326 audit(1787472625.132:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.1.920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 186.143578][ T42] audit: type=1326 audit(1787472625.132:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.1.920" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 186.153560][ T42] audit: type=1326 audit(1787472625.132:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.1.920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 186.162633][ T42] audit: type=1326 audit(1787472625.132:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.1.920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 186.172569][ T42] audit: type=1326 audit(1787472625.132:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.1.920" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 186.182799][ T42] audit: type=1326 audit(1787472625.132:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.1.920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 186.191639][ T42] audit: type=1326 audit(1787472625.132:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.1.920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 186.200262][ T42] audit: type=1326 audit(1787472625.132:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.1.920" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 186.212564][ T42] audit: type=1326 audit(1787472625.132:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.1.920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x7ffc0000 [ 186.997503][ T41] usb 5-1: USB disconnect, device number 28 [ 187.025598][ T8755] CacheFiles: Failed to register: -95 [ 187.091385][ T854] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 187.252050][ T854] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.256877][ T854] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.260766][ T854] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 187.264253][ T854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.268256][ T854] usb 7-1: config 0 descriptor?? [ 187.391550][ T41] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 187.552643][ T41] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 187.557149][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.562454][ T41] usb 5-1: config 0 descriptor?? [ 187.581337][ T5879] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 187.732270][ T5879] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 187.736791][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 187.740038][ T5879] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.744430][ T5879] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 187.748079][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.754300][ T8759] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 187.759314][ T5879] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 187.773454][ T5879] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 187.833188][ T8765] comedi comedi3: dt2817: I/O base address or length out of range [ 187.963339][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.934'. [ 187.964780][ T5818] usb 6-1: USB disconnect, device number 25 [ 187.979287][ T5818] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 187.983489][ T5818] cyberjack 6-1:1.0: device disconnected [ 187.993975][ T8770] bond1: entered promiscuous mode [ 187.995522][ T41] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 187.995831][ T8770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.005703][ T41] [drm:udl_init] *ERROR* Selecting channel failed [ 188.016708][ T41] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 188.021317][ T41] [drm] Initialized udl on minor 2 [ 188.027062][ T41] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 188.030206][ T41] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 188.035767][ T5879] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 188.039362][ T5879] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 188.042982][ T41] usb 5-1: USB disconnect, device number 29 [ 188.045023][ T5879] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 189.451300][ T854] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 189.603463][ T854] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 189.609783][ T854] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.616386][ T854] usb 10-1: config 0 descriptor?? [ 189.623656][ T61] usb 7-1: USB disconnect, device number 30 [ 189.863480][ T41] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 189.904764][ T8807] comedi comedi3: dt2817: I/O base address or length out of range [ 190.013815][ T41] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 190.014056][ T854] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 190.019768][ T854] [drm:udl_init] *ERROR* Selecting channel failed [ 190.020237][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.025965][ T41] usb 5-1: config 0 descriptor?? [ 190.026160][ T854] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 190.029638][ T854] [drm] Initialized udl on minor 2 [ 190.031888][ T854] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 190.038421][ T854] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 190.043160][ T6718] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 190.045677][ T854] usb 10-1: USB disconnect, device number 3 [ 190.049482][ T6718] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 190.052445][ T6718] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 190.268129][ T8829] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 190.372942][ T41] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 190.379433][ T41] [drm:udl_init] *ERROR* Selecting channel failed [ 190.394559][ T41] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 3 [ 190.397318][ T41] [drm] Initialized udl on minor 3 [ 190.399551][ T41] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 190.402237][ T41] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 190.405552][ T5736] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 190.408653][ T41] usb 5-1: USB disconnect, device number 30 [ 190.410740][ T5736] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 190.413851][ T5736] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 190.961233][ T41] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 191.122025][ T41] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 191.126762][ T41] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.130901][ T41] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 191.135089][ T41] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 191.139261][ T41] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 191.147119][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.153921][ T8843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.156945][ T8843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.161128][ T41] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 191.165583][ T41] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 191.167992][ T41] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 191.171750][ T41] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 191.175536][ T41] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 191.178176][ T41] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 191.181843][ T41] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 191.471273][ T5815] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 191.478007][ T41] usb 7-1: USB disconnect, device number 31 [ 191.485182][ T41] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 191.502360][ T41] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 191.505579][ T41] keyspan 7-1:1.0: device disconnected [ 191.622788][ T5815] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 191.626644][ T5815] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.629763][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.638278][ T5815] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 191.641377][ T5815] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 191.643788][ T5815] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 191.647828][ T5815] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 191.650368][ T5815] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 191.654261][ T5815] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 191.660066][ T5815] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 191.663566][ T5815] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 191.668066][ T5815] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 191.752203][ T8853] comedi comedi3: dt2817: I/O base address or length out of range [ 191.942278][ T5818] usb 5-1: USB disconnect, device number 31 [ 191.946957][ T5818] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 191.951353][ T5818] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 191.954487][ T5818] keyspan 5-1:1.0: device disconnected [ 192.300399][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.966'. [ 192.731301][ T1350] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 192.892474][ T1350] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 192.900433][ T1350] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.911966][ T1350] usb 10-1: config 0 descriptor?? [ 193.303256][ T1350] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 193.306089][ T1350] [drm:udl_init] *ERROR* Selecting channel failed [ 193.321726][ T1350] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 193.323946][ T1350] [drm] Initialized udl on minor 2 [ 193.329089][ T1350] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 193.331863][ T1350] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 193.340039][ T1350] usb 10-1: USB disconnect, device number 4 [ 193.342531][ T5818] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 193.345712][ T5818] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 193.669008][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'. [ 193.742773][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.745363][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.891043][ T8891] syz.5.978 (8891): drop_caches: 2 [ 193.912009][ T41] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 194.071302][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 194.071417][ T5815] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 194.075552][ T41] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 194.080211][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.083672][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.089018][ T41] usb 5-1: config 0 descriptor?? [ 194.113258][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 194.113275][ T42] audit: type=1326 audit(1787472633.132:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.5.979" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x0 [ 194.228896][ T5815] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 194.233003][ T5815] usb 7-1: no configurations [ 194.234580][ T5815] usb 7-1: can't read configurations, error -22 [ 194.294772][ T41] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 194.301342][ T5742] Bluetooth: hci1: command tx timeout [ 194.783342][ T6718] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 194.805696][ T10] usb 5-1: USB disconnect, device number 32 [ 194.941282][ T6718] usb 6-1: Using ep0 maxpacket: 8 [ 194.943351][ T6718] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.947069][ T6718] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 194.949726][ T6718] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.953070][ T6718] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.956058][ T6718] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.959050][ T6718] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.963176][ T6718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.182730][ T6718] usb 6-1: usb_control_msg returned -32 [ 195.187602][ T6718] usbtmc 6-1:16.0: can't read capabilities [ 195.666779][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.985'. [ 195.671344][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.889300][ T8921] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 196.121344][ T41] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 196.184054][ T6718] usb 6-1: USB disconnect, device number 26 [ 196.283124][ T41] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 196.297180][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.308130][ T41] usb 7-1: config 0 descriptor?? [ 196.687967][ T41] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 196.690887][ T41] [drm:udl_init] *ERROR* Selecting channel failed [ 196.697827][ T41] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 196.700400][ T41] [drm] Initialized udl on minor 2 [ 196.702709][ T41] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 196.705556][ T41] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 196.709708][ T5879] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 196.713461][ T41] usb 7-1: USB disconnect, device number 34 [ 196.715710][ T5879] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 196.724065][ T5879] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 197.290337][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.995'. [ 197.741245][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.936112][ T8956] policy can only be matched on NF_INET_PRE_ROUTING [ 197.936133][ T8956] unable to load match [ 198.081491][ T8958] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1424729573 (182365385344 ns) > initial count (134528494848 ns). Using initial count to start timer. [ 198.439143][ T5740] bond0: (slave syz_tun): Releasing backup interface [ 198.571747][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.576779][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.631281][ T5815] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 198.711469][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.714641][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.791780][ T5815] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 198.796181][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.808981][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.815191][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.818538][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.828382][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.831053][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.834648][ T5815] usb 7-1: config 0 descriptor?? [ 198.867918][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.871954][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.009364][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.012800][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.252650][ T13] bridge_slave_1: left allmulticast mode [ 199.254901][ T13] bridge_slave_1: left promiscuous mode [ 199.259447][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.265872][ T13] bridge_slave_0: left allmulticast mode [ 199.268042][ T13] bridge_slave_0: left promiscuous mode [ 199.270030][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.273717][ T5815] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 199.276920][ T5815] [drm:udl_init] *ERROR* Selecting channel failed [ 199.288282][ T5815] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 199.295198][ T5815] [drm] Initialized udl on minor 2 [ 199.299710][ T5815] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 199.308388][ T5815] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 199.315744][ T5815] usb 7-1: USB disconnect, device number 35 [ 199.319517][ T10] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 199.322027][ T10] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 199.341345][ T5742] Bluetooth: hci1: command tx timeout [ 199.499893][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.524498][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.530892][ T13] bond0 (unregistering): Released all slaves [ 199.646154][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.648758][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.651240][ T8973] bridge_slave_0: entered allmulticast mode [ 199.654936][ T8973] bridge_slave_0: entered promiscuous mode [ 199.658117][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.660424][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.664177][ T8973] bridge_slave_1: entered allmulticast mode [ 199.674700][ T8973] bridge_slave_1: entered promiscuous mode [ 199.807388][ T8973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.834174][ T8973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.874698][ T8973] team0: Port device team_slave_0 added [ 199.889971][ T8973] team0: Port device team_slave_1 added [ 199.918649][ T5442] 8021q: adding VLAN 0 to HW filter on device eth10 [ 199.943506][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.954410][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.962653][ T8973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.966775][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.968843][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.976625][ T8973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.121863][ T8973] hsr_slave_0: entered promiscuous mode [ 200.124110][ T8973] hsr_slave_1: entered promiscuous mode [ 200.126093][ T8973] debugfs: 'hsr0' already exists in 'hsr' [ 200.127892][ T8973] Cannot create hsr debugfs directory [ 200.337503][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11 [ 200.449547][ T13] hsr_slave_0: left promiscuous mode [ 200.455550][ T13] hsr_slave_1: left promiscuous mode [ 200.459947][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.464302][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.471588][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.477587][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.486188][ T13] veth1_macvtap: left promiscuous mode [ 200.488290][ T13] veth0_macvtap: left promiscuous mode [ 200.490115][ T13] veth1_vlan: left promiscuous mode [ 200.492475][ T13] veth0_vlan: left promiscuous mode [ 200.686590][ T13] team0 (unregistering): Port device team_slave_1 removed [ 200.700883][ T13] team0 (unregistering): Port device team_slave_0 removed [ 200.861276][ T5742] Bluetooth: hci3: command tx timeout [ 200.881028][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12 [ 201.013202][ T8973] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 201.023216][ T8973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.039016][ T8973] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 201.059416][ T8973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.066435][ T8973] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 201.071060][ T8973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.074463][ T8973] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 201.092734][ T8973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.108722][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13 [ 201.157022][ T8973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.167141][ T8973] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.182349][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.184604][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.196868][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.199199][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.602392][ T8973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.730805][ T8973] veth0_vlan: entered promiscuous mode [ 201.737271][ T8973] veth1_vlan: entered promiscuous mode [ 201.756364][ T8973] veth0_macvtap: entered promiscuous mode [ 201.760428][ T8973] veth1_macvtap: entered promiscuous mode [ 201.771290][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.777177][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.825314][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.828376][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.866299][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.870195][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.871483][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.880300][ T5807] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.892819][ T5807] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.922734][ T5807] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.974760][ T9096] loop0: detected capacity change from 0 to 1 [ 202.080538][ T9096] ldm_validate_privheads(): Disk read failed. [ 202.082485][ T9096] loop0: [ 202.083411][ T9096] loop0: partition table partially beyond EOD, truncated [ 202.123343][ T9099] Bluetooth: hci0: invalid len left 7, exp >= 114 [ 202.161455][ T5879] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 202.322220][ T5879] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 202.326998][ T5879] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.330244][ T5879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.338025][ T5879] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 202.341830][ T5879] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 202.344758][ T5879] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 202.348752][ T5879] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 202.351948][ T5879] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 202.355885][ T5879] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 202.362215][ T5879] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 202.364573][ T5879] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 202.367535][ T5879] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 202.411956][ T9105] fuse: Bad value for 'fd' [ 202.646192][ T5879] usb 10-1: USB disconnect, device number 5 [ 202.655975][ T5879] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 202.665495][ T5879] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 202.669320][ T5879] keyspan 10-1:1.0: device disconnected [ 202.766029][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 202.941480][ T5742] Bluetooth: hci3: command tx timeout [ 204.246935][ T9142] fuse: Bad value for 'fd' [ 204.533640][ T6718] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 204.661293][ T6718] usb 7-1: device descriptor read/64, error -71 [ 204.781519][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.901388][ T6718] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 205.021293][ T5742] Bluetooth: hci3: command tx timeout [ 205.041363][ T6718] usb 7-1: device descriptor read/64, error -71 [ 205.161574][ T6718] usb usb7-port1: attempt power cycle [ 205.511681][ T6718] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 205.531944][ T6718] usb 7-1: device descriptor read/8, error -71 [ 205.771469][ T6718] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 205.801656][ T6718] usb 7-1: device descriptor read/8, error -71 [ 205.912614][ T6718] usb usb7-port1: unable to enumerate USB device [ 206.258810][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 206.551624][ T9171] fuse: Bad value for 'fd' [ 207.111606][ T5742] Bluetooth: hci3: command tx timeout [ 207.116468][ T9184] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 207.249907][ T9188] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 207.252506][ T9188] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.256815][ T9188] vhci_hcd vhci_hcd.0: Device attached [ 207.498188][ T5736] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 207.501677][ T41] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 207.504795][ T34] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 207.659891][ T41] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.676810][ T41] usb 11-1: config 0 has no interfaces? [ 207.680640][ T41] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.716831][ T41] usb 11-1: config 0 descriptor?? [ 207.934067][ T9189] usb 49-1: recv xbuf, 0 [ 207.941779][ T41] usb 11-1: USB disconnect, device number 2 [ 207.952072][ T8406] vhci_hcd vhci_hcd.6: stop threads [ 207.958332][ T8406] vhci_hcd vhci_hcd.6: release socket [ 207.964324][ T8406] vhci_hcd vhci_hcd.6: disconnect device [ 208.011306][ T5736] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 208.174198][ T9213] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 208.271857][ T34] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 208.275767][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.280618][ T34] usb 7-1: config 0 descriptor?? [ 208.877079][ T34] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 208.880864][ T34] [drm:udl_init] *ERROR* Selecting channel failed [ 208.891792][ T34] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 208.893906][ T34] [drm] Initialized udl on minor 2 [ 208.896147][ T34] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 208.898825][ T34] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 208.903389][ T854] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 208.906427][ T34] usb 7-1: USB disconnect, device number 40 [ 208.910431][ T854] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 209.459682][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 209.727226][ T9270] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 209.729285][ T9270] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 209.732266][ T9270] vhci_hcd vhci_hcd.0: Device attached [ 209.785110][ T9274] netlink: 'syz.5.1066': attribute type 1 has an invalid length. [ 209.800262][ T9274] bond2: entered promiscuous mode [ 209.803161][ T9274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.826254][ T9274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.828599][ T9274] bond2: (slave xfrm2): The slave device specified does not support setting the MAC address [ 209.832091][ T9274] bond2: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 209.836816][ T9274] bond2: (slave xfrm2): making interface the new active one [ 209.839153][ T9274] xfrm2: entered promiscuous mode [ 209.841792][ T9274] bond2: (slave xfrm2): Enslaving as an active interface with an up link [ 209.851303][ T854] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 209.991277][ T5736] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 209.993920][ T5879] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 210.012040][ T854] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.016826][ T854] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.019899][ T854] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.024330][ T854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.152215][ T5879] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 210.158035][ T5879] usb 7-1: config 0 has no interfaces? [ 210.160301][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.165750][ T5879] usb 7-1: config 0 descriptor?? [ 210.218212][ T9280] loop2: detected capacity change from 0 to 7 [ 210.225994][ T9280] Dev loop2: unable to read RDB block 7 [ 210.227875][ T9280] loop2: unable to read partition table [ 210.229938][ T9280] loop2: partition table beyond EOD, truncated [ 210.234245][ T9280] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.236436][ T854] usb 6-1: usb_control_msg returned -32 [ 210.239029][ T854] usbtmc 6-1:16.0: can't read capabilities [ 210.374228][ T9271] usb 41-1: recv xbuf, 0 [ 210.375025][ T5879] usb 7-1: USB disconnect, device number 41 [ 210.379197][ T5807] vhci_hcd vhci_hcd.2: stop threads [ 210.381471][ T5807] vhci_hcd vhci_hcd.2: release socket [ 210.383189][ T5807] vhci_hcd vhci_hcd.2: disconnect device [ 210.441362][ T5736] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 210.671299][ T846] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 210.791537][ T5818] usb 6-1: USB disconnect, device number 27 [ 210.821725][ T846] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 210.825485][ T846] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.829196][ T846] usb 10-1: config 0 descriptor?? [ 211.096205][ T9297] fuse: Bad value for 'fd' [ 211.345373][ T846] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 211.348532][ T846] [drm:udl_init] *ERROR* Selecting channel failed [ 211.359090][ T846] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 211.362508][ T846] [drm] Initialized udl on minor 2 [ 211.365704][ T846] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 211.369275][ T846] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 211.376983][ T5815] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 211.380397][ T5815] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 211.383413][ T846] usb 10-1: USB disconnect, device number 6 [ 211.386015][ T5815] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 212.862758][ T5742] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 213.151381][ T1350] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 213.311668][ T1350] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 213.315359][ T1350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.319944][ T1350] usb 7-1: config 0 descriptor?? [ 213.970137][ T9365] null_blk: disk nullb1 created [ 214.037557][ T1350] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 214.040255][ T1350] [drm:udl_init] *ERROR* Selecting channel failed [ 214.049043][ T1350] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 214.053304][ T1350] [drm] Initialized udl on minor 2 [ 214.055682][ T1350] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 214.058722][ T1350] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 214.062198][ T29] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 214.065571][ T1350] usb 7-1: USB disconnect, device number 42 [ 214.068015][ T29] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 214.070501][ T29] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 214.530262][ T9379] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.665470][ T9383] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 215.021452][ T9395] overlayfs: upper fs does not support file handles, falling back to index=off. [ 215.447366][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804cc73c00: rx timeout, send abort [ 215.952660][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804cc73c00: abort rx timeout. Force session deactivation [ 216.297416][ T9433] netlink: 'syz.6.1111': attribute type 1 has an invalid length. [ 216.630813][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1112'. [ 216.640638][ T9439] team0 (unregistering): Port device team_slave_0 removed [ 216.645416][ T9439] team0 (unregistering): Port device team_slave_1 removed [ 216.708614][ T5140] ldm_validate_privheads(): Disk read failed. [ 216.710604][ T5140] loop0: [ 216.713720][ T5140] loop0: partition table partially beyond EOD, truncated [ 217.218173][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1117'. [ 217.407428][ T9464] fuse-io-uring is disabled [ 217.417728][ T9464] fuse-io-uring is disabled [ 217.421596][ T9464] fuse-io-uring is disabled [ 217.423492][ T9464] fuse-io-uring is disabled [ 217.431455][ T9464] fuse-io-uring is disabled [ 217.432929][ T9464] fuse-io-uring is disabled [ 217.434681][ T9464] fuse-io-uring is disabled [ 217.438911][ T9464] fuse-io-uring is disabled [ 217.440403][ T9464] fuse-io-uring is disabled [ 217.442156][ T9464] fuse-io-uring is disabled [ 219.677789][ T24] libceph: connect (1)[c::]:6789 error -101 [ 219.683145][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 219.693634][ T24] libceph: connect (1)[c::]:6789 error -101 [ 219.695648][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 219.769662][ T9514] ceph: No mds server is up or the cluster is laggy [ 220.159159][ T9529] svc: failed to register lockdv1 RPC service (errno 101). [ 220.162165][ T9529] lockd_up: makesock failed, error=-101 [ 220.970262][ T9529] svc: failed to register nfsdv3 RPC service (errno 101). [ 220.978400][ T9529] svc: failed to register nfsaclv3 RPC service (errno 101). [ 220.982034][ T9529] failed to unregister tcp with rpcbind [ 220.986584][ T9529] svc: failed to register nfsdv3 RPC service (errno 97). [ 220.989770][ T9529] svc: failed to register nfsaclv3 RPC service (errno 97). [ 220.993618][ T9529] failed to unregister tcp with rpcbind [ 222.151363][ T5815] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 222.452017][ T5815] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.471997][ T5815] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.481252][ T5815] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.484261][ T5815] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.488196][ T5815] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.493471][ T5815] usb 11-1: config 0 descriptor?? [ 222.513643][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1151'. [ 222.665122][ T9587] input: syz0 as /devices/virtual/input/input24 [ 222.667833][ T9587] input: failed to attach handler leds to device input24, error: -6 [ 222.847695][ T9597] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1155'. [ 222.905393][ T5815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 222.910261][ T5815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x4 [ 222.916048][ T5815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 222.918466][ T5815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 222.920954][ T5815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 222.923520][ T5815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 222.925844][ T5815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 222.928108][ T5815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 222.930407][ T5815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 222.933757][ T5815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 222.947778][ T5815] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 223.273716][ T6718] usb 11-1: USB disconnect, device number 3 [ 223.738573][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1164'. [ 224.261728][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1168'. [ 224.264555][ T9642] netlink: 'syz.6.1168': attribute type 2 has an invalid length. [ 224.266931][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1168'. [ 224.308713][ T6718] libceph: connect (1)[c::]:6789 error -101 [ 224.311942][ T6718] libceph: mon0 (1)[c::]:6789 connect error [ 224.405594][ T9644] ceph: No mds server is up or the cluster is laggy [ 225.627927][ T8973] svc: failed to register nfsdv3 RPC service (errno 111). [ 225.635257][ T8973] svc: failed to register nfsaclv3 RPC service (errno 111). [ 225.638393][ T8973] failed to unregister tcp with rpcbind [ 225.640780][ T8973] svc: failed to register nfsdv3 RPC service (errno 97). [ 225.643607][ T8973] svc: failed to register nfsaclv3 RPC service (errno 97). [ 225.645987][ T8973] failed to unregister tcp with rpcbind [ 226.027252][ T9679] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1181'. [ 226.680914][ T9700] blktrace: debugfs_dir not present for sg0 so skipping [ 226.811329][ T5815] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 226.982654][ T5815] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 226.987590][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.998087][ T5815] usb 6-1: config 0 descriptor?? [ 227.000431][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1192'. [ 227.006898][ T9706] batadv0: entered promiscuous mode [ 227.011106][ T9706] macsec1: entered promiscuous mode [ 227.012939][ T9706] macsec1: entered allmulticast mode [ 227.014624][ T9706] batadv0: entered allmulticast mode [ 227.016923][ T9706] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 227.020999][ T9706] batadv0: left allmulticast mode [ 227.023491][ T9706] batadv0: left promiscuous mode [ 227.212812][ T9692] batman_adv: batadv0: Adding interface: macvtap1 [ 227.215613][ T9692] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.226394][ T9692] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 227.290245][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 227.302383][ T9692] batman_adv: batadv0: Removing interface: macvtap1 [ 227.356627][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 227.681718][ T5815] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 228.016774][ T5815] [drm:udl_init] *ERROR* Selecting channel failed [ 228.022984][ T5815] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 228.026822][ T5815] [drm] Initialized udl on minor 2 [ 228.029099][ T5815] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 228.037995][ T5815] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 228.046620][ T5815] usb 6-1: USB disconnect, device number 28 [ 228.048580][ T5823] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 228.051486][ T5823] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 228.056386][ T5823] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 228.162447][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'. [ 229.131304][ T854] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 229.291869][ T854] usb 11-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 229.295817][ T854] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.300946][ T854] usb 11-1: config 0 descriptor?? [ 229.513243][ T9763] batman_adv: batadv0: Adding interface: macvtap1 [ 229.515912][ T9763] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.525763][ T9763] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 229.569271][ T9763] batman_adv: batadv0: Removing interface: macvtap1 [ 229.621340][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1209'. [ 229.630668][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1209'. [ 229.744432][ T854] udl 11-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 229.748943][ T854] [drm:udl_init] *ERROR* Selecting channel failed [ 229.757351][ T854] [drm] Initialized udl 0.0.1 for 11-1:0.0 on minor 2 [ 229.759749][ T854] [drm] Initialized udl on minor 2 [ 229.762675][ T854] udl 11-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 229.766450][ T854] udl 11-1:0.0: [drm] Cannot find any crtc or sizes [ 229.774665][ T61] udl 11-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 229.778340][ T854] usb 11-1: USB disconnect, device number 4 [ 229.781462][ T61] udl 11-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 229.785976][ T61] udl 11-1:0.0: [drm] Cannot find any crtc or sizes [ 230.039714][ T9785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'. [ 231.042137][ T9799] sl0: compressed packet ignored [ 231.384987][ T9818] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 231.399480][ T9815] svc: failed to register lockdv1 RPC service (errno 101). [ 231.663045][ T9839] tipc: Started in network mode [ 231.664757][ T9839] tipc: Node identity 32b6625e117e, cluster identity 4711 [ 231.674439][ T9839] tipc: Enabled bearer , priority 0 [ 231.748914][ T9839] syzkaller0: entered promiscuous mode [ 231.753306][ T9839] syzkaller0: entered allmulticast mode [ 231.756361][ T9839] tipc: Resetting bearer [ 231.785414][ T9838] tipc: Resetting bearer [ 231.971666][ T9815] svc: failed to register nfsdv3 RPC service (errno 101). [ 231.979882][ T9815] svc: failed to register nfsaclv3 RPC service (errno 101). [ 231.982364][ T9815] failed to unregister tcp with rpcbind [ 231.985190][ T9815] svc: failed to register nfsdv3 RPC service (errno 97). [ 231.987244][ T9815] svc: failed to register nfsaclv3 RPC service (errno 97). [ 231.989713][ T9815] failed to unregister tcp with rpcbind [ 233.266083][ T9838] tipc: Disabling bearer [ 233.371794][ T5815] tipc: Node number set to 600334942 [ 233.442864][ T9862] syz.2.1239: attempt to access beyond end of device [ 233.442864][ T9862] loop0: rw=0, sector=0, nr_sectors = 8 limit=1 [ 233.723015][ T9862] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 233.726206][ T9862] device-mapper: ioctl: error adding target to table [ 233.836124][ T9887] netlink: 'syz.6.1240': attribute type 1 has an invalid length. [ 234.062384][ T9903] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.1243'. [ 234.979365][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 234.992436][ T9924] team0 (unregistering): Port device team_slave_0 removed [ 234.997710][ T9924] team0 (unregistering): Port device team_slave_1 removed [ 235.231971][ T9929] syz.1.1249: attempt to access beyond end of device [ 235.231971][ T9929] loop0: rw=0, sector=0, nr_sectors = 8 limit=1 [ 235.308700][ T9936] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1250'. [ 235.410695][ T9929] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 235.413832][ T9929] device-mapper: ioctl: error adding target to table [ 235.420360][ T9940] svc: failed to register lockdv1 RPC service (errno 111). [ 235.619460][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'. [ 235.785554][ T9940] svc: failed to register nfsdv3 RPC service (errno 111). [ 235.789768][ T9940] svc: failed to register nfsaclv3 RPC service (errno 111). [ 235.793347][ T9940] failed to unregister tcp with rpcbind [ 235.795996][ T9940] svc: failed to register nfsdv3 RPC service (errno 97). [ 235.798985][ T9940] svc: failed to register nfsaclv3 RPC service (errno 97). [ 235.802175][ T9940] failed to unregister tcp with rpcbind [ 235.873877][ T9952] overlayfs: workdir and upperdir must be separate subtrees [ 236.174425][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 236.242863][ T9971] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 236.956071][ T9983] svc: failed to register lockdv1 RPC service (errno 111). [ 237.036591][ T9986] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 237.310938][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 237.395161][ T9983] svc: failed to register nfsdv3 RPC service (errno 111). [ 237.398776][ T9983] svc: failed to register nfsaclv3 RPC service (errno 111). [ 237.401362][ T9983] failed to unregister tcp with rpcbind [ 237.403249][ T9983] svc: failed to register nfsdv3 RPC service (errno 97). [ 237.405771][ T9983] svc: failed to register nfsaclv3 RPC service (errno 97). [ 237.408279][ T9983] failed to unregister tcp with rpcbind [ 237.524542][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 239.551413][ T5823] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 239.702082][ T5823] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.712870][ T5823] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 239.715801][ T5823] usb 10-1: can't read configurations, error -61 [ 239.841300][ T5823] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 240.021812][ T5823] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.062105][ T5823] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 240.071409][ T5823] usb 10-1: can't read configurations, error -61 [ 240.077282][ T5823] usb usb10-port1: attempt power cycle [ 240.411265][ T5823] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 240.432323][ T5823] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.436321][ T5823] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 240.438809][ T5823] usb 10-1: can't read configurations, error -61 [ 240.571284][ T5823] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 240.592420][ T5823] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.597177][ T5823] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 240.600207][ T5823] usb 10-1: can't read configurations, error -61 [ 240.603103][ T5823] usb usb10-port1: unable to enumerate USB device [ 243.097410][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 243.142663][T10069] overlayfs: invalid redirect ((null)) [ 243.175379][T10071] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 243.224842][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 244.912599][T10120] kvm: pic: single mode not supported [ 245.261344][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.740098][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 246.021478][T10144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.025651][T10144] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.027647][T10144] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 246.030744][T10144] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 246.036918][T10144] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.038874][T10144] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 246.042753][T10144] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 246.347877][ T1350] wiimote 0005:057E:0306.0014: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 246.352154][ T1350] wiimote 0005:057E:0306.0014: New device registered [ 246.418063][T10157] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 246.424016][T10157] bond1: (slave macvlan2): making interface the new active one [ 246.428286][T10157] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 246.433230][ T5823] bond_slave_0: entered promiscuous mode [ 246.437192][ T5823] bond_slave_1: entered promiscuous mode [ 246.581741][ T5838] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 246.751243][ T5838] usb 10-1: Using ep0 maxpacket: 8 [ 246.755732][ T5838] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 246.764071][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.767253][ T5838] usb 10-1: Product: syz [ 246.768898][ T5838] usb 10-1: Manufacturer: syz [ 246.770825][ T5838] usb 10-1: SerialNumber: syz [ 246.903516][T10170] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 246.984273][ T1350] wiimote 0005:057E:0306.0014: detected device: Nintendo Wii Remote (Gen 1) [ 247.004581][ T5838] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.007897][ T1350] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0014/input/input26 [ 247.028448][T10153] wiimote 0005:057E:0306.0014: Device removed [ 247.042373][ T1350] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0014/input/input27 [ 247.070968][ T1350] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0014/input/input25 [ 247.104355][ T5838] usb 10-1: USB disconnect, device number 11 [ 247.146957][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.701954][T10178] IPv6: Can't replace route, no match found [ 248.061379][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 248.061492][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.075026][ T5739] Bluetooth: hci2: command 0x0c1a tx timeout [ 249.192988][T10187] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 250.151356][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout [ 250.153999][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 251.971267][ T6718] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 252.121337][ T6718] usb 7-1: Using ep0 maxpacket: 16 [ 252.124212][ T6718] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 252.129142][ T6718] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 252.135214][ T6718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.138531][ T6718] usb 7-1: Product: syz [ 252.140398][ T6718] usb 7-1: Manufacturer: syz [ 252.142645][ T6718] usb 7-1: SerialNumber: syz [ 252.146916][ T6718] usb 7-1: config 0 descriptor?? [ 252.153499][ T6718] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 252.157360][ T6718] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 252.221376][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout [ 252.223337][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 252.533360][T10237] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 252.537383][T10237] block device autoloading is deprecated and will be removed. [ 252.719964][T10241] IPv6: Can't replace route, no match found [ 252.770989][ T6718] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 252.827757][T10243] No fuse device found [ 252.829138][T10243] No fuse device found [ 252.830471][T10243] No fuse device found [ 252.832326][T10243] No fuse device found [ 252.833695][T10243] No fuse device found [ 252.835035][T10243] No fuse device found [ 252.836469][T10243] No fuse device found [ 252.837807][T10243] No fuse device found [ 252.839137][T10243] No fuse device found [ 252.840471][T10243] No fuse device found [ 253.184624][ T6718] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 253.189743][ T6718] em28xx 7-1:0.0: board has no eeprom [ 253.475311][ T27] ================================================================== [ 253.478380][ T27] BUG: KASAN: slab-use-after-free in irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 253.481139][ T27] Read of size 8 at addr ffff88806e9f29a8 by task migration/1/27 [ 253.484705][ T27] [ 253.486297][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.486313][ T27] Tainted: [L]=SOFTLOCKUP [ 253.486317][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.486324][ T27] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 253.486353][ T27] Call Trace: [ 253.486357][ T27] [ 253.486362][ T27] dump_stack_lvl+0x100/0x190 [ 253.486377][ T27] print_report+0x13d/0x4b0 [ 253.486392][ T27] ? __virt_addr_valid+0x239/0x430 [ 253.486412][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 253.486429][ T27] kasan_report+0xdf/0x1c0 [ 253.486440][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 253.486457][ T27] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 253.486473][ T27] ? native_cpu_disable+0x54/0x80 [ 253.486489][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 253.486502][ T27] fixup_irqs+0x2b/0x280 [ 253.486516][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 253.486528][ T27] native_cpu_disable+0x59/0x80 [ 253.486542][ T27] take_cpu_down+0xb6/0x190 [ 253.486555][ T27] multi_cpu_stop+0x16a/0x4b0 [ 253.486575][ T27] ? __stop_cpus.constprop.0+0xb1/0x140 [ 253.486589][ T27] ? __pfx_multi_cpu_stop+0x10/0x10 [ 253.486603][ T27] cpu_stopper_thread+0x21e/0x450 [ 253.486618][ T27] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 253.486632][ T27] smpboot_thread_fn+0x3d3/0xab0 [ 253.486649][ T27] ? kthread+0x13a/0x450 [ 253.486657][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 253.486672][ T27] kthread+0x373/0x450 [ 253.486681][ T27] ? __pfx_kthread+0x10/0x10 [ 253.486690][ T27] ret_from_fork+0x730/0xd60 [ 253.486705][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 253.486720][ T27] ? __switch_to+0x800/0x10f0 [ 253.486731][ T27] ? __pfx_kthread+0x10/0x10 [ 253.486740][ T27] ret_from_fork_asm+0x1a/0x30 [ 253.486760][ T27] [ 253.486763][ T27] [ 253.555892][ T27] Allocated by task 8406: [ 253.557543][ T27] kasan_save_stack+0x30/0x50 [ 253.559362][ T27] kasan_save_track+0x14/0x30 [ 253.561190][ T27] __kasan_kmalloc+0xaa/0xb0 [ 253.562980][ T27] __kmalloc_noprof+0x324/0x820 [ 253.564855][ T27] ___neigh_create+0x1532/0x2940 [ 253.566762][ T27] ip6_finish_output2+0x1052/0x1d50 [ 253.568776][ T27] __ip6_finish_output+0x357/0xdf0 [ 253.570719][ T27] ip6_output+0x2aa/0xa60 [ 253.572388][ T27] ndisc_send_skb+0xa85/0x1bf0 [ 253.574242][ T27] ndisc_send_rs+0x129/0x680 [ 253.576029][ T27] addrconf_dad_completed+0x47f/0xff0 [ 253.578104][ T27] addrconf_dad_work+0x83c/0x1360 [ 253.580054][ T27] process_one_work+0xac7/0x1b10 [ 253.581945][ T27] worker_thread+0x5ef/0xe50 [ 253.583735][ T27] kthread+0x373/0x450 [ 253.585294][ T27] ret_from_fork+0x730/0xd60 [ 253.587103][ T27] ret_from_fork_asm+0x1a/0x30 [ 253.588949][ T27] [ 253.589887][ T27] Freed by task 55: [ 253.591361][ T27] kasan_save_stack+0x30/0x50 [ 253.593180][ T27] kasan_save_track+0x14/0x30 [ 253.594996][ T27] kasan_save_free_info+0x3b/0x70 [ 253.596937][ T27] __kasan_slab_free+0x5f/0x80 [ 253.598771][ T27] kmem_cache_free_bulk+0x258/0x730 [ 253.600776][ T27] kvfree_rcu_bulk+0x176/0x190 [ 253.602616][ T27] kfree_rcu_work+0x122/0x1a0 [ 253.604416][ T27] process_one_work+0xac7/0x1b10 [ 253.606318][ T27] worker_thread+0x5ef/0xe50 [ 253.608145][ T27] kthread+0x373/0x450 [ 253.609842][ T27] ret_from_fork+0x730/0xd60 [ 253.611702][ T27] ret_from_fork_asm+0x1a/0x30 [ 253.613566][ T27] [ 253.614495][ T27] Last potentially related work creation: [ 253.616742][ T27] kasan_save_stack+0x30/0x50 [ 253.618555][ T27] kasan_record_aux_stack+0xa7/0xc0 [ 253.620579][ T27] kvfree_call_rcu+0x6a/0x4f0 [ 253.622380][ T27] neigh_destroy+0x436/0x620 [ 253.624170][ T27] neigh_cleanup_and_release+0xfa/0x2d0 [ 253.626285][ T27] neigh_periodic_work+0x6b6/0xc10 [ 253.628255][ T27] process_one_work+0xac7/0x1b10 [ 253.630142][ T27] worker_thread+0x5ef/0xe50 [ 253.631967][ T27] kthread+0x373/0x450 [ 253.633529][ T27] ret_from_fork+0x730/0xd60 [ 253.635307][ T27] ret_from_fork_asm+0x1a/0x30 [ 253.637164][ T27] [ 253.638096][ T27] The buggy address belongs to the object at ffff88806e9f2800 [ 253.638096][ T27] which belongs to the cache kmalloc-1k of size 1024 [ 253.643407][ T27] The buggy address is located 424 bytes inside of [ 253.643407][ T27] freed 1024-byte region [ffff88806e9f2800, ffff88806e9f2c00) [ 253.648641][ T27] [ 253.649591][ T27] The buggy address belongs to the physical page: [ 253.652029][ T27] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806e9f0000 pfn:0x6e9f0 [ 253.655837][ T27] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 253.659044][ T27] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 253.662311][ T27] page_type: f5(slab) [ 253.663855][ T27] raw: 04fff00000000240 ffff88801c042dc0 ffffea0001433410 ffffea0001aba210 [ 253.667137][ T27] raw: ffff88806e9f0000 0000000800100008 00000000f5000000 0000000000000000 [ 253.670377][ T27] head: 04fff00000000240 ffff88801c042dc0 ffffea0001433410 ffffea0001aba210 [ 253.673588][ T27] head: ffff88806e9f0000 0000000800100008 00000000f5000000 0000000000000000 [ 253.676899][ T27] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 253.680232][ T27] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 253.683544][ T27] page dumped because: kasan: bad access detected [ 253.686048][ T27] page_owner tracks the page as allocated [ 253.688260][ T27] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 61, tgid 61 (kworker/3:1), ts 50400280827 [ 253.695303][ T27] post_alloc_hook+0xfd/0x120 [ 253.697237][ T27] get_page_from_freelist+0x110d/0x35b0 [ 253.699386][ T27] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 253.701680][ T27] new_slab+0xa5/0x640 [ 253.703219][ T27] refill_objects+0xe3/0x410 [ 253.705031][ T27] __pcs_replace_empty_main+0x372/0x680 [ 253.707187][ T27] __kmalloc_noprof+0x66b/0x820 [ 253.709080][ T27] ieee802_11_parse_elems_full+0x17c/0x3c90 [ 253.711375][ T27] ieee80211_inform_bss+0x159/0x1170 [ 253.713408][ T27] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 253.715810][ T27] cfg80211_inform_bss_data+0x230/0x3c20 [ 253.717994][ T27] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 253.720355][ T27] ieee80211_bss_info_update+0x310/0xab0 [ 253.722508][ T27] ieee80211_scan_rx+0x4e6/0xb60 [ 253.724316][ T27] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 253.726589][ T27] ieee80211_rx_list+0xf19/0x2160 [ 253.728565][ T27] page last free pid 5140 tgid 5140 ts 50393821474 stack trace: [ 253.731508][ T27] __free_frozen_pages+0x79f/0x10f0 [ 253.733535][ T27] qlist_free_all+0x47/0xf0 [ 253.735296][ T27] kasan_quarantine_reduce+0x1a0/0x1f0 [ 253.736862][ T27] __kasan_slab_alloc+0x69/0x90 [ 253.738671][ T27] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 253.740780][ T27] do_getname+0x35/0x390 [ 253.742428][ T27] do_sys_openat2+0xc7/0x1e0 [ 253.744204][ T27] __x64_sys_openat+0x12d/0x210 [ 253.746088][ T27] do_syscall_64+0x121/0x770 [ 253.747908][ T27] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.750166][ T27] [ 253.751106][ T27] Memory state around the buggy address: [ 253.753276][ T27] ffff88806e9f2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.756388][ T27] ffff88806e9f2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.759448][ T27] >ffff88806e9f2980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.762493][ T27] ^ [ 253.764556][ T27] ffff88806e9f2a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.767614][ T27] ffff88806e9f2a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.770660][ T27] ================================================================== [ 253.773739][ T27] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 253.776501][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.780584][ T27] Tainted: [L]=SOFTLOCKUP [ 253.782245][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.786113][ T27] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 253.789359][ T27] Call Trace: [ 253.790668][ T27] [ 253.791839][ T27] dump_stack_lvl+0x100/0x190 [ 253.793666][ T27] vpanic+0x553/0x970 [ 253.795211][ T27] ? __pfx_vpanic+0x10/0x10 [ 253.797012][ T27] ? __pfx_vprintk_emit+0x10/0x10 [ 253.798969][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 253.801321][ T27] panic+0xd1/0xe0 [ 253.802788][ T27] ? __pfx_panic+0x10/0x10 [ 253.804532][ T27] check_panic_on_warn.cold+0x19/0x34 [ 253.806623][ T27] end_report.part.0+0x3a/0x90 [ 253.808476][ T27] kasan_report.cold+0xe/0x18 [ 253.810300][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 253.812662][ T27] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 253.814938][ T27] ? native_cpu_disable+0x54/0x80 [ 253.816913][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 253.818898][ T27] fixup_irqs+0x2b/0x280 [ 253.820551][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 253.822517][ T27] native_cpu_disable+0x59/0x80 [ 253.824412][ T27] take_cpu_down+0xb6/0x190 [ 253.826189][ T27] multi_cpu_stop+0x16a/0x4b0 [ 253.828024][ T27] ? __stop_cpus.constprop.0+0xb1/0x140 [ 253.830160][ T27] ? __pfx_multi_cpu_stop+0x10/0x10 [ 253.832179][ T27] cpu_stopper_thread+0x21e/0x450 [ 253.834125][ T27] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 253.836289][ T27] smpboot_thread_fn+0x3d3/0xab0 [ 253.838214][ T27] ? kthread+0x13a/0x450 [ 253.839866][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 253.841886][ T27] kthread+0x373/0x450 [ 253.843438][ T27] ? __pfx_kthread+0x10/0x10 [ 253.845241][ T27] ret_from_fork+0x730/0xd60 [ 253.847075][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 253.849055][ T27] ? __switch_to+0x800/0x10f0 [ 253.850884][ T27] ? __pfx_kthread+0x10/0x10 [ 253.852689][ T27] ret_from_fork_asm+0x1a/0x30 [ 253.854575][ T27] [ 254.924484][ T27] Shutting down cpus with NMI [ 254.926615][ T27] Kernel Offset: disabled [ 254.927994][ T27] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:11:32 Registers: info registers vcpu 0 CPU#0 RAX=8000000000000001 RBX=0000000000000000 RCX=ffffffff81d0b4f2 RDX=ffff88801cb4cb00 RSI=ffffffff81d0b4fc RDI=ffff88801cb4cb00 RBP=0000000000000c00 RSP=ffffc9000045fcf0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000c00 R11=0000000000000000 R12=fffffffffffffe54 R13=ffffffff8ea0f280 R14=00000000ffffed55 R15=ffff88802b224238 RIP=ffffffff820a7008 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809698f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032f13ff8 CR3=0000000078963000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000019000000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a92e95 RDI=ffffffff9bc26c60 RBP=ffffffff9bc26c20 RSP=ffffc90000557658 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b926231 R15=ffffffff85a92e30 RIP=ffffffff85a92ebf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a8f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f739f37c CR3=000000000eb94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000019000000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff8206b717 RDX=0000000000000001 RSI=0000000000000003 RDI=ffff88801cf32580 RBP=ffffc90003fe7894 RSP=ffffc900004ffd28 R8 =0000000000000004 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=ffffc90003fe7870 R13=fffff520007fcf12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff820a6920 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b8f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73e43f4 CR3=000000006569c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000022c00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff88801cff8000 RSI=ffffffff8206b519 RDI=ffffffff8bed5970 RBP=ffffc90003fe7894 RSP=ffffc900005afd30 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000 R12=ffffc90003fe7870 R13=fffff520007fcf12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff8206b6f6 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c8f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004cc19000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000022c00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000