last executing test programs: 15.155296784s ago: executing program 0 (id=4620): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x109881, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x91, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x5b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, 0x7, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e"}, {0x19, 0x1, "000000000400"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0xfffffffa, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d07, 0x0, 0x8001}]}) ppoll(&(0x7f0000000140), 0x0, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={[0x4]}, 0x8) ptrace(0x4206, r0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084) socket$netlink(0x10, 0x3, 0x0) tkill(r0, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000040580487000000000000010902243b0100001000090400060203000200092107000001220300090581030004"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) 12.999045533s ago: executing program 3 (id=4623): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.464444697s ago: executing program 3 (id=4624): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee3799414468108fce3153d5e9b3f18b77e3703bcbb1d41ff7a7ecd8a92b41e393ca75ee901e2f00800000030", @ANYRES16, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping\x00', 0x5, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) 9.859278828s ago: executing program 3 (id=4627): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee3799414468108fce3153d5e9b3f18b77e3703bcbb1d41ff7a7ecd8a92b41e393ca75ee901e2f00800000030", @ANYRES16=r5, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping\x00', 0x5, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) 9.85892822s ago: executing program 0 (id=4628): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x114f0c3a338dd13, 0x6, 0x33f6, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r3}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 9.758500406s ago: executing program 1 (id=4629): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.379469739s ago: executing program 1 (id=4631): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.379216082s ago: executing program 2 (id=4632): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.695186949s ago: executing program 0 (id=4633): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x114f0c3a338dd13, 0x6, 0x33f6, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r3}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) sendmsg$nl_generic(r0, 0x0, 0xc000) 7.264202334s ago: executing program 1 (id=4634): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x114f0c3a338dd13, 0x6, 0x33f6, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r3}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6.106652854s ago: executing program 2 (id=4635): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.772731505s ago: executing program 3 (id=4636): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee3799414468108fce3153d5e9b3f18b77e3703bcbb1d41ff7a7ecd8a92b41e393ca75ee901e2f00800000030", @ANYRES16=r5, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) 5.474878037s ago: executing program 1 (id=4637): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xc2742, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4004000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r6 = syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x266, 0x0, r3}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x58}}, 0x20000840) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000140)={'netdevsim0\x00', @ifru_hwaddr=@remote}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000003c0)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb064}]}}]}, 0x64}}, 0x2000400c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) 4.636939982s ago: executing program 0 (id=4638): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4.544881241s ago: executing program 2 (id=4639): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x114f0c3a338dd13, 0x6, 0x33f6, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r3}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4.358665369s ago: executing program 1 (id=4640): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee3799414468108fce3153d5e9b3f18b77e3703bcbb1d41ff7a7ecd8a92b41e393ca75ee901e2f00800000030", @ANYRES16, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping\x00', 0x5, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) 3.01557864s ago: executing program 3 (id=4641): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.117466607s ago: executing program 2 (id=4642): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xc2742, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4004000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r6 = syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x266, 0x0, r3}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x58}}, 0x20000840) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000140)={'netdevsim0\x00', @ifru_hwaddr=@remote}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000003c0)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb064}]}}]}, 0x64}}, 0x2000400c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.973016544s ago: executing program 3 (id=4643): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x114f0c3a338dd13, 0x6, 0x33f6, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r3}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.530358597s ago: executing program 0 (id=4644): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 924.270204ms ago: executing program 1 (id=4645): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 316.351927ms ago: executing program 2 (id=4646): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x1}) r2 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='uid', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000b00)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x401, 0x145981) r6 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f00000001c0)={0x0, 'batadv0\x00', {0x5}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={&(0x7f0000000540)=@qipcrtr={0x2a, 0x3, 0x7fff}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="7cf5f5bae624b09cc951307bd317d8a0488efbafe66fb220f26d575d20441a70aa8383a057f5b75084466dffc00cdc41dfbcfb2be3f315f1e14c847e0bee1106020c12611e03c436659ec7e6294cb0a99eef74f33a8941ea002ec791074baf581fc42b76e8ec977c3c458ff9184c863a931faa8c164f686ddf78300bf5ef075410be4e6411a8ae441923fe2223c8fa816cb30314f81a1a88966176bae1bedab2d5caf1c5acee8b8a9d65b1cfacdb1c8ff0de2f6268fa7f31f52701fe9fd7375bd779ac8cfaa595aa53a166757b05bd9ee7841e612fca24e84cb55f238865884b3da7e942abe4ac1f76045d477b0241e3209e72c53c", 0xf5}, {&(0x7f00000006c0)="f2adb534d649527f41066936c550019156cc19cc8165f6a24555d1f97684df823a9611bcae535a4d3e96b6a680c97221f937ad04cba7b4f195e84b65161e2859adf811af95825eb7a0f4ba450895d78350edfadcb7e3ab2a8ef7e84f0b01829b9b5538040a2fd98e59e73003c87e2defe9324683cdb4", 0x76}], 0x2, &(0x7f00000007c0)=[@txtime={{0x14, 0x1, 0x3d, 0x8}}, @timestamping={{0x10, 0x1, 0x25, 0x59}}, @timestamping={{0x10, 0x1, 0x25, 0x7}}], 0x34}, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x60}, 0x1, 0x7}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000400)={'dummy0\x00'}) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0xff00, &(0x7f0000000480)=[{&(0x7f00000004c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) sendmsg$nl_route_sched(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000d00)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1004}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x64}}, 0x0) write$tun(r1, &(0x7f0000000d00)=ANY=[], 0x20) 131.134802ms ago: executing program 0 (id=4647): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) getpid() r3 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xc2742, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4004000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r6 = syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x266, 0x0, r3}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x58}}, 0x20000840) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000140)={'netdevsim0\x00', @ifru_hwaddr=@remote}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000003c0)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb064}]}}]}, 0x64}}, 0x2000400c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 0s ago: executing program 2 (id=4648): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping\x00', 0x5, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) kernel console output (not intermixed with test programs): z.3.4048': attribute type 10 has an invalid length. [ 1040.194343][T20265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4048'. [ 1040.290321][T20269] netlink: 'syz.1.4049': attribute type 10 has an invalid length. [ 1040.290342][T20269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4049'. [ 1040.384314][T20278] Invalid ELF header magic: != ELF [ 1040.388639][T20278] overlay: Unknown parameter '/' [ 1040.599352][T20283] net_ratelimit: 632 callbacks suppressed [ 1040.704398][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1040.819321][T20285] netlink: 'syz.1.4053': attribute type 10 has an invalid length. [ 1040.819335][T20285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4053'. [ 1040.864318][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1040.864775][ T9] usb 5-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1040.865584][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.865618][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.869789][ T9] usb 5-1: config 0 descriptor?? [ 1040.874348][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1041.099729][T20276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.106523][T20276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.131709][T19749] usb 5-1: USB disconnect, device number 58 [ 1041.214784][T20294] netlink: 'syz.1.4056': attribute type 10 has an invalid length. [ 1041.214805][T20294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4056'. [ 1041.417542][T20297] netlink: 'syz.2.4057': attribute type 10 has an invalid length. [ 1041.417554][T20297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4057'. [ 1041.446376][T20298] netlink: 'syz.1.4058': attribute type 10 has an invalid length. [ 1041.446394][T20298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4058'. [ 1041.635027][T20303] Invalid ELF header magic: != ELF [ 1041.657569][T20303] overlay: Unknown parameter '/' [ 1043.817977][T20324] netlink: 'syz.0.4067': attribute type 10 has an invalid length. [ 1043.818027][T20324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4067'. [ 1043.859089][T20329] netlink: 'syz.2.4068': attribute type 10 has an invalid length. [ 1043.859104][T20329] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4068'. [ 1043.995992][T20342] netlink: 'syz.1.4069': attribute type 10 has an invalid length. [ 1043.996011][T20342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4069'. [ 1044.182132][T20350] netlink: 'syz.2.4073': attribute type 10 has an invalid length. [ 1044.182150][T20350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4073'. [ 1044.354922][ T1483] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1044.504880][ T1483] usb 5-1: Using ep0 maxpacket: 8 [ 1044.505640][ T1483] usb 5-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1044.506526][ T1483] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.506584][ T1483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.511790][ T1483] usb 5-1: config 0 descriptor?? [ 1044.523228][ T1483] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1044.613469][T20355] netlink: 'syz.2.4075': attribute type 10 has an invalid length. [ 1044.613489][T20355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4075'. [ 1044.726018][T20346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.729321][T20346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.747605][ T50] usb 5-1: USB disconnect, device number 59 [ 1044.801976][T20357] netlink: 'syz.2.4077': attribute type 10 has an invalid length. [ 1044.801993][T20357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4077'. [ 1045.784281][ C3] net_ratelimit: 342 callbacks suppressed [ 1046.680876][T20381] Invalid ELF header magic: != ELF [ 1046.932305][T20383] overlay: Unknown parameter '/' [ 1046.997956][T20378] Invalid ELF header magic: != ELF [ 1047.030050][T20378] overlay: Unknown parameter '/' [ 1047.870436][T20388] Invalid ELF header magic: != ELF [ 1047.875893][T20388] overlay: Unknown parameter '/' [ 1048.604658][ T50] usb 8-1: new high-speed USB device number 59 using dummy_hcd ** 2995 printk messages dropped ** ** 701 printk messages dropped ** ** 704 printk messages dropped ** ** 681 printk messages dropped ** ** 659 printk messages dropped ** ** 719 printk messages dropped ** ** 786 printk messages dropped ** ** 642 printk messages dropped ** ** 127 printk messages dropped ** ** 76 printk messages dropped ** [ 1048.805005][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 1048.805800][ T50] usb 8-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1048.807222][ T50] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.807281][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.830313][T20401] Invalid ELF header magic: != ELF [ 1049.040796][T20401] overlay: Unknown parameter '/' [ 1049.295365][ T50] usb 8-1: config 0 descriptor?? [ 1049.335975][ T50] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1049.987009][ T50] usb 8-1: USB disconnect, device number 59 [ 1050.167673][T20408] netlink: 'syz.0.4091': attribute type 10 has an invalid length. [ 1050.167695][T20408] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4091'. [ 1050.336497][T20418] Invalid ELF header magic: != ELF [ 1050.346092][T20418] overlay: Unknown parameter '/' [ 1050.894312][ C0] net_ratelimit: 787 callbacks suppressed [ 1051.029213][T20423] Invalid ELF header magic: != ELF [ 1051.309253][T20423] overlay: Unknown parameter '/' [ 1051.334051][T20421] netlink: 'syz.3.4096': attribute type 10 has an invalid length. [ 1051.334104][T20421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4096'. [ 1051.581777][T20430] netlink: 'syz.2.4099': attribute type 10 has an invalid length. [ 1051.581830][T20430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4099'. [ 1051.881245][T20428] netlink: 'syz.1.4098': attribute type 10 has an invalid length. [ 1051.881265][T20428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4098'. [ 1052.163506][T20443] Invalid ELF header magic: != ELF [ 1052.181396][T20443] overlay: Unknown parameter '/' [ 1052.990406][T20454] Invalid ELF header magic: != ELF [ 1053.018615][T20454] overlay: Unknown parameter '/' [ 1054.159234][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.159274][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.962483][T20476] Invalid ELF header magic: != ELF [ 1054.986542][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1055.034275][ T10] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1055.036469][T20476] overlay: Unknown parameter '/' [ 1055.134294][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1055.139598][ T9] usb 6-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1055.140961][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.140995][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.205356][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1055.209931][ T9] usb 6-1: config 0 descriptor?? [ 1055.210132][ T10] usb 8-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1055.211199][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.211233][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.227059][ T10] usb 8-1: config 0 descriptor?? [ 1055.306268][ T10] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1055.321516][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1055.421372][T20464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.421679][T20464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.437233][ T9] usb 6-1: USB disconnect, device number 59 [ 1055.441456][T20461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.441955][T20461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.448521][ T1365] usb 8-1: USB disconnect, device number 60 [ 1055.549999][T20484] Invalid ELF header magic: != ELF [ 1055.588006][T20484] overlay: Unknown parameter '/' [ 1055.962577][T14456] net_ratelimit: 906 callbacks suppressed ** 286 printk messages dropped ** [ 1058.625723][T20508] Invalid ELF header magic: != ELF ** 240 printk messages dropped ** ** 324 printk messages dropped ** [ 1059.242483][T20503] overlay: Unknown parameter '/' [ 1059.255529][T20510] Invalid ELF header magic: != ELF [ 1059.287616][T20499] netlink: 'syz.3.4119': attribute type 10 has an invalid length. [ 1059.287627][T20499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4119'. [ 1059.490397][T20513] netlink: 'syz.0.4122': attribute type 10 has an invalid length. [ 1059.490409][T20513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1059.516037][T20509] overlay: Unknown parameter '/' [ 1060.055063][T20517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4124'. [ 1060.066316][T20517] netlink: 'syz.1.4124': attribute type 10 has an invalid length. [ 1060.066353][T20517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4124'. ** 11 printk messages dropped ** ** 191 printk messages dropped ** ** 198 printk messages dropped ** ** 197 printk messages dropped ** ** 40 printk messages dropped ** ** 67 printk messages dropped ** ** 203 printk messages dropped ** ** 201 printk messages dropped ** ** 170 printk messages dropped ** ** 1049 printk messages dropped ** ** 331 printk messages dropped ** ** 209 printk messages dropped ** ** 117 printk messages dropped ** ** 111 printk messages dropped ** ** 115 printk messages dropped ** ** 114 printk messages dropped ** ** 188 printk messages dropped ** ** 124 printk messages dropped ** ** 136 printk messages dropped ** ** 135 printk messages dropped ** ** 112 printk messages dropped ** ** 111 printk messages dropped ** ** 122 printk messages dropped ** ** 127 printk messages dropped ** ** 121 printk messages dropped ** ** 135 printk messages dropped ** ** 113 printk messages dropped ** ** 134 printk messages dropped ** ** 133 printk messages dropped ** ** 139 printk messages dropped ** ** 134 printk messages dropped ** ** 128 printk messages dropped ** ** 125 printk messages dropped ** ** 118 printk messages dropped ** ** 116 printk messages dropped ** ** 217 printk messages dropped ** ** 124 printk messages dropped ** ** 134 printk messages dropped ** ** 116 printk messages dropped ** ** 119 printk messages dropped ** ** 139 printk messages dropped ** ** 168 printk messages dropped ** ** 139 printk messages dropped ** ** 139 printk messages dropped ** ** 142 printk messages dropped ** ** 173 printk messages dropped ** ** 86 printk messages dropped ** ** 1 printk messages dropped ** [ 1061.036808][T15404] net_ratelimit: 484 callbacks suppressed ** 53 printk messages dropped ** ** 189 printk messages dropped ** ** 89 printk messages dropped ** ** 38 printk messages dropped ** ** 210 printk messages dropped ** ** 401 printk messages dropped ** ** 153 printk messages dropped ** ** 132 printk messages dropped ** ** 161 printk messages dropped ** ** 124 printk messages dropped ** ** 158 printk messages dropped ** ** 156 printk messages dropped ** ** 165 printk messages dropped ** ** 171 printk messages dropped ** ** 143 printk messages dropped ** ** 158 printk messages dropped ** ** 197 printk messages dropped ** ** 282 printk messages dropped ** ** 138 printk messages dropped ** ** 125 printk messages dropped ** ** 135 printk messages dropped ** ** 151 printk messages dropped ** ** 157 printk messages dropped ** ** 140 printk messages dropped ** ** 170 printk messages dropped ** ** 195 printk messages dropped ** ** 148 printk messages dropped ** ** 146 printk messages dropped ** ** 117 printk messages dropped ** ** 1 printk messages dropped ** ** 197 printk messages dropped ** ** 159 printk messages dropped ** ** 166 printk messages dropped ** ** 171 printk messages dropped ** ** 160 printk messages dropped ** ** 179 printk messages dropped ** ** 183 printk messages dropped ** ** 166 printk messages dropped ** ** 146 printk messages dropped ** ** 473 printk messages dropped ** ** 153 printk messages dropped ** ** 156 printk messages dropped ** ** 157 printk messages dropped ** ** 153 printk messages dropped ** ** 152 printk messages dropped ** ** 156 printk messages dropped ** ** 163 printk messages dropped ** ** 228 printk messages dropped ** ** 154 printk messages dropped ** ** 153 printk messages dropped ** ** 181 printk messages dropped ** ** 179 printk messages dropped ** ** 159 printk messages dropped ** ** 159 printk messages dropped ** ** 155 printk messages dropped ** ** 236 printk messages dropped ** ** 163 printk messages dropped ** ** 108 printk messages dropped ** ** 26 printk messages dropped ** ** 155 printk messages dropped ** ** 153 printk messages dropped ** ** 138 printk messages dropped ** ** 147 printk messages dropped ** ** 133 printk messages dropped ** ** 193 printk messages dropped ** ** 83 printk messages dropped ** ** 101 printk messages dropped ** ** 86 printk messages dropped ** ** 89 printk messages dropped ** ** 83 printk messages dropped ** ** 88 printk messages dropped ** ** 91 printk messages dropped ** ** 87 printk messages dropped ** ** 4 printk messages dropped ** ** 177 printk messages dropped ** ** 156 printk messages dropped ** ** 139 printk messages dropped ** ** 146 printk messages dropped ** ** 137 printk messages dropped ** ** 211 printk messages dropped ** ** 5 printk messages dropped ** ** 334 printk messages dropped ** ** 158 printk messages dropped ** ** 134 printk messages dropped ** ** 152 printk messages dropped ** ** 139 printk messages dropped ** ** 162 printk messages dropped ** ** 130 printk messages dropped ** ** 142 printk messages dropped ** ** 141 printk messages dropped ** ** 156 printk messages dropped ** ** 140 printk messages dropped ** ** 137 printk messages dropped ** ** 153 printk messages dropped ** ** 135 printk messages dropped ** ** 180 printk messages dropped ** ** 147 printk messages dropped ** ** 166 printk messages dropped ** ** 201 printk messages dropped ** ** 140 printk messages dropped ** ** 155 printk messages dropped ** ** 140 printk messages dropped ** ** 135 printk messages dropped ** ** 163 printk messages dropped ** ** 2 printk messages dropped ** ** 156 printk messages dropped ** ** 140 printk messages dropped ** ** 161 printk messages dropped ** ** 142 printk messages dropped ** ** 140 printk messages dropped ** ** 155 printk messages dropped ** ** 143 printk messages dropped ** ** 178 printk messages dropped ** ** 168 printk messages dropped ** ** 170 printk messages dropped ** ** 149 printk messages dropped ** ** 140 printk messages dropped ** ** 157 printk messages dropped ** ** 138 printk messages dropped ** ** 132 printk messages dropped ** ** 188 printk messages dropped ** ** 157 printk messages dropped ** ** 112 printk messages dropped ** ** 16 printk messages dropped ** ** 171 printk messages dropped ** ** 166 printk messages dropped ** ** 139 printk messages dropped ** ** 144 printk messages dropped ** ** 136 printk messages dropped ** ** 132 printk messages dropped ** ** 188 printk messages dropped ** ** 151 printk messages dropped ** ** 142 printk messages dropped ** ** 157 printk messages dropped ** ** 135 printk messages dropped ** ** 150 printk messages dropped ** ** 188 printk messages dropped ** ** 145 printk messages dropped ** ** 202 printk messages dropped ** ** 137 printk messages dropped ** ** 138 printk messages dropped ** ** 139 printk messages dropped ** ** 148 printk messages dropped ** ** 139 printk messages dropped ** ** 142 printk messages dropped ** ** 155 printk messages dropped ** ** 258 printk messages dropped ** ** 165 printk messages dropped ** ** 149 printk messages dropped ** ** 168 printk messages dropped ** ** 152 printk messages dropped ** ** 113 printk messages dropped ** ** 127 printk messages dropped ** ** 153 printk messages dropped ** ** 219 printk messages dropped ** ** 143 printk messages dropped ** ** 164 printk messages dropped ** ** 109 printk messages dropped ** ** 1 printk messages dropped ** ** 90 printk messages dropped ** ** 94 printk messages dropped ** ** 89 printk messages dropped ** ** 89 printk messages dropped ** ** 98 printk messages dropped ** ** 102 printk messages dropped ** ** 133 printk messages dropped ** ** 89 printk messages dropped ** ** 55 printk messages dropped ** ** 29 printk messages dropped ** ** 129 printk messages dropped ** ** 100 printk messages dropped ** ** 223 printk messages dropped ** ** 108 printk messages dropped ** ** 94 printk messages dropped ** ** 156 printk messages dropped ** ** 95 printk messages dropped ** ** 125 printk messages dropped ** ** 175 printk messages dropped ** ** 161 printk messages dropped ** ** 1719 printk messages dropped ** ** 3 printk messages dropped ** ** 417 printk messages dropped ** ** 292 printk messages dropped ** ** 217 printk messages dropped ** ** 214 printk messages dropped ** ** 229 printk messages dropped ** ** 222 printk messages dropped ** ** 204 printk messages dropped ** ** 418 printk messages dropped ** ** 210 printk messages dropped ** ** 219 printk messages dropped ** ** 218 printk messages dropped ** ** 205 printk messages dropped ** ** 215 printk messages dropped ** ** 211 printk messages dropped ** ** 199 printk messages dropped ** ** 198 printk messages dropped ** ** 157 printk messages dropped ** ** 275 printk messages dropped ** ** 221 printk messages dropped ** ** 333 printk messages dropped ** ** 210 printk messages dropped ** ** 231 printk messages dropped ** ** 228 printk messages dropped ** ** 163 printk messages dropped ** ** 158 printk messages dropped ** ** 163 printk messages dropped ** ** 24 printk messages dropped ** ** 14 printk messages dropped ** ** 150 printk messages dropped ** ** 188 printk messages dropped ** ** 283 printk messages dropped ** ** 210 printk messages dropped ** ** 161 printk messages dropped ** ** 204 printk messages dropped ** ** 166 printk messages dropped ** ** 233 printk messages dropped ** ** 276 printk messages dropped ** ** 227 printk messages dropped ** ** 171 printk messages dropped ** ** 190 printk messages dropped ** ** 198 printk messages dropped ** ** 190 printk messages dropped ** ** 195 printk messages dropped ** ** 339 printk messages dropped ** ** 228 printk messages dropped ** ** 224 printk messages dropped ** ** 235 printk messages dropped ** ** 227 printk messages dropped ** ** 203 printk messages dropped ** ** 210 printk messages dropped ** ** 102 printk messages dropped ** ** 2 printk messages dropped ** ** 190 printk messages dropped ** ** 235 printk messages dropped ** ** 229 printk messages dropped ** ** 169 printk messages dropped ** ** 234 printk messages dropped ** ** 177 printk messages dropped ** ** 148 printk messages dropped ** ** 148 printk messages dropped ** ** 144 printk messages dropped ** ** 157 printk messages dropped ** ** 145 printk messages dropped ** ** 141 printk messages dropped ** ** 187 printk messages dropped ** ** 170 printk messages dropped ** ** 192 printk messages dropped ** ** 133 printk messages dropped ** ** 145 printk messages dropped ** ** 170 printk messages dropped ** [ 1063.351838][T20541] netlink: 'syz.1.4130': attribute type 10 has an invalid length. [ 1063.351851][T20541] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4130'. [ 1063.463784][T20539] Invalid ELF header magic: != ELF [ 1063.470486][T20539] overlay: Unknown parameter '/' [ 1063.674687][T15570] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1063.954609][T15570] usb 8-1: Using ep0 maxpacket: 8 [ 1063.955434][T15570] usb 8-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1063.956834][T15570] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.956873][T15570] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.958844][T15570] usb 8-1: config 0 descriptor?? [ 1063.970878][T15570] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1064.299059][T20540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.331282][T20540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.518120][T20182] usb 8-1: USB disconnect, device number 61 [ 1065.489911][T20565] netlink: 'syz.2.4139': attribute type 10 has an invalid length. [ 1065.489924][T20565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4139'. [ 1065.698041][T20571] Invalid ELF header magic: != ELF [ 1065.735843][T20571] overlay: Unknown parameter '/' [ 1066.177715][T20576] Invalid ELF header magic: != ELF [ 1066.182098][T20576] net_ratelimit: 480 callbacks suppressed [ 1066.224152][T20576] overlay: Unknown parameter '/' [ 1066.623469][T20586] netlink: 'syz.0.4142': attribute type 10 has an invalid length. [ 1066.623480][T20586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4142'. [ 1066.775098][T15570] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1066.901311][T20592] netlink: 'syz.1.4145': attribute type 10 has an invalid length. [ 1066.901324][T20592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4145'. [ 1066.939797][T15570] usb 8-1: Using ep0 maxpacket: 8 [ 1066.946516][T15570] usb 8-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1066.947544][T15570] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.947603][T15570] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.949197][T15570] usb 8-1: config 0 descriptor?? [ 1066.955100][T15570] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1067.130161][T20590] Invalid ELF header magic: != ELF [ 1067.137846][T20590] overlay: Unknown parameter '/' [ 1067.263444][T20580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.269897][T20580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.372592][T19749] usb 8-1: USB disconnect, device number 62 [ 1068.269110][T20606] Invalid ELF header magic: != ELF [ 1068.342712][T20606] overlay: Unknown parameter '/' [ 1069.126131][T20617] netlink: 'syz.0.4149': attribute type 10 has an invalid length. [ 1069.126501][T20617] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4149'. [ 1069.707717][T20625] Invalid ELF header magic: != ELF [ 1069.783899][T20625] overlay: Unknown parameter '/' ** 7310 printk messages dropped ** [ 1071.224243][ C0] net_ratelimit: 762 callbacks suppressed [ 1071.783500][T20641] Invalid ELF header magic: != ELF [ 1071.803475][T20641] overlay: Unknown parameter '/' [ 1071.997373][T20643] Invalid ELF header magic: != ELF [ 1072.058842][T20643] overlay: Unknown parameter '/' ** 4614 printk messages dropped ** ** 159 printk messages dropped ** ** 137 printk messages dropped ** ** 144 printk messages dropped ** ** 164 printk messages dropped ** ** 145 printk messages dropped ** ** 239 printk messages dropped ** ** 144 printk messages dropped ** ** 153 printk messages dropped ** ** 156 printk messages dropped ** ** 132 printk messages dropped ** ** 152 printk messages dropped ** ** 120 printk messages dropped ** ** 106 printk messages dropped ** ** 109 printk messages dropped ** ** 249 printk messages dropped ** ** 205 printk messages dropped ** ** 141 printk messages dropped ** ** 156 printk messages dropped ** ** 142 printk messages dropped ** ** 151 printk messages dropped ** ** 143 printk messages dropped ** ** 151 printk messages dropped ** ** 261 printk messages dropped ** ** 205 printk messages dropped ** ** 204 printk messages dropped ** ** 216 printk messages dropped ** ** 192 printk messages dropped ** ** 199 printk messages dropped ** ** 187 printk messages dropped ** ** 209 printk messages dropped ** ** 251 printk messages dropped ** ** 138 printk messages dropped ** [ 1072.738829][T20649] netlink: 'syz.3.4160': attribute type 10 has an invalid length. [ 1072.738842][T20649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4160'. [ 1073.310486][T20663] Invalid ELF header magic: != ELF [ 1073.329112][T20663] overlay: Unknown parameter '/' ** 3249 printk messages dropped ** [ 1074.322879][T20678] Invalid ELF header magic: != ELF [ 1074.400114][T20678] overlay: Unknown parameter '/' [ 1074.865195][T20680] Invalid ELF header magic: != ELF [ 1074.947613][T20672] overlay: Unknown parameter '/' [ 1075.415687][T20687] Invalid ELF header magic: != ELF [ 1075.449098][T20687] overlay: Unknown parameter '/' [ 1075.714397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 1076.105949][T20693] Invalid ELF header magic: != ELF [ 1076.381821][T20693] net_ratelimit: 1063 callbacks suppressed [ 1076.411309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 1076.429797][T20693] overlay: Unknown parameter '/' [ 1078.094139][T20714] Invalid ELF header magic: != ELF [ 1078.131900][T20714] overlay: Unknown parameter '/' [ 1078.926427][T20725] Invalid ELF header magic: != ELF [ 1078.982757][T20725] overlay: Unknown parameter '/' [ 1080.613430][T20737] Invalid ELF header magic: != ELF [ 1080.633336][T20737] overlay: Unknown parameter '/' [ 1081.454267][ C1] net_ratelimit: 766 callbacks suppressed [ 1081.973506][T20760] Invalid ELF header magic: != ELF [ 1082.393989][T20759] overlay: Unknown parameter '/' [ 1083.021640][T20773] Invalid ELF header magic: != ELF [ 1083.098731][T20773] overlay: Unknown parameter '/' [ 1084.077232][T20790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4199'. [ 1084.078843][T20790] netlink: 'syz.0.4199': attribute type 10 has an invalid length. [ 1084.078854][T20790] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4199'. [ 1084.187748][T20795] Invalid ELF header magic: != ELF [ 1084.238335][T20795] overlay: Unknown parameter '/' [ 1084.374800][ T5202] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1084.555334][ T5202] usb 6-1: Using ep0 maxpacket: 8 [ 1084.560534][ T5202] usb 6-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1084.573940][ T5202] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.580688][ T5202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.639206][ T5202] usb 6-1: config 0 descriptor?? [ 1084.727354][ T5202] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1084.764133][T20804] Invalid ELF header magic: != ELF [ 1085.086372][T20781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.095218][T20781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.153943][ T5202] usb 6-1: USB disconnect, device number 60 [ 1085.163899][T20804] overlay: Unknown parameter '/' [ 1086.260659][T20815] Invalid ELF header magic: != ELF [ 1086.263955][T20815] overlay: Unknown parameter '/' [ 1086.574402][ C0] net_ratelimit: 770 callbacks suppressed [ 1087.002169][T20825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4210'. [ 1087.005465][T20825] netlink: 'syz.3.4210': attribute type 10 has an invalid length. [ 1087.005481][T20825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4210'. [ 1087.073683][T20828] netlink: 'syz.2.4212': attribute type 10 has an invalid length. [ 1087.073738][T20828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4212'. [ 1087.229994][T20834] Invalid ELF header magic: != ELF [ 1087.280273][T20834] overlay: Unknown parameter '/' [ 1087.435135][T20835] Invalid ELF header magic: != ELF [ 1087.470831][T20835] overlay: Unknown parameter '/' [ 1087.925138][T20842] Invalid ELF header magic: != ELF [ 1087.967865][T20842] overlay: Unknown parameter '/' [ 1088.614307][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1088.634933][ T5202] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1088.775645][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1088.776351][ T9] usb 6-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1088.778823][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.778879][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.783914][ T9] usb 6-1: config 0 descriptor?? [ 1088.788311][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1088.804953][ T5202] usb 5-1: Using ep0 maxpacket: 8 [ 1088.806746][ T5202] usb 5-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1088.810235][ T5202] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.810291][ T5202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.061171][ T9] usb 6-1: USB disconnect, device number 61 [ 1089.219395][ T5202] usb 5-1: config 0 descriptor?? [ 1089.296869][ T5202] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1089.526477][ T50] usb 5-1: USB disconnect, device number 60 [ 1090.155895][T20877] Invalid ELF header magic: != ELF [ 1090.178256][T20877] overlay: Unknown parameter '/' [ 1090.594902][ T5202] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1090.744967][ T5202] usb 8-1: Using ep0 maxpacket: 8 [ 1090.745720][ T5202] usb 8-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1090.746685][ T5202] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.746740][ T5202] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.749581][ T5202] usb 8-1: config 0 descriptor?? [ 1090.759632][ T5202] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1091.133205][T20864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.153414][T20864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.220311][ T50] usb 8-1: USB disconnect, device number 63 [ 1091.557730][T20886] Invalid ELF header magic: != ELF [ 1091.624306][ C3] net_ratelimit: 927 callbacks suppressed [ 1092.331258][T20895] Invalid ELF header magic: != ELF [ 1092.375363][T20895] overlay: Unknown parameter '/' [ 1092.781241][T20886] overlay: Unknown parameter '/' [ 1094.314957][ T50] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1094.494927][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 1094.495443][ T50] usb 8-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1094.496338][ T50] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.496372][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.497593][ T50] usb 8-1: config 0 descriptor?? [ 1094.499918][ T50] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1094.616921][T20918] overlay: Unknown parameter '/' [ 1094.709885][T20898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.710199][T20898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.715504][ T50] usb 8-1: USB disconnect, device number 64 [ 1094.744383][ T5953] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1094.904566][ T5953] usb 6-1: Using ep0 maxpacket: 8 [ 1094.905745][ T5953] usb 6-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1094.907884][ T5953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.907937][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.908190][T20919] Invalid ELF header magic: != ELF [ 1094.912049][ T5953] usb 6-1: config 0 descriptor?? [ 1094.917133][T20919] overlay: Unknown parameter '/' [ 1094.918066][ T5953] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1095.129322][ T50] usb 6-1: USB disconnect, device number 62 [ 1095.252633][T20921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1095.255300][T20921] netlink: 'syz.2.4237': attribute type 10 has an invalid length. [ 1095.255317][T20921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1095.467763][T20926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4239'. [ 1095.470099][T20926] netlink: 'syz.0.4239': attribute type 10 has an invalid length. [ 1095.470115][T20926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4239'. [ 1095.576523][T20928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4240'. [ 1095.641009][T20928] netlink: 'syz.3.4240': attribute type 10 has an invalid length. [ 1095.641034][T20928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4240'. [ 1095.791435][T20936] Invalid ELF header magic: != ELF [ 1095.799356][T20936] overlay: Unknown parameter '/' [ 1096.734412][ C2] net_ratelimit: 1202 callbacks suppressed [ 1096.772354][T20948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4249'. [ 1096.773999][T20948] netlink: 'syz.2.4249': attribute type 10 has an invalid length. [ 1096.774010][T20948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4249'. [ 1096.846164][T15326] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1096.877710][T20944] Invalid ELF header magic: != ELF [ 1096.920691][T20944] overlay: Unknown parameter '/' [ 1097.094944][T15326] usb 5-1: Using ep0 maxpacket: 8 [ 1097.095884][T15326] usb 5-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1097.096815][T15326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.096850][T15326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.098450][T15326] usb 5-1: config 0 descriptor?? [ 1097.102939][T15326] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1097.212233][T20959] Invalid ELF header magic: != ELF [ 1097.219302][T20959] overlay: Unknown parameter '/' [ 1097.315516][T20932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.315813][T20932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.322493][T20182] usb 5-1: USB disconnect, device number 61 [ 1097.605147][T15570] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1097.754833][T15570] usb 8-1: Using ep0 maxpacket: 8 [ 1097.755550][T15570] usb 8-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1097.757304][T15570] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.757356][T15570] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.761568][T15570] usb 8-1: config 0 descriptor?? [ 1097.782376][T15570] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1097.798455][T20963] Invalid ELF header magic: != ELF [ 1097.977413][T20953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.977964][T20953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.985762][T15570] usb 8-1: USB disconnect, device number 65 [ 1098.186666][T20962] overlay: Unknown parameter '/' [ 1098.470567][T20971] Invalid ELF header magic: != ELF [ 1098.478215][T20971] overlay: Unknown parameter '/' [ 1099.010791][T20975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4255'. [ 1099.013420][T20975] netlink: 'syz.1.4255': attribute type 10 has an invalid length. [ 1099.013431][T20975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4255'. [ 1100.023616][T20987] netlink: 'syz.0.4260': attribute type 10 has an invalid length. ** 2953 printk messages dropped ** [ 1100.289546][T20990] Invalid ELF header magic: != ELF [ 1100.329261][T20990] overlay: Unknown parameter '/' [ 1100.747368][T20994] Invalid ELF header magic: != ELF [ 1100.762236][T20994] overlay: Unknown parameter '/' [ 1101.057301][T20998] Invalid ELF header magic: != ELF [ 1101.155727][T20998] overlay: Unknown parameter '/' [ 1101.828794][T21010] netlink: 'syz.3.4264': attribute type 10 has an invalid length. [ 1101.828804][T21010] __nla_validate_parse: 2 callbacks suppressed [ 1101.828811][T21010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4264'. [ 1101.934907][ C3] net_ratelimit: 1196 callbacks suppressed [ 1103.150738][T21017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4267'. [ 1103.153242][T21017] netlink: 'syz.0.4267': attribute type 10 has an invalid length. [ 1103.153253][T21017] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4267'. [ 1103.333161][T21031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4270'. [ 1103.336146][T21031] netlink: 'syz.3.4270': attribute type 10 has an invalid length. [ 1103.336160][T21031] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4270'. [ 1105.105149][T21050] Invalid ELF header magic: != ELF [ 1105.147370][T21050] overlay: Unknown parameter '/' [ 1106.021890][T21060] netlink: 'syz.3.4279': attribute type 10 has an invalid length. [ 1106.021910][T21060] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4279'. [ 1106.120115][T21063] Invalid ELF header magic: != ELF [ 1106.153811][T21063] overlay: Unknown parameter '/' [ 1106.975278][T21071] net_ratelimit: 219 callbacks suppressed [ 1107.390381][T21082] Invalid ELF header magic: != ELF [ 1107.404054][T21082] overlay: Unknown parameter '/' [ 1107.600106][T21085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4285'. [ 1107.601672][T21085] netlink: 'syz.3.4285': attribute type 10 has an invalid length. [ 1107.601683][T21085] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4285'. [ 1107.653011][T21086] Invalid ELF header magic: != ELF [ 1107.669498][T21086] overlay: Unknown parameter '/' [ 1108.074951][ T50] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1108.156551][T15326] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1108.234863][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 1108.237623][ T50] usb 8-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1108.238564][ T50] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.238622][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.240864][ T50] usb 8-1: config 0 descriptor?? [ 1108.249792][ T50] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1108.305757][T15326] usb 5-1: Using ep0 maxpacket: 8 [ 1108.307716][T15326] usb 5-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1108.311933][T15326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.312225][T15326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.333790][T15326] usb 5-1: config 0 descriptor?? [ 1108.353673][T15326] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1108.451973][T21088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.452495][T21088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.461373][ T50] usb 8-1: USB disconnect, device number 66 [ 1108.596223][T21071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.600526][T21071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.638185][T15326] usb 5-1: USB disconnect, device number 62 [ 1109.210806][T21101] netlink: 'syz.1.4289': attribute type 10 has an invalid length. [ 1109.210826][T21101] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4289'. [ 1109.417696][T21109] Invalid ELF header magic: != ELF [ 1109.547689][T21109] overlay: Unknown parameter '/' [ 1109.941213][T21107] netlink: 'syz.1.4292': attribute type 10 has an invalid length. [ 1109.941224][T21107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4292'. [ 1110.457199][T21122] Invalid ELF header magic: != ELF [ 1110.526585][T21122] overlay: Unknown parameter '/' [ 1110.626222][T21120] Invalid ELF header magic: != ELF [ 1110.633458][T21124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4297'. [ 1110.635938][T21124] netlink: 'syz.0.4297': attribute type 10 has an invalid length. [ 1110.635956][T21124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4297'. [ 1110.715533][T21120] overlay: Unknown parameter '/' [ 1110.765568][T21126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4298'. [ 1111.507922][T21139] Invalid ELF header magic: != ELF [ 1111.570324][T21139] overlay: Unknown parameter '/' [ 1111.916550][T21142] Invalid ELF header magic: != ELF [ 1111.921576][T21142] overlay: Unknown parameter '/' [ 1111.969873][T21151] Invalid ELF header magic: != ELF [ 1111.990051][T21151] net_ratelimit: 1200 callbacks suppressed [ 1112.305633][T21151] overlay: Unknown parameter '/' [ 1114.001618][T21169] Invalid ELF header magic: != ELF [ 1114.059642][T21169] overlay: Unknown parameter '/' [ 1114.642383][T21173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4311'. [ 1114.645335][T21173] netlink: 'syz.0.4311': attribute type 10 has an invalid length. [ 1114.645349][T21173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4311'. [ 1114.840488][T21179] overlay: Unknown parameter '/' [ 1115.536408][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.536437][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.633522][T21184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4315'. [ 1115.640747][T21184] netlink: 'syz.2.4315': attribute type 10 has an invalid length. [ 1115.640763][T21184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4315'. [ 1115.659929][T21186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4323'. [ 1115.682757][T21186] netlink: 'syz.0.4323': attribute type 10 has an invalid length. [ 1115.682768][T21186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4323'. [ 1115.851487][T21189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4316'. [ 1115.853464][T21189] netlink: 'syz.2.4316': attribute type 10 has an invalid length. [ 1115.853475][T21189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4316'. [ 1116.161603][T21199] Invalid ELF header magic: != ELF [ 1116.163866][T21199] overlay: Unknown parameter '/' [ 1116.934423][T21203] netlink: 'syz.2.4320': attribute type 10 has an invalid length. [ 1116.934444][T21203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4320'. [ 1116.980282][T21205] netlink: 'syz.3.4321': attribute type 10 has an invalid length. [ 1116.980299][T21205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4321'. [ 1117.430733][T14454] net_ratelimit: 906 callbacks suppressed [ 1117.946034][T21218] overlay: Unknown parameter '/' [ 1118.140134][T21217] Invalid ELF header magic: != ELF [ 1118.352149][T21217] overlay: Unknown parameter '/' [ 1118.791432][T21232] Invalid ELF header magic: != ELF [ 1118.956696][T21232] overlay: Unknown parameter '/' [ 1119.008136][T21229] netlink: 'syz.1.4329': attribute type 10 has an invalid length. [ 1119.073733][T21239] Invalid ELF header magic: != ELF [ 1119.178861][T21241] netlink: 'syz.1.4332': attribute type 10 has an invalid length. [ 1119.193755][T21239] overlay: Unknown parameter '/' [ 1120.171391][T21252] Invalid ELF header magic: != ELF [ 1120.190054][T21252] overlay: Unknown parameter '/' [ 1120.616832][T21262] Invalid ELF header magic: != ELF [ 1120.787061][T21258] overlay: Unknown parameter '/' [ 1120.791846][T21257] overlay: Unknown parameter '/' [ 1120.868385][T21266] Invalid ELF header magic: != ELF [ 1120.902436][T21266] overlay: Unknown parameter '/' ** 8662 printk messages dropped ** ** 84 printk messages dropped ** ** 82 printk messages dropped ** ** 78 printk messages dropped ** ** 76 printk messages dropped ** ** 82 printk messages dropped ** ** 86 printk messages dropped ** ** 73 printk messages dropped ** ** 85 printk messages dropped ** ** 71 printk messages dropped ** ** 77 printk messages dropped ** ** 75 printk messages dropped ** ** 82 printk messages dropped ** ** 150 printk messages dropped ** ** 97 printk messages dropped ** ** 113 printk messages dropped ** ** 93 printk messages dropped ** ** 82 printk messages dropped ** ** 86 printk messages dropped ** ** 84 printk messages dropped ** ** 90 printk messages dropped ** ** 47 printk messages dropped ** ** 83 printk messages dropped ** ** 90 printk messages dropped ** ** 89 printk messages dropped ** ** 91 printk messages dropped ** ** 96 printk messages dropped ** ** 83 printk messages dropped ** ** 74 printk messages dropped ** ** 83 printk messages dropped ** ** 73 printk messages dropped ** ** 76 printk messages dropped ** ** 82 printk messages dropped ** ** 82 printk messages dropped ** ** 91 printk messages dropped ** ** 83 printk messages dropped ** ** 119 printk messages dropped ** ** 87 printk messages dropped ** ** 84 printk messages dropped ** ** 88 printk messages dropped ** ** 94 printk messages dropped ** ** 81 printk messages dropped ** ** 93 printk messages dropped ** ** 92 printk messages dropped ** ** 90 printk messages dropped ** ** 125 printk messages dropped ** ** 87 printk messages dropped ** ** 74 printk messages dropped ** ** 83 printk messages dropped ** ** 74 printk messages dropped ** ** 80 printk messages dropped ** ** 71 printk messages dropped ** ** 86 printk messages dropped ** ** 85 printk messages dropped ** ** 108 printk messages dropped ** ** 87 printk messages dropped ** ** 79 printk messages dropped ** ** 88 printk messages dropped ** ** 84 printk messages dropped ** ** 91 printk messages dropped ** ** 94 printk messages dropped ** ** 92 printk messages dropped ** ** 89 printk messages dropped ** ** 88 printk messages dropped ** ** 93 printk messages dropped ** ** 91 printk messages dropped ** ** 86 printk messages dropped ** ** 75 printk messages dropped ** ** 78 printk messages dropped ** ** 80 printk messages dropped ** ** 76 printk messages dropped ** ** 79 printk messages dropped ** ** 85 printk messages dropped ** ** 113 printk messages dropped ** ** 75 printk messages dropped ** [ 1121.469507][T21267] Invalid ELF header magic: != ELF [ 1121.531622][T21270] overlay: Unknown parameter '/' [ 1121.940136][T21282] Invalid ELF header magic: != ELF [ 1121.990868][T21282] overlay: Unknown parameter '/' [ 1122.700290][T14615] net_ratelimit: 2055 callbacks suppressed [ 1123.213084][T21289] Invalid ELF header magic: != ELF [ 1123.260450][T21289] overlay: Unknown parameter '/' ** 1984 printk messages dropped ** ** 207 printk messages dropped ** [ 1124.565593][T21303] Invalid ELF header magic: != ELF ** 2555 printk messages dropped ** [ 1124.639960][T21303] overlay: Unknown parameter '/' ** 2653 printk messages dropped ** ** 2648 printk messages dropped ** ** 2650 printk messages dropped ** ** 2259 printk messages dropped ** ** 1024 printk messages dropped ** ** 29920 printk messages dropped ** ** 187 printk messages dropped ** ** 175 printk messages dropped ** ** 248 printk messages dropped ** ** 197 printk messages dropped ** ** 205 printk messages dropped ** ** 189 printk messages dropped ** ** 216 printk messages dropped ** ** 198 printk messages dropped ** ** 213 printk messages dropped ** ** 280 printk messages dropped ** ** 147 printk messages dropped ** ** 149 printk messages dropped ** ** 64 printk messages dropped ** [ 1126.457119][T21318] Invalid ELF header magic: != ELF [ 1126.498250][T21318] overlay: Unknown parameter '/' ** 1633 printk messages dropped ** ** 1331 printk messages dropped ** [ 1126.920521][T21323] Invalid ELF header magic: != ELF [ 1126.933018][T21323] overlay: Unknown parameter '/' ** 1653 printk messages dropped ** ** 2106 printk messages dropped ** ** 1630 printk messages dropped ** ** 16995 printk messages dropped ** ** 160 printk messages dropped ** ** 144 printk messages dropped ** ** 147 printk messages dropped ** ** 169 printk messages dropped ** ** 114 printk messages dropped ** ** 117 printk messages dropped ** ** 139 printk messages dropped ** ** 173 printk messages dropped ** ** 144 printk messages dropped ** ** 160 printk messages dropped ** ** 93 printk messages dropped ** ** 97 printk messages dropped ** ** 92 printk messages dropped ** ** 94 printk messages dropped ** ** 123 printk messages dropped ** ** 139 printk messages dropped ** ** 147 printk messages dropped ** ** 134 printk messages dropped ** ** 130 printk messages dropped ** ** 133 printk messages dropped ** ** 141 printk messages dropped ** ** 96 printk messages dropped ** ** 88 printk messages dropped ** ** 109 printk messages dropped ** ** 105 printk messages dropped ** ** 133 printk messages dropped ** ** 204 printk messages dropped ** ** 167 printk messages dropped ** ** 185 printk messages dropped ** ** 89 printk messages dropped ** ** 183 printk messages dropped ** ** 195 printk messages dropped ** ** 197 printk messages dropped ** ** 142 printk messages dropped ** ** 145 printk messages dropped ** ** 121 printk messages dropped ** ** 102 printk messages dropped ** ** 91 printk messages dropped ** ** 91 printk messages dropped ** ** 162 printk messages dropped ** ** 182 printk messages dropped ** ** 127 printk messages dropped ** ** 129 printk messages dropped ** ** 106 printk messages dropped ** ** 93 printk messages dropped ** ** 81 printk messages dropped ** ** 119 printk messages dropped ** ** 223 printk messages dropped ** ** 201 printk messages dropped ** ** 177 printk messages dropped ** ** 146 printk messages dropped ** ** 137 printk messages dropped ** ** 182 printk messages dropped ** ** 184 printk messages dropped ** ** 191 printk messages dropped ** ** 209 printk messages dropped ** ** 143 printk messages dropped ** ** 135 printk messages dropped ** ** 241 printk messages dropped ** ** 169 printk messages dropped ** ** 168 printk messages dropped ** ** 138 printk messages dropped ** ** 153 printk messages dropped ** ** 161 printk messages dropped ** ** 124 printk messages dropped ** [ 1127.854298][ C2] net_ratelimit: 906 callbacks suppressed ** 18723 printk messages dropped ** ** 168 printk messages dropped ** ** 163 printk messages dropped ** ** 122 printk messages dropped ** ** 112 printk messages dropped ** ** 165 printk messages dropped ** ** 203 printk messages dropped ** ** 168 printk messages dropped ** ** 154 printk messages dropped ** ** 101 printk messages dropped ** ** 105 printk messages dropped ** ** 136 printk messages dropped ** ** 181 printk messages dropped ** ** 198 printk messages dropped ** ** 160 printk messages dropped ** ** 151 printk messages dropped ** ** 157 printk messages dropped ** ** 148 printk messages dropped ** ** 197 printk messages dropped ** ** 162 printk messages dropped ** ** 176 printk messages dropped ** ** 199 printk messages dropped ** ** 171 printk messages dropped ** ** 195 printk messages dropped ** ** 173 printk messages dropped ** ** 150 printk messages dropped ** ** 168 printk messages dropped ** ** 155 printk messages dropped ** ** 161 printk messages dropped ** ** 157 printk messages dropped ** ** 211 printk messages dropped ** ** 137 printk messages dropped ** ** 152 printk messages dropped ** ** 153 printk messages dropped ** ** 161 printk messages dropped ** ** 153 printk messages dropped ** ** 162 printk messages dropped ** ** 196 printk messages dropped ** ** 131 printk messages dropped ** ** 120 printk messages dropped ** ** 102 printk messages dropped ** ** 117 printk messages dropped ** ** 101 printk messages dropped ** [ 1128.671226][T21338] __nla_validate_parse: 3 callbacks suppressed [ 1128.671241][T21338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1128.673595][T21338] netlink: 'syz.2.4359': attribute type 10 has an invalid length. [ 1128.673612][T21338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1129.083537][T21347] Invalid ELF header magic: != ELF [ 1129.131557][T21347] overlay: Unknown parameter '/' [ 1129.862286][T21359] Invalid ELF header magic: != ELF [ 1129.883441][T21359] overlay: Unknown parameter '/' [ 1130.064920][T20182] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1130.224963][T20182] usb 6-1: Using ep0 maxpacket: 8 [ 1130.225813][T20182] usb 6-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1130.226946][T20182] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.227004][T20182] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.229334][T20182] usb 6-1: config 0 descriptor?? [ 1130.233324][T20182] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1130.460122][T21350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.461666][T21350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.468837][T20182] usb 6-1: USB disconnect, device number 63 [ 1130.759286][T21369] Invalid ELF header magic: != ELF [ 1130.768187][T21369] overlay: Unknown parameter '/' [ 1131.796013][T21380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4371'. [ 1131.797764][T21380] netlink: 'syz.0.4371': attribute type 10 has an invalid length. [ 1131.797776][T21380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4371'. [ 1131.882785][T21384] Invalid ELF header magic: != ELF [ 1131.890349][T21384] overlay: Unknown parameter '/' [ 1132.469569][T21385] Invalid ELF header magic: != ELF [ 1132.498886][T21382] overlay: Unknown parameter '/' [ 1132.894291][ C1] net_ratelimit: 195 callbacks suppressed [ 1133.618378][T21390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4375'. [ 1133.720896][T21390] netlink: 'syz.3.4375': attribute type 10 has an invalid length. [ 1133.721437][T21390] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4375'. ** 2045 printk messages dropped ** ** 152 printk messages dropped ** ** 104 printk messages dropped ** ** 112 printk messages dropped ** ** 91 printk messages dropped ** ** 88 printk messages dropped ** ** 82 printk messages dropped ** ** 83 printk messages dropped ** ** 197 printk messages dropped ** ** 104 printk messages dropped ** ** 125 printk messages dropped ** ** 114 printk messages dropped ** ** 108 printk messages dropped ** ** 178 printk messages dropped ** ** 103 printk messages dropped ** ** 112 printk messages dropped ** ** 103 printk messages dropped ** ** 115 printk messages dropped ** ** 108 printk messages dropped ** ** 117 printk messages dropped ** ** 113 printk messages dropped ** ** 119 printk messages dropped ** ** 107 printk messages dropped ** ** 111 printk messages dropped ** ** 100 printk messages dropped ** ** 108 printk messages dropped ** ** 53 printk messages dropped ** ** 3 printk messages dropped ** [ 1134.748120][T21409] overlay: Unknown parameter '/' [ 1134.761594][T21411] overlay: Unknown parameter '/' [ 1134.901498][T21413] Invalid ELF header magic: != ELF [ 1135.379046][T21410] overlay: Unknown parameter '/' ** 2922 printk messages dropped ** ** 1381 printk messages dropped ** ** 228 printk messages dropped ** ** 1813 printk messages dropped ** ** 235 printk messages dropped ** ** 2060 printk messages dropped ** ** 2159 printk messages dropped ** ** 173 printk messages dropped ** ** 1854 printk messages dropped ** ** 206 printk messages dropped ** ** 258 printk messages dropped ** ** 33189 printk messages dropped ** ** 133 printk messages dropped ** ** 119 printk messages dropped ** ** 164 printk messages dropped ** ** 117 printk messages dropped ** ** 119 printk messages dropped ** ** 118 printk messages dropped ** ** 16 printk messages dropped ** ** 8 printk messages dropped ** ** 74 printk messages dropped ** ** 88 printk messages dropped ** ** 57 printk messages dropped ** ** 92 printk messages dropped ** ** 76 printk messages dropped ** ** 93 printk messages dropped ** ** 79 printk messages dropped ** ** 76 printk messages dropped ** ** 646 printk messages dropped ** ** 83 printk messages dropped ** ** 70 printk messages dropped ** ** 104 printk messages dropped ** ** 499 printk messages dropped ** ** 52 printk messages dropped ** ** 108 printk messages dropped ** ** 53 printk messages dropped ** ** 45 printk messages dropped ** ** 94 printk messages dropped ** ** 49 printk messages dropped ** ** 68 printk messages dropped ** ** 88 printk messages dropped ** ** 69 printk messages dropped ** ** 77 printk messages dropped ** ** 26 printk messages dropped ** ** 42 printk messages dropped ** ** 75 printk messages dropped ** ** 66 printk messages dropped ** ** 50 printk messages dropped ** ** 57 printk messages dropped ** ** 29 printk messages dropped ** ** 59 printk messages dropped ** ** 70 printk messages dropped ** ** 71 printk messages dropped ** ** 55 printk messages dropped ** ** 54 printk messages dropped ** ** 55 printk messages dropped ** ** 67 printk messages dropped ** ** 93 printk messages dropped ** ** 63 printk messages dropped ** ** 56 printk messages dropped ** ** 60 printk messages dropped ** ** 82 printk messages dropped ** ** 68 printk messages dropped ** ** 64 printk messages dropped ** ** 86 printk messages dropped ** ** 60 printk messages dropped ** ** 56 printk messages dropped ** ** 74 printk messages dropped ** ** 67 printk messages dropped ** ** 53 printk messages dropped ** ** 77 printk messages dropped ** ** 36 printk messages dropped ** ** 53 printk messages dropped ** ** 381 printk messages dropped ** ** 55 printk messages dropped ** ** 55 printk messages dropped ** ** 49 printk messages dropped ** ** 115 printk messages dropped ** ** 57 printk messages dropped ** ** 53 printk messages dropped ** ** 55 printk messages dropped ** ** 60 printk messages dropped ** ** 100 printk messages dropped ** ** 65 printk messages dropped ** ** 57 printk messages dropped ** ** 55 printk messages dropped ** ** 513 printk messages dropped ** ** 125 printk messages dropped ** ** 134 printk messages dropped ** ** 79 printk messages dropped ** ** 57 printk messages dropped ** ** 57 printk messages dropped ** ** 103 printk messages dropped ** ** 100 printk messages dropped ** ** 118 printk messages dropped ** ** 99 printk messages dropped ** ** 80 printk messages dropped ** ** 94 printk messages dropped ** ** 69 printk messages dropped ** ** 93 printk messages dropped ** ** 115 printk messages dropped ** ** 92 printk messages dropped ** ** 72 printk messages dropped ** ** 97 printk messages dropped ** ** 89 printk messages dropped ** ** 89 printk messages dropped ** ** 218 printk messages dropped ** ** 122 printk messages dropped ** ** 122 printk messages dropped ** ** 89 printk messages dropped ** ** 106 printk messages dropped ** ** 96 printk messages dropped ** ** 132 printk messages dropped ** ** 91 printk messages dropped ** ** 101 printk messages dropped ** ** 101 printk messages dropped ** ** 98 printk messages dropped ** ** 159 printk messages dropped ** ** 166 printk messages dropped ** ** 101 printk messages dropped ** ** 99 printk messages dropped ** ** 95 printk messages dropped ** ** 91 printk messages dropped ** ** 105 printk messages dropped ** ** 174 printk messages dropped ** ** 65 printk messages dropped ** ** 59 printk messages dropped ** ** 64 printk messages dropped ** ** 86 printk messages dropped ** ** 133 printk messages dropped ** ** 87 printk messages dropped ** ** 109 printk messages dropped ** ** 60 printk messages dropped ** ** 47 printk messages dropped ** ** 92 printk messages dropped ** ** 85 printk messages dropped ** ** 96 printk messages dropped ** ** 74 printk messages dropped ** ** 55 printk messages dropped ** ** 70 printk messages dropped ** ** 45 printk messages dropped ** ** 45 printk messages dropped ** ** 57 printk messages dropped ** ** 52 printk messages dropped ** ** 73 printk messages dropped ** ** 86 printk messages dropped ** ** 113 printk messages dropped ** ** 293 printk messages dropped ** ** 89 printk messages dropped ** ** 125 printk messages dropped ** ** 143 printk messages dropped ** ** 98 printk messages dropped ** ** 107 printk messages dropped ** ** 103 printk messages dropped ** ** 94 printk messages dropped ** ** 184 printk messages dropped ** ** 96 printk messages dropped ** ** 91 printk messages dropped ** ** 92 printk messages dropped ** ** 89 printk messages dropped ** ** 89 printk messages dropped ** ** 92 printk messages dropped ** ** 128 printk messages dropped ** ** 99 printk messages dropped ** ** 84 printk messages dropped ** ** 68 printk messages dropped ** ** 258 printk messages dropped ** ** 78 printk messages dropped ** ** 75 printk messages dropped ** ** 63 printk messages dropped ** ** 80 printk messages dropped ** ** 545 printk messages dropped ** ** 65 printk messages dropped ** ** 76 printk messages dropped ** ** 69 printk messages dropped ** ** 62 printk messages dropped ** ** 78 printk messages dropped ** ** 82 printk messages dropped ** ** 71 printk messages dropped ** ** 91 printk messages dropped ** ** 91 printk messages dropped ** ** 68 printk messages dropped ** ** 91 printk messages dropped ** ** 99 printk messages dropped ** ** 67 printk messages dropped ** ** 58 printk messages dropped ** ** 81 printk messages dropped ** ** 271 printk messages dropped ** ** 90 printk messages dropped ** ** 95 printk messages dropped ** ** 94 printk messages dropped ** ** 107 printk messages dropped ** ** 117 printk messages dropped ** ** 94 printk messages dropped ** ** 68 printk messages dropped ** ** 59 printk messages dropped ** ** 54 printk messages dropped ** ** 92 printk messages dropped ** ** 122 printk messages dropped ** ** 100 printk messages dropped ** ** 72 printk messages dropped ** ** 73 printk messages dropped ** ** 99 printk messages dropped ** ** 112 printk messages dropped ** ** 93 printk messages dropped ** ** 134 printk messages dropped ** ** 95 printk messages dropped ** ** 91 printk messages dropped ** ** 92 printk messages dropped ** ** 90 printk messages dropped ** ** 118 printk messages dropped ** ** 120 printk messages dropped ** ** 89 printk messages dropped ** ** 86 printk messages dropped ** ** 127 printk messages dropped ** ** 80 printk messages dropped ** ** 123 printk messages dropped ** ** 496 printk messages dropped ** ** 101 printk messages dropped ** ** 97 printk messages dropped ** ** 90 printk messages dropped ** ** 122 printk messages dropped ** ** 94 printk messages dropped ** ** 109 printk messages dropped ** ** 133 printk messages dropped ** ** 206 printk messages dropped ** ** 122 printk messages dropped ** ** 104 printk messages dropped ** ** 104 printk messages dropped ** ** 113 printk messages dropped ** ** 125 printk messages dropped ** ** 90 printk messages dropped ** ** 97 printk messages dropped ** ** 88 printk messages dropped ** ** 75 printk messages dropped ** ** 112 printk messages dropped ** ** 69 printk messages dropped ** ** 58 printk messages dropped ** ** 50 printk messages dropped ** ** 69 printk messages dropped ** ** 86 printk messages dropped ** ** 112 printk messages dropped ** ** 111 printk messages dropped ** ** 90 printk messages dropped ** ** 87 printk messages dropped ** ** 99 printk messages dropped ** ** 93 printk messages dropped ** ** 105 printk messages dropped ** ** 110 printk messages dropped ** ** 71 printk messages dropped ** ** 80 printk messages dropped ** ** 56 printk messages dropped ** ** 188 printk messages dropped ** ** 87 printk messages dropped ** ** 87 printk messages dropped ** ** 98 printk messages dropped ** ** 85 printk messages dropped ** ** 88 printk messages dropped ** ** 236 printk messages dropped ** ** 96 printk messages dropped ** ** 106 printk messages dropped ** ** 87 printk messages dropped ** ** 95 printk messages dropped ** ** 101 printk messages dropped ** ** 107 printk messages dropped ** ** 216 printk messages dropped ** ** 58 printk messages dropped ** ** 127 printk messages dropped ** ** 117 printk messages dropped ** ** 113 printk messages dropped ** ** 84 printk messages dropped ** ** 91 printk messages dropped ** ** 93 printk messages dropped ** ** 145 printk messages dropped ** ** 139 printk messages dropped ** ** 96 printk messages dropped ** ** 61 printk messages dropped ** ** 60 printk messages dropped ** ** 53 printk messages dropped ** ** 109 printk messages dropped ** ** 162 printk messages dropped ** ** 55 printk messages dropped ** ** 89 printk messages dropped ** ** 88 printk messages dropped ** ** 108 printk messages dropped ** ** 317 printk messages dropped ** ** 105 printk messages dropped ** ** 101 printk messages dropped ** ** 85 printk messages dropped ** ** 153 printk messages dropped ** ** 54 printk messages dropped ** ** 57 printk messages dropped ** ** 62 printk messages dropped ** ** 90 printk messages dropped ** ** 126 printk messages dropped ** ** 31 printk messages dropped ** [ 1138.254270][ C3] net_ratelimit: 480 callbacks suppressed ** 4 printk messages dropped ** ** 130 printk messages dropped ** ** 212 printk messages dropped ** ** 174 printk messages dropped ** ** 140 printk messages dropped ** ** 28 printk messages dropped ** ** 5 printk messages dropped ** ** 125 printk messages dropped ** ** 136 printk messages dropped ** ** 287 printk messages dropped ** ** 153 printk messages dropped ** ** 119 printk messages dropped ** ** 126 printk messages dropped ** ** 117 printk messages dropped ** ** 132 printk messages dropped ** ** 184 printk messages dropped ** ** 145 printk messages dropped ** ** 148 printk messages dropped ** ** 131 printk messages dropped ** ** 133 printk messages dropped ** ** 127 printk messages dropped ** ** 215 printk messages dropped ** ** 129 printk messages dropped ** ** 135 printk messages dropped ** ** 146 printk messages dropped ** ** 139 printk messages dropped ** ** 135 printk messages dropped ** ** 221 printk messages dropped ** ** 168 printk messages dropped ** ** 171 printk messages dropped ** ** 414 printk messages dropped ** ** 348 printk messages dropped ** ** 143 printk messages dropped ** ** 129 printk messages dropped ** ** 136 printk messages dropped ** ** 16 printk messages dropped ** ** 112 printk messages dropped ** ** 127 printk messages dropped ** ** 167 printk messages dropped ** ** 183 printk messages dropped ** ** 127 printk messages dropped ** ** 203 printk messages dropped ** ** 147 printk messages dropped ** ** 132 printk messages dropped ** ** 188 printk messages dropped ** ** 130 printk messages dropped ** ** 135 printk messages dropped ** ** 133 printk messages dropped ** ** 160 printk messages dropped ** ** 188 printk messages dropped ** ** 203 printk messages dropped ** ** 125 printk messages dropped ** ** 121 printk messages dropped ** ** 134 printk messages dropped ** ** 133 printk messages dropped ** ** 195 printk messages dropped ** ** 183 printk messages dropped ** ** 119 printk messages dropped ** ** 235 printk messages dropped ** ** 159 printk messages dropped ** ** 217 printk messages dropped ** ** 180 printk messages dropped ** ** 138 printk messages dropped ** ** 211 printk messages dropped ** ** 183 printk messages dropped ** ** 172 printk messages dropped ** ** 307 printk messages dropped ** ** 129 printk messages dropped ** ** 131 printk messages dropped ** ** 123 printk messages dropped ** ** 128 printk messages dropped ** ** 128 printk messages dropped ** ** 185 printk messages dropped ** ** 131 printk messages dropped ** ** 213 printk messages dropped ** ** 204 printk messages dropped ** ** 137 printk messages dropped ** ** 138 printk messages dropped ** ** 10 printk messages dropped ** ** 1 printk messages dropped ** ** 142 printk messages dropped ** ** 151 printk messages dropped ** ** 140 printk messages dropped ** ** 236 printk messages dropped ** ** 176 printk messages dropped ** ** 134 printk messages dropped ** ** 130 printk messages dropped ** ** 136 printk messages dropped ** ** 140 printk messages dropped ** ** 239 printk messages dropped ** ** 145 printk messages dropped ** ** 140 printk messages dropped ** ** 174 printk messages dropped ** ** 219 printk messages dropped ** ** 207 printk messages dropped ** ** 126 printk messages dropped ** ** 218 printk messages dropped ** ** 193 printk messages dropped ** ** 123 printk messages dropped ** ** 218 printk messages dropped ** ** 200 printk messages dropped ** ** 114 printk messages dropped ** ** 116 printk messages dropped ** ** 128 printk messages dropped ** ** 177 printk messages dropped ** ** 141 printk messages dropped ** ** 125 printk messages dropped ** ** 185 printk messages dropped ** ** 154 printk messages dropped ** ** 102 printk messages dropped ** ** 108 printk messages dropped ** ** 101 printk messages dropped ** ** 112 printk messages dropped ** ** 98 printk messages dropped ** ** 103 printk messages dropped ** ** 202 printk messages dropped ** ** 136 printk messages dropped ** ** 113 printk messages dropped ** ** 103 printk messages dropped ** ** 140 printk messages dropped ** ** 104 printk messages dropped ** ** 391 printk messages dropped ** ** 75 printk messages dropped ** [ 1138.748305][T21432] Console: switching to colour dummy device 80x25 ** 121 printk messages dropped ** ** 92 printk messages dropped ** ** 87 printk messages dropped ** ** 93 printk messages dropped ** ** 160 printk messages dropped ** ** 261 printk messages dropped ** ** 209 printk messages dropped ** ** 149 printk messages dropped ** ** 227 printk messages dropped ** ** 152 printk messages dropped ** ** 34 printk messages dropped ** ** 83 printk messages dropped ** ** 82 printk messages dropped ** ** 79 printk messages dropped ** ** 79 printk messages dropped ** ** 72 printk messages dropped ** ** 146 printk messages dropped ** ** 119 printk messages dropped ** ** 173 printk messages dropped ** ** 117 printk messages dropped ** ** 93 printk messages dropped ** ** 85 printk messages dropped ** ** 93 printk messages dropped ** ** 98 printk messages dropped ** ** 95 printk messages dropped ** ** 139 printk messages dropped ** ** 102 printk messages dropped ** ** 104 printk messages dropped ** ** 108 printk messages dropped ** ** 238 printk messages dropped ** ** 158 printk messages dropped ** ** 296 printk messages dropped ** ** 140 printk messages dropped ** ** 141 printk messages dropped ** ** 120 printk messages dropped ** ** 115 printk messages dropped ** ** 89 printk messages dropped ** ** 98 printk messages dropped ** ** 139 printk messages dropped ** ** 149 printk messages dropped ** ** 120 printk messages dropped ** ** 160 printk messages dropped ** ** 92 printk messages dropped ** ** 92 printk messages dropped ** ** 93 printk messages dropped ** ** 89 printk messages dropped ** ** 86 printk messages dropped ** ** 90 printk messages dropped ** ** 87 printk messages dropped ** ** 91 printk messages dropped ** ** 153 printk messages dropped ** ** 165 printk messages dropped ** ** 190 printk messages dropped ** ** 199 printk messages dropped ** ** 158 printk messages dropped ** ** 158 printk messages dropped ** ** 181 printk messages dropped ** ** 203 printk messages dropped ** ** 181 printk messages dropped ** ** 141 printk messages dropped ** ** 191 printk messages dropped ** ** 200 printk messages dropped ** ** 206 printk messages dropped ** ** 199 printk messages dropped ** ** 206 printk messages dropped ** ** 74 printk messages dropped ** [ 1141.213707][T21450] Invalid ELF header magic: != ELF [ 1141.221133][T21450] overlay: Unknown parameter '/' [ 1142.262856][T21456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4390'. [ 1142.285031][T21456] netlink: 'syz.3.4390': attribute type 10 has an invalid length. [ 1142.285052][T21456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4390'. [ 1142.552090][T21464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4393'. [ 1142.560409][T21464] netlink: 'syz.3.4393': attribute type 10 has an invalid length. [ 1142.560430][T21464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4393'. [ 1142.569019][T21465] Invalid ELF header magic: != ELF [ 1142.709060][T21466] Invalid ELF header magic: != ELF [ 1142.766224][T21465] overlay: Unknown parameter '/' [ 1142.973131][T21466] overlay: Unknown parameter '/' [ 1143.274361][T13471] net_ratelimit: 212 callbacks suppressed [ 1146.087222][T21490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4398'. [ 1146.089699][T21490] netlink: 'syz.2.4398': attribute type 10 has an invalid length. [ 1146.089718][T21490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4398'. [ 1146.208505][T21495] Invalid ELF header magic: != ELF [ 1146.407678][T21495] overlay: Unknown parameter '/' [ 1146.987580][T21503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4403'. [ 1146.989202][T21503] netlink: 'syz.2.4403': attribute type 10 has an invalid length. [ 1146.989212][T21503] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4403'. [ 1147.215890][T21507] Invalid ELF header magic: != ELF [ 1147.597444][T21507] overlay: Unknown parameter '/' [ 1147.801466][T21512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4407'. [ 1147.805877][T21512] netlink: 'syz.2.4407': attribute type 10 has an invalid length. [ 1147.805896][T21512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4407'. [ 1147.895963][T21514] Invalid ELF header magic: != ELF [ 1147.996972][T21514] overlay: Unknown parameter '/' [ 1148.304663][T13471] net_ratelimit: 467 callbacks suppressed [ 1148.823954][T21522] Invalid ELF header magic: != ELF [ 1148.835899][T21522] overlay: Unknown parameter '/' [ 1149.204994][T21526] Invalid ELF header magic: != ELF [ 1149.283114][T21526] overlay: Unknown parameter '/' [ 1149.948809][T21537] Invalid ELF header magic: != ELF [ 1149.951721][T21536] Invalid ELF header magic: != ELF [ 1149.996105][T21536] overlay: Unknown parameter '/' [ 1150.000541][T21537] overlay: Unknown parameter '/' [ 1151.030199][T21549] Invalid ELF header magic: != ELF [ 1151.148081][T21549] overlay: Unknown parameter '/' [ 1151.171780][T21548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4416'. [ 1151.173567][T21548] netlink: 'syz.0.4416': attribute type 10 has an invalid length. [ 1151.173581][T21548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4416'. [ 1153.774257][ C1] net_ratelimit: 764 callbacks suppressed [ 1154.347934][T21571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4422'. [ 1154.350253][T21571] netlink: 'syz.1.4422': attribute type 10 has an invalid length. [ 1154.350269][T21571] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4422'. [ 1155.457330][T21585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4425'. [ 1155.459149][T21585] netlink: 'syz.1.4425': attribute type 10 has an invalid length. [ 1155.459164][T21585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4425'. [ 1155.911651][T21597] Invalid ELF header magic: != ELF [ 1156.375557][T11691] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1156.425227][T21599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4429'. [ 1156.426703][T21599] netlink: 'syz.2.4429': attribute type 10 has an invalid length. [ 1156.426714][T21599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4429'. [ 1156.586796][T11691] usb 5-1: Using ep0 maxpacket: 8 [ 1156.587512][T11691] usb 5-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1156.588414][T11691] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.588468][T11691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.590963][T11691] usb 5-1: config 0 descriptor?? [ 1156.596986][T11691] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1156.802872][T21577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.803399][T21577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.810833][T11691] usb 5-1: USB disconnect, device number 63 [ 1156.913744][T21609] Invalid ELF header magic: != ELF [ 1156.974065][T21611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4434'. [ 1156.976464][T21611] netlink: 'syz.1.4434': attribute type 10 has an invalid length. [ 1156.976475][T21611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4434'. [ 1156.999521][T21609] overlay: Unknown parameter '/' [ 1157.419642][T21619] Invalid ELF header magic: != ELF [ 1157.861163][T21618] Invalid ELF header magic: != ELF [ 1157.878636][T21618] overlay: Unknown parameter '/' [ 1157.917655][T21616] overlay: Unknown parameter '/' [ 1158.045208][T21623] Invalid ELF header magic: != ELF [ 1158.085495][T21622] overlay: Unknown parameter '/' [ 1158.505952][T21627] Invalid ELF header magic: != ELF [ 1158.783294][T21626] overlay: Unknown parameter '/' [ 1158.814283][ C2] net_ratelimit: 1202 callbacks suppressed [ 1158.919418][T21631] Invalid ELF header magic: != ELF [ 1160.010930][T21639] Invalid ELF header magic: != ELF [ 1160.011668][T21638] Invalid ELF header magic: != ELF [ 1160.350063][T21637] overlay: Unknown parameter '/' [ 1160.352617][T21636] overlay: Unknown parameter '/' [ 1160.751825][T21648] Invalid ELF header magic: != ELF [ 1160.758428][T21648] overlay: Unknown parameter '/' [ 1161.559069][T21655] Invalid ELF header magic: != ELF [ 1161.574134][T21655] overlay: Unknown parameter '/' [ 1162.261746][T21659] Invalid ELF header magic: != ELF [ 1162.560914][T21659] overlay: Unknown parameter '/' [ 1163.946168][T21677] Invalid ELF header magic: != ELF [ 1163.957926][T21677] net_ratelimit: 765 callbacks suppressed [ 1164.040192][T21677] overlay: Unknown parameter '/' [ 1164.706112][T21679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4452'. [ 1164.707546][T21679] netlink: 'syz.2.4452': attribute type 10 has an invalid length. [ 1164.707556][T21679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4452'. [ 1165.307179][T21688] Invalid ELF header magic: != ELF [ 1165.313373][T21688] overlay: Unknown parameter '/' [ 1166.246853][T21696] Invalid ELF header magic: != ELF [ 1166.254065][T21696] overlay: Unknown parameter '/' [ 1166.475875][T21695] netlink: 'syz.2.4458': attribute type 10 has an invalid length. [ 1166.475926][T21695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4458'. [ 1166.783681][T21706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1166.787854][T21706] netlink: 'syz.3.4461': attribute type 10 has an invalid length. [ 1166.787871][T21706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1166.902307][T21702] Invalid ELF header magic: != ELF [ 1166.906079][T21702] overlay: Unknown parameter '/' [ 1167.041344][T21710] Invalid ELF header magic: != ELF [ 1167.081376][T21710] overlay: Unknown parameter '/' [ 1168.106871][T21715] Invalid ELF header magic: != ELF [ 1168.117196][T21715] overlay: Unknown parameter '/' [ 1169.134313][ C1] net_ratelimit: 908 callbacks suppressed ** 912 printk messages dropped ** ** 29 printk messages dropped ** ** 26 printk messages dropped ** ** 44 printk messages dropped ** ** 38 printk messages dropped ** ** 38 printk messages dropped ** ** 53 printk messages dropped ** ** 23 printk messages dropped ** [ 1170.301596][T21730] netlink: 'syz.1.4467': attribute type 10 has an invalid length. [ 1170.301612][T21730] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4467'. [ 1170.560993][T21741] Invalid ELF header magic: != ELF [ 1170.568422][T21741] overlay: Unknown parameter '/' [ 1170.948684][T21745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4472'. [ 1170.951167][T21745] netlink: 'syz.0.4472': attribute type 10 has an invalid length. [ 1170.951184][T21745] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4472'. [ 1171.793628][T21758] Invalid ELF header magic: != ELF [ 1171.808325][T21758] overlay: Unknown parameter '/' [ 1171.996548][T21762] Invalid ELF header magic: != ELF [ 1172.100990][T21762] overlay: Unknown parameter '/' [ 1172.732867][T21763] Invalid ELF header magic: != ELF [ 1172.786996][T21757] overlay: Unknown parameter '/' [ 1172.859459][T21775] Invalid ELF header magic: != ELF ** 13649 printk messages dropped ** ** 1032 printk messages dropped ** [ 1173.353104][T21774] Invalid ELF header magic: != ELF [ 1173.353470][T21772] overlay: Unknown parameter '/' [ 1173.357574][T21774] overlay: Unknown parameter '/' ** 391 printk messages dropped ** [ 1174.335446][T21789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'. [ 1174.340445][T21789] netlink: 'syz.3.4481': attribute type 10 has an invalid length. [ 1174.340461][T21789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4481'. [ 1174.414310][ C1] net_ratelimit: 1342 callbacks suppressed [ 1174.656228][T21795] netlink: 'syz.2.4482': attribute type 10 has an invalid length. [ 1174.656242][T21795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4482'. [ 1174.718355][T21798] Invalid ELF header magic: != ELF [ 1174.725744][T21798] overlay: Unknown parameter '/' [ 1175.554048][T21803] Invalid ELF header magic: != ELF [ 1175.570587][T21803] overlay: Unknown parameter '/' [ 1176.006696][T21808] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1176.032095][T21808] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 1176.032550][T21808] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff] [ 1176.033001][T21808] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1176.039055][T21808] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1176.215949][T21808] pci 0000:00:01.0: Adding to iommu group 1 [ 1176.266224][T21808] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1176.266238][T21808] pci 0000:00:01.0: vgaarb: bridge control possible [ 1176.266247][T21808] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1176.288374][T21808] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1176.296736][T21808] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1176.446443][T21808] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1176.539392][T21808] [drm] Found bochs VGA, ID 0xb0c5. [ 1176.539450][T21808] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1176.578949][T21816] Invalid ELF header magic: != ELF [ 1176.676396][T21816] overlay: Unknown parameter '/' [ 1176.985100][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.985158][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.003791][T21808] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1177.360517][T21824] Invalid ELF header magic: != ELF [ 1177.397055][T21824] overlay: Unknown parameter '/' [ 1178.848138][T21808] Console: switching to colour frame buffer device 160x50 [ 1179.219955][T21834] Invalid ELF header magic: != ELF [ 1179.221760][T21834] overlay: Unknown parameter '/' [ 1179.389479][T21808] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1179.418874][T21832] Console: switching to colour dummy device 80x25 [ 1179.841090][T21845] Invalid ELF header magic: != ELF [ 1179.842029][T21845] net_ratelimit: 476 callbacks suppressed [ 1179.852845][T21845] overlay: Unknown parameter '/' [ 1180.459020][T21851] Invalid ELF header magic: != ELF [ 1180.468368][T21851] overlay: Unknown parameter '/' [ 1180.512599][T21852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4494'. [ 1180.519558][T21852] netlink: 'syz.2.4494': attribute type 10 has an invalid length. [ 1180.519579][T21852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4494'. [ 1181.181491][T21858] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1181.253745][T21859] Invalid ELF header magic: != ELF [ 1181.402495][T21860] overlay: Unknown parameter '/' [ 1181.650883][T21858] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1181.651080][T21858] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1181.651538][T21858] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1181.653419][T21858] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1181.692289][T21858] pci 0000:00:01.0: Adding to iommu group 1 [ 1181.712894][T21858] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1181.712905][T21858] pci 0000:00:01.0: vgaarb: bridge control possible [ 1181.712913][T21858] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1181.724999][T21858] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1181.725419][T21858] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1181.731681][T21858] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1181.759508][T21858] [drm] Found bochs VGA, ID 0xb0c5. [ 1181.759601][T21858] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1181.796592][T21858] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1182.023621][T21858] Console: switching to colour frame buffer device 160x50 [ 1182.194922][T21858] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1182.513139][T21870] Invalid ELF header magic: != ELF [ 1182.575291][T21870] overlay: Unknown parameter '/' [ 1183.010583][T21869] Console: switching to colour dummy device 80x25 [ 1183.623484][T21879] Invalid ELF header magic: != ELF [ 1183.631694][T21879] overlay: Unknown parameter '/' [ 1184.784862][T13524] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1184.904262][ C2] net_ratelimit: 899 callbacks suppressed [ 1184.950308][T13524] usb 6-1: Using ep0 maxpacket: 8 [ 1184.951309][T13524] usb 6-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1184.955918][T13524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.955978][T13524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.961826][T13524] usb 6-1: config 0 descriptor?? [ 1184.967451][T13524] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1185.371493][T21882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.381707][T21882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.400226][T21890] netlink: 'syz.2.4506': attribute type 10 has an invalid length. [ 1185.400358][T21890] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4506'. [ 1185.461076][T13524] usb 6-1: USB disconnect, device number 64 [ 1185.656133][T21896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1185.660403][T21896] netlink: 'syz.0.4507': attribute type 10 has an invalid length. [ 1185.660414][T21896] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1186.190495][T21907] netlink: 'syz.3.4511': attribute type 10 has an invalid length. [ 1186.190507][T21907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4511'. [ 1186.509728][T21912] Invalid ELF header magic: != ELF [ 1186.513404][T21912] overlay: Unknown parameter '/' [ 1187.563934][T21921] Invalid ELF header magic: != ELF [ 1187.571536][T21921] overlay: Unknown parameter '/' [ 1188.115034][T21922] Invalid ELF header magic: != ELF [ 1188.154299][T21920] overlay: Unknown parameter '/' [ 1188.657022][T21931] Invalid ELF header magic: != ELF [ 1188.892178][T21933] overlay: Unknown parameter '/' [ 1189.287134][T21937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4518'. [ 1189.289067][T21937] netlink: 'syz.1.4518': attribute type 10 has an invalid length. [ 1189.289081][T21937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4518'. ** 342 printk messages dropped ** ** 90 printk messages dropped ** ** 95 printk messages dropped ** ** 91 printk messages dropped ** ** 82 printk messages dropped ** ** 102 printk messages dropped ** ** 115 printk messages dropped ** ** 113 printk messages dropped ** ** 100 printk messages dropped ** [ 1189.639792][T21948] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1189.656620][T21948] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1189.656831][T21948] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1189.657154][T21948] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1189.661986][T21948] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1189.698402][T21948] pci 0000:00:01.0: Adding to iommu group 1 [ 1189.711472][T21948] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1189.711483][T21948] pci 0000:00:01.0: vgaarb: bridge control possible [ 1189.711490][T21948] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1189.728525][T21948] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1189.728858][T21948] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1189.738283][T21948] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1189.783526][T21948] [drm] Found bochs VGA, ID 0xb0c5. [ 1189.783536][T21948] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1189.796511][T15326] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1189.804758][ T5798] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1189.852027][T21948] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1189.962062][T15326] usb 8-1: Using ep0 maxpacket: 8 [ 1189.966243][T15326] usb 8-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1189.974289][ T5798] usb 5-1: Using ep0 maxpacket: 8 [ 1189.974729][ T5798] usb 5-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1189.975542][ T5798] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.975586][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.019839][T15326] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.020452][T15326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.022048][ T5798] usb 5-1: config 0 descriptor?? [ 1190.035048][ T5798] usbhid 5-1:0.0: couldn't find an input interrupt endpoint ** 1601 printk messages dropped ** [ 1190.225825][T15326] usb 8-1: config 0 descriptor?? [ 1190.306673][T21948] Console: switching to colour frame buffer device 160x50 [ 1190.340292][T15326] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1190.344268][ C3] net_ratelimit: 480 callbacks suppressed [ 1190.359489][T21948] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1190.383751][T21936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.440214][T21936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.709539][T15326] usb 5-1: USB disconnect, device number 64 [ 1190.822344][T21941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.838284][T21941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.922059][ T1365] usb 8-1: USB disconnect, device number 67 [ 1191.845662][T21960] Invalid ELF header magic: != ELF [ 1191.884713][T21960] overlay: Unknown parameter '/' [ 1192.528389][T21965] Invalid ELF header magic: != ELF [ 1192.557142][T21965] overlay: Unknown parameter '/' [ 1193.290121][T21974] Console: switching to colour dummy device 80x25 [ 1194.130306][T21981] netlink: 'syz.0.4528': attribute type 10 has an invalid length. [ 1194.130345][T21981] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4528'. [ 1195.374292][ C2] net_ratelimit: 492 callbacks suppressed [ 1196.308058][T21998] Invalid ELF header magic: != ELF [ 1197.093276][T22003] Invalid ELF header magic: != ELF [ 1197.661870][T22011] Invalid ELF header magic: != ELF [ 1197.979501][T22008] overlay: Unknown parameter '/' [ 1198.069621][T22017] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1198.086250][T22017] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1198.086437][T22017] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1198.086703][T22017] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1198.087345][T22017] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1198.095552][T22017] pci 0000:00:01.0: Adding to iommu group 1 [ 1198.098875][T22017] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1198.098885][T22017] pci 0000:00:01.0: vgaarb: bridge control possible [ 1198.098893][T22017] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1198.104025][T22017] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1198.104143][T22017] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1198.106044][T22017] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1198.182293][T22017] [drm] Found bochs VGA, ID 0xb0c5. [ 1198.182344][T22017] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1198.295176][T22017] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1198.602723][T22024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1198.607552][T22024] netlink: 'syz.2.4537': attribute type 10 has an invalid length. [ 1198.607563][T22024] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1198.662430][T22026] Invalid ELF header magic: != ELF [ 1199.106700][T22017] Console: switching to colour frame buffer device 160x50 [ 1199.138124][T22017] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1199.502124][T22032] Console: switching to colour dummy device 80x25 [ 1200.422176][T22038] net_ratelimit: 782 callbacks suppressed [ 1200.844629][ T5798] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1201.256949][ T5798] usb 5-1: Using ep0 maxpacket: 8 [ 1201.268313][ T5798] usb 5-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1201.269796][ T5798] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.269855][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.569131][ T5798] usb 5-1: config 0 descriptor?? [ 1201.776654][T22040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.777000][T22040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.370071][T22061] Invalid ELF header magic: != ELF [ 1202.605096][ T5798] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1202.939926][ T5798] usb 5-1: USB disconnect, device number 65 [ 1203.026091][T22066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4550'. [ 1203.028644][T22066] netlink: 'syz.3.4550': attribute type 10 has an invalid length. [ 1203.028660][T22066] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4550'. [ 1203.275326][T22068] Invalid ELF header magic: != ELF [ 1203.394482][T22065] overlay: Unknown parameter '/' [ 1203.629934][T22075] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1203.846771][T22077] Invalid ELF header magic: != ELF [ 1204.048674][T22077] overlay: Unknown parameter '/' [ 1204.052354][T22075] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1204.059764][T22075] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1204.062264][T22075] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1204.086325][T22075] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1204.136876][T22075] pci 0000:00:01.0: Adding to iommu group 1 [ 1204.224877][T22075] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1204.224896][T22075] pci 0000:00:01.0: vgaarb: bridge control possible [ 1204.224904][T22075] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1204.504666][T22082] Invalid ELF header magic: != ELF [ 1204.512525][T22082] overlay: Unknown parameter '/' [ 1204.638407][T22075] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1204.638512][T22075] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1204.639857][T22075] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1204.655772][T22075] [drm] Found bochs VGA, ID 0xb0c5. [ 1204.655788][T22075] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1204.663995][T22075] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1204.746526][T22075] Console: switching to colour frame buffer device 160x50 [ 1204.775723][T22075] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1205.175876][T22092] Invalid ELF header magic: != ELF [ 1205.192823][T22092] overlay: Unknown parameter '/' [ 1205.464264][ C3] net_ratelimit: 907 callbacks suppressed [ 1205.538590][T22094] Console: switching to colour dummy device 80x25 [ 1206.061886][T22101] Invalid ELF header magic: != ELF [ 1206.069346][T22101] overlay: Unknown parameter '/' [ 1206.277388][T22100] netlink: 'syz.3.4558': attribute type 10 has an invalid length. [ 1206.277408][T22100] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4558'. [ 1206.724863][ T1483] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1206.974777][ T1483] usb 8-1: Using ep0 maxpacket: 8 [ 1207.092080][T22117] Invalid ELF header magic: != ELF [ 1207.097733][T22117] overlay: Unknown parameter '/' [ 1207.387364][ T1483] usb 8-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1207.388528][ T1483] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.388583][ T1483] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.405405][ T1483] usb 8-1: config 0 descriptor?? [ 1207.410002][ T1483] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1207.503069][T22118] Invalid ELF header magic: != ELF ** 1854 printk messages dropped ** ** 274 printk messages dropped ** ** 147 printk messages dropped ** [ 1207.787740][T22103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.788065][T22103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.804073][ T1483] usb 8-1: USB disconnect, device number 68 ** 1017 printk messages dropped ** [ 1208.064110][T22125] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1208.077450][T22125] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1208.077738][T22125] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1208.078221][T22125] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1208.081259][T22125] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1208.116260][T22125] pci 0000:00:01.0: Adding to iommu group 1 [ 1208.134245][T22125] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1208.134256][T22125] pci 0000:00:01.0: vgaarb: bridge control possible [ 1208.134263][T22125] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1208.147317][T22125] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1208.147664][T22125] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1208.151118][T22125] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1208.203132][T22125] [drm] Found bochs VGA, ID 0xb0c5. [ 1208.203230][T22125] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1208.357352][T22125] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1208.682726][T22125] Console: switching [ 1208.682734][T22125] to colour frame buffer device 160x50 [ 1208.773496][T22125] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device ** 1440 printk messages dropped ** ** 1229 printk messages dropped ** ** 1928 printk messages dropped ** ** 1950 printk messages dropped ** ** 1815 printk messages dropped ** [ 1210.716031][ T50] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1210.734259][ C0] net_ratelimit: 342 callbacks suppressed [ 1210.874908][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 1210.877831][ T50] usb 8-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1210.901606][ T50] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.905302][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.946627][ T50] usb 8-1: config 0 descriptor?? [ 1210.963116][ T50] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1211.170036][T22133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.170634][T22133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.178861][ T50] usb 8-1: USB disconnect, device number 69 [ 1211.337379][T22152] Invalid ELF header magic: != ELF [ 1211.350537][T22152] overlay: Unknown parameter '/' [ 1212.093334][T22159] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1212.119582][T22159] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1212.119765][T22159] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1212.123022][T22159] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1212.138851][T22159] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1212.221734][T22159] pci 0000:00:01.0: Adding to iommu group 1 [ 1212.260340][T22159] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1212.260352][T22159] pci 0000:00:01.0: vgaarb: bridge control possible [ 1212.260359][T22159] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1212.286835][T22159] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1212.287069][T22159] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1212.302281][T22159] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1212.361736][T22159] [drm] Found bochs VGA, ID 0xb0c5. [ 1212.361747][T22159] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1212.463426][T22159] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1213.552361][T22159] Console: switching to colour frame buffer device 160x50 [ 1213.581736][T22159] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1213.607366][T22165] Console: switching to colour dummy device 80x25 [ 1214.503787][T22168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4573'. [ 1214.519983][T22167] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1214.540146][T22167] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1214.540992][T22167] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1214.541605][T22167] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1214.547133][T22167] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1214.631642][T22167] pci 0000:00:01.0: Adding to iommu group 1 [ 1214.650343][T22168] netlink: 'syz.1.4573': attribute type 10 has an invalid length. [ 1214.650439][T22168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4573'. [ 1214.652731][T22167] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1214.652745][T22167] pci 0000:00:01.0: vgaarb: bridge control possible [ 1214.652753][T22167] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1214.666641][T22167] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1214.666774][T22167] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1214.674604][T22167] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1214.721249][T22167] [drm] Found bochs VGA, ID 0xb0c5. [ 1214.721375][T22167] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1214.801494][T22167] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1215.079077][T22167] Console: switching to colour frame buffer device 160x50 [ 1215.108364][T22167] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1215.301932][T22178] Invalid ELF header magic: != ELF [ 1215.338617][T22178] overlay: Unknown parameter '/' [ 1215.878164][T13471] net_ratelimit: 195 callbacks suppressed [ 1216.713948][T22189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4579'. [ 1216.941675][T22191] netlink: 'syz.3.4579': attribute type 10 has an invalid length. [ 1216.941795][T22191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4579'. [ 1218.229963][T22205] Invalid ELF header magic: != ELF [ 1218.277356][T22205] overlay: Unknown parameter '/' [ 1218.694969][ T50] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1218.846680][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 1218.856166][ T50] usb 5-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1218.886740][ T50] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.887617][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.939387][ T50] usb 5-1: config 0 descriptor?? [ 1219.051367][ T50] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1219.218571][T22211] Invalid ELF header magic: != ELF [ 1219.346976][T22195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.373598][T22195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.545981][ T50] usb 5-1: USB disconnect, device number 66 [ 1220.118117][T22219] Invalid ELF header magic: != ELF [ 1220.161688][T22219] overlay: Unknown parameter '/' [ 1220.513001][T22222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4588'. [ 1220.519640][T22222] netlink: 'syz.0.4588': attribute type 10 has an invalid length. [ 1220.519656][T22222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4588'. ** 146 printk messages dropped ** ** 11 printk messages dropped ** ** 5 printk messages dropped ** ** 48 printk messages dropped ** ** 49 printk messages dropped ** [ 1220.892354][T22226] Invalid ELF header magic: != ELF [ 1220.893526][T22226] net_ratelimit: 613 callbacks suppressed ** 146 printk messages dropped ** [ 1220.958886][T22226] overlay: Unknown parameter '/' ** 1047 printk messages dropped ** [ 1222.233687][T22240] Invalid ELF header magic: != ELF ** 1632 printk messages dropped ** [ 1223.073945][T22245] Console: switching to colour dummy device 80x25 ** 1221 printk messages dropped ** ** 367 printk messages dropped ** ** 545 printk messages dropped ** ** 1547 printk messages dropped ** ** 982 printk messages dropped ** ** 1501 printk messages dropped ** ** 2786 printk messages dropped ** [ 1225.606200][T22266] Invalid ELF header magic: != ELF [ 1225.927226][T22247] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1225.985458][T22247] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1225.985639][T22247] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1225.985873][T22247] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1225.999660][T22247] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1226.053982][T22247] pci 0000:00:01.0: Adding to iommu group 1 [ 1226.062600][T22247] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1226.062611][T22247] pci 0000:00:01.0: vgaarb: bridge control possible [ 1226.062618][T22247] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1226.096335][T22247] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1226.096451][T22247] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1226.097750][T22247] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1226.126454][T22269] Invalid ELF header magic: != ELF [ 1226.128022][T22269] net_ratelimit: 761 callbacks suppressed [ 1226.205820][T22247] [drm] Found bochs VGA, ID 0xb0c5. [ 1226.205830][T22247] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1226.408129][T22247] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1226.616758][T22247] Console: switching [ 1226.616836][T22247] to colour frame buffer device 160x50 [ 1226.643076][T22247] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device ** 2653 printk messages dropped ** [ 1226.916686][T22280] Invalid ELF header magic: != ELF [ 1226.983526][T22281] Invalid ELF header magic: != ELF [ 1227.059738][T22281] overlay: Unknown parameter '/' [ 1227.305658][T22282] overlay: Unknown parameter '/' [ 1228.090876][T22296] Invalid ELF header magic: != ELF [ 1228.099498][T22296] overlay: Unknown parameter '/' [ 1228.404644][T15570] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1228.469694][T22298] Invalid ELF header magic: != ELF [ 1228.567194][T22295] overlay: Unknown parameter '/' [ 1228.684896][T15570] usb 6-1: Using ep0 maxpacket: 8 [ 1228.685466][T15570] usb 6-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1228.686351][T15570] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.686385][T15570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.688697][T15570] usb 6-1: config 0 descriptor?? [ 1228.690715][T15570] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1228.901603][T22293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.902437][T22293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.916083][ T10] usb 6-1: USB disconnect, device number 65 [ 1229.301223][T22315] Invalid ELF header magic: != ELF [ 1229.340630][T22315] overlay: Unknown parameter '/' [ 1229.855785][T22320] Invalid ELF header magic: != ELF [ 1229.915371][T22320] overlay: Unknown parameter '/' [ 1230.518079][T22325] Console: switching to colour dummy device 80x25 ** 4181 printk messages dropped ** [ 1230.607222][T22328] Invalid ELF header magic: != ELF [ 1231.094023][T22323] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1231.095523][T22330] Invalid ELF header magic: != ELF [ 1231.115976][T22323] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1231.116095][T22323] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1231.116452][T22323] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1231.116954][T22323] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1231.124004][T22323] pci 0000:00:01.0: Adding to iommu group 1 [ 1231.127369][T22323] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1231.127379][T22323] pci 0000:00:01.0: vgaarb: bridge control possible [ 1231.127387][T22323] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1231.132193][T22323] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1231.132319][T22323] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1231.133850][T22323] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1231.139184][T22323] [drm] Found bochs VGA, ID 0xb0c5. [ 1231.139192][T22323] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1231.230459][T22330] overlay: Unknown parameter '/' [ 1231.235826][T22323] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1231.305349][T22323] Console: switching to colour frame buffer device 160x50 [ 1231.321085][T22323] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1231.374320][ C2] net_ratelimit: 1925 callbacks suppressed [ 1231.744859][T22342] Invalid ELF header magic: != ELF [ 1232.134863][T22343] Invalid ELF header magic: != ELF [ 1232.238710][T22341] overlayfs: missing 'lowerdir' [ 1232.718502][T22345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4616'. [ 1232.720624][T22345] netlink: 'syz.1.4616': attribute type 10 has an invalid length. [ 1232.720635][T22345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4616'. [ 1233.077582][T22362] Console: switching to colour dummy device 80x25 [ 1233.555222][T22367] Invalid ELF header magic: != ELF [ 1233.933106][T22364] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1234.031201][T22364] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1234.031406][T22364] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1234.031837][T22364] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1234.033051][T22364] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1234.071243][T22364] pci 0000:00:01.0: Adding to iommu group 1 [ 1234.082300][T22364] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1234.082315][T22364] pci 0000:00:01.0: vgaarb: bridge control possible [ 1234.082323][T22364] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1234.107850][T22364] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1234.108070][T22364] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1234.114331][T22364] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1234.151080][T22364] [drm] Found bochs VGA, ID 0xb0c5. [ 1234.151119][T22364] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1234.217514][T22366] overlay: Unknown parameter '/' [ 1234.802782][T22364] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1235.188994][T22364] Console: switching to colour frame buffer device 160x50 [ 1235.219865][T22364] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1235.311860][T22373] Invalid ELF header magic: != ELF [ 1235.323270][T22373] overlay: Unknown parameter '/' [ 1235.399567][T21156] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1235.481390][T22375] Invalid ELF header magic: != ELF [ 1235.624844][T21156] usb 5-1: Using ep0 maxpacket: 8 [ 1235.627185][T21156] usb 5-1: New USB device found: idVendor=0b43, idProduct=0003, bcdDevice=0.00 [ 1235.632705][T21156] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.633168][T21156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.656540][T21156] usb 5-1: config 0 descriptor?? [ 1235.745386][T22379] Console: switching to colour dummy device 80x25 [ 1235.870012][T21156] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1235.988374][T22381] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1236.046455][T22381] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1236.092157][T22357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.095530][T22357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.103026][ T10] usb 5-1: USB disconnect, device number 67 [ 1236.115870][T22381] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1236.116142][T22381] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1236.116789][T22381] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1236.220346][T22381] pci 0000:00:01.0: Adding to iommu group 1 [ 1236.228762][T22381] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1236.228779][T22381] pci 0000:00:01.0: vgaarb: bridge control possible [ 1236.228791][T22381] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1236.247608][T22381] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1236.248397][T22381] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1236.253734][T22381] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1236.324040][T22381] [drm] Found bochs VGA, ID 0xb0c5. [ 1236.325157][T22381] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1236.414267][ C2] net_ratelimit: 1329 callbacks suppressed [ 1236.421183][T22381] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1236.567622][T22386] Invalid ELF header magic: != ELF [ 1236.604116][T22386] overlay: Unknown parameter '/' [ 1237.132546][T22381] Console: switching to colour frame buffer device 160x50 [ 1237.287391][T22381] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1237.317193][T22389] Console: switching to colour dummy device 80x25 [ 1237.449681][T22388] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1237.461263][T22388] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1237.461395][T22388] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1237.461582][T22388] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1237.462141][T22388] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1237.470714][T22388] pci 0000:00:01.0: Adding to iommu group 1 [ 1237.476619][T22388] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1237.476635][T22388] pci 0000:00:01.0: vgaarb: bridge control possible [ 1237.476646][T22388] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1237.483283][T22388] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1237.483465][T22388] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1237.486223][T22388] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1237.492878][T22388] [drm] Found bochs VGA, ID 0xb0c5. [ 1237.492887][T22388] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1237.500973][T22388] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1237.595363][T22388] Console: switching to colour frame buffer device 160x50 [ 1237.615257][T22388] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1238.379444][T22396] Console: switching to colour dummy device 80x25 [ 1238.418427][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.418476][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.797138][T22405] Invalid ELF header magic: != ELF [ 1238.813935][T22405] overlay: Unknown parameter '/' [ 1239.748331][T22400] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1239.805894][T22400] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1239.806041][T22400] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1239.806324][T22400] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1239.807048][T22400] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1239.836907][T22400] pci 0000:00:01.0: Adding to iommu group 1 [ 1239.847305][T22400] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1239.847321][T22400] pci 0000:00:01.0: vgaarb: bridge control possible [ 1239.847333][T22400] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1239.875255][T22400] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1239.875403][T22400] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1239.878475][T22400] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1239.911940][T22400] [drm] Found bochs VGA, ID 0xb0c5. [ 1239.911955][T22400] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1239.954089][T22400] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1240.098408][T22417] Invalid ELF header magic: != ELF [ 1240.172972][T22400] Console: switching to colour frame buffer device 160x50 [ 1240.189745][T22417] overlay: Unknown parameter '/' [ 1240.218036][T22400] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1240.425432][T22416] Invalid ELF header magic: != ELF [ 1240.436826][T22416] overlay: Unknown parameter '/' ** 1 printk messages dropped ** ** 170 printk messages dropped ** ** 130 printk messages dropped ** ** 128 printk messages dropped ** ** 128 printk messages dropped ** ** 145 printk messages dropped ** ** 150 printk messages dropped ** ** 196 printk messages dropped ** ** 130 printk messages dropped ** ** 119 printk messages dropped ** ** 118 printk messages dropped ** ** 113 printk messages dropped ** ** 114 printk messages dropped ** ** 4 printk messages dropped ** ** 17 printk messages dropped ** ** 126 printk messages dropped ** ** 206 printk messages dropped ** ** 114 printk messages dropped ** ** 133 printk messages dropped ** ** 125 printk messages dropped ** ** 124 printk messages dropped ** ** 1739 printk messages dropped ** ** 156 printk messages dropped ** ** 168 printk messages dropped ** ** 105 printk messages dropped ** ** 371 printk messages dropped ** ** 107 printk messages dropped ** ** 225 printk messages dropped ** ** 131 printk messages dropped ** ** 118 printk messages dropped ** ** 150 printk messages dropped ** ** 117 printk messages dropped ** ** 121 printk messages dropped ** ** 995 printk messages dropped ** ** 143 printk messages dropped ** ** 125 printk messages dropped ** ** 56 printk messages dropped ** ** 13 printk messages dropped ** ** 121 printk messages dropped ** ** 207 printk messages dropped ** ** 108 printk messages dropped ** ** 140 printk messages dropped ** ** 126 printk messages dropped ** ** 115 printk messages dropped ** ** 125 printk messages dropped ** ** 168 printk messages dropped ** ** 177 printk messages dropped ** ** 142 printk messages dropped ** ** 119 printk messages dropped ** ** 127 printk messages dropped ** ** 138 printk messages dropped ** ** 213 printk messages dropped ** ** 143 printk messages dropped ** ** 134 printk messages dropped ** ** 108 printk messages dropped ** ** 115 printk messages dropped ** ** 101 printk messages dropped ** ** 156 printk messages dropped ** ** 125 printk messages dropped ** ** 144 printk messages dropped ** ** 121 printk messages dropped ** ** 118 printk messages dropped ** ** 121 printk messages dropped ** ** 238 printk messages dropped ** ** 102 printk messages dropped ** ** 136 printk messages dropped ** ** 123 printk messages dropped ** ** 118 printk messages dropped ** ** 99 printk messages dropped ** ** 165 printk messages dropped ** ** 139 printk messages dropped ** ** 97 printk messages dropped ** ** 93 printk messages dropped ** ** 152 printk messages dropped ** ** 138 printk messages dropped ** ** 92 printk messages dropped ** ** 159 printk messages dropped ** ** 123 printk messages dropped ** ** 113 printk messages dropped ** ** 145 printk messages dropped ** ** 124 printk messages dropped ** ** 112 printk messages dropped ** ** 99 printk messages dropped ** ** 19 printk messages dropped ** ** 97 printk messages dropped ** ** 92 printk messages dropped ** ** 107 printk messages dropped ** ** 171 printk messages dropped ** ** 110 printk messages dropped ** ** 131 printk messages dropped ** ** 81 printk messages dropped ** ** 109 printk messages dropped ** ** 114 printk messages dropped ** ** 116 printk messages dropped ** ** 91 printk messages dropped ** ** 114 printk messages dropped ** ** 109 printk messages dropped ** ** 158 printk messages dropped ** ** 84 printk messages dropped ** ** 99 printk messages dropped ** ** 106 printk messages dropped ** ** 114 printk messages dropped ** ** 90 printk messages dropped ** ** 83 printk messages dropped ** ** 151 printk messages dropped ** ** 109 printk messages dropped ** ** 116 printk messages dropped ** ** 108 printk messages dropped ** ** 97 printk messages dropped ** ** 106 printk messages dropped ** ** 105 printk messages dropped ** ** 169 printk messages dropped ** ** 113 printk messages dropped ** ** 112 printk messages dropped ** ** 112 printk messages dropped ** ** 104 printk messages dropped ** ** 26 printk messages dropped ** ** 117 printk messages dropped ** ** 125 printk messages dropped ** ** 113 printk messages dropped ** ** 119 printk messages dropped ** ** 91 printk messages dropped ** ** 130 printk messages dropped ** ** 136 printk messages dropped ** ** 42 printk messages dropped ** ** 7 printk messages dropped ** ** 191 printk messages dropped ** ** 19 printk messages dropped ** ** 19 printk messages dropped ** ** 110 printk messages dropped ** ** 164 printk messages dropped ** ** 195 printk messages dropped ** ** 130 printk messages dropped ** ** 82 printk messages dropped ** ** 68 printk messages dropped ** ** 74 printk messages dropped ** ** 74 printk messages dropped ** ** 71 printk messages dropped ** ** 81 printk messages dropped ** ** 77 printk messages dropped ** ** 87 printk messages dropped ** ** 72 printk messages dropped ** ** 91 printk messages dropped ** ** 68 printk messages dropped ** ** 54 printk messages dropped ** ** 102 printk messages dropped ** ** 280 printk messages dropped ** ** 105 printk messages dropped ** ** 100 printk messages dropped ** ** 126 printk messages dropped ** ** 127 printk messages dropped ** ** 92 printk messages dropped ** ** 120 printk messages dropped ** ** 167 printk messages dropped ** ** 112 printk messages dropped ** ** 208 printk messages dropped ** ** 197 printk messages dropped ** ** 140 printk messages dropped ** ** 160 printk messages dropped ** ** 120 printk messages dropped ** ** 116 printk messages dropped ** ** 89 printk messages dropped ** ** 145 printk messages dropped ** ** 118 printk messages dropped ** ** 103 printk messages dropped ** ** 93 printk messages dropped ** ** 259 printk messages dropped ** ** 6 printk messages dropped ** ** 1 printk messages dropped ** ** 241 printk messages dropped ** ** 188 printk messages dropped ** ** 212 printk messages dropped ** ** 289 printk messages dropped ** ** 396 printk messages dropped ** ** 210 printk messages dropped ** ** 170 printk messages dropped ** ** 177 printk messages dropped ** ** 287 printk messages dropped ** ** 207 printk messages dropped ** ** 139 printk messages dropped ** ** 167 printk messages dropped ** ** 1630 printk messages dropped ** [ 1241.534329][ C3] net_ratelimit: 632 callbacks suppressed ** 1752 printk messages dropped ** [ 1242.441248][T22434] Console: switching [ 1242.441255][T22434] to colour dummy device 80x25 ** 1681 printk messages dropped ** ** 1590 printk messages dropped ** [ 1243.052735][T22441] Invalid ELF header magic: != ELF [ 1243.164726][T22443] overlay: Unknown parameter '/' ** 268 printk messages dropped ** [ 1244.209115][T22455] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint ** 390 printk messages dropped ** [ 1244.269287][T22455] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1244.299568][T22455] pci 0000:00:01.0: Adding to iommu group 1 [ 1244.316654][T22455] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1244.316665][T22455] pci 0000:00:01.0: vgaarb: bridge control possible [ 1244.316673][T22455] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1244.327288][T22455] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1244.327603][T22455] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1244.334111][T22455] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1244.385173][T22455] [drm] Found bochs VGA, ID 0xb0c5. [ 1244.385304][T22455] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1244.507605][T22455] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 ** 391 printk messages dropped ** ** 1037 printk messages dropped ** ** 1051 printk messages dropped ** ** 885 printk messages dropped ** ** 672 printk messages dropped ** [ 1244.928833][T22455] Console: switching to colour frame buffer device 160x50 [ 1244.978032][T22455] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1245.487057][T22461] Invalid ELF header magic: != ELF [ 1245.553241][T22461] overlay: Unknown parameter '/' [ 1246.584289][ C2] net_ratelimit: 478 callbacks suppressed [ 1247.334065][T22478] Invalid ELF header magic: != ELF [ 1247.344485][T22478] overlay: Unknown parameter '/' [ 1247.862059][T22483] netlink: 'syz.2.4646': attribute type 10 has an invalid length. [ 1247.862077][T22483] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4646'. [ 1248.188426][T22490] Invalid ELF header magic: != ELF [ 1248.393052][T22491] Console: switching to colour dummy device 80x25 [ 1248.715262][T22493] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1248.731116][T22493] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1248.731448][T22493] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1248.731964][T22493] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1248.736639][T22493] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1248.782550][T22493] pci 0000:00:01.0: Adding to iommu group 1 [ 1248.786722][T22485] ============================== ** replaying previous printk message ** [ 1248.786722][T22485] ================================================================== [ 1248.786774][T22485] BUG: KASAN: slab-use-after-free in __dynamic_dev_dbg+0x2fc/0x310 [ 1248.786907][T22485] Read of size 8 at addr ffff88806da90120 by task syz.0.4647/22485 [ 1248.786920][T22485] [ 1248.786932][T22485] CPU: 1 UID: 0 PID: 22485 Comm: syz.0.4647 Tainted: G L syzkaller #0 PREEMPT(full) [ 1248.786953][T22485] Tainted: [L]=SOFTLOCKUP [ 1248.786958][T22485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1248.786968][T22485] Call Trace: [ 1248.787015][T22485] [ 1248.787023][T22485] dump_stack_lvl+0x100/0x190 [ 1248.787056][T22485] print_report+0x13d/0x4b0 [ 1248.787087][T22485] ? __virt_addr_valid+0x239/0x430 [ 1248.787116][T22485] ? __dynamic_dev_dbg+0x2fc/0x310 [ 1248.787135][T22485] kasan_report+0xdf/0x1c0 [ 1248.787159][T22485] ? __dynamic_dev_dbg+0x2fc/0x310 [ 1248.787181][T22485] __dynamic_dev_dbg+0x2fc/0x310 [ 1248.787202][T22485] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 1248.787224][T22485] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1248.787244][T22485] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1248.787308][T22485] vga_arb_release+0x3e7/0x540 [ 1248.787334][T22485] ? __pfx_vga_arb_release+0x10/0x10 [ 1248.787349][T22485] __fput+0x3fb/0xb50 [ 1248.787366][T22485] fput_close_sync+0x118/0x250 [ 1248.787377][T22485] ? __pfx_fput_close_sync+0x10/0x10 [ 1248.787389][T22485] filp_close_sync+0x75/0xa0 [ 1248.787400][T22485] __range_close+0x4a6/0x8b0 [ 1248.787418][T22485] __ia32_sys_close_range+0x1f8/0x430 [ 1248.787435][T22485] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 1248.787453][T22485] __do_fast_syscall_32+0x14b/0x8c0 [ 1248.787474][T22485] do_fast_syscall_32+0x32/0x70 [ 1248.787492][T22485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1248.787513][T22485] RIP: 0023:0xf7fe4fbc [ 1248.787534][T22485] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1248.787546][T22485] RSP: 002b:00000000ffbc058c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 1248.787581][T22485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000001e [ 1248.787592][T22485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1248.787602][T22485] RBP: 000000000000000e R08: 0000000000000000 R09: 0000000000000000 [ 1248.787612][T22485] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1248.787622][T22485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1248.787646][T22485] [ 1248.787650][T22485] [ 1248.787652][T22485] Allocated by task 22455: [ 1248.787661][T22485] kasan_save_stack+0x30/0x50 [ 1248.787697][T22485] kasan_save_track+0x14/0x30 [ 1248.787716][T22485] __kasan_kmalloc+0xaa/0xb0 [ 1248.787735][T22485] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1248.787763][T22485] pci_alloc_dev+0x47/0x270 [ 1248.787783][T22485] pci_scan_single_device+0x10c/0x240 [ 1248.787809][T22485] pci_scan_slot+0x1c9/0x7c0 [ 1248.787830][T22485] pci_scan_child_bus_extend+0x6b/0x7b0 [ 1248.787852][T22485] pci_rescan_bus+0x18/0x40 [ 1248.787869][T22485] rescan_store+0xfb/0x130 [ 1248.787891][T22485] bus_attr_store+0x74/0xb0 [ 1248.787931][T22485] sysfs_kf_write+0xf2/0x150 [ 1248.787949][T22485] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1248.787968][T22485] vfs_write+0x6af/0x1050 [ 1248.787986][T22485] ksys_write+0x12a/0x250 [ 1248.788004][T22485] __do_fast_syscall_32+0x14b/0x8c0 [ 1248.788021][T22485] do_fast_syscall_32+0x32/0x70 [ 1248.788037][T22485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1248.788056][T22485] [ 1248.788060][T22485] Freed by task 22491: [ 1248.788067][T22485] kasan_save_stack+0x30/0x50 [ 1248.788082][T22485] kasan_save_track+0x14/0x30 [ 1248.788101][T22485] kasan_save_free_info+0x3b/0x70 [ 1248.788117][T22485] __kasan_slab_free+0x5f/0x80 [ 1248.788136][T22485] kfree+0x22b/0x6d0 [ 1248.788149][T22485] device_release+0xd2/0x270 [ 1248.788188][T22485] kobject_put+0x1f7/0x640 [ 1248.788208][T22485] put_device+0x1f/0x30 [ 1248.788219][T22485] pci_remove_bus_device+0x305/0x3b0 [ 1248.788234][T22485] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 1248.788250][T22485] remove_store+0x123/0x140 [ 1248.788267][T22485] dev_attr_store+0x58/0x80 [ 1248.788280][T22485] sysfs_kf_write+0xf2/0x150 [ 1248.788299][T22485] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1248.788318][T22485] vfs_write+0x6af/0x1050 [ 1248.788336][T22485] ksys_write+0x12a/0x250 [ 1248.788354][T22485] __do_fast_syscall_32+0x14b/0x8c0 [ 1248.788370][T22485] do_fast_syscall_32+0x32/0x70 [ 1248.788383][T22485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1248.788401][T22485] [ 1248.788405][T22485] The buggy address belongs to the object at ffff88806da90000 [ 1248.788405][T22485] which belongs to the cache kmalloc-4k of size 4096 [ 1248.788419][T22485] The buggy address is located 288 bytes inside of [ 1248.788419][T22485] freed 4096-byte region [ffff88806da90000, ffff88806da91000) [ 1248.788434][T22485] [ 1248.788439][T22485] The buggy address belongs to the physical page: [ 1248.788446][T22485] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6da90 [ 1248.788466][T22485] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1248.788479][T22485] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 1248.788502][T22485] page_type: f5(slab) [ 1248.788517][T22485] raw: 04fff00000000040 ffff88801d443040 dead000000000100 dead000000000122 [ 1248.788531][T22485] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1248.788546][T22485] head: 04fff00000000040 ffff88801d443040 dead000000000100 dead000000000122 [ 1248.788558][T22485] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1248.788570][T22485] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1248.788584][T22485] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1248.788593][T22485] page dumped because: kasan: bad access detected [ 1248.788601][T22485] page_owner tracks the page as allocated [ 1248.788621][T22485] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22455, tgid 22453 (syz.1.4640), ts 1244206704324 [ 1248.788647][T22485] post_alloc_hook+0xfd/0x120 [ 1248.788662][T22485] get_page_from_freelist+0x1113/0x35e0 [ 1248.788675][T22485] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 1248.788691][T22485] new_slab+0xb1/0x6d0 [ 1248.788706][T22485] refill_objects+0xe3/0x410 [ 1248.788721][T22485] __pcs_replace_empty_main+0x35e/0x650 [ 1248.788736][T22485] __kmalloc_noprof+0x677/0x840 [ 1248.788753][T22485] tomoyo_realpath_from_path+0xb6/0x690 [ 1248.788765][T22485] tomoyo_mount_acl+0x1b6/0x8b0 [ 1248.788787][T22485] tomoyo_mount_permission+0x214/0x460 [ 1248.788814][T22485] security_sb_mount+0xdd/0x270 [ 1248.788832][T22485] path_mount+0x158/0x2850 [ 1248.788846][T22485] __ia32_sys_mount+0x292/0x310 [ 1248.788857][T22485] __do_fast_syscall_32+0x14b/0x8c0 [ 1248.788872][T22485] do_fast_syscall_32+0x32/0x70 [ 1248.788888][T22485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1248.788906][T22485] page last free pid 22420 tgid 22418 ts 1241211684396 stack trace: [ 1248.788917][T22485] __free_frozen_pages+0x7b4/0x1110 [ 1248.788940][T22485] qlist_free_all+0x47/0xf0 [ 1248.788957][T22485] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1248.788975][T22485] __kasan_slab_alloc+0x69/0x90 [ 1248.788996][T22485] __kmalloc_noprof+0x2cc/0x840 [ 1248.789013][T22485] io_cache_alloc_new+0x45/0xe0 [ 1248.789030][T22485] io_uring_cmd_prep+0x3ef/0x670 [ 1248.789046][T22485] io_submit_sqes+0xa48/0x2760 [ 1248.789067][T22485] __do_sys_io_uring_enter+0xa88/0x1b10 [ 1248.789089][T22485] __do_fast_syscall_32+0x14b/0x8c0 [ 1248.789101][T22485] do_fast_syscall_32+0x32/0x70 [ 1248.789118][T22485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1248.789136][T22485] [ 1248.789140][T22485] Memory state around the buggy address: [ 1248.789148][T22485] ffff88806da90000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1248.789159][T22485] ffff88806da90080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1248.789170][T22485] >ffff88806da90100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1248.789178][T22485] ^ [ 1248.789186][T22485] ffff88806da90180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1248.789193][T22485] ffff88806da90200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1248.789201][T22485] ================================================================== [ 1248.789210][T22485] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1249.118918][T22485] CPU: 1 UID: 0 PID: 22485 Comm: syz.0.4647 Tainted: G L syzkaller #0 PREEMPT(full) [ 1249.122429][T22485] Tainted: [L]=SOFTLOCKUP [ 1249.124240][T22485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1249.128390][T22485] Call Trace: [ 1249.129806][T22485] [ 1249.131095][T22485] dump_stack_lvl+0x100/0x190 [ 1249.133101][T22485] vpanic+0x553/0x970 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1249.134798][T22485] ? __pfx_vpanic+0x10/0x10 [ 1249.136952][T22485] ? __pfx_vprintk_emit+0x10/0x10 [ 1249.139060][T22485] ? __dynamic_dev_dbg+0x2fc/0x310 [ 1249.141229][T22485] panic+0xd1/0xe0 [ 1249.142829][T22485] ? __pfx_panic+0x10/0x10 [ 1249.144710][T22485] ? end_report.part.0+0x23/0x90 [ 1249.146796][T22485] ? rcu_is_watching+0x13/0xc0 [ 1249.148822][T22485] ? end_report.part.0+0x23/0x90 [ 1249.150920][T22485] check_panic_on_warn.cold+0x19/0x34 [ 1249.153182][T22485] end_report.part.0+0x3a/0x90 [ 1249.155216][T22485] kasan_report.cold+0xe/0x18 [ 1249.157227][T22485] ? __dynamic_dev_dbg+0x2fc/0x310 [ 1249.159358][T22485] __dynamic_dev_dbg+0x2fc/0x310 [ 1249.161489][T22485] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 1249.163778][T22485] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1249.166028][T22485] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1249.168312][T22485] vga_arb_release+0x3e7/0x540 [ 1249.170346][T22485] ? __pfx_vga_arb_release+0x10/0x10 [ 1249.172586][T22485] __fput+0x3fb/0xb50 [ 1249.174290][T22485] fput_close_sync+0x118/0x250 [ 1249.176866][T22485] ? __pfx_fput_close_sync+0x10/0x10 [ 1249.179088][T22485] filp_close_sync+0x75/0xa0 [ 1249.181075][T22485] __range_close+0x4a6/0x8b0 [ 1249.183049][T22485] __ia32_sys_close_range+0x1f8/0x430 [ 1249.185298][T22485] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 1249.187801][T22485] __do_fast_syscall_32+0x14b/0x8c0 [ 1249.189984][T22485] do_fast_syscall_32+0x32/0x70 [ 1249.192039][T22485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1249.194692][T22485] RIP: 0023:0xf7fe4fbc [ 1249.196422][T22485] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1249.204330][T22485] RSP: 002b:00000000ffbc058c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 1249.207817][T22485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000001e [ 1249.211118][T22485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1249.214374][T22485] RBP: 000000000000000e R08: 0000000000000000 R09: 0000000000000000 [ 1249.217545][T22485] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1249.220798][T22485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1249.224213][T22485] [ 1249.226383][T22485] Kernel Offset: disabled [ 1249.228235][T22485] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:31:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000001560341 RBX=ffffffff8fc91580 RCX=ffffffff8be7c325 RDX=0000000000000001 RSI=ffffffff8e61a1c7 RDI=ffffffff8c832780 RBP=fffffbfff1f922b0 RSP=ffffffff8fc07cf0 R8 =0000000000000001 R9 =ffffed10055c6825 R10=ffff88802ae3412b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f80fa2 R15=dffffc0000000000 RIP=ffffffff8be7a7bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880952a0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080008000 CR3=0000000043a3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85bd5605 RDI=ffffffff9cf197a0 RBP=ffffffff9cf19760 RSP=ffffc9000404f220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=0000000000000061 R14=0000000000000003 R15=ffffc9000404f538 RIP=ffffffff85bd562f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880953a0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005579ab1e5590 CR3=0000000054c7a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=dffffc0000000000 RCX=0000000000000001 RDX=ffff88801ebe2580 RSI=0000000000000001 RDI=ffffc900006afda8 RBP=ffffc900006afda8 RSP=ffffc900006af950 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=3d3d3d3d3d3d3d3d R12=0000000000000000 R13=ffffc900006afda8 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff820d7c90 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880954a0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000004 CR3=000000006287e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888051424780 RCX=ffffc90004157034 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff90209a80 RBP=0000000000000000 RSP=ffffc900041570a0 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffff88801d442280 R13=0000000000000d40 R14=ffff888051424780 R15=0000000000000060 RIP=ffffffff81f050d0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9fc0c7d300 ffffffff 00c00000 GS =0000 ffff8880955a0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055d67b81af40 CR3=000000004e996000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000