last executing test programs: 12.078458842s ago: executing program 3 (id=312): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000280)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0x560c89bb) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r5, 0x0}]) splice(r4, 0x0, r3, 0x0, 0x8004, 0x1) socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f00000000c0)) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) 11.491034006s ago: executing program 2 (id=313): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sndtimer(0xffffff9c, &(0x7f0000000140), 0x101800) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x80000011}) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r7, &(0x7f0000001340)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x400000000000126, 0xc040) 10.931949609s ago: executing program 1 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000001480)='./file0/file0\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000180)={0xe, 0x26, 0x100000001, 0x80000000, 0x4}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r5, 0x0, 0x3, 0x1}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x50, 0x1) getrandom(&(0x7f0000000480)=""/4096, 0x1000, 0x1) r6 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) keyctl$restrict_keyring(0x1d, 0xffffffffffffffff, 0x0, 0x0) read$char_usb(r7, &(0x7f0000000340)=""/189, 0xbd) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r7, 0x0, 0x0) syz_usb_disconnect(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x940c, 0x3002, 0x230, 0x2c0, 0x230, 0x3d8, 0x3d8, 0x230, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xec, 0x114, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4b6f99de057c03ca}}, @inet=@rpfilter={{0x24}, {0x8}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x12d, 0x7ff, 0x2}}}, {{@ipv6={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xffffff00, 0xff], [0xff000000, 0xffffff00, 0xffffffff, 0xff], 'vxcan1\x00', 'gretap0\x00', {}, {0xff}, 0x87, 0x75, 0x5, 0x60}, 0x0, 0xfc, 0x11c, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_virt_wifi\x00', {0x40, 0x9, 0x9, 0x0, 0xff, 0x0, 0x4, 0x20}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xf098ede22a3e575b) capset(&(0x7f0000000000)={0x20080522, r2}, &(0x7f0000000280)={0x200000, 0x200000, 0x6, 0x0, 0x8, 0x5}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000100)=@md0, 0x0, &(0x7f0000000440)='./file0\x00') 10.58794583s ago: executing program 3 (id=315): socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0xd3, 0x8000d7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002000)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="340000002100010000000000000000000a00000000000001016200000400"], 0x20}], 0x1}, 0x0) io_setup(0x81, &(0x7f0000001100)=0x0) r5 = syz_ublk_setup_io_uring(0x6114, &(0x7f0000000180)={0x0, 0xde24, 0x20, 0x3, 0x319, 0x0, r0}, 0x0, &(0x7f0000000440), 0x0) io_uring_setup(0x1783, &(0x7f0000000500)={0x0, 0xa640, 0x800, 0x1, 0x3e3, 0x0, r5}) io_submit(r4, 0x1, &(0x7f00000008c0)=[0x0]) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x4000000) 10.340894178s ago: executing program 2 (id=316): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000014001b5729bd7000fedbdf2510"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xffd, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x6, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x6, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x8, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x0, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x43, 0x200, 0xfffffff9, 0x7aa, 0x410, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x0, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0xa7b, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x0, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x3, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0x800b, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f00000001c0), 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 9.345020158s ago: executing program 3 (id=317): socket$inet6(0xa, 0x80002, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_stall_count', 0x0, 0xa0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x41) sendfile(r2, r1, 0x0, 0x8) socket$kcm(0x10, 0x2, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x40014) socket(0x2d, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff0200000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c", 0x81}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x558410e9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x84c1, '\x00', r5, 0xffffffffffffffff, 0x2, 0x3}, 0x50) 8.4897689s ago: executing program 0 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000140)={0x0, 0x1, 0xfffffffffffffdfd, 0x4, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) 8.087185148s ago: executing program 2 (id=324): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007f167409c242c931b"], 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x547802) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffffffffffffff0c) epoll_wait(0xffffffffffffffff, 0x0, 0xffffffffffffff27, 0xfffffffe) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x4, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905850200"], 0x0) socket(0x2, 0xa, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000c0000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000e20000000000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) 7.636898486s ago: executing program 3 (id=325): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000180), 0x8240, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) unshare(0x64000600) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) syz_fuse_handle_req(r7, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x7, 0x5}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20044044) 7.232806038s ago: executing program 0 (id=326): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000280)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0x560c89bb) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r5, 0x0}]) splice(r4, 0x0, r3, 0x0, 0x8004, 0x1) socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f00000000c0)) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) 6.331501058s ago: executing program 0 (id=327): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000240)) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) ioctl$BSG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000440)=0x7) close(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) r2 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) gettid() r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) recvmmsg(r5, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40f, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, r6, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 6.27640143s ago: executing program 1 (id=328): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000014001b5729bd7000fedbdf2510"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xffd, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x6, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x6, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x8, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x0, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x43, 0x200, 0xfffffff9, 0x7aa, 0x410, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x0, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0xa7b, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x0, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x3, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0x800b, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f00000001c0), 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 5.239940961s ago: executing program 0 (id=329): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x27, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb88a87e9844eb300088cac82bfb8f5713876856022cd264abbe4b88"], 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000200)={0x2, @long}, 0x8) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000034b0d716d5ca84d9850000009b00000085000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0xbc, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r7, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001500)="99df", 0x2}], 0x1}}], 0x1, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x31, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r9, &(0x7f00000001c0), &(0x7f00000001c0)=@udp=r5}, 0x68) epoll_wait(r0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x6, 0x404) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.295545191s ago: executing program 1 (id=330): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000014001b5729bd7000fedbdf2510"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xffd, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x6, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x6, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x8, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x0, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x43, 0x200, 0xfffffff9, 0x7aa, 0x410, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x0, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0xa7b, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x0, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x3, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0x800b, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f00000001c0), 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 3.8753302s ago: executing program 0 (id=331): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000014001b5729bd7000fedbdf2510"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xffd, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x6, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x6, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x8, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x0, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x43, 0x200, 0xfffffff9, 0x7aa, 0x410, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x0, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0xa7b, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x0, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x3, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0x800b, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f00000001c0), 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) pipe(0x0) 3.463741596s ago: executing program 3 (id=332): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000014001b5729bd7000fedbdf2510"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xffd, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x6, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x6, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x8, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x0, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x43, 0x200, 0xfffffff9, 0x7aa, 0x410, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x0, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0xa7b, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x0, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x3, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0x800b, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f00000001c0), 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 2.849868765s ago: executing program 1 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390429bd70000040000000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000200012800b0001006272696467650000100502800a00150001f40616f09e80c2"], 0x40}}, 0x40048814) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000100)=@t={0x81, 0x3, 0x0, 0x0, @generic}) r3 = socket$netlink(0x10, 0x3, 0x7) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x6, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000001f40), 0x0, 0x1, 0x0, 0x0, r6}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x40440) sendmsg(0xffffffffffffffff, 0x0, 0x4) creat(&(0x7f0000000200)='./file0/../file0\x00', 0x82) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0xd, &(0x7f0000000300)={0x8, 0x4}) 2.519110414s ago: executing program 2 (id=334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0xfffffffffffffffe, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3", 0x5}], 0x1}, 0x4048081) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068000903000000293a08001f7f1d00000000000a00000000000600000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2001, 0x0) read(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{&(0x7f0000000240)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002280)=[{&(0x7f0000000300)}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/1, 0x1}, {&(0x7f0000002100)=""/155, 0x9b}, {&(0x7f00000021c0)=""/23, 0x17}, {&(0x7f0000002200)=""/101, 0x65}], 0x6, &(0x7f00000022c0)=""/170, 0xaa}, 0xffff8720}, {{&(0x7f0000002380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/229, 0xe5}, {&(0x7f0000003500)=""/7, 0x7}, {&(0x7f0000003540)=""/161, 0xa1}, {&(0x7f0000003600)=""/64, 0x40}, {&(0x7f0000003640)=""/126, 0x7e}, {&(0x7f00000036c0)=""/241, 0xf1}, {&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f0000000680)=""/48, 0x30}, {&(0x7f00000006c0)=""/171, 0xab}, {&(0x7f0000000780)=""/16, 0x10}], 0xb, &(0x7f0000003800)=""/64, 0x40}, 0xffffff90}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003840)=""/133, 0x85}, {&(0x7f0000003900)=""/158, 0x9e}], 0x2, &(0x7f0000003a00)=""/133, 0x85}, 0xcd6}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x1a5c}], 0x4, 0x12060, &(0x7f0000004f80)={0x0, 0x989680}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x7}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, 0x0, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0x8}, {0xfff1, 0xa}, {0x1, 0xf}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb, 0x40010, r6, 0x2202a000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000100000d000000000f000000020000000400000000000011010000000a000000002e005f2e005e92fe5314da09fd8f81095de3abcad8baf4d59406ab9fc81f45733bd4adcc69cdafd1f198e920d752525f030cc939998c28e86dbe90d358c42550ce327cc7921e2462f58464111c0c9ba5"], 0x0, 0x42, 0x0, 0x1, 0x7ea}, 0x28) 2.008525774s ago: executing program 0 (id=335): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0]) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x4000, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}}}}}, 0x0) timer_create(0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000001500)={0x2, @pix={0x70, 0x22000000, 0x33524742, 0x1, 0xe5b, 0x200d294, 0x3, 0x7fff, 0x0, 0x6}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x87}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f046707764f8d0e000058ea21274f844a69e9", 0x0, 0x9, 0x2, 0x2}, 0x3c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000001000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.954392689s ago: executing program 1 (id=336): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@private2, 0x29}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x4, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x40, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x9, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x4, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x3, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0xd, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xdfffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x1e) shmctl$IPC_RMID(r5, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r8, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0xffffffffffffffb6) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) 1.814908627s ago: executing program 2 (id=337): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x4, @remote, 0xffffbfff}}}, 0x108) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000a80)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, '|6M', 0x6, 0x2f, 0xff, @mcast2, @private0, [@fragment={0x33, 0x0, 0x1a, 0x0, 0x0, 0x8, 0x66}]}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000040000701feffffff00000100017c0000040042800c00018006000600800a00008fd8c74a30992c9a5fbada96774ff9198cb3da1b55c42bd30b887c8de78dc50faa929a8efdb33732075acf8cc709eb7ef0f78e0e5e7323f62009bd1f774ba09b5e14350e07d970df3944e2aad29439d865c42660bac8"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) 636.984344ms ago: executing program 3 (id=338): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000014001b5729bd7000fedbdf2510"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xffd, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x6, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x6, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x8, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x0, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x43, 0x200, 0xfffffff9, 0x7aa, 0x410, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x0, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0xa7b, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x0, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x3, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0x800b, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f00000001c0), 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 220.631621ms ago: executing program 2 (id=339): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x845}, 0x4000041) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="5c00000022060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a0000000500040000000000"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_SET_STATUS(r8, 0xc01070ce, 0x0) 0s ago: executing program 1 (id=340): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000019000100000000004f00000002182000ff03fd000001000008000100ac141400"], 0x24}, 0x1, 0x0, 0x0, 0x44004080}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0xa0, 0x0, [{0x400000b5, 0x0, 0x7}]}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) kernel console output (not intermixed with test programs): e [ 54.363127][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.366319][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.370416][ T5741] bridge_slave_1: entered allmulticast mode [ 54.374182][ T5741] bridge_slave_1: entered promiscuous mode [ 54.387127][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.390533][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.393554][ T5746] bridge_slave_0: entered allmulticast mode [ 54.397609][ T5746] bridge_slave_0: entered promiscuous mode [ 54.402353][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.405417][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.408753][ T5746] bridge_slave_1: entered allmulticast mode [ 54.412586][ T5746] bridge_slave_1: entered promiscuous mode [ 54.446533][ T5752] team0: Port device team_slave_0 added [ 54.460224][ T5752] team0: Port device team_slave_1 added [ 54.464032][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.468389][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.479110][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.483135][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.510103][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.515784][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.561294][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.564142][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.574566][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.581272][ T5745] team0: Port device team_slave_0 added [ 54.605474][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.608413][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.618821][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.624446][ T5745] team0: Port device team_slave_1 added [ 54.628033][ T5746] team0: Port device team_slave_0 added [ 54.632022][ T5741] team0: Port device team_slave_0 added [ 54.642833][ T5741] team0: Port device team_slave_1 added [ 54.657002][ T5746] team0: Port device team_slave_1 added [ 54.688954][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.691923][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.702449][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.708775][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.711738][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.722202][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.737207][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.740105][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.750096][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.780856][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.783762][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.794129][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.799412][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.802146][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.812490][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.827402][ T5752] hsr_slave_0: entered promiscuous mode [ 54.829829][ T5752] hsr_slave_1: entered promiscuous mode [ 54.832613][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.835548][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.845939][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.927986][ T5745] hsr_slave_0: entered promiscuous mode [ 54.930254][ T5745] hsr_slave_1: entered promiscuous mode [ 54.932276][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 54.934061][ T5745] Cannot create hsr debugfs directory [ 54.940863][ T5741] hsr_slave_0: entered promiscuous mode [ 54.944029][ T5741] hsr_slave_1: entered promiscuous mode [ 54.946933][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 54.949700][ T5741] Cannot create hsr debugfs directory [ 54.957428][ T5746] hsr_slave_0: entered promiscuous mode [ 54.961012][ T5746] hsr_slave_1: entered promiscuous mode [ 54.963859][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 54.966253][ T5746] Cannot create hsr debugfs directory [ 55.240575][ T5752] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.250980][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.265566][ T5752] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.271220][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.274959][ T5752] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.281366][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.292744][ T5752] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.298039][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.324167][ T5745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.329021][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.331740][ T5745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.337908][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.340785][ T5745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.345198][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.347879][ T5745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.353588][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.416854][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.423213][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.426853][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.432528][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.436036][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.440491][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.443518][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.448009][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.516135][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.520893][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.524394][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.528277][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.528890][ T5754] Bluetooth: hci0: command tx timeout [ 55.536512][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.541815][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.544861][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.549905][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.579831][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.604187][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.607661][ T5754] Bluetooth: hci3: command tx timeout [ 55.607691][ T5750] Bluetooth: hci1: command tx timeout [ 55.607735][ T5758] Bluetooth: hci2: command tx timeout [ 55.624728][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.638760][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.648085][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.655769][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.658435][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.670724][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.673432][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.685490][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.687737][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.699305][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.702977][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.706092][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.725911][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.729066][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.755653][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.758731][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.786819][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.825880][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.852847][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.856205][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.870661][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.873701][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.111273][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.149661][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.158124][ T5752] veth0_vlan: entered promiscuous mode [ 56.166543][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.175680][ T5752] veth1_vlan: entered promiscuous mode [ 56.194847][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.228541][ T5745] veth0_vlan: entered promiscuous mode [ 56.251022][ T5741] veth0_vlan: entered promiscuous mode [ 56.258719][ T5745] veth1_vlan: entered promiscuous mode [ 56.262443][ T5752] veth0_macvtap: entered promiscuous mode [ 56.278395][ T5752] veth1_macvtap: entered promiscuous mode [ 56.284911][ T5741] veth1_vlan: entered promiscuous mode [ 56.322217][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.330295][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.338784][ T5746] veth0_vlan: entered promiscuous mode [ 56.345246][ T1169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.348981][ T5745] veth0_macvtap: entered promiscuous mode [ 56.356550][ T5745] veth1_macvtap: entered promiscuous mode [ 56.362641][ T1169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.369106][ T1169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.376525][ T5741] veth0_macvtap: entered promiscuous mode [ 56.383480][ T1169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.386566][ T5746] veth1_vlan: entered promiscuous mode [ 56.400657][ T5741] veth1_macvtap: entered promiscuous mode [ 56.417391][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.439057][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.451782][ T1169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.456753][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.465390][ T1169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.470827][ T1169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.493352][ T1169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.499431][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.508298][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.512323][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.540048][ T5746] veth0_macvtap: entered promiscuous mode [ 56.545261][ T172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.549169][ T172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.566967][ T172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.571763][ T5746] veth1_macvtap: entered promiscuous mode [ 56.579734][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.582917][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.588916][ T172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.622619][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.628436][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.635786][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.653803][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.685990][ T5752] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.693680][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.697526][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.708993][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.712855][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.728727][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.735319][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.780326][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.789090][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.877594][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.897106][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.953012][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.960305][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.003588][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.010276][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.205730][ T40] audit: type=1800 audit(1781182291.187:2): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 57.257115][ T5847] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.273151][ T5747] Process accounting resumed [ 57.428377][ T5847] usb 7-1: Using ep0 maxpacket: 8 [ 57.436209][ T5847] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.440255][ T5847] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.443410][ T5847] usb 7-1: config 1 has no interface number 0 [ 57.445395][ T5847] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.463304][ T5847] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 57.466409][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.471006][ T5847] usb 7-1: Product: syz [ 57.472542][ T5847] usb 7-1: Manufacturer: syz [ 57.474151][ T5847] usb 7-1: SerialNumber: syz [ 57.598185][ T5750] Bluetooth: hci0: command tx timeout [ 57.677547][ T5750] Bluetooth: hci2: command tx timeout [ 57.677580][ T5758] Bluetooth: hci1: command tx timeout [ 57.682406][ T5754] Bluetooth: hci3: command tx timeout [ 58.193664][ T5910] process 'syz.0.5' launched './file1' with NULL argv: empty string added [ 58.212304][ T5898] Process accounting resumed [ 58.233203][ T5847] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 58.244257][ T5847] usb 7-1: USB disconnect, device number 2 [ 58.276347][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 58.691589][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 59.677967][ T5758] Bluetooth: hci0: command tx timeout [ 59.767954][ T5754] Bluetooth: hci2: command tx timeout [ 59.769083][ T5750] Bluetooth: hci3: command tx timeout [ 59.769957][ T5758] Bluetooth: hci1: command tx timeout [ 59.814381][ T5930] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 59.819401][ T5930] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 59.825423][ T5930] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 59.841538][ T5930] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.872054][ T5930] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 61.106416][ T5937] mmap: syz.0.10 (5937) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.203620][ T5943] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 61.213080][ T5946] vlan0: entered promiscuous mode [ 61.283607][ T5943] Zero length message leads to an empty skb [ 61.907187][ T5758] Bluetooth: hci0: command tx timeout [ 61.909113][ T5758] Bluetooth: hci1: command tx timeout [ 61.917109][ T5758] Bluetooth: hci2: command tx timeout [ 61.919490][ T5758] Bluetooth: hci3: command tx timeout [ 63.507386][ T59] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 63.670578][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.676779][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.686855][ T59] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 63.690572][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.700252][ T59] usb 7-1: config 0 descriptor?? [ 64.430848][ T59] usbhid 7-1:0.0: can't add hid device: -71 [ 64.435610][ T59] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 64.439661][ T59] usb 7-1: USB disconnect, device number 3 [ 65.752295][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 65.859630][ T5995] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 65.861744][ T5995] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 65.867919][ T5995] vhci_hcd vhci_hcd.0: Device attached [ 65.967164][ T6003] netlink: 72 bytes leftover after parsing attributes in process `syz.3.25'. [ 66.322377][ T5993] bond1: Unable to set down delay as MII monitoring is disabled [ 66.355552][ T5993] bond1 (unregistering): Released all slaves [ 66.457475][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.628774][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 66.634555][ T29] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.638779][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 66.640939][ T29] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 66.646401][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.683414][ T6000] vhci_hcd: connection closed [ 66.685097][ T1169] vhci_hcd vhci_hcd.1: stop threads [ 66.694367][ T1169] vhci_hcd vhci_hcd.1: release socket [ 66.696796][ T29] usb 8-1: config 0 descriptor?? [ 66.700474][ T1169] vhci_hcd vhci_hcd.1: disconnect device [ 66.714339][ T29] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 67.363745][ T6024] CUSE: info not properly terminated [ 67.488514][ T6029] xt_bpf: check failed: parse error [ 68.490190][ T6040] MINIX-fs: blocksize too small for device [ 69.237070][ T5750] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 69.457087][ T5847] usb 8-1: USB disconnect, device number 2 [ 71.401323][ T6065] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.076536][ T6064] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.238073][ T6064] block device autoloading is deprecated and will be removed. [ 72.875250][ T6085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.927602][ T50] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 72.993052][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 73.087496][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 73.094641][ T50] usb 6-1: config index 0 descriptor too short (expected 13339, got 27) [ 73.098267][ T50] usb 6-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 73.130100][ T50] usb 6-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 73.242057][ T50] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 73.283218][ T50] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 73.317744][ T50] usb 6-1: Product: syz [ 73.356970][ T50] usb 6-1: Manufacturer: syz [ 73.359049][ T50] usb 6-1: SerialNumber: syz [ 73.908638][ T1038] cfg80211: failed to load regulatory.db [ 73.992213][ T6072] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET) [ 74.196307][ T40] audit: type=1804 audit(1781182308.177:3): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.40" name="bus" dev="ramfs" ino=10695 res=1 errno=0 [ 74.202347][ T40] audit: type=1804 audit(1781182308.187:4): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.40" name="bus" dev="ramfs" ino=10695 res=1 errno=0 [ 75.174091][ T50] usb 6-1: USB disconnect, device number 2 [ 75.734420][ T6161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.920612][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.925884][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.113001][ T6176] ======================================================= [ 77.113001][ T6176] WARNING: The mand mount option has been deprecated and [ 77.113001][ T6176] and is ignored by this kernel. Remove the mand [ 77.113001][ T6176] option from the mount to silence this warning. [ 77.113001][ T6176] ======================================================= [ 77.166542][ T6176] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 77.244371][ T6161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.582399][ T6174] binder_alloc: 6171: binder_alloc_buf, no vma [ 77.650516][ T6161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.883152][ T6178] binder_alloc: 6171: binder_alloc_buf, no vma [ 77.958141][ T6161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.038942][ T1169] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.057145][ T1169] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.064687][ T1169] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.088687][ T172] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.377502][ T1477] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 78.564290][ T1477] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.578802][ T1477] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 78.594221][ T1477] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 78.608418][ T1477] usb 8-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 78.617503][ T1477] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.627286][ T1477] usb 8-1: config 0 descriptor?? [ 78.632626][ T6182] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.925876][ T6196] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 78.928098][ T6196] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 78.930811][ T6196] vhci_hcd vhci_hcd.0: Device attached [ 79.357491][ T29] usb 40-1: SetAddress Request (2) to port 0 [ 79.361679][ T29] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 79.404063][ T6197] vhci_hcd: connection reset by peer [ 79.433394][ T1248] vhci_hcd vhci_hcd.1: stop threads [ 79.435694][ T1248] vhci_hcd vhci_hcd.1: release socket [ 79.439327][ T1248] vhci_hcd vhci_hcd.1: disconnect device [ 79.663820][ T1477] usbhid 8-1:0.0: can't add hid device: -71 [ 79.666175][ T1477] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 79.680675][ T1477] usb 8-1: USB disconnect, device number 3 [ 81.430741][ T5750] Bluetooth: hci3: command 0x0406 tx timeout [ 83.539642][ T6238] netlink: 'syz.0.55': attribute type 2 has an invalid length. [ 84.287377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 84.481051][ T6248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.57'. [ 84.532023][ T29] usb 40-1: device descriptor read/8, error -110 [ 84.549419][ T6242] atomic_op ffff88802ad4b198 conn xmit_atomic 0000000000000000 [ 84.662868][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.667714][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.762522][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.772688][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.399606][ T6253] exFAT-fs (nbd3): unable to read boot sector [ 85.402339][ T6253] exFAT-fs (nbd3): failed to read boot sector [ 85.404606][ T6253] exFAT-fs (nbd3): failed to recognize exfat type [ 85.409703][ T29] usb usb40-port1: attempt power cycle [ 86.216611][ T29] usb usb40-port1: unable to enumerate USB device [ 87.861294][ T1169] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.874130][ T1169] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.901843][ T6266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.955297][ T1169] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.963202][ T1169] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.520775][ T6282] ALSA: mixer_oss: invalid OSS volume '' [ 89.047010][ T6287] ufs: You didn't specify the type of your ufs filesystem [ 89.047010][ T6287] [ 89.047010][ T6287] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 89.047010][ T6287] [ 89.047010][ T6287] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 89.064050][ T6287] ufs: ufs_fill_super(): bad magic number [ 89.407415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.500951][ T6293] x_tables: duplicate underflow at hook 1 [ 90.553055][ T6293] hub 8-0:1.0: USB hub found [ 90.556422][ T6293] hub 8-0:1.0: 1 port detected [ 91.478270][ T1351] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.629637][ T1351] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.633891][ T1351] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.640322][ T1351] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 91.644041][ T1351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.647266][ T1351] usb 5-1: Product: syz [ 91.649133][ T1351] usb 5-1: Manufacturer: syz [ 91.651078][ T1351] usb 5-1: SerialNumber: syz [ 91.894020][ T6303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'. [ 92.307805][ T6319] smbdirect: ib_dev[syz1] removed [ 92.643077][ T6316] lo speed is unknown, defaulting to 1000 [ 92.645892][ T6316] lo speed is unknown, defaulting to 1000 [ 92.654179][ T6316] lo speed is unknown, defaulting to 1000 [ 92.658527][ T6316] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 92.663575][ T6316] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 92.669151][ T6316] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 92.707997][ T6316] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 93.043226][ T6318] lo speed is unknown, defaulting to 1000 [ 93.681693][ T6316] lo speed is unknown, defaulting to 1000 [ 93.724232][ T6316] lo speed is unknown, defaulting to 1000 [ 93.726390][ T1351] usb 5-1: unit 4 not found! [ 93.771400][ T1351] usb 5-1: USB disconnect, device number 2 [ 93.797657][ T6316] lo speed is unknown, defaulting to 1000 [ 93.801076][ T6316] lo speed is unknown, defaulting to 1000 [ 93.831072][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.177486][ T5955] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 94.331751][ T6336] Bluetooth: MGMT ver 1.23 [ 94.357788][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 94.362308][ T5955] usb 6-1: unable to get BOS descriptor or descriptor too short [ 94.365924][ T5955] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 94.369349][ T5955] usb 6-1: config 8 has no interface number 0 [ 94.371587][ T5955] usb 6-1: config 8 interface 188 has no altsetting 0 [ 94.376625][ T5955] usb 6-1: string descriptor 0 read error: -22 [ 94.379170][ T5955] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 94.382236][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.392011][ T5955] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 94.395237][ T5955] dw2102: su3000_power_ctrl: 1, initialized 0 [ 94.398500][ T5955] dvb-usb: bulk message failed: -22 (2/0) [ 94.409317][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.413694][ T5955] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 94.418071][ T5955] usb 6-1: media controller created [ 94.420141][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 94.422971][ T5955] dw2102: i2c transfer failed. [ 94.424602][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 94.426557][ T5955] dw2102: i2c transfer failed. [ 94.429097][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 94.430955][ T5955] dw2102: i2c transfer failed. [ 94.433363][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 94.435583][ T5955] dw2102: i2c transfer failed. [ 94.437294][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 94.441221][ T5955] dw2102: i2c transfer failed. [ 94.443063][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 94.445061][ T5955] dw2102: i2c transfer failed. [ 94.446732][ T5955] dvb-usb: MAC address: 02:02:02:02:02:02 [ 94.455475][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.468306][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 94.470759][ T5955] dw2102: command 0x0e transfer failed. [ 94.473233][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 94.475048][ T5955] dw2102: command 0x0e transfer failed. [ 94.587450][ T59] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.759420][ T59] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 94.762558][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.766286][ T59] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 94.769540][ T59] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 94.772216][ T59] usb 5-1: Product: syz [ 94.773508][ T59] usb 5-1: Manufacturer: syz [ 94.774948][ T59] usb 5-1: SerialNumber: syz [ 94.778869][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 94.781271][ T5955] dw2102: command 0x0e transfer failed. [ 94.783011][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 94.783352][ T59] usb 5-1: config 0 descriptor?? [ 94.785157][ T5955] dw2102: command 0x0e transfer failed. [ 94.788710][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 94.789643][ T59] usb 5-1: selecting invalid altsetting 0 [ 94.791122][ T5955] dw2102: command 0x51 transfer failed. [ 94.821002][ T5955] DVB: Unable to find symbol ds3000_attach() [ 94.823725][ T5955] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 94.878509][ T5955] rc_core: IR keymap rc-su3000 not found [ 94.881446][ T5955] Registered IR keymap rc-empty [ 94.887961][ T5955] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 94.894208][ T5955] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input5 [ 94.909738][ T5955] dvb-usb: schedule remote query interval to 150 msecs. [ 94.914330][ T5955] dw2102: su3000_power_ctrl: 0, initialized 1 [ 94.916877][ T5955] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 95.070459][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 95.086002][ T5955] dw2102: i2c transfer failed. [ 95.278572][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 95.284761][ T39] dw2102: i2c transfer failed. [ 95.380351][ T6341] lo speed is unknown, defaulting to 1000 [ 95.437502][ T39] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 95.447462][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 95.450488][ T5955] dw2102: i2c transfer failed. [ 95.587432][ T39] usb 8-1: Using ep0 maxpacket: 8 [ 95.590924][ T39] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.594174][ T39] usb 8-1: config 0 has no interfaces? [ 95.597164][ T39] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 95.600704][ T39] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 95.828695][ T6352] dvb-usb: bulk message failed: -22 (5/0) [ 95.831508][ T6352] dw2102: i2c transfer failed. [ 95.895939][ T39] usb 8-1: Product: syz [ 95.897628][ T39] usb 8-1: SerialNumber: syz [ 95.901781][ T39] usb 8-1: config 0 descriptor?? [ 95.907809][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 95.909689][ T5955] dw2102: i2c transfer failed. [ 96.067395][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 96.069639][ T39] dw2102: i2c transfer failed. [ 96.227446][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 96.229742][ T39] dw2102: i2c transfer failed. [ 96.397780][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 96.403669][ T39] dw2102: i2c transfer failed. [ 96.567886][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 96.570637][ T39] dw2102: i2c transfer failed. [ 96.727633][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 96.729526][ T39] dw2102: i2c transfer failed. [ 96.801390][ T6350] lo speed is unknown, defaulting to 1000 [ 96.803197][ T6350] lo speed is unknown, defaulting to 1000 [ 96.805442][ T6350] lo speed is unknown, defaulting to 1000 [ 96.807833][ T6350] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 96.812170][ T6350] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 96.817641][ T6350] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 96.824916][ T6350] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 96.837571][ T6350] lo speed is unknown, defaulting to 1000 [ 96.844205][ T6350] lo speed is unknown, defaulting to 1000 [ 96.846716][ T6350] lo speed is unknown, defaulting to 1000 [ 96.850592][ T6350] lo speed is unknown, defaulting to 1000 [ 96.853303][ T6350] lo speed is unknown, defaulting to 1000 [ 96.887439][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 96.889857][ T39] dw2102: i2c transfer failed. [ 97.047639][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 97.049464][ T39] dw2102: i2c transfer failed. [ 97.109888][ T6360] tipc: Enabling not permitted [ 97.113602][ T6360] tipc: Enabling of bearer rejected, failed to enable media [ 97.208742][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 97.210533][ T39] dw2102: i2c transfer failed. [ 97.367436][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 97.369296][ T39] dw2102: i2c transfer failed. [ 97.537447][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 97.539392][ T39] dw2102: i2c transfer failed. [ 97.697991][ T1351] dvb-usb: bulk message failed: -22 (1/0) [ 97.700398][ T1351] dw2102: i2c transfer failed. [ 97.767524][ T5754] Bluetooth: hci3: command 0x0406 tx timeout [ 97.857494][ T1351] dvb-usb: bulk message failed: -22 (1/0) [ 97.859404][ T1351] dw2102: i2c transfer failed. [ 97.891426][ T29] usb 6-1: USB disconnect, device number 3 [ 97.990741][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 98.158526][ T5955] usb 8-1: USB disconnect, device number 4 [ 98.205561][ T842] usb 5-1: USB disconnect, device number 3 [ 98.691754][ T6382] bridge1: entered promiscuous mode [ 98.715440][ T6382] bridge1: entered allmulticast mode [ 98.929882][ T6388] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 98.942053][ T6388] VFS: Can't find a romfs filesystem on dev nullb0. [ 98.942053][ T6388] [ 100.510767][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 100.613344][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.624425][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.698546][ T6412] 8021q: adding VLAN 0 to HW filter on device eth0 [ 100.706068][ T6412] 8021q: adding VLAN 0 to HW filter on device eth1 [ 100.718004][ T6412] 8021q: adding VLAN 0 to HW filter on device eth2 [ 100.725534][ T6412] 8021q: adding VLAN 0 to HW filter on device eth3 [ 100.784300][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 100.811978][ T50] lo speed is unknown, defaulting to 1000 [ 101.597457][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 101.614419][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 101.623912][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 101.629984][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 101.634415][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 101.669636][ T6427] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 102.036742][ T6428] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ' [ 102.041582][ T6428] CPU: 2 UID: 0 PID: 6428 Comm: syz.1.90 Not tainted syzkaller #0 PREEMPT(full) [ 102.041621][ T6428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.041632][ T6428] Call Trace: [ 102.041639][ T6428] [ 102.041646][ T6428] dump_stack_lvl+0x100/0x190 [ 102.041732][ T6428] sysfs_warn_dup.cold+0x1c/0x28 [ 102.041760][ T6428] sysfs_do_create_link_sd+0x113/0x140 [ 102.041785][ T6428] sysfs_create_link+0x61/0xc0 [ 102.041806][ T6428] device_add+0x675/0x1950 [ 102.041857][ T6428] ? __pfx_device_add+0x10/0x10 [ 102.041877][ T6428] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.041906][ T6428] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 102.041989][ T6428] wiphy_register+0x1edd/0x2d90 [ 102.042010][ T6428] ? __rtnl_unlock+0xb9/0xf0 [ 102.042045][ T6428] ? __pfx_wiphy_register+0x10/0x10 [ 102.042068][ T6428] ? __asan_memset+0x23/0x50 [ 102.042098][ T6428] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 102.042136][ T6428] ieee80211_register_hw+0x3055/0x4570 [ 102.042177][ T6428] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 102.042203][ T6428] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 102.042243][ T6428] ? mac80211_hwsim_new_radio+0x29f9/0x5aa0 [ 102.042269][ T6428] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 102.042307][ T6428] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 102.042332][ T6428] ? __asan_memcpy+0x3c/0x60 [ 102.042362][ T6428] hwsim_new_radio_nl+0xc5f/0x1370 [ 102.042384][ T6428] ? rcu_is_watching+0x12/0xc0 [ 102.042407][ T6428] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 102.042455][ T6428] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 102.042488][ T6428] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 102.042522][ T6428] genl_family_rcv_msg_doit+0x214/0x300 [ 102.042551][ T6428] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 102.042578][ T6428] ? genl_get_cmd+0x3e7/0x760 [ 102.042608][ T6428] ? bpf_lsm_capable+0x9/0x10 [ 102.042627][ T6428] ? security_capable+0x80/0x260 [ 102.042644][ T6428] ? ns_capable+0xd2/0xf0 [ 102.042666][ T6428] genl_rcv_msg+0x560/0x800 [ 102.042697][ T6428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.042724][ T6428] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 102.042755][ T6428] netlink_rcv_skb+0x159/0x420 [ 102.042778][ T6428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.042805][ T6428] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.042839][ T6428] ? rcu_is_watching+0x12/0xc0 [ 102.042866][ T6428] genl_rcv+0x28/0x40 [ 102.042889][ T6428] netlink_unicast+0x585/0x850 [ 102.042916][ T6428] ? __pfx_netlink_unicast+0x10/0x10 [ 102.042944][ T6428] netlink_sendmsg+0x8b0/0xda0 [ 102.042971][ T6428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.042997][ T6428] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 102.043029][ T6428] ____sys_sendmsg+0x9e1/0xb70 [ 102.043054][ T6428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.043082][ T6428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.043106][ T6428] ? __pfx___futex_wait+0x10/0x10 [ 102.043135][ T6428] ? __pfx_futex_wake_mark+0x10/0x10 [ 102.043163][ T6428] ___sys_sendmsg+0x190/0x1e0 [ 102.043189][ T6428] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.043224][ T6428] ? find_held_lock+0x2b/0x80 [ 102.043263][ T6428] __sys_sendmsg+0x170/0x220 [ 102.043283][ T6428] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.043301][ T6428] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 102.043330][ T6428] ? rcu_is_watching+0x12/0xc0 [ 102.043354][ T6428] __do_fast_syscall_32+0xe7/0x970 [ 102.043384][ T6428] do_fast_syscall_32+0x32/0x70 [ 102.043411][ T6428] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.043432][ T6428] RIP: 0023:0xf7f24f7c [ 102.043449][ T6428] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 102.043465][ T6428] RSP: 002b:00000000f53a450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 102.043484][ T6428] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000100 [ 102.043496][ T6428] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.043507][ T6428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.043517][ T6428] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 102.043525][ T6428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.043547][ T6428] [ 102.387305][ T6433] siw: device registration error -23 [ 103.088746][ T6439] SET target dimension over the limit! [ 103.289523][ T6441] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 103.291578][ T6441] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.300865][ T6441] vhci_hcd vhci_hcd.0: Device attached [ 103.594796][ T5847] usb 40-1: SetAddress Request (6) to port 0 [ 103.607505][ T5847] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 103.757093][ T6444] rdma_rxe: rxe_newlink: failed to add wg2 [ 104.323614][ T6442] vhci_hcd: connection reset by peer [ 104.538368][ T6268] vhci_hcd vhci_hcd.1: stop threads [ 104.540330][ T6268] vhci_hcd vhci_hcd.1: release socket [ 104.545497][ T6268] vhci_hcd vhci_hcd.1: disconnect device [ 105.124759][ T6461] bridge1: entered promiscuous mode [ 105.127108][ T6461] bridge1: entered allmulticast mode [ 105.264223][ T6469] tipc: Enabling not permitted [ 105.269594][ T6469] tipc: Enabling of bearer rejected, failed to enable media [ 106.377455][ T842] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 106.535439][ T842] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.540643][ T842] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.546739][ T842] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 106.551028][ T842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.554354][ T842] usb 6-1: Product: syz [ 106.556216][ T842] usb 6-1: Manufacturer: syz [ 106.558652][ T842] usb 6-1: SerialNumber: syz [ 106.787199][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.99'. [ 106.982365][ T842] usb 6-1: unit 4 not found! [ 107.006823][ T842] usb 6-1: USB disconnect, device number 4 [ 107.371653][ T40] audit: type=1326 audit(1781182341.357:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48f7c code=0x7ffc0000 [ 107.371901][ T40] audit: type=1326 audit(1781182341.357:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48f7c code=0x7ffc0000 [ 107.544243][ T6488] binder: 6487:6488 ioctl c0306201 80000040 returned -22 [ 108.717483][ T5847] usb 40-1: device descriptor read/8, error -110 [ 110.617808][ T5847] usb usb40-port1: attempt power cycle [ 110.632656][ T6503] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 110.982533][ T6518] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 110.984600][ T6518] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 110.988069][ T6518] vhci_hcd vhci_hcd.0: Device attached [ 111.063323][ T6518] rdma_rxe: rxe_newlink: failed to add wg2 [ 111.259351][ T5747] usb 42-1: SetAddress Request (2) to port 0 [ 111.275429][ T5747] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 111.286575][ T5847] usb usb40-port1: unable to enumerate USB device [ 111.416023][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.430346][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.763134][ T6519] vhci_hcd: connection reset by peer [ 111.766227][ T172] vhci_hcd vhci_hcd.2: stop threads [ 111.771141][ T172] vhci_hcd vhci_hcd.2: release socket [ 111.776732][ T172] vhci_hcd vhci_hcd.2: disconnect device [ 112.311594][ T6538] netlink: 72 bytes leftover after parsing attributes in process `syz.3.111'. [ 112.486927][ T6533] pim6reg: entered allmulticast mode [ 112.560782][ T6539] team0: entered allmulticast mode [ 112.563180][ T6539] team_slave_0: entered allmulticast mode [ 112.565752][ T6539] team_slave_1: entered allmulticast mode [ 112.570303][ T6539] team0: left allmulticast mode [ 112.572570][ T6539] team_slave_0: left allmulticast mode [ 112.574881][ T6539] team_slave_1: left allmulticast mode [ 112.579330][ T6539] pim6reg: left allmulticast mode [ 112.987412][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 113.027438][ T5846] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 113.125985][ T6547] binder: 6546:6547 ioctl c0306201 80000040 returned -22 [ 113.199845][ T5846] usb 8-1: Using ep0 maxpacket: 8 [ 113.388030][ T5846] usb 8-1: config 0 interface 0 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 113.530814][ T5846] usb 8-1: config 0 interface 0 has no altsetting 0 [ 113.534099][ T5846] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 113.538492][ T5846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.543739][ T5846] usb 8-1: config 0 descriptor?? [ 113.553536][ T5846] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 113.744389][ T6555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.246976][ T6559] binder: 6558:6559 ioctl c0306201 80000040 returned -22 [ 115.007410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 116.777907][ T5747] usb 42-1: device descriptor read/8, error -110 [ 117.411978][ T5847] usb 8-1: USB disconnect, device number 5 [ 117.581503][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'. [ 117.650118][ T6583] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 117.677879][ T5747] usb usb42-port1: attempt power cycle [ 117.984977][ T6588] comedi comedi0: Minor 3 could not be opened [ 118.242369][ T6596] binder: 6595:6596 ioctl c0306201 80000040 returned -22 [ 118.278398][ T5747] usb usb42-port1: unable to enumerate USB device [ 118.967000][ T6604] input: syz1 as /devices/virtual/input/input8 [ 119.150522][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 119.480535][ T6609] lo speed is unknown, defaulting to 1000 [ 119.487827][ T6609] lo speed is unknown, defaulting to 1000 [ 121.677482][ T5758] Bluetooth: hci3: command 0x0406 tx timeout [ 121.691655][ T6619] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 121.693712][ T6619] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 121.697821][ T6619] vhci_hcd vhci_hcd.0: Device attached [ 121.770647][ T6619] rdma_rxe: rxe_newlink: failed to add wg2 [ 121.888375][ T6620] vhci_hcd: connection closed [ 121.890151][ T1160] vhci_hcd vhci_hcd.3: stop threads [ 121.897570][ T1160] vhci_hcd vhci_hcd.3: release socket [ 121.903668][ T1160] vhci_hcd vhci_hcd.3: disconnect device [ 122.448827][ T6630] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 122.451290][ T6630] netlink: 224 bytes leftover after parsing attributes in process `syz.1.129'. [ 122.509215][ T6632] overlayfs: failed to resolve './file0/file1': -2 [ 123.586981][ T6634] lo speed is unknown, defaulting to 1000 [ 123.593347][ T6634] lo speed is unknown, defaulting to 1000 [ 124.413244][ T6640] pim6reg: entered allmulticast mode [ 124.534710][ T6638] team0: entered allmulticast mode [ 124.536784][ T6638] team_slave_0: entered allmulticast mode [ 124.539094][ T6638] team_slave_1: entered allmulticast mode [ 124.545133][ T6638] team0: left allmulticast mode [ 124.547120][ T6638] team_slave_0: left allmulticast mode [ 124.549295][ T6638] team_slave_1: left allmulticast mode [ 124.551790][ T6638] pim6reg: left allmulticast mode [ 124.797502][ T39] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 124.958817][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 124.962039][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.964927][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 52, changing to 9 [ 124.969449][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8241, setting to 1024 [ 124.976623][ T39] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 125.002803][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.008606][ T39] usb 7-1: Product: syz [ 125.009928][ T39] usb 7-1: Manufacturer: syz [ 125.017389][ T39] usb 7-1: SerialNumber: syz [ 125.026167][ T39] usb 7-1: config 0 descriptor?? [ 125.241125][ T6655] Invalid ELF header type: 3 != 1 [ 125.479157][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 125.553148][ T6660] netlink: 'syz.1.135': attribute type 10 has an invalid length. [ 125.555773][ T6660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.135'. [ 125.575308][ T6660] dummy0: entered promiscuous mode [ 125.581804][ T6660] bridge0: port 3(dummy0) entered blocking state [ 125.585442][ T6660] bridge0: port 3(dummy0) entered disabled state [ 125.589888][ T6660] dummy0: entered allmulticast mode [ 125.594343][ T6660] bridge0: port 3(dummy0) entered blocking state [ 125.596882][ T6660] bridge0: port 3(dummy0) entered forwarding state [ 125.783096][ T39] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 125.911111][ T9] usb 7-1: USB disconnect, device number 4 [ 126.169829][ T6672] : entered promiscuous mode [ 128.359983][ T6677] infiniband syz1: set down [ 128.361467][ T6677] infiniband syz1: added veth1_vlan [ 128.382503][ T6677] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 128.389116][ T6677] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 128.395027][ T6677] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 128.407957][ T6677] RDS/IB: syz1: added [ 128.409664][ T6677] smc: adding ib device syz1 with port count 1 [ 128.411837][ T6677] smc: ib device syz1 port 1 has no pnetid [ 129.179581][ T6685] lo speed is unknown, defaulting to 1000 [ 129.182105][ T6685] lo speed is unknown, defaulting to 1000 [ 129.647846][ T6700] vivid-000: disconnect [ 129.835696][ T6694] lo speed is unknown, defaulting to 1000 [ 129.876246][ T6694] lo speed is unknown, defaulting to 1000 [ 130.084531][ T6695] vivid-000: reconnect [ 130.160988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 130.398363][ T6710] ufs: You didn't specify the type of your ufs filesystem [ 130.398363][ T6710] [ 130.398363][ T6710] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 130.398363][ T6710] [ 130.398363][ T6710] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 130.436960][ T6710] ufs: ufs_fill_super(): bad magic number [ 132.038838][ T6722] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22) [ 132.104439][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 132.201855][ T6728] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 132.337178][ T6726] bridge1: left promiscuous mode [ 132.580034][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 132.601547][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 132.980659][ T6745] binder: 6744:6745 ioctl c0306201 80000040 returned -22 [ 135.687500][ T6786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.591461][ T6786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.987910][ T6792] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 136.989950][ T6792] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 137.015441][ T6792] vhci_hcd vhci_hcd.0: Device attached [ 137.021384][ T6793] rdma_rxe: rxe_newlink: failed to add wg2 [ 137.104260][ T6786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.193840][ T6786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.231742][ T6794] vhci_hcd: connection closed [ 137.231938][ T121] vhci_hcd vhci_hcd.2: stop threads [ 137.235696][ T121] vhci_hcd vhci_hcd.2: release socket [ 137.240211][ T121] vhci_hcd vhci_hcd.2: disconnect device [ 137.262374][ T121] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.274060][ T121] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.284975][ T121] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.294752][ T121] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.360298][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.464254][ T6801] Cannot find add_set index 0 as target [ 138.597567][ T6808] ufs: You didn't specify the type of your ufs filesystem [ 138.597567][ T6808] [ 138.597567][ T6808] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 138.597567][ T6808] [ 138.597567][ T6808] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 138.610962][ T6808] ufs: ufs_fill_super(): bad magic number [ 139.137739][ T5754] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 139.141243][ T5754] CPU: 3 UID: 0 PID: 5754 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 139.141259][ T5754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.141267][ T5754] Workqueue: hci1 hci_rx_work [ 139.141286][ T5754] Call Trace: [ 139.141291][ T5754] [ 139.141296][ T5754] dump_stack_lvl+0x100/0x190 [ 139.141317][ T5754] sysfs_warn_dup.cold+0x1c/0x28 [ 139.141333][ T5754] sysfs_create_dir_ns+0x24b/0x2b0 [ 139.141346][ T5754] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 139.141356][ T5754] ? find_held_lock+0x2b/0x80 [ 139.141369][ T5754] ? kobject_add_internal+0x25f/0x930 [ 139.141381][ T5754] ? kobject_add_internal+0x25f/0x930 [ 139.141392][ T5754] ? do_raw_spin_unlock+0x145/0x1e0 [ 139.141404][ T5754] kobject_add_internal+0x2c8/0x930 [ 139.141417][ T5754] kobject_add+0x16a/0x1e0 [ 139.141428][ T5754] ? __pfx_kobject_add+0x10/0x10 [ 139.141439][ T5754] ? class_to_subsys+0x10f/0x150 [ 139.141454][ T5754] ? kobject_put+0xb9/0x640 [ 139.141469][ T5754] ? _raw_spin_unlock+0x28/0x50 [ 139.141485][ T5754] device_add+0x294/0x1950 [ 139.141497][ T5754] ? __pfx_dev_set_name+0x10/0x10 [ 139.141511][ T5754] ? __pfx_device_add+0x10/0x10 [ 139.141522][ T5754] ? mgmt_send_event_skb+0x2fb/0x460 [ 139.141540][ T5754] hci_conn_add_sysfs+0x1a3/0x260 [ 139.141558][ T5754] le_conn_complete_evt+0x11eb/0x1f60 [ 139.141576][ T5754] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 139.141594][ T5754] hci_le_conn_complete_evt+0x23c/0x3a0 [ 139.141614][ T5754] ? skb_pull_data+0x15f/0x1e0 [ 139.141631][ T5754] hci_le_meta_evt+0x34a/0x5f0 [ 139.141647][ T5754] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 139.141664][ T5754] hci_event_packet+0x51c/0xcd0 [ 139.141678][ T5754] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 139.141694][ T5754] ? __pfx_hci_event_packet+0x10/0x10 [ 139.141710][ T5754] ? kcov_remote_start+0x374/0x660 [ 139.141726][ T5754] ? lockdep_hardirqs_on+0x78/0x100 [ 139.141743][ T5754] hci_rx_work+0x451/0xfc0 [ 139.141759][ T5754] process_one_work+0xa0e/0x1980 [ 139.141776][ T5754] ? __pfx_process_one_work+0x10/0x10 [ 139.141790][ T5754] ? __pfx_hci_rx_work+0x10/0x10 [ 139.141804][ T5754] worker_thread+0x5ef/0xe50 [ 139.141818][ T5754] ? __pfx_worker_thread+0x10/0x10 [ 139.141829][ T5754] ? kthread+0x13a/0x450 [ 139.141843][ T5754] ? __pfx_worker_thread+0x10/0x10 [ 139.141852][ T5754] kthread+0x370/0x450 [ 139.141866][ T5754] ? __pfx_kthread+0x10/0x10 [ 139.141883][ T5754] ret_from_fork+0x72b/0xd50 [ 139.141895][ T5754] ? __pfx_ret_from_fork+0x10/0x10 [ 139.141906][ T5754] ? __switch_to+0x800/0x1100 [ 139.141921][ T5754] ? __pfx_kthread+0x10/0x10 [ 139.141937][ T5754] ret_from_fork_asm+0x1a/0x30 [ 139.141957][ T5754] [ 139.141974][ T5754] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 139.927614][ T5754] Bluetooth: hci1: failed to register connection device [ 139.988786][ T6818] binder: 6813:6818 ioctl c0306201 0 returned -14 [ 140.295599][ T6815] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.304463][ T6815] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.340583][ T6815] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.649833][ T6815] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.653085][ T6815] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.770655][ T6815] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.791590][ T6815] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.799920][ T6815] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.803304][ T6815] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.816490][ T6815] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.823438][ T6815] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.827627][ T6815] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.317582][ T5754] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.717484][ T5754] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.877629][ T5754] Bluetooth: hci3: command 0x0406 tx timeout [ 142.877749][ T5758] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.407616][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.687425][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.719382][ T6860] binder: 6857:6860 ioctl c0285840 80000000 returned -22 [ 144.797419][ T5758] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.872562][ T6846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.881625][ T6846] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.908386][ T6846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.957514][ T5758] Bluetooth: hci3: command 0x0406 tx timeout [ 144.960125][ T5758] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.960713][ T6866] netlink: 'syz.3.172': attribute type 10 has an invalid length. [ 145.021007][ T6867] netlink: 'syz.3.172': attribute type 10 has an invalid length. [ 145.053362][ T6846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.059947][ T6846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.068600][ T6846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.072963][ T6846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.080965][ T6846] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 145.092673][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.095720][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.101476][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.104492][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.732649][ T6866] team0: Failed to send options change via netlink (err -105) [ 145.735005][ T6866] team0: Port device dummy0 added [ 145.769216][ T39] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.773080][ T39] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 145.784197][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.791731][ T39] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 145.791938][ T6867] team0: Failed to send options change via netlink (err -105) [ 145.806823][ T6867] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 145.807855][ T39] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 145.818108][ T6867] team0: Port device dummy0 removed [ 145.823322][ T39] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.827231][ T39] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.835689][ T39] usb 5-1: Product: syz [ 145.842758][ T39] usb 5-1: Manufacturer: syz [ 145.845076][ T6867] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 145.853227][ T39] cdc_wdm 5-1:1.0: skipping garbage [ 145.855294][ T39] cdc_wdm 5-1:1.0: skipping garbage [ 145.887124][ T39] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 145.889475][ T39] cdc_wdm 5-1:1.0: Unknown control protocol [ 145.967847][ T40] audit: type=1326 audit(1781182379.947:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 145.977476][ T40] audit: type=1326 audit(1781182379.957:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 145.986200][ T40] audit: type=1326 audit(1781182379.957:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.173" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 146.021939][ T40] audit: type=1326 audit(1781182379.957:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 146.030946][ T40] audit: type=1326 audit(1781182379.957:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 146.477552][ T5754] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.877538][ T5754] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.917148][ T6891] xt_CT: No such helper "pptp" [ 147.038306][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.368413][ T6891] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 149.077446][ T5754] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.687163][ T6922] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 149.877445][ T6926] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 150.085003][ T5955] usb 5-1: USB disconnect, device number 4 [ 150.395326][ T6938] tmpfs: Unknown parameter 'qsr¬Æfú¶æÒèü³’H{"' [ 151.038435][ T6949] netlink: 14 bytes leftover after parsing attributes in process `syz.1.183'. [ 151.051858][ T6949] bridge0: port 3(dummy0) entered disabled state [ 151.062691][ T6949] dummy0 (unregistering): left allmulticast mode [ 151.065520][ T6949] bridge0: port 3(dummy0) entered disabled state [ 151.255870][ T6947] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 152.519949][ T6954] comedi comedi3: 8255: I/O base address not correctly aligned [ 152.876053][ T6970] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 152.878736][ T6970] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 152.885198][ T6970] vhci_hcd vhci_hcd.0: Device attached [ 152.917417][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 153.034268][ T6970] rdma_rxe: rxe_newlink: failed to add wg2 [ 153.124546][ T6977] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 153.126601][ T6977] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 153.134265][ T6977] vhci_hcd vhci_hcd.0: Device attached [ 153.227454][ T5747] usb 42-1: SetAddress Request (7) to port 0 [ 153.229488][ T5747] usb 42-1: new SuperSpeed USB device number 7 using vhci_hcd [ 153.251074][ T6977] rdma_rxe: rxe_newlink: failed to add wg2 [ 153.418873][ T29] usb 44-1: SetAddress Request (3) to port 0 [ 153.434362][ T29] usb 44-1: new SuperSpeed USB device number 3 using vhci_hcd [ 153.501187][ T6971] vhci_hcd: connection reset by peer [ 153.507768][ T1160] vhci_hcd vhci_hcd.2: stop threads [ 153.509414][ T1160] vhci_hcd vhci_hcd.2: release socket [ 153.520021][ T1160] vhci_hcd vhci_hcd.2: disconnect device [ 153.567434][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 153.570711][ T34] usb 6-1: config 2 has an invalid interface number: 4 but max is 0 [ 153.573798][ T34] usb 6-1: config 2 has no interface number 0 [ 153.576359][ T34] usb 6-1: config 2 interface 4 has no altsetting 0 [ 153.580509][ T34] usb 6-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=45.22 [ 153.584120][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.586686][ T34] usb 6-1: Product: syz [ 153.588512][ T34] usb 6-1: Manufacturer: syz [ 153.590472][ T34] usb 6-1: SerialNumber: syz [ 153.789856][ T6983] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.877708][ T6978] vhci_hcd: connection reset by peer [ 153.884301][ T1160] vhci_hcd vhci_hcd.3: stop threads [ 153.896890][ T1160] vhci_hcd vhci_hcd.3: release socket [ 153.903264][ T1160] vhci_hcd vhci_hcd.3: disconnect device [ 153.937724][ T6983] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.125593][ T6983] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.285369][ T6983] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.660028][ T34] quatech2 6-1:2.4: Quatech 2nd gen USB to Serial Driver converter detected [ 154.664637][ T34] usb 6-1: qt2_attach - failed to power on unit: -71 [ 154.667679][ T34] quatech2 6-1:2.4: probe with driver quatech2 failed with error -71 [ 154.674033][ T34] usb 6-1: USB disconnect, device number 5 [ 155.012979][ T1163] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.016510][ T1163] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.019923][ T1163] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.023126][ T1163] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.147491][ T5847] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 155.299187][ T5847] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.302992][ T5847] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 155.306253][ T5847] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.309071][ T5847] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 155.312513][ T5847] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 155.317528][ T5847] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.320632][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.323520][ T5847] usb 7-1: Product: syz [ 155.324946][ T5847] usb 7-1: Manufacturer: syz [ 155.334355][ T5847] cdc_wdm 7-1:1.0: skipping garbage [ 155.337086][ T5847] cdc_wdm 7-1:1.0: skipping garbage [ 155.343655][ T5847] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 155.345895][ T5847] cdc_wdm 7-1:1.0: Unknown control protocol [ 155.635718][ T6995] binder: 6994:6995 ioctl c0306201 80000040 returned -22 [ 156.089526][ T7005] syzkaller0: entered promiscuous mode [ 156.091785][ T7005] syzkaller0: entered allmulticast mode [ 156.105868][ T7002] xt_CT: No such helper "pptp" [ 156.127410][ T40] audit: type=1804 audit(1781182390.107:12): pid=7000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.194" name="/newroot/47/file0/file0" dev="9p" ino=74471065 res=1 errno=0 [ 156.388899][ T7002] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 156.971910][ T5754] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 157.627377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 157.648492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 157.687369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 157.696677][ T7027] netlink: 44 bytes leftover after parsing attributes in process `syz.3.199'. [ 157.699820][ T7027] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 157.877560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 157.907210][ T5955] usb 7-1: USB disconnect, device number 5 [ 157.950754][ T7036] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 157.953471][ T7036] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 157.957036][ T7036] vhci_hcd vhci_hcd.0: Device attached [ 158.051567][ T7036] rdma_rxe: rxe_newlink: failed to add wg2 [ 158.125117][ T7040] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 158.127870][ T7040] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 158.141836][ T7040] vhci_hcd vhci_hcd.0: Device attached [ 158.184818][ T7044] netlink: 'syz.2.202': attribute type 11 has an invalid length. [ 158.268537][ T5847] usb 40-1: SetAddress Request (10) to port 0 [ 158.274137][ T5847] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 158.328806][ T5747] usb 42-1: device descriptor read/8, error -110 [ 158.372916][ T7040] rdma_rxe: rxe_newlink: failed to add wg2 [ 158.619952][ T7037] vhci_hcd: connection reset by peer [ 158.635311][ T13] vhci_hcd vhci_hcd.1: stop threads [ 158.648717][ T13] vhci_hcd vhci_hcd.1: release socket [ 158.669714][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 158.750543][ T7042] vhci_hcd: connection reset by peer [ 158.755457][ T13] vhci_hcd vhci_hcd.3: stop threads [ 158.757800][ T5747] usb usb42-port1: attempt power cycle [ 158.765508][ T13] vhci_hcd vhci_hcd.3: release socket [ 158.773023][ T29] usb 44-1: device descriptor read/8, error -110 [ 158.773117][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 159.045228][ T7050] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.229001][ T29] usb usb44-port1: attempt power cycle [ 159.354917][ T5747] usb usb42-port1: unable to enumerate USB device [ 159.819841][ T29] usb usb44-port1: unable to enumerate USB device [ 160.590920][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 160.636677][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 160.876896][ T7065] binder: 7064:7065 ioctl c0306201 80000040 returned -22 [ 161.247887][ T7071] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 161.250612][ T7071] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 161.283908][ T7071] vhci_hcd vhci_hcd.0: Device attached [ 161.464039][ T7071] rdma_rxe: rxe_newlink: failed to add wg2 [ 161.745176][ T7072] vhci_hcd: connection closed [ 161.750902][ T1160] vhci_hcd vhci_hcd.1: stop threads [ 161.763432][ T1160] vhci_hcd vhci_hcd.1: release socket [ 161.771372][ T1160] vhci_hcd vhci_hcd.1: disconnect device [ 161.974051][ T40] audit: type=1326 audit(1781182395.957:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.3.208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef7c code=0x7ffc0000 [ 161.982610][ T40] audit: type=1326 audit(1781182395.967:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.3.208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef7c code=0x7ffc0000 [ 161.991888][ T40] audit: type=1326 audit(1781182395.967:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.3.208" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf703ef7c code=0x7ffc0000 [ 162.001454][ T40] audit: type=1326 audit(1781182395.967:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.3.208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef7c code=0x7ffc0000 [ 162.010427][ T40] audit: type=1326 audit(1781182395.967:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.3.208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef7c code=0x7ffc0000 [ 163.370627][ T5847] usb 40-1: device descriptor read/8, error -110 [ 163.372787][ T7102] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 163.374815][ T7102] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 163.384729][ T7102] vhci_hcd vhci_hcd.0: Device attached [ 163.657456][ T1038] usb 42-1: SetAddress Request (11) to port 0 [ 163.659430][ T1038] usb 42-1: new SuperSpeed USB device number 11 using vhci_hcd [ 163.677692][ T7108] binder: 7107:7108 ioctl c0306201 80000040 returned -22 [ 163.695363][ T7103] vhci_hcd: connection closed [ 163.695711][ T1160] vhci_hcd vhci_hcd.2: stop threads [ 163.699368][ T1160] vhci_hcd vhci_hcd.2: release socket [ 163.701218][ T1160] vhci_hcd vhci_hcd.2: disconnect device [ 163.717761][ T1038] usb 42-1: enqueue for inactive port 0 [ 163.828159][ T5847] usb usb40-port1: attempt power cycle [ 164.049829][ T7117] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 164.051849][ T7117] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 164.055115][ T7117] vhci_hcd vhci_hcd.0: Device attached [ 164.108782][ T1038] usb usb42-port1: attempt power cycle [ 164.319283][ T5747] usb 38-1: SetAddress Request (2) to port 0 [ 164.321164][ T5747] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 164.405611][ T5847] usb usb40-port1: unable to enumerate USB device [ 164.542316][ T7118] vhci_hcd: connection reset by peer [ 164.546290][ T6268] vhci_hcd vhci_hcd.0: stop threads [ 164.548088][ T6268] vhci_hcd vhci_hcd.0: release socket [ 164.549918][ T6268] vhci_hcd vhci_hcd.0: disconnect device [ 164.557610][ T7124] trusted_key: encrypted_key: insufficient parameters specified [ 164.564106][ T7124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.217'. [ 164.569993][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 164.590497][ T7106] lo speed is unknown, defaulting to 1000 [ 164.593733][ T7106] lo speed is unknown, defaulting to 1000 [ 164.688201][ T1038] usb usb42-port1: unable to enumerate USB device [ 165.306026][ T7132] binder: 7131:7132 ioctl c0306201 80000040 returned -22 [ 165.564097][ T7137] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 165.566186][ T7137] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 165.569622][ T7137] vhci_hcd vhci_hcd.0: Device attached [ 165.628360][ T7137] rdma_rxe: rxe_newlink: failed to add wg2 [ 165.838528][ T1038] usb 44-1: SetAddress Request (7) to port 0 [ 165.845785][ T1038] usb 44-1: new SuperSpeed USB device number 7 using vhci_hcd [ 166.220412][ T7138] vhci_hcd: connection reset by peer [ 166.229621][ T1163] vhci_hcd vhci_hcd.3: stop threads [ 166.231207][ T1163] vhci_hcd vhci_hcd.3: release socket [ 166.234353][ T1163] vhci_hcd vhci_hcd.3: disconnect device [ 166.275382][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 166.281919][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 167.644673][ T7161] netlink: 14 bytes leftover after parsing attributes in process `syz.0.231'. [ 168.472440][ T7166] binder: 7165:7166 ioctl c0306201 80000040 returned -22 [ 169.281562][ T7183] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 169.357696][ T5747] usb 38-1: device descriptor read/8, error -110 [ 169.394412][ T842] lo speed is unknown, defaulting to 1000 [ 171.077636][ T7176] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 171.086351][ T1038] usb 44-1: device descriptor read/8, error -110 [ 171.573866][ T1038] usb usb44-port1: attempt power cycle [ 171.583116][ T5747] usb usb38-port1: attempt power cycle [ 171.587632][ T7191] syz.0.228 (7191) used greatest stack depth: 18936 bytes left [ 171.717559][ T7197] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 171.720109][ T7197] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 171.731302][ T7197] vhci_hcd vhci_hcd.0: Device attached [ 172.047679][ T5847] usb 40-1: SetAddress Request (14) to port 0 [ 172.054012][ T5847] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 172.138390][ T1038] usb usb44-port1: unable to enumerate USB device [ 172.178509][ T5747] usb usb38-port1: unable to enumerate USB device [ 172.256570][ T7204] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 172.259365][ T7204] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 172.264799][ T7204] vhci_hcd vhci_hcd.0: Device attached [ 172.270504][ T7198] vhci_hcd: connection reset by peer [ 172.275211][ T1163] vhci_hcd vhci_hcd.1: stop threads [ 172.276885][ T1163] vhci_hcd vhci_hcd.1: release socket [ 172.277107][ T1163] vhci_hcd vhci_hcd.1: disconnect device [ 172.453642][ T7205] vhci_hcd: connection closed [ 172.453998][ T12] vhci_hcd vhci_hcd.2: stop threads [ 172.459620][ T12] vhci_hcd vhci_hcd.2: release socket [ 172.462026][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 172.637700][ T7212] fuse: Bad value for 'fd' [ 173.292424][ T7222] fuse: Unknown parameter 'user_id00000000000000000000' [ 173.555999][ T7226] binder: 7225:7226 ioctl c0306201 80000040 returned -22 [ 173.737704][ T1038] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 174.640422][ T7235] : entered promiscuous mode [ 175.800150][ T1038] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.817821][ T1038] usb 7-1: config 0 has no interface number 0 [ 175.832418][ T1038] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 175.858541][ T1038] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 175.882435][ T1038] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.903250][ T1038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.037009][ T1038] usb 7-1: config 0 descriptor?? [ 176.079442][ T7222] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.198011][ T1038] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 176.371300][ T1038] usb 7-1: USB disconnect, device number 6 [ 177.117637][ T5847] usb 40-1: device descriptor read/8, error -110 [ 177.671217][ T5847] usb usb40-port1: attempt power cycle [ 178.689230][ T5847] usb usb40-port1: unable to enumerate USB device [ 178.997149][ T7262] bridge_slave_0: left allmulticast mode [ 178.999165][ T7262] bridge_slave_0: left promiscuous mode [ 179.001486][ T7262] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.200301][ T7262] bridge_slave_1: left allmulticast mode [ 179.202282][ T7262] bridge_slave_1: left promiscuous mode [ 179.204404][ T7262] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.283436][ T7262] bond0: (slave bond_slave_0): Releasing backup interface [ 179.337472][ T5955] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 179.487422][ T5955] usb 8-1: Using ep0 maxpacket: 8 [ 179.490335][ T5955] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.496834][ T5955] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.502927][ T5955] usb 8-1: config 0 interface 0 has no altsetting 0 [ 179.508133][ T5955] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 179.513354][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.521943][ T5955] usb 8-1: config 0 descriptor?? [ 179.543402][ T7262] bond0: (slave bond_slave_1): Releasing backup interface [ 179.639476][ T7262] team0: Port device team_slave_0 removed [ 179.657928][ T7289] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 179.659975][ T7289] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 179.666108][ T7262] team0: Port device team_slave_1 removed [ 179.676672][ T7262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.687290][ T7262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.698770][ T7289] vhci_hcd vhci_hcd.0: Device attached [ 179.701848][ T7262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.704243][ T7262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.708323][ T7262] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.735100][ T7288] syzkaller0: entered promiscuous mode [ 179.742982][ T7288] syzkaller0: entered allmulticast mode [ 179.775963][ T40] audit: type=1804 audit(1781182413.757:18): pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.245" name="/newroot/63/file0/file0" dev="9p" ino=74471065 res=1 errno=0 [ 179.936127][ T5955] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 179.939693][ T5955] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 179.942609][ T5955] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 179.945896][ T5955] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 179.948183][ T5955] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 179.955325][ T5955] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 179.962450][ T7297] vhci_hcd: connection closed [ 179.964120][ T58] vhci_hcd vhci_hcd.1: stop threads [ 179.967917][ T58] vhci_hcd vhci_hcd.1: release socket [ 179.970878][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 179.998563][ T1038] usb 40-1: enqueue for inactive port 0 [ 180.199135][ T842] usb 8-1: USB disconnect, device number 6 [ 180.290328][ T7304] binder: 7303:7304 ioctl c0306201 80000040 returned -22 [ 180.367524][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 180.529039][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.534604][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.539202][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.544442][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.548301][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.573740][ T9] usb 5-1: config 0 descriptor?? [ 180.777461][ T1038] usb usb40-port1: attempt power cycle [ 181.039464][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 181.144108][ T9] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 181.228130][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 181.608102][ T5955] usb 5-1: USB disconnect, device number 5 [ 181.791389][ T7335] netlink: 'syz.1.250': attribute type 10 has an invalid length. [ 181.797443][ T7335] netlink: 'syz.1.250': attribute type 10 has an invalid length. [ 182.408654][ T1038] usb usb40-port1: unable to enumerate USB device [ 182.550125][ T40] audit: type=1326 audit(1781182416.537:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.253" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48f7c code=0x7ffc0000 [ 182.583158][ T40] audit: type=1326 audit(1781182416.547:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.253" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f48f7c code=0x7ffc0000 [ 182.639550][ T7342] input: syz1 as /devices/virtual/input/input12 [ 182.655104][ T40] audit: type=1326 audit(1781182416.637:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.253" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48f7c code=0x7ffc0000 [ 182.665295][ T40] audit: type=1326 audit(1781182416.647:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.0.253" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48f7c code=0x7ffc0000 [ 182.758505][ T7346] bridge_slave_0: left allmulticast mode [ 182.761022][ T7346] bridge_slave_0: left promiscuous mode [ 182.765744][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.781668][ T7346] bridge_slave_1: left allmulticast mode [ 182.786805][ T7346] bridge_slave_1: left promiscuous mode [ 182.790050][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.807172][ T7346] bond0: (slave bond_slave_0): Releasing backup interface [ 182.829240][ T7346] bond0: (slave bond_slave_1): Releasing backup interface [ 182.848429][ T7346] team0: Port device team_slave_0 removed [ 182.855149][ T7346] team0: Port device team_slave_1 removed [ 182.858530][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.861612][ T7346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.877674][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.881966][ T7346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.886455][ T7346] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.907694][ T7348] team0: Mode changed to "activebackup" [ 182.909874][ T7350] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 182.913473][ T7349] vlan0: entered promiscuous mode [ 182.971426][ T7350] bond0: (slave dummy0): Releasing backup interface [ 183.024965][ T7350] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 183.030945][ T7348] overlayfs: failed to resolve './file0': -2 [ 183.031336][ T7350] team0: Failed to send options change via netlink (err -105) [ 183.038192][ T7350] team0: Port device dummy0 added [ 183.041229][ T7352] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 183.046378][ T7346] tipc: Started in network mode [ 183.049239][ T7346] tipc: Node identity bridge, cluster identity 4711 [ 183.054171][ T7346] tipc: Enabled bearer , priority 0 [ 183.063172][ T7352] team0: Failed to send options change via netlink (err -105) [ 183.066053][ T7352] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 183.069838][ T7352] team0: Port device dummy0 removed [ 183.080270][ T7352] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 183.091881][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 184.169146][ T842] tipc: Node number set to 85420388 [ 184.350754][ T7362] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 184.353406][ T7362] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 184.394125][ T7362] vhci_hcd vhci_hcd.0: Device attached [ 184.664912][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.260'. [ 184.677578][ T1038] usb 42-1: SetAddress Request (16) to port 0 [ 184.680310][ T1038] usb 42-1: new SuperSpeed USB device number 16 using vhci_hcd [ 184.942624][ T7363] vhci_hcd: connection reset by peer [ 184.945037][ T46] vhci_hcd vhci_hcd.2: stop threads [ 184.946768][ T46] vhci_hcd vhci_hcd.2: release socket [ 184.950286][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 186.466263][ T7404] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 187.366634][ T7416] fuse: Unknown parameter 'user_id00000000000000000000' [ 187.513005][ T7409] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 187.929400][ T7410] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 188.024522][ T5747] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 188.609285][ T7420] binder: 7418:7420 ioctl c0306201 0 returned -14 [ 188.612904][ T7419] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.621725][ T7419] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.625793][ T7419] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.634772][ T7419] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.888995][ T5747] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.891535][ T5747] usb 8-1: config 0 has no interface number 0 [ 188.893445][ T5747] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 188.896745][ T5747] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 188.900182][ T5747] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 188.902954][ T5747] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.907062][ T5747] usb 8-1: config 0 descriptor?? [ 188.909376][ T7416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.917414][ T5747] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 188.974953][ T7428] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 188.976997][ T7428] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 188.981566][ T7428] vhci_hcd vhci_hcd.0: Device attached [ 189.142280][ T1351] usb 8-1: USB disconnect, device number 7 [ 189.144171][ C0] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 189.317281][ T7437] trusted_key: encrypted_key: insufficient parameters specified [ 189.326748][ T7437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.268'. [ 189.336407][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 189.448479][ T7441] netlink: 'syz.3.265': attribute type 11 has an invalid length. [ 189.615373][ T7430] vhci_hcd: connection closed [ 189.615615][ T72] vhci_hcd vhci_hcd.2: stop threads [ 189.621123][ T72] vhci_hcd vhci_hcd.2: release socket [ 189.627741][ T72] vhci_hcd vhci_hcd.2: disconnect device [ 189.759794][ T1038] usb 42-1: device descriptor read/8, error -110 [ 190.179496][ T1038] usb usb42-port1: attempt power cycle [ 190.332442][ T7451] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 190.334470][ T7451] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 190.340774][ T7451] vhci_hcd vhci_hcd.0: Device attached [ 190.635119][ T7451] rdma_rxe: rxe_newlink: failed to add wg2 [ 190.637779][ T5758] Bluetooth: hci3: command 0x0406 tx timeout [ 190.637810][ T5758] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.637834][ T5758] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.638005][ T5754] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.852189][ T1038] usb usb42-port1: unable to enumerate USB device [ 190.855018][ T5747] usb 38-1: SetAddress Request (6) to port 0 [ 190.857931][ T5747] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 191.300318][ T7478] lo speed is unknown, defaulting to 1000 [ 191.308239][ T7478] lo speed is unknown, defaulting to 1000 [ 191.579456][ T6251] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 191.747609][ T6251] usb 6-1: Using ep0 maxpacket: 32 [ 191.754016][ T6251] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.762576][ T6251] usb 6-1: config 0 has no interface number 0 [ 191.772990][ T6251] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 191.775908][ T6251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.781873][ T6251] usb 6-1: Product: syz [ 191.783297][ T6251] usb 6-1: Manufacturer: syz [ 191.784829][ T6251] usb 6-1: SerialNumber: syz [ 191.835202][ T6251] usb 6-1: config 0 descriptor?? [ 191.866523][ T6251] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 191.870388][ T6251] usb 6-1: selecting invalid altsetting 1 [ 191.872332][ T6251] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 191.903020][ T6251] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 191.910056][ T6251] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 191.913847][ T6251] usb 6-1: media controller created [ 192.273060][ T6251] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.337964][ T7498] netlink: 'syz.2.274': attribute type 4 has an invalid length. [ 194.059671][ T7503] binder: 7500:7503 ioctl c0306201 0 returned -14 [ 194.071068][ T7501] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.074142][ T7501] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 194.076914][ T7501] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.081986][ T7501] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.142587][ T7478] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 194.150106][ T7452] vhci_hcd: connection reset by peer [ 194.161060][ T12] vhci_hcd vhci_hcd.0: stop threads [ 194.164104][ T12] vhci_hcd vhci_hcd.0: release socket [ 194.166465][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 194.552278][ T7508] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 194.554849][ T7508] netlink: 224 bytes leftover after parsing attributes in process `syz.3.277'. [ 194.559375][ T50] IPVS: starting estimator thread 0... [ 194.580413][ T6251] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 194.583472][ T6251] zl10353_read_register: readreg error (reg=127, ret==-71) [ 194.588066][ T6251] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 195.117527][ T7509] IPVS: using max 43 ests per chain, 103200 per kthread [ 195.125001][ T6251] usb 6-1: USB disconnect, device number 6 [ 195.256541][ T7513] fuse: Bad value for 'fd' [ 195.929865][ T5747] usb 38-1: device descriptor read/8, error -110 [ 196.087491][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.087950][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.090003][ T5754] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.160462][ T5754] Bluetooth: hci3: command 0x0406 tx timeout [ 196.456804][ T5747] usb usb38-port1: attempt power cycle [ 196.584644][ T7542] fuse: Unknown parameter 'user_id00000000000000000000' [ 196.898402][ T842] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 197.063941][ T842] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.085445][ T842] usb 5-1: config 0 has no interface number 0 [ 197.106253][ T842] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 197.112527][ T5747] usb usb38-port1: unable to enumerate USB device [ 197.137890][ T842] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 197.155752][ T842] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 197.169688][ T842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.232027][ T842] usb 5-1: config 0 descriptor?? [ 197.249889][ T7542] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.370067][ T842] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 197.508092][ T842] usb 5-1: USB disconnect, device number 6 [ 197.696264][ T7542] warning: `syz.0.282' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 197.719793][ T7542] netlink: 'syz.0.282': attribute type 11 has an invalid length. [ 198.813875][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.325998][ T7560] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 199.328739][ T7560] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 199.334089][ T7560] vhci_hcd vhci_hcd.0: Device attached [ 199.417513][ T7563] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 199.417540][ T7563] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 199.417892][ T7563] vhci_hcd vhci_hcd.0: Device attached [ 199.418614][ T7564] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 199.418637][ T7564] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 199.419753][ T7564] vhci_hcd vhci_hcd.0: Device attached [ 199.631035][ T5747] usb 40-1: SetAddress Request (22) to port 0 [ 199.631085][ T5747] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 199.642359][ T7571] rdma_rxe: rxe_newlink: failed to add wg2 [ 199.717656][ T50] usb 44-1: SetAddress Request (11) to port 0 [ 199.729226][ T5847] usb 42-1: SetAddress Request (20) to port 0 [ 199.731176][ T5847] usb 42-1: new SuperSpeed USB device number 20 using vhci_hcd [ 199.744127][ T50] usb 44-1: new SuperSpeed USB device number 11 using vhci_hcd [ 199.853886][ T7561] vhci_hcd: connection reset by peer [ 199.859635][ T72] vhci_hcd vhci_hcd.1: stop threads [ 199.861928][ T72] vhci_hcd vhci_hcd.1: release socket [ 199.864191][ T72] vhci_hcd vhci_hcd.1: disconnect device [ 200.096858][ T7567] vhci_hcd: connection reset by peer [ 200.097896][ T7565] vhci_hcd: connection reset by peer [ 200.110261][ T1248] vhci_hcd vhci_hcd.3: stop threads [ 200.113274][ T1248] vhci_hcd vhci_hcd.3: release socket [ 200.116498][ T1248] vhci_hcd vhci_hcd.3: disconnect device [ 200.122302][ T1248] vhci_hcd vhci_hcd.2: stop threads [ 200.125460][ T1248] vhci_hcd vhci_hcd.2: release socket [ 200.134469][ T1248] vhci_hcd vhci_hcd.2: disconnect device [ 200.898266][ T6251] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 201.098560][ T6251] usb 5-1: Using ep0 maxpacket: 32 [ 201.113293][ T6251] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 201.119887][ T6251] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 201.124900][ T6251] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 201.137696][ T6251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.149434][ T6251] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.160656][ T6251] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.175896][ T6251] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 201.190507][ T6251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.266592][ T6251] usb 5-1: config 0 descriptor?? [ 201.611391][ T7591] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 201.611419][ T7591] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 201.611786][ T7591] vhci_hcd vhci_hcd.0: Device attached [ 201.683489][ T6251] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 201.708578][ T7591] rdma_rxe: rxe_newlink: failed to add wg2 [ 201.891973][ T7602] trusted_key: encrypted_key: insufficient parameters specified [ 201.912245][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.291'. [ 201.924173][ T7595] vhci_hcd: connection closed [ 201.924502][ T1163] vhci_hcd vhci_hcd.2: stop threads [ 201.928145][ T1163] vhci_hcd vhci_hcd.2: release socket [ 201.929868][ T1163] vhci_hcd vhci_hcd.2: disconnect device [ 201.931929][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 203.292261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 203.324141][ T7613] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 203.328085][ T7613] overlayfs: overlapping lowerdir path [ 204.432405][ T7604] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.435886][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.979844][ T5747] usb 40-1: device descriptor read/8, error -110 [ 204.983107][ T50] usb 44-1: device descriptor read/8, error -110 [ 204.986350][ T5847] usb 42-1: device descriptor read/8, error -110 [ 205.658342][ T5847] usb usb42-port1: attempt power cycle [ 205.661580][ T5747] usb usb40-port1: attempt power cycle [ 205.666942][ T50] usb usb44-port1: attempt power cycle [ 205.692648][ T5825] usb 5-1: USB disconnect, device number 7 [ 205.714191][ T7604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.719494][ T7604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.784416][ T5825] usblp0: removed [ 206.271719][ T50] usb usb44-port1: unable to enumerate USB device [ 206.707437][ T1351] lo speed is unknown, defaulting to 1000 [ 206.713228][ T1351] syz2: Port: 1 Link DOWN [ 206.819159][ T5747] usb usb40-port1: unable to enumerate USB device [ 206.821893][ T5847] usb usb42-port1: unable to enumerate USB device [ 206.835687][ T72] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.892304][ T72] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.896500][ T72] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.909319][ T72] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.939160][ T7640] binder: 7638:7640 ioctl c0306201 80000040 returned -22 [ 206.939212][ T7639] binder: 7637:7639 ioctl c0306201 80000040 returned -22 [ 208.244373][ T7658] IPVS: Error connecting to the multicast addr [ 209.140474][ T6251] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 209.155088][ T7679] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 209.157154][ T7679] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 209.160192][ T7679] vhci_hcd vhci_hcd.0: Device attached [ 209.307374][ T6251] usb 8-1: Using ep0 maxpacket: 16 [ 209.310526][ T6251] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.314028][ T6251] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.318647][ T6251] usb 8-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 209.322499][ T6251] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.331019][ T6251] usb 8-1: config 0 descriptor?? [ 209.437549][ T50] usb 40-1: SetAddress Request (26) to port 0 [ 209.440909][ T50] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 209.543478][ T7671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.548391][ T7671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.757928][ T6251] usbhid 8-1:0.0: can't add hid device: -71 [ 209.759853][ T6251] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 209.767207][ T7680] vhci_hcd: connection reset by peer [ 209.769666][ T172] vhci_hcd vhci_hcd.1: stop threads [ 209.771405][ T172] vhci_hcd vhci_hcd.1: release socket [ 209.773163][ T172] vhci_hcd vhci_hcd.1: disconnect device [ 210.051885][ T7696] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 210.053953][ T7696] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 210.056577][ T7696] vhci_hcd vhci_hcd.0: Device attached [ 210.358257][ T5747] usb 42-1: SetAddress Request (24) to port 0 [ 210.360218][ T5747] usb 42-1: new SuperSpeed USB device number 24 using vhci_hcd [ 210.865943][ T7697] vhci_hcd: connection reset by peer [ 210.868264][ T172] vhci_hcd vhci_hcd.2: stop threads [ 210.872269][ T172] vhci_hcd vhci_hcd.2: release socket [ 210.874454][ T172] vhci_hcd vhci_hcd.2: disconnect device [ 211.207584][ T6251] usb 8-1: USB disconnect, device number 8 [ 211.583372][ T7714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.310'. [ 211.587950][ T7714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.310'. [ 211.867446][ T1040] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 211.885358][ T7721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.018947][ T1040] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 212.021608][ T1040] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.025048][ T1040] usb 7-1: config 0 has no interfaces? [ 212.027821][ T1040] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 212.031234][ T1040] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.040122][ T1040] usb 7-1: config 0 descriptor?? [ 213.477429][ T7715] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 213.480066][ T7715] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 213.483795][ T7715] vhci_hcd vhci_hcd.0: Device attached [ 213.518625][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 213.575942][ T7721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.631899][ T7721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.646201][ T7723] vhci_hcd: connection closed [ 213.646727][ T72] vhci_hcd vhci_hcd.0: stop threads [ 213.651172][ T72] vhci_hcd vhci_hcd.0: release socket [ 213.653679][ T72] vhci_hcd vhci_hcd.0: disconnect device [ 213.679298][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.682614][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.685502][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.689817][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.692774][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.696585][ T9] usb 6-1: config 0 descriptor?? [ 213.744255][ T7721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.846711][ T46] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.857176][ T46] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.867707][ T46] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.879097][ T46] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.976488][ T7727] binder: 7726:7727 ioctl c0306201 80000040 returned -22 [ 214.128292][ T9] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 214.306779][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 214.480909][ T50] usb 40-1: device descriptor read/8, error -110 [ 214.484899][ T9] usb 6-1: USB disconnect, device number 7 [ 214.528889][ T1040] usb 7-1: string descriptor 0 read error: -71 [ 214.535281][ T1040] usb 7-1: USB disconnect, device number 7 [ 214.814638][ T7740] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 214.817185][ T7740] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 214.820748][ T7740] vhci_hcd vhci_hcd.0: Device attached [ 214.971304][ T50] usb usb40-port1: attempt power cycle [ 215.097455][ T5845] usb 38-1: SetAddress Request (11) to port 0 [ 215.099457][ T5845] usb 38-1: new SuperSpeed USB device number 11 using vhci_hcd [ 215.424719][ T7741] vhci_hcd: connection reset by peer [ 215.427958][ T46] vhci_hcd vhci_hcd.0: stop threads [ 215.429637][ T46] vhci_hcd vhci_hcd.0: release socket [ 215.431502][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 215.437708][ T5747] usb 42-1: device descriptor read/8, error -110 [ 215.507454][ T7750] Mount JFS Failure: -5 [ 215.687388][ T29] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 216.028468][ T50] usb usb40-port1: unable to enumerate USB device [ 216.425748][ T5747] usb usb42-port1: attempt power cycle [ 216.444475][ T7754] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 216.444493][ T7754] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 216.444929][ T7754] vhci_hcd vhci_hcd.0: Device attached [ 216.524605][ T7754] rdma_rxe: rxe_newlink: failed to add wg2 [ 216.567517][ T5747] usb 42-1: SetAddress Request (26) to port 0 [ 216.577508][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 216.585370][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 216.592746][ T5747] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 216.628919][ T29] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 216.647546][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 216.655901][ T29] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.670641][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 148, changing to 11 [ 216.680407][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 216.696458][ T29] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 216.707523][ T29] usb 6-1: config 168 interface 0 has no altsetting 0 [ 216.714208][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 216.726772][ T29] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 216.737563][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 216.742501][ T7756] vhci_hcd: connection reset by peer [ 216.747893][ T72] vhci_hcd vhci_hcd.2: stop threads [ 216.749569][ T72] vhci_hcd vhci_hcd.2: release socket [ 216.753227][ T29] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.753357][ T72] vhci_hcd vhci_hcd.2: disconnect device [ 216.762713][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 148, changing to 11 [ 216.769329][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 216.773152][ T29] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 216.777210][ T29] usb 6-1: config 168 interface 0 has no altsetting 0 [ 216.781403][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 216.784425][ T29] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 216.787965][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 216.791431][ T29] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.795388][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 148, changing to 11 [ 216.799725][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 216.803405][ T29] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 216.807838][ T29] usb 6-1: config 168 interface 0 has no altsetting 0 [ 216.812395][ T29] usb 6-1: string descriptor 0 read error: -22 [ 216.814394][ T29] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 216.817444][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.826126][ T29] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 216.869454][ T7760] trusted_key: encrypted_key: key user:syz not found [ 217.084269][ T7763] binder: 7761:7763 ioctl c0306201 0 returned -14 [ 217.093891][ T7762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 217.105554][ T7762] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 217.114904][ T7762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 217.121634][ T7762] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 217.557647][ T29] usb 6-1: USB disconnect, device number 8 [ 217.577546][ T7770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.646550][ T7771] 9p: Bad value for 'rfdno' [ 218.158418][ T7771] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 218.518726][ T7747] ip6t_rpfilter: unknown options [ 218.637559][ T34] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 218.704810][ T7784] binder: 7783:7784 ioctl c0306201 80000040 returned -22 [ 218.866596][ T7785] lo speed is unknown, defaulting to 1000 [ 218.871512][ T7785] lo speed is unknown, defaulting to 1000 [ 219.117542][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 219.118292][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout [ 219.122094][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 219.127500][ T1477] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 219.197453][ T5750] Bluetooth: hci3: command 0x0406 tx timeout [ 219.297619][ T1477] usb 8-1: Using ep0 maxpacket: 32 [ 219.302973][ T1477] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.306913][ T1477] usb 8-1: config 0 has no interface number 0 [ 219.314510][ T1477] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 219.319072][ T1477] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.321709][ T1477] usb 8-1: Product: syz [ 219.323706][ T1477] usb 8-1: Manufacturer: syz [ 219.325831][ T1477] usb 8-1: SerialNumber: syz [ 219.407451][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 219.407935][ T1477] usb 8-1: config 0 descriptor?? [ 219.450152][ T1477] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 219.462792][ T1477] usb 8-1: selecting invalid altsetting 1 [ 219.471182][ T1477] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 219.614809][ T1477] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 219.631497][ T1477] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 219.639130][ T1477] usb 8-1: media controller created [ 219.690137][ T1477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.873537][ T7805] comedi comedi3: pcl818: I/O base address or length out of range [ 219.953500][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.157792][ T5845] usb 38-1: device descriptor read/8, error -110 [ 220.335012][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.383455][ T7813] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 220.386194][ T7813] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 220.390583][ T7813] vhci_hcd vhci_hcd.0: Device attached [ 220.552708][ T5845] usb usb38-port1: attempt power cycle [ 220.657521][ T5847] usb 40-1: SetAddress Request (30) to port 0 [ 220.659682][ T5847] usb 40-1: new SuperSpeed USB device number 30 using vhci_hcd [ 220.811170][ T1477] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 220.835495][ T1477] zl10353_read_register: readreg error (reg=127, ret==-110) [ 220.849197][ T7785] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 220.914405][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.014802][ T7814] vhci_hcd: connection reset by peer [ 221.025795][ T46] vhci_hcd vhci_hcd.1: stop threads [ 221.044950][ T46] vhci_hcd vhci_hcd.1: release socket [ 221.065310][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 221.109677][ T5845] usb usb38-port1: unable to enumerate USB device [ 221.171023][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.174860][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.182794][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.395548][ T34] usb 7-1: GET_CAPABILITIES returned 0 [ 221.399701][ T34] usbtmc 7-1:16.0: can't read capabilities [ 221.599217][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.609885][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.621774][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.748190][ T5747] usb 42-1: device descriptor read/8, error -110 [ 221.890493][ T7850] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 221.892514][ T7850] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 221.898940][ T7850] vhci_hcd vhci_hcd.0: Device attached [ 222.139160][ T5747] usb usb42-port1: unable to enumerate USB device [ 222.276094][ T1477] usb 8-1: USB disconnect, device number 9 [ 222.457438][ T7877] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 222.460090][ T7877] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 222.473355][ T7877] vhci_hcd vhci_hcd.0: Device attached [ 222.595897][ T7851] vhci_hcd: connection closed [ 222.596475][ T72] vhci_hcd vhci_hcd.1: stop threads [ 222.599813][ T72] vhci_hcd vhci_hcd.1: release socket [ 222.601468][ T72] vhci_hcd vhci_hcd.1: disconnect device [ 222.760525][ T5747] usb 38-1: SetAddress Request (15) to port 0 [ 222.763074][ T5747] usb 38-1: new SuperSpeed USB device number 15 using vhci_hcd [ 222.853982][ T7899] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 222.856127][ T7899] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 222.878965][ T7899] vhci_hcd vhci_hcd.0: Device attached [ 222.939475][ T7899] rdma_rxe: rxe_newlink: failed to add wg2 [ 222.943000][ T1477] usb 7-1: USB disconnect, device number 8 [ 223.039961][ T7879] vhci_hcd: connection reset by peer [ 223.041919][ T46] vhci_hcd vhci_hcd.0: stop threads [ 223.044281][ T46] vhci_hcd vhci_hcd.0: release socket [ 223.046698][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 223.158431][ T29] usb 44-1: SetAddress Request (15) to port 0 [ 223.160386][ T29] usb 44-1: new SuperSpeed USB device number 15 using vhci_hcd [ 223.172115][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.333'. [ 223.472553][ T7900] vhci_hcd: connection reset by peer [ 223.475631][ T12] vhci_hcd vhci_hcd.3: stop threads [ 223.477560][ T12] vhci_hcd vhci_hcd.3: release socket [ 223.479647][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 223.567157][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 223.631971][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 223.697043][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 224.235918][ T40] audit: type=1326 audit(1781182458.217:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 224.247858][ T40] audit: type=1326 audit(1781182458.217:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 224.262496][ T40] audit: type=1326 audit(1781182458.227:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 224.269453][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 224.292794][ T7926] input: syz1 as /devices/virtual/input/input14 [ 224.366094][ T40] audit: type=1326 audit(1781182458.347:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 224.374935][ T40] audit: type=1326 audit(1781182458.347:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.1.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f7c code=0x7ffc0000 [ 224.449185][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 224.473154][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 224.476724][ T9] usb 5-1: config 179 has no interface number 0 [ 224.479731][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 224.484351][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 224.496402][ T7928] openvswitch: netlink: Flow actions attr not present in new flow. [ 224.504013][ T7928] exFAT-fs (nbd2): unable to read boot sector [ 224.505942][ T7928] exFAT-fs (nbd2): failed to read boot sector [ 224.507952][ T7928] exFAT-fs (nbd2): failed to recognize exfat type [ 224.511587][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 224.516139][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 224.520840][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 224.526372][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 224.529993][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.538970][ T7919] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.147375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 225.467008][ T7932] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 225.469756][ T7932] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 225.482960][ T7932] vhci_hcd vhci_hcd.0: Device attached [ 225.757581][ T5847] usb 40-1: device descriptor read/8, error -110 [ 225.798330][ T7933] vhci_hcd: connection closed [ 225.799768][ T172] vhci_hcd vhci_hcd.3: stop threads [ 225.805196][ T172] vhci_hcd vhci_hcd.3: release socket [ 225.807813][ T172] vhci_hcd vhci_hcd.3: disconnect device [ 225.914878][ T7919] lo speed is unknown, defaulting to 1000 [ 225.927609][ T7919] lo speed is unknown, defaulting to 1000 [ 226.150026][ T5847] usb usb40-port1: attempt power cycle [ 226.444875][ T7946] siw: device registration error -23 [ 227.529640][ T1477] usb 5-1: USB disconnect, device number 8 [ 227.529667][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 227.533976][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 227.536821][ C0] ================================================================== [ 227.539257][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 227.541604][ C0] Read of size 4 at addr ffff888020de485c by task syz.1.340/7945 [ 227.544484][ C0] [ 227.545688][ C0] CPU: 0 UID: 0 PID: 7945 Comm: syz.1.340 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.545705][ C0] Tainted: [L]=SOFTLOCKUP [ 227.545709][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.545716][ C0] Call Trace: [ 227.545720][ C0] [ 227.545725][ C0] dump_stack_lvl+0x100/0x190 [ 227.545745][ C0] print_report+0x13d/0x4b0 [ 227.545765][ C0] ? __virt_addr_valid+0x239/0x430 [ 227.545782][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 227.545793][ C0] kasan_report+0xdf/0x1d0 [ 227.545808][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 227.545820][ C0] do_raw_spin_lock+0x23b/0x260 [ 227.545832][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 227.545843][ C0] ? kcov_remote_stop+0x201/0x540 [ 227.545857][ C0] ? kcov_remote_stop+0x201/0x540 [ 227.545871][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 227.545885][ C0] ? __wake_up+0x1c/0x60 [ 227.545899][ C0] __wake_up+0x1c/0x60 [ 227.545913][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 227.545931][ C0] __usb_hcd_giveback_urb+0x3d6/0x610 [ 227.545946][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 227.545961][ C0] dummy_timer+0xda1/0x36c0 [ 227.545975][ C0] ? find_held_lock+0x2b/0x80 [ 227.545989][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 227.546003][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 227.546017][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 227.546031][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 227.546042][ C0] ? rcu_is_watching+0x12/0xc0 [ 227.546054][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 227.546068][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 227.546079][ C0] __hrtimer_run_queues+0x470/0xa00 [ 227.546094][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 227.546106][ C0] handle_softirqs+0x1ea/0xa00 [ 227.546120][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 227.546133][ C0] ? _raw_spin_unlock+0x28/0x50 [ 227.546145][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 227.546159][ C0] __irq_exit_rcu+0x162/0x210 [ 227.546171][ C0] irq_exit_rcu+0x9/0x30 [ 227.546183][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 227.546198][ C0] [ 227.546202][ C0] [ 227.546205][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.546217][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x54/0x70 [ 227.546233][ C0] Code: e9 11 2f 82 09 8b 82 ec 16 00 00 85 c0 74 f1 8b 82 c8 16 00 00 83 f8 02 75 e6 48 8b 8a d0 16 00 00 8b 92 cc 16 00 00 48 8b 01 <48> 83 c0 01 48 39 d0 73 cd 48 89 01 48 89 34 c1 e9 d7 2e 82 09 0f [ 227.546263][ C0] RSP: 0018:ffffc9000e8cf988 EFLAGS: 00000246 [ 227.546279][ C0] RAX: 000000000007ffff RBX: 0000000000000000 RCX: ffffc9000d471000 [ 227.546289][ C0] RDX: 0000000000080000 RSI: ffffffff8951c43e RDI: ffff888060b30000 [ 227.546296][ C0] RBP: ffffc9000e8cfd30 R08: 0000000000000005 R09: 0000000000000000 [ 227.546303][ C0] R10: 0000000080000002 R11: 0000000000000000 R12: 0000000000000000 [ 227.546309][ C0] R13: 0000000080613500 R14: ffffc9000e8cfd74 R15: 0000000080000002 [ 227.546318][ C0] ? ____sys_recvmsg+0x3ae/0x640 [ 227.546333][ C0] ____sys_recvmsg+0x3ae/0x640 [ 227.546347][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 227.546364][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 227.546379][ C0] ? rcu_is_watching+0x12/0xc0 [ 227.546391][ C0] ? ___sys_recvmsg+0x177/0x1a0 [ 227.546404][ C0] ? kfree+0x1dd/0x6c0 [ 227.546418][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 227.546433][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 227.546447][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 227.546465][ C0] ? __pfx___might_resched+0x10/0x10 [ 227.546475][ C0] ? do_recvmmsg+0x535/0x760 [ 227.546490][ C0] do_recvmmsg+0x563/0x760 [ 227.546504][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 227.546519][ C0] ? sched_setaffinity+0x2d7/0x400 [ 227.546535][ C0] ? sched_setaffinity+0xe0/0x400 [ 227.546549][ C0] ? __pfx_sched_setaffinity+0x10/0x10 [ 227.546562][ C0] ? fd_install+0x24f/0x580 [ 227.546575][ C0] __sys_recvmmsg+0x21f/0x270 [ 227.546586][ C0] ? __pfx___sys_recvmmsg+0x10/0x10 [ 227.546598][ C0] ? __pfx___ia32_compat_sys_sched_setaffinity+0x10/0x10 [ 227.546617][ C0] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 227.546630][ C0] ? __do_fast_syscall_32+0x98/0x970 [ 227.546646][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 227.546660][ C0] __do_fast_syscall_32+0xe7/0x970 [ 227.546676][ C0] do_fast_syscall_32+0x32/0x70 [ 227.546692][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.546705][ C0] RIP: 0023:0xf7f24f7c [ 227.546714][ C0] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 227.546724][ C0] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 227.546734][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 227.546740][ C0] RDX: 00000000080002c1 RSI: 0000000000000002 RDI: 0000000000000000 [ 227.546747][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.546757][ C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.546763][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.546773][ C0] [ 227.546777][ C0] [ 227.699144][ C0] Allocated by task 9: [ 227.700388][ C0] kasan_save_stack+0x30/0x50 [ 227.701837][ C0] kasan_save_track+0x14/0x30 [ 227.703304][ C0] __kasan_kmalloc+0xaa/0xb0 [ 227.704737][ C0] xpad_probe+0x28e/0x1f60 [ 227.706005][ C0] usb_probe_interface+0x303/0x8f0 [ 227.707613][ C0] really_probe+0x241/0xa60 [ 227.709004][ C0] __driver_probe_device+0x22e/0x480 [ 227.710608][ C0] driver_probe_device+0x4c/0x1b0 [ 227.712142][ C0] __device_attach_driver+0x1df/0x340 [ 227.713773][ C0] bus_for_each_drv+0x159/0x1e0 [ 227.715282][ C0] __device_attach+0x1e4/0x4d0 [ 227.716766][ C0] device_initial_probe+0xaf/0xd0 [ 227.718316][ C0] bus_probe_device+0x64/0x160 [ 227.719769][ C0] device_add+0x1210/0x1950 [ 227.721143][ C0] usb_set_configuration+0xd97/0x1c60 [ 227.722765][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 227.724380][ C0] usb_probe_device+0xef/0x400 [ 227.725835][ C0] really_probe+0x241/0xa60 [ 227.727248][ C0] __driver_probe_device+0x22e/0x480 [ 227.728898][ C0] driver_probe_device+0x4c/0x1b0 [ 227.730413][ C0] __device_attach_driver+0x1df/0x340 [ 227.732041][ C0] bus_for_each_drv+0x159/0x1e0 [ 227.733520][ C0] __device_attach+0x1e4/0x4d0 [ 227.734989][ C0] device_initial_probe+0xaf/0xd0 [ 227.736584][ C0] bus_probe_device+0x64/0x160 [ 227.738070][ C0] device_add+0x1210/0x1950 [ 227.739458][ C0] usb_new_device.cold+0x685/0x115c [ 227.741031][ C0] hub_event+0x314d/0x4af0 [ 227.742434][ C0] process_one_work+0xa0e/0x1980 [ 227.743944][ C0] worker_thread+0x5ef/0xe50 [ 227.745350][ C0] kthread+0x370/0x450 [ 227.746627][ C0] ret_from_fork+0x72b/0xd50 [ 227.748068][ C0] ret_from_fork_asm+0x1a/0x30 [ 227.749508][ C0] [ 227.750258][ C0] Freed by task 1477: [ 227.751479][ C0] kasan_save_stack+0x30/0x50 [ 227.752922][ C0] kasan_save_track+0x14/0x30 [ 227.754389][ C0] kasan_save_free_info+0x3b/0x70 [ 227.755976][ C0] __kasan_slab_free+0x5f/0x80 [ 227.757499][ C0] kfree+0x223/0x6c0 [ 227.758706][ C0] xpad_disconnect+0x1cf/0x530 [ 227.760168][ C0] usb_unbind_interface+0x1dd/0x9e0 [ 227.761756][ C0] device_remove+0x12a/0x180 [ 227.763200][ C0] device_release_driver_internal+0x44e/0x620 [ 227.765034][ C0] bus_remove_device+0x2bc/0x560 [ 227.766573][ C0] device_del+0x376/0x9b0 [ 227.767926][ C0] usb_disable_device+0x367/0x810 [ 227.769481][ C0] usb_disconnect+0x2e2/0x9a0 [ 227.770921][ C0] hub_event+0x1d0c/0x4af0 [ 227.772274][ C0] process_one_work+0xa0e/0x1980 [ 227.773701][ C0] worker_thread+0x5ef/0xe50 [ 227.775116][ C0] kthread+0x370/0x450 [ 227.776402][ C0] ret_from_fork+0x72b/0xd50 [ 227.777839][ C0] ret_from_fork_asm+0x1a/0x30 [ 227.779319][ C0] [ 227.780064][ C0] The buggy address belongs to the object at ffff888020de4800 [ 227.780064][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 227.784240][ C0] The buggy address is located 92 bytes inside of [ 227.784240][ C0] freed 1024-byte region [ffff888020de4800, ffff888020de4c00) [ 227.788349][ C0] [ 227.789103][ C0] The buggy address belongs to the physical page: [ 227.791021][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888020de2000 pfn:0x20de0 [ 227.794153][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 227.796772][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 227.799328][ C0] page_type: f5(slab) [ 227.800541][ C0] raw: 00fff00000000240 ffff88801b842dc0 ffffea00004bb210 ffffea0000a48e10 [ 227.803171][ C0] raw: ffff888020de2000 000000080010000d 00000000f5000000 0000000000000000 [ 227.805731][ C0] head: 00fff00000000240 ffff88801b842dc0 ffffea00004bb210 ffffea0000a48e10 [ 227.808371][ C0] head: ffff888020de2000 000000080010000d 00000000f5000000 0000000000000000 [ 227.811011][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 227.813640][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 227.816288][ C0] page dumped because: kasan: bad access detected [ 227.818277][ C0] page_owner tracks the page as allocated [ 227.819993][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5920, tgid 5919 (syz.2.8), ts 58691496129, free_ts 58420115515 [ 227.825682][ C0] post_alloc_hook+0xfd/0x120 [ 227.827175][ C0] get_page_from_freelist+0x11a6/0x3410 [ 227.828881][ C0] __alloc_frozen_pages_noprof+0x632/0x2bc0 [ 227.830677][ C0] new_slab+0xa6/0x6c0 [ 227.831927][ C0] ___slab_alloc+0x6d7/0x8b0 [ 227.833378][ C0] __kmalloc_node_noprof+0x45f/0x850 [ 227.834997][ C0] alloc_slab_obj_exts+0xae/0x270 [ 227.836605][ C0] __memcg_slab_post_alloc_hook+0x3c2/0xff0 [ 227.838429][ C0] __kmalloc_noprof+0x662/0x850 [ 227.839916][ C0] nla_strdup+0xc3/0x150 [ 227.841209][ C0] nf_tables_newtable+0xd8a/0x19f0 [ 227.842778][ C0] nfnetlink_rcv_batch+0x1410/0x2880 [ 227.844376][ C0] nfnetlink_rcv+0x3bd/0x440 [ 227.845786][ C0] netlink_unicast+0x585/0x850 [ 227.847267][ C0] netlink_sendmsg+0x8b0/0xda0 [ 227.848776][ C0] ____sys_sendmsg+0x9e1/0xb70 [ 227.850233][ C0] page last free pid 9 tgid 9 stack trace: [ 227.852006][ C0] __free_frozen_pages+0x794/0x10a0 [ 227.853583][ C0] qlist_free_all+0x47/0xf0 [ 227.854932][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 227.856584][ C0] __kasan_slab_alloc+0x69/0x90 [ 227.858051][ C0] __kmalloc_cache_noprof+0x243/0x6f0 [ 227.859651][ C0] nsim_fib_event_work+0x157b/0x63b0 [ 227.861256][ C0] process_one_work+0xa0e/0x1980 [ 227.862801][ C0] worker_thread+0x5ef/0xe50 [ 227.864208][ C0] kthread+0x370/0x450 [ 227.865452][ C0] ret_from_fork+0x72b/0xd50 [ 227.866890][ C0] ret_from_fork_asm+0x1a/0x30 [ 227.868420][ C0] [ 227.869163][ C0] Memory state around the buggy address: [ 227.870865][ C0] ffff888020de4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 227.873259][ C0] ffff888020de4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 227.875703][ C0] >ffff888020de4800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.878157][ C0] ^ [ 227.880217][ C0] ffff888020de4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.882621][ C0] ffff888020de4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.885014][ C0] ================================================================== [ 227.887472][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 227.889677][ C0] CPU: 0 UID: 0 PID: 7945 Comm: syz.1.340 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.892871][ C0] Tainted: [L]=SOFTLOCKUP [ 227.894207][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.897292][ C0] Call Trace: [ 227.898363][ C0] [ 227.899256][ C0] dump_stack_lvl+0x100/0x190 [ 227.900691][ C0] vpanic+0x552/0x970 [ 227.901933][ C0] ? __pfx_vpanic+0x10/0x10 [ 227.903453][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 227.904982][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 227.906540][ C0] panic+0xd1/0xe0 [ 227.907718][ C0] ? __pfx_panic+0x10/0x10 [ 227.909077][ C0] ? end_report.part.0+0x23/0x90 [ 227.910595][ C0] ? rcu_is_watching+0x12/0xc0 [ 227.912090][ C0] ? end_report.part.0+0x23/0x90 [ 227.913655][ C0] ? check_panic_on_warn+0x1f/0x90 [ 227.915313][ C0] check_panic_on_warn.cold+0x19/0x34 [ 227.916994][ C0] end_report.part.0+0x3a/0x90 [ 227.918491][ C0] kasan_report.cold+0xe/0x18 [ 227.919932][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 227.921454][ C0] do_raw_spin_lock+0x23b/0x260 [ 227.923109][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 227.924765][ C0] ? kcov_remote_stop+0x201/0x540 [ 227.926347][ C0] ? kcov_remote_stop+0x201/0x540 [ 227.927919][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 227.929536][ C0] ? __wake_up+0x1c/0x60 [ 227.930847][ C0] __wake_up+0x1c/0x60 [ 227.932097][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 227.933757][ C0] __usb_hcd_giveback_urb+0x3d6/0x610 [ 227.935390][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 227.937016][ C0] dummy_timer+0xda1/0x36c0 [ 227.938450][ C0] ? find_held_lock+0x2b/0x80 [ 227.939917][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 227.941687][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 227.943424][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 227.945238][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 227.946779][ C0] ? rcu_is_watching+0x12/0xc0 [ 227.948263][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 227.950047][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 227.951566][ C0] __hrtimer_run_queues+0x470/0xa00 [ 227.953149][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 227.954720][ C0] handle_softirqs+0x1ea/0xa00 [ 227.956236][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 227.957868][ C0] ? _raw_spin_unlock+0x28/0x50 [ 227.959354][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 227.961046][ C0] __irq_exit_rcu+0x162/0x210 [ 227.962492][ C0] irq_exit_rcu+0x9/0x30 [ 227.963785][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 227.965486][ C0] [ 227.966447][ C0] [ 227.967379][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.969235][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x54/0x70 [ 227.971102][ C0] Code: e9 11 2f 82 09 8b 82 ec 16 00 00 85 c0 74 f1 8b 82 c8 16 00 00 83 f8 02 75 e6 48 8b 8a d0 16 00 00 8b 92 cc 16 00 00 48 8b 01 <48> 83 c0 01 48 39 d0 73 cd 48 89 01 48 89 34 c1 e9 d7 2e 82 09 0f [ 227.976893][ C0] RSP: 0018:ffffc9000e8cf988 EFLAGS: 00000246 [ 227.978761][ C0] RAX: 000000000007ffff RBX: 0000000000000000 RCX: ffffc9000d471000 [ 227.981120][ C0] RDX: 0000000000080000 RSI: ffffffff8951c43e RDI: ffff888060b30000 [ 227.983518][ C0] RBP: ffffc9000e8cfd30 R08: 0000000000000005 R09: 0000000000000000 [ 227.985896][ C0] R10: 0000000080000002 R11: 0000000000000000 R12: 0000000000000000 [ 227.988325][ C0] R13: 0000000080613500 R14: ffffc9000e8cfd74 R15: 0000000080000002 [ 227.990724][ C0] ? ____sys_recvmsg+0x3ae/0x640 [ 227.992243][ C0] ____sys_recvmsg+0x3ae/0x640 [ 227.993709][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 227.995437][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 227.997056][ C0] ? rcu_is_watching+0x12/0xc0 [ 227.998543][ C0] ? ___sys_recvmsg+0x177/0x1a0 [ 228.000021][ C0] ? kfree+0x1dd/0x6c0 [ 228.001274][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 228.002859][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 228.004296][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 228.005889][ C0] ? __pfx___might_resched+0x10/0x10 [ 228.007556][ C0] ? do_recvmmsg+0x535/0x760 [ 228.008996][ C0] do_recvmmsg+0x563/0x760 [ 228.010370][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 228.011875][ C0] ? sched_setaffinity+0x2d7/0x400 [ 228.013473][ C0] ? sched_setaffinity+0xe0/0x400 [ 228.015023][ C0] ? __pfx_sched_setaffinity+0x10/0x10 [ 228.016722][ C0] ? fd_install+0x24f/0x580 [ 228.018152][ C0] __sys_recvmmsg+0x21f/0x270 [ 228.019609][ C0] ? __pfx___sys_recvmmsg+0x10/0x10 [ 228.021179][ C0] ? __pfx___ia32_compat_sys_sched_setaffinity+0x10/0x10 [ 228.023498][ C0] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 228.025410][ C0] ? __do_fast_syscall_32+0x98/0x970 [ 228.027160][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 228.028758][ C0] __do_fast_syscall_32+0xe7/0x970 [ 228.030347][ C0] do_fast_syscall_32+0x32/0x70 [ 228.031849][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.033770][ C0] RIP: 0023:0xf7f24f7c [ 228.035078][ C0] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 228.040885][ C0] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 228.043401][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 228.045774][ C0] RDX: 00000000080002c1 RSI: 0000000000000002 RDI: 0000000000000000 [ 228.048190][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.050573][ C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 228.052958][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.055345][ C0] [ 228.057048][ C0] Kernel Offset: disabled [ 228.058432][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:54:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857c45a5 RDI=ffffffff9b449300 RBP=ffffffff9b4492c0 RSP=ffffc900000074e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000061 R14=0000000000000010 R15=ffffffff857c4540 RIP=ffffffff857c45cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809718e000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53c4ff4 CR3=0000000073a6c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000090cddf RBX=ffff88801c31a540 RCX=ffffffff8b870225 RDX=0000000000000000 RSI=ffffffff8df1ae8f RDI=ffffffff8c1c4680 RBP=0000000000000000 RSP=ffffc9000046fdf0 R8 =0000000000000001 R9 =ffffed10056667b5 R10=ffff88802b333dab R11=0000000000000000 R12=0000000000000001 R13=ffffed10038634a8 R14=0000000000000001 R15=ffffffff90d74850 RIP=ffffffff8b86e87f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809728e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033bfcff8 CR3=0000000073a6c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ca75812c6365ef9 57e4f574c14028f4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2def5ad30c63357f e8e6c7f638deff7d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 348fbbb71fa63176 3573a6b0779105ec ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a42eb8f756a72902 86c9961d779cb882 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001f00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006eae38ac30512 1600000032000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8ab8d768000d65fe 8acba78f0001298c ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000fc49034000000 9200000038000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8000000ba000000 8ac35e577d000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 77f764b73867aaa2 57f03decc28c1d77 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc76b53893c83fe8 357f2d1efedcbae5 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 EAX=f6dda8e8 EBX=f6de1820 ECX=81f39193 EDX=f6de1820 ESI=81f3913e EDI=ffffffff EBP=ffffffff ESP=ffac2fb0 EIP=f705a254 EFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 5837a480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0871b225d0 CR3=000000006b982000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000004daa89 RBX=ffff88801c3ca540 RCX=ffffffff8b870225 RDX=0000000000000000 RSI=ffffffff8df1ae8f RDI=ffffffff8c1c4680 RBP=0000000000000000 RSP=ffffc9000048fdf0 R8 =0000000000000001 R9 =ffffed10056a67b5 R10=ffff88802b533dab R11=0000000000000000 R12=0000000000000003 R13=ffffed10038794a8 R14=0000000000000003 R15=ffffffff90d74850 RIP=ffffffff8b86e87f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809748e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000f000 CR3=0000000028cfb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe45607e8b 00007ffe45607e8b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe45608390 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe45608390 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6320303239373d64 69702064656e6966 6e6f636e753d6a62 7573203539323700 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6320303233373764 6370206465646366 6465636475376062 7573203533323700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3332203a65756c61 76207327726f7470 6972637365642065 6361667265746e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20656874206d6f72 6620746e65726566 666964202c73726f 7470697263736564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20746e696f70646e 6520322073616820 3020676e69747465 73746c6120353620 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656361667265746e 6920393731206769 666e6f63203a312d 3520627375205d39 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000