last executing test programs: 6.909457748s ago: executing program 1 (id=4297): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'], 0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000000c0), 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1335f0a6) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r4, r5, 0x0) r6 = syz_io_uring_setup(0x8ca, &(0x7f0000000200)={0x0, 0x10007278, 0x20, 0x0, 0x18e, 0x0, r5}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r6, 0x26c8, 0x0, 0x1, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x110}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x3, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8000000, 0x0, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x4000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETOWNER(r10, 0x400454cc, 0xee00) 6.847931581s ago: executing program 2 (id=4298): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1335f0a6) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x8ca, &(0x7f0000000200)={0x0, 0x10007278, 0x20, 0x0, 0x18e, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r3, 0x26c8, 0x0, 0x1, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x3, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8000000, 0x0, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x4000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETOWNER(r8, 0x400454cc, 0xee00) 5.852001363s ago: executing program 1 (id=4300): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000001000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x5, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x9, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000d80)={'syz0\x00', {0xb, 0x3, 0x4, 0x9}, 0x3, [0xfffff47e, 0x0, 0x0, 0x3, 0xf, 0x0, 0x7ff, 0xa, 0x5, 0x3, 0x5, 0x40, 0x1, 0x1, 0x100, 0x6, 0x0, 0x7, 0x1, 0xdef, 0x5, 0x7, 0x1ff, 0x5, 0x73c, 0x5, 0x4, 0x7f, 0x1, 0x6, 0xfffffff9, 0x8, 0x6, 0x4, 0x7, 0x7, 0x1939, 0x8, 0x7, 0x2, 0xe12c, 0x8162, 0x8, 0x3, 0x1, 0x41, 0x7, 0x10000, 0x101, 0x8, 0xc000, 0x6, 0x4, 0x4, 0x5, 0x6, 0xfff, 0x0, 0x104, 0xf8ac, 0x2, 0x3, 0x7fffdfff], [0xfffffff8, 0xff, 0x4, 0x8, 0x1e0f, 0xfffffff7, 0x5, 0x7, 0xffffffff, 0x0, 0x6, 0x100, 0x8, 0xe63, 0x1, 0xa3a5, 0x2, 0x2, 0xb9, 0x6, 0x3, 0x43d, 0x6, 0xe, 0x4, 0x3, 0x6, 0x9, 0x1, 0x11, 0x5, 0x4, 0x8, 0x30000, 0x81, 0xfffffe00, 0x0, 0x10001, 0x7ff, 0x9, 0x8, 0xffffa467, 0x5, 0xfffffffb, 0x0, 0xff, 0x9, 0x6aac, 0x0, 0x3, 0x4, 0xfff, 0x200, 0xc1a, 0xe456, 0x100, 0x2, 0x0, 0x1c00000, 0x6, 0x3, 0xfffffff6, 0xffff1068, 0xffff9241], [0x9, 0x611, 0x6, 0xff, 0x101, 0x5, 0x0, 0x2, 0x80000001, 0x96, 0x7, 0x1, 0xfffffffa, 0x1, 0x4, 0xfb, 0x10001, 0x8, 0x8, 0x3, 0x1, 0x100001, 0x1, 0x7, 0x3, 0x40000000, 0x8, 0x3, 0x5, 0x3, 0xb89, 0xf, 0x0, 0x9, 0x3, 0xff, 0x0, 0x2, 0x1ff, 0x4501, 0x9, 0x0, 0x9, 0x7, 0x966, 0x6, 0x10000, 0xf, 0xffffffff, 0x9, 0xe2, 0x1, 0x8, 0x1, 0x8, 0x3ff, 0x5, 0xfffeffff, 0x3, 0x0, 0x80, 0x6, 0x7, 0x9], [0x5, 0x7f, 0x7, 0x9, 0x2, 0x6, 0x45c, 0x5, 0xab73, 0x5, 0x7, 0x0, 0x5, 0xed5a, 0x9, 0x4, 0x9, 0x8, 0x8, 0x3, 0xeb, 0x6, 0x5, 0xff, 0xffffffff, 0x7fff, 0x4, 0xcb7, 0xa3, 0xffff, 0x8, 0x80000000, 0x3, 0x1ff, 0xfffff26e, 0xf81e, 0x6, 0x9, 0x3, 0x8, 0x5, 0xe5, 0x2, 0x4, 0x4, 0x3, 0x0, 0xfffffff9, 0x7, 0x1ff, 0x204000, 0x5, 0x80, 0x9, 0x7, 0x5078, 0xd, 0x8001, 0x8000, 0x3000000, 0x200, 0x45, 0x0, 0x3]}, 0x45c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 5.75998826s ago: executing program 3 (id=4301): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r4) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0xc260, 0x20000) ioctl$MON_IOCX_MFETCH(r8, 0xc00c9207, 0x0) recvmmsg(r3, &(0x7f00000081c0)=[{{0x0, 0x0, &(0x7f0000000680)}, 0xfffffffc}, {{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/173, 0xad}], 0x1, &(0x7f0000000b80)=""/38, 0x26}, 0xcb}, {{&(0x7f0000000280)=@nfc, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/10, 0xa}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000080), 0x0, 0x8f3f, &(0x7f0000fff000/0x1000)=nil, 0x4) 5.36565596s ago: executing program 2 (id=4302): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000001000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 5.107608699s ago: executing program 1 (id=4303): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r4) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0xc260, 0x20000) ioctl$MON_IOCX_MFETCH(r8, 0xc00c9207, &(0x7f0000000100)={0x0, 0x0, 0xbc}) recvmmsg(r3, &(0x7f00000081c0), 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000080), 0x0, 0x8f3f, &(0x7f0000fff000/0x1000)=nil, 0x4) 4.66007724s ago: executing program 0 (id=4305): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000001000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x5, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x9, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d80)={'syz0\x00', {0xb, 0x3, 0x4, 0x9}, 0x3, [0xfffff47e, 0x0, 0x0, 0x3, 0xf, 0x0, 0x7ff, 0xa, 0x5, 0x3, 0x5, 0x40, 0x1, 0x1, 0x100, 0x6, 0x0, 0x7, 0x1, 0xdef, 0x5, 0x7, 0x1ff, 0x5, 0x73c, 0x5, 0x4, 0x7f, 0x1, 0x6, 0xfffffff9, 0x8, 0x6, 0x4, 0x7, 0x7, 0x1939, 0x8, 0x7, 0x2, 0xe12c, 0x8162, 0x8, 0x3, 0x1, 0x41, 0x7, 0x10000, 0x101, 0x8, 0xc000, 0x6, 0x4, 0x4, 0x5, 0x6, 0xfff, 0x0, 0x104, 0xf8ac, 0x2, 0x3, 0x7fffdfff], [0xfffffff8, 0xff, 0x4, 0x8, 0x1e0f, 0xfffffff7, 0x5, 0x7, 0xffffffff, 0x0, 0x6, 0x100, 0x8, 0xe63, 0x1, 0xa3a5, 0x2, 0x2, 0xb9, 0x6, 0x3, 0x43d, 0x6, 0xe, 0x4, 0x3, 0x6, 0x9, 0x1, 0x11, 0x5, 0x4, 0x8, 0x30000, 0x81, 0xfffffe00, 0x0, 0x10001, 0x7ff, 0x9, 0x8, 0xffffa467, 0x5, 0xfffffffb, 0x0, 0xff, 0x9, 0x6aac, 0x0, 0x3, 0x4, 0xfff, 0x200, 0xc1a, 0xe456, 0x100, 0x2, 0x0, 0x1c00000, 0x6, 0x3, 0xfffffff6, 0xffff1068, 0xffff9241], [0x9, 0x611, 0x6, 0xff, 0x101, 0x5, 0x0, 0x2, 0x80000001, 0x96, 0x7, 0x1, 0xfffffffa, 0x1, 0x4, 0xfb, 0x10001, 0x8, 0x8, 0x3, 0x1, 0x100001, 0x1, 0x7, 0x3, 0x40000000, 0x8, 0x3, 0x5, 0x3, 0xb89, 0xf, 0x0, 0x9, 0x3, 0xff, 0x0, 0x2, 0x1ff, 0x4501, 0x9, 0x0, 0x9, 0x7, 0x966, 0x6, 0x10000, 0xf, 0xffffffff, 0x9, 0xe2, 0x1, 0x8, 0x1, 0x8, 0x3ff, 0x5, 0xfffeffff, 0x3, 0x0, 0x80, 0x6, 0x7, 0x9], [0x5, 0x7f, 0x7, 0x9, 0x2, 0x6, 0x45c, 0x5, 0xab73, 0x5, 0x7, 0x0, 0x5, 0xed5a, 0x9, 0x4, 0x9, 0x8, 0x8, 0x3, 0xeb, 0x6, 0x5, 0xff, 0xffffffff, 0x7fff, 0x4, 0xcb7, 0xa3, 0xffff, 0x8, 0x80000000, 0x3, 0x1ff, 0xfffff26e, 0xf81e, 0x6, 0x9, 0x3, 0x8, 0x5, 0xe5, 0x2, 0x4, 0x4, 0x3, 0x0, 0xfffffff9, 0x7, 0x1ff, 0x204000, 0x5, 0x80, 0x9, 0x7, 0x5078, 0xd, 0x8001, 0x8000, 0x3000000, 0x200, 0x45, 0x0, 0x3]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 4.451376247s ago: executing program 2 (id=4306): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000001000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x5, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x9, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 4.444574462s ago: executing program 0 (id=4307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(r0, 0x1000000) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x3084865, &(0x7f0000002140)=ANY=[]) read$FUSE(r4, &(0x7f0000006240)={0x2020, 0x0, 0x0}, 0x64) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x591) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) acct(&(0x7f0000000240)='./file0\x00') r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000000)=""/54, 0xfdb6}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) r9 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r9, 0x0) io_pgetevents(r8, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 3.523446308s ago: executing program 2 (id=4310): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000a40)="82"}) syz_clone(0x400b080, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 3.445073974s ago: executing program 0 (id=4311): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r3, 0x8926, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x7ff, 0xd, "5dee000000594000"}) r4 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x8, 0x0, 0x0, 0x0, r2}, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xe4) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000600)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=0xee01, @ANYBLOB="180000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18000400010000004b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32=r4, @ANYBLOB="200000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3], 0x90, 0x4000800}}], 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000580)=@raw=[@tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRESOCT=r9], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r14}, 0xc) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r14, 0x68758000) connect$unix(r10, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, &(0x7f0000000180)=0xf) 3.235564985s ago: executing program 1 (id=4312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioperm(0x284, 0x7f, 0xe3) ioperm(0x7fffffff, 0x1, 0x8) socket$netlink(0x10, 0x3, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) add_key$keyring(&(0x7f0000002900), &(0x7f0000002940)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x8140aecc, &(0x7f0000000140)=@x86={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x9, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8}) io_uring_enter(r7, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r13, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r13, 0x0, 0x0) 3.235133238s ago: executing program 3 (id=4313): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000400800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRESOCT=r0], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000001000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0000000501"], 0x48}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a00010a00000000000000000200000008"], 0x1c}}, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r5 = openat2$dir(0xffffff9c, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)={0x8440, 0x141, 0x10}, 0x18) flock(r5, 0x8) fchmodat(r5, &(0x7f0000000040)='./bus\x00', 0x22) 3.184646195s ago: executing program 3 (id=4314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioperm(0x284, 0x7f, 0xe3) ioperm(0x7fffffff, 0x1, 0x8) socket$netlink(0x10, 0x3, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x8140aecc, &(0x7f0000000140)=@x86={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x9, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8}) io_uring_enter(r7, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r12, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r12, &(0x7f0000000280)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) 3.109304105s ago: executing program 2 (id=4315): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000001000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x5, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x9, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d80)={'syz0\x00', {0xb, 0x3, 0x4, 0x9}, 0x3, [0xfffff47e, 0x0, 0x0, 0x3, 0xf, 0x0, 0x7ff, 0xa, 0x5, 0x3, 0x5, 0x40, 0x1, 0x1, 0x100, 0x6, 0x0, 0x7, 0x1, 0xdef, 0x5, 0x7, 0x1ff, 0x5, 0x73c, 0x5, 0x4, 0x7f, 0x1, 0x6, 0xfffffff9, 0x8, 0x6, 0x4, 0x7, 0x7, 0x1939, 0x8, 0x7, 0x2, 0xe12c, 0x8162, 0x8, 0x3, 0x1, 0x41, 0x7, 0x10000, 0x101, 0x8, 0xc000, 0x6, 0x4, 0x4, 0x5, 0x6, 0xfff, 0x0, 0x104, 0xf8ac, 0x2, 0x3, 0x7fffdfff], [0xfffffff8, 0xff, 0x4, 0x8, 0x1e0f, 0xfffffff7, 0x5, 0x7, 0xffffffff, 0x0, 0x6, 0x100, 0x8, 0xe63, 0x1, 0xa3a5, 0x2, 0x2, 0xb9, 0x6, 0x3, 0x43d, 0x6, 0xe, 0x4, 0x3, 0x6, 0x9, 0x1, 0x11, 0x5, 0x4, 0x8, 0x30000, 0x81, 0xfffffe00, 0x0, 0x10001, 0x7ff, 0x9, 0x8, 0xffffa467, 0x5, 0xfffffffb, 0x0, 0xff, 0x9, 0x6aac, 0x0, 0x3, 0x4, 0xfff, 0x200, 0xc1a, 0xe456, 0x100, 0x2, 0x0, 0x1c00000, 0x6, 0x3, 0xfffffff6, 0xffff1068, 0xffff9241], [0x9, 0x611, 0x6, 0xff, 0x101, 0x5, 0x0, 0x2, 0x80000001, 0x96, 0x7, 0x1, 0xfffffffa, 0x1, 0x4, 0xfb, 0x10001, 0x8, 0x8, 0x3, 0x1, 0x100001, 0x1, 0x7, 0x3, 0x40000000, 0x8, 0x3, 0x5, 0x3, 0xb89, 0xf, 0x0, 0x9, 0x3, 0xff, 0x0, 0x2, 0x1ff, 0x4501, 0x9, 0x0, 0x9, 0x7, 0x966, 0x6, 0x10000, 0xf, 0xffffffff, 0x9, 0xe2, 0x1, 0x8, 0x1, 0x8, 0x3ff, 0x5, 0xfffeffff, 0x3, 0x0, 0x80, 0x6, 0x7, 0x9], [0x5, 0x7f, 0x7, 0x9, 0x2, 0x6, 0x45c, 0x5, 0xab73, 0x5, 0x7, 0x0, 0x5, 0xed5a, 0x9, 0x4, 0x9, 0x8, 0x8, 0x3, 0xeb, 0x6, 0x5, 0xff, 0xffffffff, 0x7fff, 0x4, 0xcb7, 0xa3, 0xffff, 0x8, 0x80000000, 0x3, 0x1ff, 0xfffff26e, 0xf81e, 0x6, 0x9, 0x3, 0x8, 0x5, 0xe5, 0x2, 0x4, 0x4, 0x3, 0x0, 0xfffffff9, 0x7, 0x1ff, 0x204000, 0x5, 0x80, 0x9, 0x7, 0x5078, 0xd, 0x8001, 0x8000, 0x3000000, 0x200, 0x45, 0x0, 0x3]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 2.714924771s ago: executing program 2 (id=4316): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0x0, &(0x7f0000000040)='children\x00') syz_pidfd_open(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r5, &(0x7f0000001b00)=[{&(0x7f0000000300)=""/250, 0xfa}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000005b80)={0x2020}, 0x2020) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000002440)={0x7c, 0x12, 0x905, 0x70bd26, 0x25dfdafd, {0x28, 0x9, 0x4, 0x0, {0x4e22, 0x4e22, [0xfffffff8, 0x924, 0xb, 0x6], [0xffbffffd, 0x5, 0x1, 0x1], 0x0, [0x10002, 0x1000]}, 0xffffffff, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x30, 0x1, "002c47c18be7040d000000ca3586c70684a8e2c04c2a83c2e88df0c6a1cac6ab3ee699a19952303a56ff1085"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x260448c1}, 0x880) dup(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r9, @ANYBLOB="7a140010"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 2.445199059s ago: executing program 0 (id=4317): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000001000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 1.494962004s ago: executing program 0 (id=4318): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffdfffd}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000380)={0x0, @phonet={0x23, 0x3, 0x5, 0x8}, @l2={0x1f, 0x7ff, @any, 0x7fff, 0x1}, @nl=@unspec, 0x101, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x7e7, 0xff}) r2 = syz_clone(0x42084000, &(0x7f0000001680)="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", 0x1000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0)="be10d4481b3c0fcfe1107a15414ea8dbac46fa2fd21485868272285ffd8273570a5db0b98ac1ffd704231d6e17a89ab2708b0c5da0348db9f2f9eb1f852245d51e3693821d68410afbafd19af65a116c47e85f52d8471da515df90a2c8783dc9") tkill(r2, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000240)={0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r3, 0x0, r5, 0x0, 0x10000000000016, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018000000000000000000000000000000650000000000000018000000000000200000000000000000950000000000000045030000fcffffff95"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) fcntl$setstatus(r5, 0x4, 0x4000) 1.329248644s ago: executing program 0 (id=4319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(r0, 0x1000000) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) r5 = syz_io_uring_setup(0x8ca, &(0x7f0000000200)={0x0, 0x10007278, 0x20, 0x0, 0x18e, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r5, 0x26c8, 0x0, 0x1, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x110}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x3, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8000000, 0x0, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x4000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETOWNER(r10, 0x400454cc, 0xee00) 985.946981ms ago: executing program 3 (id=4321): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_rdma(0x10, 0x3, 0x14) pipe(0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 0s ago: executing program 3 (id=4322): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) unshare(0x2010000) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x12, r2, 0x0) unshare(0x22020400) vmsplice(r2, &(0x7f0000000300)=[{&(0x7f0000000340)='N', 0x1}], 0x1, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r7, 0x4188aea7, &(0x7f0000000080)) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004c87c810cd0615011e1a01020301090224070000000000"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x39f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) kernel console output (not intermixed with test programs): nversions on it [ 347.184682][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 348.224703][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.064286][T14094] x_tables: duplicate underflow at hook 1 [ 349.178262][T14101] netlink: 'syz.2.2430': attribute type 2 has an invalid length. [ 349.181789][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 349.181801][ T40] audit: type=1326 audit(1753116964.686:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14099 comm="syz.2.2430" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x0 [ 349.233310][T14107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2430'. [ 349.264700][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.229664][T14146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2446'. [ 350.304714][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.345473][T14154] x_tables: duplicate underflow at hook 1 [ 350.602073][T14164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2452'. [ 350.679068][T14168] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 350.954450][T14177] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2455'. [ 350.959312][T14177] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2455'. [ 350.989487][T14179] x_tables: duplicate underflow at hook 1 [ 351.286826][T14193] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 351.354668][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.624684][ T6040] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 351.774653][ T6040] usb 6-1: Using ep0 maxpacket: 16 [ 351.777724][ T6040] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 351.780386][ T6040] usb 6-1: config 1 has no interface number 0 [ 351.782460][ T6040] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 351.785636][ T6040] usb 6-1: config 1 interface 105 has no altsetting 0 [ 351.789551][ T6040] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 351.792740][ T6040] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.795301][ T6040] usb 6-1: Product: syz [ 351.796628][ T6040] usb 6-1: Manufacturer: syz [ 351.798158][ T6040] usb 6-1: SerialNumber: syz [ 351.801479][T14199] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 352.012830][ T6040] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22 [ 352.212090][ T60] usb 6-1: USB disconnect, device number 19 [ 352.384700][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.586796][T14207] x_tables: duplicate underflow at hook 1 [ 352.744259][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 352.747224][T14219] bridge_slave_0: left allmulticast mode [ 352.749055][T14219] bridge_slave_0: left promiscuous mode [ 352.750918][T14219] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.134271][T14245] x_tables: duplicate underflow at hook 1 [ 353.424699][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.452250][T14264] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2488'. [ 354.464670][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.478039][T14309] x_tables: duplicate underflow at hook 1 [ 354.694697][ T6021] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 354.854729][ T6021] usb 6-1: Using ep0 maxpacket: 8 [ 354.858347][ T6021] usb 6-1: unable to get BOS descriptor or descriptor too short [ 354.862469][ T6021] usb 6-1: config 7 has an invalid interface number: 2 but max is 0 [ 354.865310][ T6021] usb 6-1: config 7 has no interface number 0 [ 354.867331][ T6021] usb 6-1: config 7 interface 2 has no altsetting 0 [ 354.871209][ T6021] usb 6-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=1b.eb [ 354.874173][ T6021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.876708][ T6021] usb 6-1: Product: syz [ 354.878016][ T6021] usb 6-1: Manufacturer: syz [ 354.879501][ T6021] usb 6-1: SerialNumber: syz [ 355.094270][ T6021] ftdi_sio 6-1:7.2: FTDI USB Serial Device converter detected [ 355.098078][ T6021] ftdi_sio ttyUSB0: unknown device type: 0x1beb [ 355.102151][ T6021] usb 6-1: USB disconnect, device number 20 [ 355.107665][ T6021] ftdi_sio 6-1:7.2: device disconnected [ 355.174681][ T6343] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 355.324667][ T6343] usb 8-1: Using ep0 maxpacket: 16 [ 355.327569][ T6343] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.330715][ T6343] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 355.333737][ T6343] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 355.339527][ T6343] usb 8-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 355.342332][ T6343] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.345005][ T6343] usb 8-1: Product: syz [ 355.346327][ T6343] usb 8-1: Manufacturer: syz [ 355.347795][ T6343] usb 8-1: SerialNumber: syz [ 355.350533][ T6343] usb 8-1: config 0 descriptor?? [ 355.353709][ T6343] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 355.355828][ T6343] gspca_stv06xx: st6422 sensor detected [ 355.504672][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.038859][T14348] netlink: 'syz.2.2520': attribute type 5 has an invalid length. [ 356.544711][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.597126][T14358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.635863][ T5969] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.641106][ T5969] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.645854][ T5969] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.649756][ T5969] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.653725][ T5969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.675454][T14359] lo speed is unknown, defaulting to 1000 [ 356.824391][T14359] chnl_net:caif_netlink_parms(): no params data found [ 356.899172][T14359] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.901595][T14359] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.903873][T14359] bridge_slave_0: entered allmulticast mode [ 356.906572][T14359] bridge_slave_0: entered promiscuous mode [ 356.909582][T14359] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.912188][T14359] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.914448][T14359] bridge_slave_1: entered allmulticast mode [ 356.917066][T14359] bridge_slave_1: entered promiscuous mode [ 356.950932][T14359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.957287][T14359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.008726][T14359] team0: Port device team_slave_0 added [ 357.012900][T14359] team0: Port device team_slave_1 added [ 357.051808][T14359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.054115][T14359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.062098][T14359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.067577][T14359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.069848][T14359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.077842][T14359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.137394][T14359] hsr_slave_0: entered promiscuous mode [ 357.139758][T14359] hsr_slave_1: entered promiscuous mode [ 357.141862][T14359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.144260][T14359] Cannot create hsr debugfs directory [ 357.299299][T14359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.386570][T14359] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.459893][T14359] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.559722][T14359] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.584680][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.693583][T14359] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 357.699005][T14359] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 357.702939][T14359] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 357.707159][T14359] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 357.764398][T14359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.774544][T14359] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.778911][ T6343] STV06xx 8-1:0.0: probe with driver STV06xx failed with error -71 [ 357.781318][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.784537][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.789031][ T6343] usb 8-1: USB disconnect, device number 20 [ 357.793670][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.795920][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.959966][T14359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.998496][T14359] veth0_vlan: entered promiscuous mode [ 358.007505][T14359] veth1_vlan: entered promiscuous mode [ 358.039643][T14359] veth0_macvtap: entered promiscuous mode [ 358.045811][T14359] veth1_macvtap: entered promiscuous mode [ 358.064627][T14359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.073524][T14359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.082293][T14359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.086549][T14359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.089374][T14359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.092165][T14359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.166426][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.168825][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.186720][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.190116][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.290075][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2524'. [ 358.325730][T14413] tipc: Started in network mode [ 358.327344][T14413] tipc: Node identity 8e4e352447f, cluster identity 4711 [ 358.329659][T14413] tipc: Enabled bearer , priority 0 [ 358.332087][T14411] lo speed is unknown, defaulting to 1000 [ 358.332469][T14413] syzkaller0: entered promiscuous mode [ 358.335932][T14413] syzkaller0: entered allmulticast mode [ 358.343633][T14413] tipc: Resetting bearer [ 358.345698][T14413] syzkaller0: tun_net_xmit 90 [ 358.348436][T14412] tipc: Resetting bearer [ 358.359575][T14412] tipc: Disabling bearer [ 358.625829][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.704818][ T5969] Bluetooth: hci2: command tx timeout [ 358.786470][T14440] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2545'. [ 359.585506][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 359.664698][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.848545][T14473] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.851934][T14473] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.515774][T14482] lo speed is unknown, defaulting to 1000 [ 360.704690][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.779977][T14499] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.782215][T14499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.784682][T14499] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.784718][ T5969] Bluetooth: hci2: command tx timeout [ 360.786924][T14499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.800567][T14499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.754699][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.381013][T14549] netlink: 'syz.1.2580': attribute type 5 has an invalid length. [ 362.794729][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.874830][ T5969] Bluetooth: hci2: command tx timeout [ 363.344200][T14573] lo speed is unknown, defaulting to 1000 [ 363.360923][T14575] ipvlan16: entered promiscuous mode [ 363.463249][T14578] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.465835][T14578] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.810394][T14582] x_tables: duplicate underflow at hook 1 [ 363.824752][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.269225][T14594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2593'. [ 364.274271][T14594] binder: 14593:14594 ioctl c0306201 80000780 returned -14 [ 364.401276][ T6039] Process accounting resumed [ 364.864791][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.882660][T14610] x_tables: duplicate underflow at hook 1 [ 364.937432][T14614] lo speed is unknown, defaulting to 1000 [ 364.944797][ T5969] Bluetooth: hci2: command tx timeout [ 365.031382][T14619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2602'. [ 365.188887][T14628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2604'. [ 365.193309][T14628] binder: 14627:14628 ioctl c0306201 80000780 returned -14 [ 365.267116][T14597] Process accounting resumed [ 365.578463][T14638] ipvlan2: entered promiscuous mode [ 365.904690][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.419929][T14650] x_tables: duplicate underflow at hook 1 [ 366.908427][ T54] Process accounting resumed [ 366.908796][T14660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2614'. [ 366.921240][T14660] binder: BINDER_SET_CONTEXT_MGR already set [ 366.928585][T14660] binder: 14658:14660 ioctl 4018620d 80000040 returned -16 [ 366.944849][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.948204][T14660] binder: 14658:14660 ioctl c0306201 80000780 returned -14 [ 367.303483][T14671] netlink: 'syz.1.2617': attribute type 5 has an invalid length. [ 367.474748][T14679] ipvlan3: entered promiscuous mode [ 367.756499][T14656] Process accounting resumed [ 367.985374][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.222363][T14696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2624'. [ 368.227908][T14696] binder: BINDER_SET_CONTEXT_MGR already set [ 368.229842][T14696] binder: 14695:14696 ioctl 4018620d 80000040 returned -16 [ 368.232670][T14696] binder: 14695:14696 ioctl c0306201 80000780 returned -14 [ 368.280676][T14699] x_tables: duplicate underflow at hook 1 [ 368.435573][T14703] netlink: 'syz.2.2626': attribute type 5 has an invalid length. [ 368.557192][ T54] Process accounting resumed [ 368.557404][T14710] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2629'. [ 368.770181][ T24] Process accounting resumed [ 368.921494][T14719] Process accounting resumed [ 369.024935][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.038907][T14729] netlink: 'syz.0.2636': attribute type 5 has an invalid length. [ 369.332889][T14708] Process accounting resumed [ 369.612542][ T838] Process accounting resumed [ 369.785665][T14757] Process accounting resumed [ 369.807814][T14759] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.810271][T14759] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.064676][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.121685][T14775] netlink: 'syz.0.2653': attribute type 5 has an invalid length. [ 370.124064][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2653'. [ 370.235193][ T60] Process accounting resumed [ 371.029840][T14779] Process accounting resumed [ 371.104686][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.201230][T14809] netlink: 'syz.0.2665': attribute type 5 has an invalid length. [ 371.203678][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2665'. [ 371.538538][ T54] Process accounting resumed [ 372.144729][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.200114][T14815] Process accounting resumed [ 373.184743][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.004654][ T6040] Process accounting resumed [ 374.186162][T14870] x_tables: duplicate underflow at hook 1 [ 374.224713][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.437864][T14862] Process accounting resumed [ 375.092231][T14901] x_tables: duplicate underflow at hook 1 [ 375.141897][ T9568] syz_tun: left allmulticast mode [ 375.238182][ T5965] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.242835][ T5965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.247816][ T5965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.251191][ T5965] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.258230][ T5965] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.274668][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.285046][T14903] lo speed is unknown, defaulting to 1000 [ 375.725932][ T1144] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 375.729556][ T1144] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 375.733701][ T1144] bridge0: port 1(netdevsim0) entered disabled state [ 376.109217][T14914] lo speed is unknown, defaulting to 1000 [ 376.199764][T14903] chnl_net:caif_netlink_parms(): no params data found [ 376.304662][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.310003][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.312789][T14903] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.315878][T14903] bridge_slave_0: entered allmulticast mode [ 376.319015][T14903] bridge_slave_0: entered promiscuous mode [ 376.335558][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.337877][T14903] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.340196][T14903] bridge_slave_1: entered allmulticast mode [ 376.343317][T14903] bridge_slave_1: entered promiscuous mode [ 377.010981][ T1144] bond1 (unregistering): Released all slaves [ 377.047247][T14903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.054336][T14903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.117692][ T1144] tipc: Left network mode [ 377.128577][T14903] team0: Port device team_slave_0 added [ 377.138156][T14903] team0: Port device team_slave_1 added [ 377.235347][T14903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.237620][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.252880][T14903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.258824][T14903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.261723][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.273417][T14903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.344367][T14903] hsr_slave_0: entered promiscuous mode [ 377.344728][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.345525][ T5965] Bluetooth: hci3: command tx timeout [ 377.347129][T14903] hsr_slave_1: entered promiscuous mode [ 377.353306][T14903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.357600][T14903] Cannot create hsr debugfs directory [ 377.543591][ T1144] hsr_slave_0: left promiscuous mode [ 377.988360][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.990436][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.394742][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.841878][T14973] x_tables: duplicate underflow at hook 1 [ 379.313807][T14903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.329470][T14903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.333229][ T1144] IPVS: stop unused estimator thread 0... [ 379.347235][T14903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.355175][T14903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.434805][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.437332][ T5965] Bluetooth: hci3: command tx timeout [ 379.457299][T14903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.472893][T14903] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.478564][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.480823][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.488747][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.490928][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.690201][T14903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.715989][T14903] veth0_vlan: entered promiscuous mode [ 379.723655][T14903] veth1_vlan: entered promiscuous mode [ 379.743803][T14903] veth0_macvtap: entered promiscuous mode [ 379.751060][T14903] veth1_macvtap: entered promiscuous mode [ 379.759783][T14903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.767584][T14903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.774926][T14903] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.778371][T14903] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.781782][T14903] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.785861][T14903] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.814851][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.817448][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.835937][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.838679][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.233667][ T24] Process accounting resumed [ 380.448812][T15015] lo speed is unknown, defaulting to 1000 [ 380.464676][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 380.639998][ T6039] Process accounting resumed [ 380.803160][T15026] netlink: 'syz.0.2729': attribute type 5 has an invalid length. [ 380.992500][T15004] Process accounting resumed [ 381.136759][T15036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2733'. [ 381.156402][T15036] binder: 15035:15036 ioctl c0306201 80000780 returned -14 [ 381.473312][T15021] Process accounting resumed [ 381.504769][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.516073][ T5965] Bluetooth: hci3: command tx timeout [ 381.802922][T15060] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2739'. [ 382.194070][T15065] Process accounting resumed [ 382.277927][T15071] x_tables: duplicate underflow at hook 1 [ 382.419069][T15076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2744'. [ 382.527145][T15084] fuse: Bad value for 'fd' [ 382.550006][T15085] ipvlan4: entered promiscuous mode [ 382.554673][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.584660][ T5965] Bluetooth: hci3: command tx timeout [ 383.584703][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.811158][T15105] Process accounting resumed [ 384.248110][T15106] netlink: 'syz.0.2752': attribute type 5 has an invalid length. [ 384.584224][T15121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2758'. [ 384.624724][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.664798][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.757671][T15150] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 386.704689][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.815200][ T838] Process accounting resumed [ 387.402764][T15192] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 387.688313][T15180] Process accounting resumed [ 387.744686][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 388.421933][T15197] Process accounting resumed [ 388.601879][T15224] netlink: 'syz.0.2785': attribute type 4 has an invalid length. [ 388.784685][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.624863][T15244] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2791'. [ 389.740610][ T54] Process accounting resumed [ 389.751618][T15250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.760467][T15250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.765357][T15250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.767721][T15250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.824739][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.616144][T15245] Process accounting resumed [ 390.864714][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.511711][T15275] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2800'. [ 391.904672][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.490706][T15297] lo speed is unknown, defaulting to 1000 [ 392.944849][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.343275][T15317] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2810'. [ 393.542338][ T10] Process accounting resumed [ 393.727789][T15333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.730033][T15329] Process accounting resumed [ 393.731580][T15333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.737979][T15333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.740406][T15333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.755728][T15338] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 393.930066][T15345] ipvlan5: entered promiscuous mode [ 393.985239][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.043010][T15350] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2822'. [ 395.024857][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.302281][T15363] netlink: 'syz.2.2827': attribute type 5 has an invalid length. [ 395.378227][T15368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2828'. [ 395.382706][T15368] binder: BINDER_SET_CONTEXT_MGR already set [ 395.384705][T15368] binder: 15367:15368 ioctl 4018620d 80000040 returned -16 [ 395.387312][T15368] binder: 15367:15368 ioctl c0306201 80000780 returned -14 [ 396.064812][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.253064][T15389] netlink: 'syz.1.2836': attribute type 5 has an invalid length. [ 396.504176][T15399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2838'. [ 396.627562][T15399] binder: 15397:15399 ioctl c0306201 80000780 returned -14 [ 397.000341][ T838] Process accounting resumed [ 397.114709][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.178102][T15403] Process accounting resumed [ 397.640662][T15420] fuse: Bad value for 'fd' [ 397.693614][T15422] netlink: 'syz.2.2845': attribute type 5 has an invalid length. [ 397.728033][T15425] fuse: Bad value for 'fd' [ 397.830711][T15429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2847'. [ 397.949688][T15429] binder: 15428:15429 ioctl c0306201 80000780 returned -14 [ 398.122000][T15435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.127528][T15435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.132800][T15435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.136767][T15435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.143089][T15448] fuse: Bad value for 'fd' [ 398.144830][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.219491][T15450] netlink: 'syz.2.2854': attribute type 5 has an invalid length. [ 398.281338][T15455] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 399.083446][T15476] lo speed is unknown, defaulting to 1000 [ 399.184804][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 399.237990][T15485] netlink: 'syz.2.2864': attribute type 5 has an invalid length. [ 399.250034][T15489] fuse: Bad value for 'fd' [ 400.210309][T15504] ipvlan0: entered promiscuous mode [ 400.224719][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.095835][T15529] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 401.098786][T15529] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 401.103470][T15529] vhci_hcd vhci_hcd.0: Device attached [ 401.129903][T15527] netlink: 'syz.1.2875': attribute type 5 has an invalid length. [ 401.151207][T15529] netdevsim netdevsim0: Direct firmware load for @ failed with error -2 [ 401.154331][T15529] netdevsim netdevsim0: Falling back to sysfs fallback for: @ [ 401.274731][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.395267][ T54] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 401.801912][T15530] vhci_hcd: connection reset by peer [ 401.803950][ T61] vhci_hcd: stop threads [ 401.805541][ T61] vhci_hcd: release socket [ 401.807294][ T61] vhci_hcd: disconnect device [ 402.304936][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.082436][T15565] ipvlan2: entered promiscuous mode [ 403.134481][T15567] netlink: 'syz.0.2884': attribute type 5 has an invalid length. [ 403.344846][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.186080][T15591] netlink: 'syz.1.2894': attribute type 5 has an invalid length. [ 404.347704][ T53] Process accounting resumed [ 404.384775][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.790641][T15605] input: syz0 as /devices/virtual/input/input22 [ 405.242204][T15595] Process accounting resumed [ 405.434837][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.724116][T15622] netlink: 'syz.2.2903': attribute type 5 has an invalid length. [ 406.464716][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 406.554809][ T54] vhci_hcd: vhci_device speed not set [ 406.973365][T15653] ipvlan1: entered promiscuous mode [ 407.204664][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 407.374617][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 407.378375][ T10] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 407.389489][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.402990][ T10] usb 7-1: config 0 has no interfaces? [ 407.424432][ T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 407.427519][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.430202][ T10] usb 7-1: Product: syz [ 407.431684][ T10] usb 7-1: Manufacturer: syz [ 407.433181][ T10] usb 7-1: SerialNumber: syz [ 407.440842][ T10] usb 7-1: config 0 descriptor?? [ 407.504762][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.631776][T15662] netlink: 'syz.1.2913': attribute type 5 has an invalid length. [ 408.205877][ T6343] usb 7-1: USB disconnect, device number 21 [ 408.544699][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.514291][T15685] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 409.584769][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.607390][T15689] binder: 15688:15689 ioctl c0306201 80000780 returned -14 [ 409.624399][ T6343] Process accounting resumed [ 409.724924][T15696] netlink: 'syz.3.2922': attribute type 5 has an invalid length. [ 409.774037][T15697] Process accounting resumed [ 410.007061][T15708] ipvlan2: entered promiscuous mode [ 410.182421][T15712] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 410.484641][ T6343] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 410.634711][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.026763][ T53] Process accounting resumed [ 411.236859][ T6343] usb 7-1: Using ep0 maxpacket: 16 [ 411.261566][ T6343] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 411.264093][ T6343] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.267616][ T6343] usb 7-1: config 0 has no interfaces? [ 411.272051][ T6343] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 411.275310][ T6343] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.277906][ T6343] usb 7-1: Product: syz [ 411.279320][ T6343] usb 7-1: Manufacturer: syz [ 411.280917][ T6343] usb 7-1: SerialNumber: syz [ 411.283642][ T6343] usb 7-1: config 0 descriptor?? [ 411.664801][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.763393][T15719] Process accounting resumed [ 412.016086][ T1464] usb 7-1: USB disconnect, device number 22 [ 412.704794][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.751625][T15752] input: syz0 as /devices/virtual/input/input23 [ 413.244751][ T6343] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 413.424933][ T6343] usb 8-1: Using ep0 maxpacket: 16 [ 413.744739][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 414.275632][T15767] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 414.604654][ T5996] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 414.754688][ T5996] usb 7-1: Using ep0 maxpacket: 16 [ 414.758491][ T5996] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 414.761177][ T5996] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.765102][ T5996] usb 7-1: config 0 has no interfaces? [ 414.770430][ T5996] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 414.773959][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.777184][ T5996] usb 7-1: Product: syz [ 414.778884][ T5996] usb 7-1: Manufacturer: syz [ 414.780564][ T5996] usb 7-1: SerialNumber: syz [ 414.783643][ T5996] usb 7-1: config 0 descriptor?? [ 414.794677][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 415.196502][ T5965] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 415.199597][ T5965] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 415.427884][T15543] Process accounting resumed [ 415.531783][T15543] usb 7-1: USB disconnect, device number 23 [ 415.619289][T15787] Process accounting resumed [ 415.824696][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.438529][ T6343] usb 8-1: unable to get BOS descriptor or descriptor too short [ 416.462537][ T6343] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 416.479704][ T6343] usb 8-1: can't read configurations, error -71 [ 416.864697][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.183093][T15818] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 417.393024][T15821] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 417.743019][T15826] input: syz0 as /devices/virtual/input/input24 [ 417.904721][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 418.944672][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.251424][T15834] binder: 15833:15834 ioctl c0306201 80000780 returned -14 [ 419.275717][ T5965] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 419.278552][ T5965] Bluetooth: hci4: Injecting HCI hardware error event [ 419.281439][ T5965] Bluetooth: hci4: hardware error 0x00 [ 419.563742][T15845] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 419.577906][ T6343] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 419.710331][T15851] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 419.724683][ T6343] usb 7-1: Using ep0 maxpacket: 16 [ 419.984703][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.988352][ T1153] . (unregistering): Released all slaves [ 419.996235][ T1153] bond1 (unregistering): Released all slaves [ 420.096382][ T1153] bond2 (unregistering): Released all slaves [ 420.186558][ T1153] bond0 (unregistering): Released all slaves [ 420.199221][ T1153] bond3 (unregistering): Released all slaves [ 420.219471][T15857] netlink: 'syz.3.2967': attribute type 5 has an invalid length. [ 420.273515][T15860] ipvlan2: entered promiscuous mode [ 420.281930][ T1153] : left promiscuous mode [ 420.375162][ T1153] tipc: Left network mode [ 420.678909][ T1153] dummy0: left promiscuous mode [ 420.681007][ T1153] team0: left promiscuous mode [ 420.689771][ T1153] hsr_slave_0: left promiscuous mode [ 420.691797][ T1153] hsr_slave_1: left promiscuous mode [ 420.719318][ T1153] veth1_macvtap: left promiscuous mode [ 420.721281][ T1153] veth0_macvtap: left promiscuous mode [ 420.723136][ T1153] veth1_vlan: left promiscuous mode [ 420.725628][ T1153] veth0_vlan: left promiscuous mode [ 420.958317][ T5969] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 420.962975][ T5969] Bluetooth: hci2: Injecting HCI hardware error event [ 420.968099][ T5969] Bluetooth: hci2: hardware error 0x00 [ 421.034674][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.346516][ T5965] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 421.730765][T15874] binder: BINDER_SET_CONTEXT_MGR already set [ 421.732680][T15874] binder: 15873:15874 ioctl 4018620d 80000040 returned -16 [ 421.737478][T15874] binder: 15873:15874 ioctl c0306201 80000780 returned -14 [ 421.961096][ T94] smc: removing ib device syz0 [ 421.978597][ T838] lo speed is unknown, defaulting to 1000 [ 421.983129][ T838] syz0: Port: 1 Link DOWN [ 422.079130][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.123737][T15881] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 422.220808][ T6343] usb 7-1: unable to get BOS descriptor or descriptor too short [ 422.231022][ T6343] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 422.233430][ T6343] usb 7-1: can't read configurations, error -71 [ 422.305145][T15894] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 422.626628][ T1153] IPVS: stop unused estimator thread 0... [ 423.104699][ T5969] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 423.114732][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.150870][T15904] netlink: 'syz.2.2980': attribute type 5 has an invalid length. [ 423.314157][ T6343] Process accounting resumed [ 423.468644][T15917] ipvlan3: entered promiscuous mode [ 424.144715][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.168315][T15911] Process accounting resumed [ 424.542417][ T5996] Process accounting resumed [ 425.184750][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.330637][T15933] Process accounting resumed [ 425.340582][ T5996] IPVS: starting estimator thread 0... [ 425.367048][T15940] netlink: 'syz.1.2989': attribute type 5 has an invalid length. [ 425.444791][T15941] IPVS: using max 43 ests per chain, 103200 per kthread [ 425.499589][T15950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2993'. [ 425.582080][T15950] binder: 15949:15950 ioctl c0306201 80000780 returned -14 [ 425.756067][T15958] ipvlan4: entered promiscuous mode [ 426.224755][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 426.639034][T15978] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 426.907668][T14396] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 427.184703][T14396] usb 7-1: Using ep0 maxpacket: 16 [ 427.188694][T14396] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 427.191330][T14396] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.194921][T14396] usb 7-1: config 0 has no interfaces? [ 427.246219][ T6343] Process accounting resumed [ 427.264680][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.497213][T14396] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 427.500046][T14396] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.502526][T14396] usb 7-1: Product: syz [ 427.503949][T14396] usb 7-1: Manufacturer: syz [ 427.590128][T14396] usb 7-1: SerialNumber: syz [ 427.836099][T14396] usb 7-1: config 0 descriptor?? [ 428.144542][T15980] Process accounting resumed [ 428.171613][T15995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3004'. [ 428.266671][T15995] binder: 15994:15995 ioctl c0306201 80000780 returned -14 [ 428.304693][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.922866][T16008] ipvlan6: entered promiscuous mode [ 429.354751][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.573379][ T838] usb 7-1: USB disconnect, device number 26 [ 429.988308][T16028] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 430.384727][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.434659][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.545808][T16062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3019'. [ 431.645791][T16062] binder: 16060:16062 ioctl c0306201 80000780 returned -14 [ 431.838060][T16078] fuse: Unknown parameter 'grou00000000000000000000' [ 431.907864][T16081] netlink: 'syz.3.3024': attribute type 5 has an invalid length. [ 431.981596][T16084] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 432.464759][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 433.302373][T16109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3031'. [ 433.386728][T16109] binder: 16108:16109 ioctl c0306201 80000780 returned -14 [ 433.514664][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 433.620918][T16113] fuse: Unknown parameter 'grou00000000000000000000' [ 433.646202][T16107] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 433.687286][T16115] netlink: 'syz.1.3033': attribute type 5 has an invalid length. [ 434.044926][ T838] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 434.194647][ T838] usb 7-1: Using ep0 maxpacket: 16 [ 434.197933][ T838] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 434.200824][ T838] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.204018][ T838] usb 7-1: config 0 has no interfaces? [ 434.207513][ T838] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 434.210303][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.212895][ T838] usb 7-1: Product: syz [ 434.214259][ T838] usb 7-1: Manufacturer: syz [ 434.215779][ T838] usb 7-1: SerialNumber: syz [ 434.218275][ T838] usb 7-1: config 0 descriptor?? [ 434.544695][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.663888][T16137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3040'. [ 434.877043][T16138] binder: 16136:16138 ioctl c0306201 80000780 returned -14 [ 434.886301][T16142] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 434.952703][T16144] netlink: 'syz.0.3042': attribute type 5 has an invalid length. [ 435.081583][ T837] usb 7-1: USB disconnect, device number 27 [ 435.461017][ T838] Process accounting resumed [ 435.568155][T16166] fuse: Bad value for 'user_id' [ 435.569719][T16166] fuse: Bad value for 'user_id' [ 435.584683][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.664919][T16164] Process accounting resumed [ 435.994058][T16173] netlink: 'syz.0.3051': attribute type 5 has an invalid length. [ 436.000581][T16176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3052'. [ 436.096156][T16176] binder: 16175:16176 ioctl c0306201 80000780 returned -14 [ 436.564760][T16190] fuse: Bad value for 'user_id' [ 436.566380][T16190] fuse: Bad value for 'user_id' [ 436.634676][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.660634][ T837] Process accounting resumed [ 436.850542][T16192] Process accounting resumed [ 436.928212][T16201] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 437.433979][T16210] netlink: 'syz.0.3061': attribute type 5 has an invalid length. [ 437.664708][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 438.392936][T16225] fuse: Bad value for 'user_id' [ 438.394725][T16225] fuse: Bad value for 'user_id' [ 438.428846][T16227] fuse: Unknown parameter 'group_i00000000000000000000' [ 438.489774][T16231] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 438.603557][T16236] netlink: 'syz.1.3070': attribute type 5 has an invalid length. [ 438.714667][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.379854][T16253] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 439.427005][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.429090][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.633115][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3075'. [ 439.637807][T16259] binder: BINDER_SET_CONTEXT_MGR already set [ 439.639753][T16259] binder: 16258:16259 ioctl 4018620d 80000040 returned -16 [ 439.642638][T16259] binder: 16258:16259 ioctl c0306201 80000780 returned -14 [ 439.754708][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.974284][T16269] fuse: Unknown parameter 'group_i00000000000000000000' [ 440.794743][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.765032][T16295] ipvlan3: entered promiscuous mode [ 441.792329][T16297] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 441.824673][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.877652][T16303] fuse: Unknown parameter 'group_id00000000000000000000' [ 442.423809][ T53] Process accounting resumed [ 442.514011][T16313] Process accounting resumed [ 442.864716][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.508396][T16346] fuse: Bad value for 'fd' [ 443.914663][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 444.944728][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 445.304414][T16388] fuse: Bad value for 'fd' [ 445.984680][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.468768][ T838] Process accounting resumed [ 446.647275][T16423] fuse: Bad value for 'fd' [ 446.665610][T16413] Process accounting resumed [ 446.743148][T15543] Process accounting resumed [ 447.024694][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.174717][T16439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3123'. [ 447.306063][T16439] binder: 16438:16439 ioctl c0306201 80000780 returned -14 [ 447.622570][T16451] fuse: Bad value for 'fd' [ 447.638127][T16428] Process accounting resumed [ 447.725589][T16461] fuse: Bad value for 'user_id' [ 447.727127][T16461] fuse: Bad value for 'user_id' [ 448.064674][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.758486][T16487] fuse: Invalid rootmode [ 448.857995][ T837] Process accounting resumed [ 449.104672][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.155080][T16500] fuse: Bad value for 'user_id' [ 449.156676][T16500] fuse: Bad value for 'user_id' [ 449.716939][T16489] Process accounting resumed [ 449.750828][T16514] fuse: Invalid rootmode [ 449.937711][ T6039] Process accounting resumed [ 449.949891][T16527] fuse: Bad value for 'fd' [ 450.001946][T16529] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 450.106860][T16522] Process accounting resumed [ 450.144691][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 450.173179][ T838] Process accounting resumed [ 450.851320][T16555] trusted_key: encrypted_key: insufficient parameters specified [ 450.857511][T16555] trusted_key: encrypted_key: insufficient parameters specified [ 450.881869][T16557] fuse: Bad value for 'fd' [ 450.938015][T16561] netlink: 'syz.3.3163': attribute type 5 has an invalid length. [ 450.950434][ T837] Process accounting resumed [ 451.036166][T16570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3166'. [ 451.109927][T16570] binder: 16569:16570 ioctl c0306201 80000780 returned -14 [ 451.147360][T16541] Process accounting resumed [ 451.148672][T16558] Process accounting resumed [ 451.184708][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.241592][T16578] input: syz0 as /devices/virtual/input/input25 [ 452.144464][T16593] fuse: Bad value for 'fd' [ 452.167644][T16594] netlink: 'syz.1.3172': attribute type 5 has an invalid length. [ 452.175091][T16597] trusted_key: encrypted_key: insufficient parameters specified [ 452.179099][T16597] trusted_key: encrypted_key: insufficient parameters specified [ 452.224680][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.253604][ T53] Process accounting resumed [ 452.275772][ T53] Process accounting resumed [ 452.432590][T16601] Process accounting resumed [ 452.642084][T16612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3178'. [ 452.722011][T16612] binder: 16611:16612 ioctl c0306201 80000780 returned -14 [ 452.791968][T16622] fuse: Bad value for 'fd' [ 452.813465][T16623] input: syz0 as /devices/virtual/input/input26 [ 452.864366][T16625] netlink: 'syz.3.3183': attribute type 5 has an invalid length. [ 453.015198][T16633] ipvlan4: entered promiscuous mode [ 453.223808][ T6039] Process accounting resumed [ 453.264714][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.500495][T16639] Process accounting resumed [ 453.622105][T16605] Process accounting resumed [ 454.044059][T16654] netlink: 'syz.3.3192': attribute type 5 has an invalid length. [ 454.044259][T16657] fuse: Bad value for 'fd' [ 454.086604][T16660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3195'. [ 454.164784][T16660] binder: 16658:16660 ioctl c0306201 80000780 returned -14 [ 454.304725][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.311593][ T838] Process accounting resumed [ 454.349039][T14396] Process accounting resumed [ 454.456972][T16678] fuse: Bad value for 'rootmode' [ 454.503533][T16674] Process accounting resumed [ 454.521694][T16684] trusted_key: encrypted_key: insufficient parameters specified [ 454.526473][T16684] trusted_key: encrypted_key: insufficient parameters specified [ 455.344675][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 455.693574][T16705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3209'. [ 455.745045][T16675] Process accounting resumed [ 455.780055][T16709] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 455.781093][T16705] binder: 16704:16705 ioctl c0306201 80000780 returned -14 [ 455.804770][T14396] Process accounting resumed [ 455.977314][T16722] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 456.033582][T16719] Process accounting resumed [ 456.187162][T16730] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 456.264743][T14396] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 456.394778][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.424642][T14396] usb 8-1: Using ep0 maxpacket: 16 [ 456.427647][T14396] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 456.430308][T14396] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.433405][T14396] usb 8-1: config 0 has no interfaces? [ 456.436909][T14396] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 456.439880][T14396] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.442440][T14396] usb 8-1: Product: syz [ 456.443839][T14396] usb 8-1: Manufacturer: syz [ 456.445412][T14396] usb 8-1: SerialNumber: syz [ 456.448039][T14396] usb 8-1: config 0 descriptor?? [ 456.757733][T16732] fuse: Invalid rootmode [ 457.287478][ T837] usb 8-1: USB disconnect, device number 23 [ 457.424687][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.464683][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.828648][T16763] fuse: Invalid rootmode [ 458.920036][T16770] fuse: Unknown parameter 'use00000000000000000000' [ 459.265931][ T10] Process accounting resumed [ 459.435612][T16782] Process accounting resumed [ 459.504700][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 459.699610][T16790] fuse: Invalid rootmode [ 459.916485][T16798] fuse: Unknown parameter 'user_i00000000000000000000' [ 460.175535][T14396] Process accounting resumed [ 460.467089][T16805] Process accounting resumed [ 460.498408][ T6039] Process accounting resumed [ 460.554718][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 460.625087][T16817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.627556][T16817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.631855][T16817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.635986][T16817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.405383][T16829] fuse: Unknown parameter 'user_i00000000000000000000' [ 461.423976][T16812] Process accounting resumed [ 461.584688][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 462.459947][T16848] netlink: 'syz.1.3257': attribute type 5 has an invalid length. [ 462.624674][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 463.637196][ T53] Process accounting resumed [ 463.664667][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 464.581366][T16868] Process accounting resumed [ 464.704688][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 465.744677][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 466.784686][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 466.929524][T16914] fuse: Unknown parameter 'use00000000000000000000' [ 466.960780][ T53] Process accounting resumed [ 467.824731][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 467.876220][T16916] Process accounting resumed [ 468.478345][T16945] fuse: Unknown parameter 'use00000000000000000000' [ 468.864767][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 469.453129][ T24] Process accounting resumed [ 469.681290][T16976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 469.914738][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 469.934770][T14396] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 470.094687][T14396] usb 7-1: Using ep0 maxpacket: 16 [ 470.098932][T14396] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 470.101953][T14396] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.105787][T14396] usb 7-1: config 0 has no interfaces? [ 470.110194][T14396] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 470.113903][T14396] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.117220][T14396] usb 7-1: Product: syz [ 470.119056][T14396] usb 7-1: Manufacturer: syz [ 470.121003][T14396] usb 7-1: SerialNumber: syz [ 470.124106][T14396] usb 7-1: config 0 descriptor?? [ 470.283996][T16971] Process accounting resumed [ 470.922506][T15543] usb 7-1: USB disconnect, device number 28 [ 470.945368][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 471.431728][T17002] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 471.437382][T17003] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 471.704782][T14396] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 471.865481][T14396] usb 6-1: Using ep0 maxpacket: 16 [ 471.868812][T14396] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 471.871455][T14396] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.874776][T14396] usb 6-1: config 0 has no interfaces? [ 471.878361][T14396] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 471.881223][T14396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.884471][T14396] usb 6-1: Product: syz [ 471.886284][T14396] usb 6-1: Manufacturer: syz [ 471.888281][T14396] usb 6-1: SerialNumber: syz [ 471.891005][T14396] usb 6-1: config 0 descriptor?? [ 471.984730][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 472.781085][T14396] usb 6-1: USB disconnect, device number 21 [ 472.899240][T15543] Process accounting resumed [ 473.024717][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 473.078620][T17016] Process accounting resumed [ 473.241888][T17028] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 473.575285][T15543] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 473.824715][T15543] usb 6-1: Using ep0 maxpacket: 16 [ 473.828141][T15543] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 473.831364][T15543] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.836030][T15543] usb 6-1: config 0 has no interfaces? [ 473.840563][T15543] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 473.843932][T15543] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.846411][T15543] usb 6-1: Product: syz [ 473.847791][T15543] usb 6-1: Manufacturer: syz [ 473.849704][T15543] usb 6-1: SerialNumber: syz [ 473.853828][T15543] usb 6-1: config 0 descriptor?? [ 474.064683][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 474.294649][T17043] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 474.555289][ T10] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 474.570066][ T837] Process accounting resumed [ 474.714661][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 474.718757][ T10] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 474.722077][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.726212][ T10] usb 8-1: config 0 has no interfaces? [ 474.730916][ T10] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 474.734650][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.737870][ T10] usb 8-1: Product: syz [ 474.739324][ T10] usb 8-1: Manufacturer: syz [ 474.740736][ T10] usb 8-1: SerialNumber: syz [ 474.743403][ T10] usb 8-1: config 0 descriptor?? [ 474.905125][ T53] usb 6-1: USB disconnect, device number 22 [ 475.104690][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 475.436366][T17045] Process accounting resumed [ 475.464984][T15543] usb 8-1: USB disconnect, device number 24 [ 475.544289][T17069] fuse: Unknown parameter '00000000000000000000003' [ 475.591629][T17071] x_tables: duplicate underflow at hook 1 [ 475.594535][ T24] Process accounting resumed [ 475.753395][T17077] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 475.760963][T17066] Process accounting resumed [ 476.154678][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 476.773913][ T838] Process accounting resumed [ 476.955735][T17096] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 477.184695][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 477.224622][ T837] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 477.384771][ T837] usb 7-1: Using ep0 maxpacket: 16 [ 477.388310][ T837] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 477.391031][ T837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.394244][ T837] usb 7-1: config 0 has no interfaces? [ 477.398227][ T837] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 477.401049][ T837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.403473][ T837] usb 7-1: Product: syz [ 477.404887][ T837] usb 7-1: Manufacturer: syz [ 477.406333][ T837] usb 7-1: SerialNumber: syz [ 477.409064][ T837] usb 7-1: config 0 descriptor?? [ 477.652658][T17091] Process accounting resumed [ 477.761580][T17102] fuse: Unknown parameter '00000000000000000000003' [ 477.848676][T17105] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 478.114695][ T838] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 478.137294][ T53] usb 7-1: USB disconnect, device number 29 [ 478.224830][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 478.265247][ T838] usb 8-1: Using ep0 maxpacket: 16 [ 478.284889][ T838] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 478.291199][ T838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.295617][ T838] usb 8-1: config 0 has no interfaces? [ 478.300846][ T838] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 478.390272][ T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.392782][ T838] usb 8-1: Product: syz [ 478.394112][ T838] usb 8-1: Manufacturer: syz [ 478.395645][ T838] usb 8-1: SerialNumber: syz [ 478.398222][ T838] usb 8-1: config 0 descriptor?? [ 478.427802][ T838] Process accounting resumed [ 478.654667][T17112] Process accounting resumed [ 479.257188][ T6343] usb 8-1: USB disconnect, device number 25 [ 479.264662][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 479.426827][ T10] Process accounting resumed [ 480.010945][T17143] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 480.118359][ T6343] Process accounting resumed [ 480.304679][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.307208][T17146] Process accounting resumed [ 480.351299][T17136] Process accounting resumed [ 481.344744][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 481.441011][T17166] fuse: Unknown parameter 'grou00000000000000000000' [ 481.538947][T17170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3343'. [ 481.611779][T17170] binder: 17169:17170 ioctl c0306201 80000780 returned -14 [ 482.384770][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 482.633224][ T10] Process accounting resumed [ 482.867481][T17197] fuse: Bad value for 'fd' [ 482.925482][T17201] fuse: Unknown parameter 'grou00000000000000000000' [ 483.424668][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 483.571215][T17189] Process accounting resumed [ 483.690897][ T53] Process accounting resumed [ 483.899603][T17220] Process accounting resumed [ 484.474707][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.491905][T17232] fuse: Bad value for 'fd' [ 484.546433][T17236] fuse: Unknown parameter 'grou00000000000000000000' [ 484.626799][T17241] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 484.884698][ T6343] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 485.034713][ T6343] usb 7-1: Using ep0 maxpacket: 16 [ 485.038762][ T6343] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 485.041538][ T6343] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.044896][ T6343] usb 7-1: config 0 has no interfaces? [ 485.048814][ T6343] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 485.051729][ T6343] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.054439][ T6343] usb 7-1: Product: syz [ 485.056030][ T6343] usb 7-1: Manufacturer: syz [ 485.057559][ T6343] usb 7-1: SerialNumber: syz [ 485.060551][ T6343] usb 7-1: config 0 descriptor?? [ 485.505047][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 485.767360][ T24] Process accounting resumed [ 485.780420][T14396] usb 7-1: USB disconnect, device number 30 [ 485.952393][T17252] Process accounting resumed [ 486.291347][T17268] fuse: Bad value for 'fd' [ 486.355151][T17272] fuse: Unknown parameter 'group_i00000000000000000000' [ 486.554702][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.514303][T17295] fuse: Unknown parameter 'fd00000000000000000000003' [ 487.594676][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.751611][ T6343] Process accounting resumed [ 487.838551][T17299] netlink: 'syz.2.3376': attribute type 5 has an invalid length. [ 488.309382][T17304] fuse: Unknown parameter '0x0000000000000003' [ 488.353296][T17306] fuse: Unknown parameter 'group_i00000000000000000000' [ 488.467011][T17293] Process accounting resumed [ 488.624739][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 489.379797][T17334] netlink: 'syz.1.3385': attribute type 5 has an invalid length. [ 489.664694][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 489.833211][T17343] fuse: Unknown parameter '0x0000000000000003' [ 490.299742][T17353] fuse: Unknown parameter 'group_i00000000000000000000' [ 490.478988][ T10] Process accounting resumed [ 490.704705][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 491.397726][T17361] Process accounting resumed [ 491.409493][T17372] netlink: 'syz.0.3394': attribute type 5 has an invalid length. [ 491.452335][T17377] fuse: Unknown parameter '0x0000000000000003' [ 491.544265][ T837] Process accounting resumed [ 491.699633][T17382] Process accounting resumed [ 491.754679][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.514996][T17403] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 492.770760][T17405] netlink: 'syz.3.3404': attribute type 5 has an invalid length. [ 492.795059][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.801314][T17410] fuse: Unknown parameter '0x0000000000000003' [ 492.828786][ T53] Process accounting resumed [ 493.834742][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 494.120641][T17407] Process accounting resumed [ 494.864664][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.101869][T17441] netlink: 'syz.2.3414': attribute type 5 has an invalid length. [ 495.683516][T15543] Process accounting resumed [ 495.904687][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 496.657485][T17463] Process accounting resumed [ 496.711695][T17479] netlink: 'syz.0.3423': attribute type 5 has an invalid length. [ 496.944838][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 497.263404][T17489] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 497.671656][T17508] netlink: 'syz.0.3432': attribute type 5 has an invalid length. [ 497.824733][ T5965] Bluetooth: hci3: command 0x0406 tx timeout [ 497.984803][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 498.742921][T17529] fuse: Unknown parameter 'fd0x0000000000000003' [ 498.756841][T17531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3437'. [ 498.829175][T17531] binder: 17530:17531 ioctl c0306201 80000780 returned -14 [ 499.024718][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.078938][T17541] netlink: 'syz.0.3441': attribute type 5 has an invalid length. [ 500.064683][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 500.625737][T17566] fuse: Unknown parameter 'fd0x0000000000000003' [ 500.716689][T17570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3449'. [ 500.790761][T17570] binder: 17569:17570 ioctl c0306201 80000780 returned -14 [ 500.848087][T17574] netlink: 'syz.3.3450': attribute type 5 has an invalid length. [ 500.866475][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.868568][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.985773][T17582] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 501.030341][ T10] Process accounting resumed [ 501.104702][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 501.239931][T17580] Process accounting resumed [ 501.263278][T17592] fuse: Bad value for 'user_id' [ 501.265320][T17592] fuse: Bad value for 'user_id' [ 501.478351][T17594] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 501.734701][ T837] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 501.894700][ T837] usb 6-1: Using ep0 maxpacket: 16 [ 501.898568][ T837] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 501.901333][ T837] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.904629][ T837] usb 6-1: config 0 has no interfaces? [ 501.910508][ T837] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 501.913305][ T837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.917323][ T837] usb 6-1: Product: syz [ 501.918724][ T837] usb 6-1: Manufacturer: syz [ 501.920576][ T837] usb 6-1: SerialNumber: syz [ 501.923498][ T837] usb 6-1: config 0 descriptor?? [ 501.931470][T17602] netlink: 'syz.0.3459': attribute type 5 has an invalid length. [ 501.974660][T17607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3461'. [ 502.009254][T17609] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 502.049010][T17607] binder: 17606:17607 ioctl c0306201 80000780 returned -14 [ 502.154680][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 502.363178][T17620] fuse: Bad value for 'fd' [ 502.854534][ T837] usb 6-1: USB disconnect, device number 23 [ 503.154638][ T838] Process accounting resumed [ 503.184670][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 503.246064][T17634] netlink: 'syz.0.3468': attribute type 5 has an invalid length. [ 503.421042][T17643] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 503.906883][T17651] ipvlan5: entered promiscuous mode [ 503.908566][T17631] Process accounting resumed [ 504.070476][T17655] overlayfs: missing 'lowerdir' [ 504.116409][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3476'. [ 504.195946][T17660] binder: 17659:17660 ioctl c0306201 80000780 returned -14 [ 504.224694][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 504.496591][T17667] netlink: 'syz.0.3478': attribute type 5 has an invalid length. [ 504.516275][T17669] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 504.605685][ T24] Process accounting resumed [ 504.794687][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 504.803385][T17675] Process accounting resumed [ 505.264709][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 505.600773][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 505.666119][ T10] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 505.669930][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.684470][ T10] usb 7-1: config 0 has no interfaces? [ 505.689552][ T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 505.693951][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.697975][ T10] usb 7-1: Product: syz [ 505.699843][ T10] usb 7-1: Manufacturer: syz [ 505.702236][ T10] usb 7-1: SerialNumber: syz [ 505.706544][ T10] usb 7-1: config 0 descriptor?? [ 505.716565][T17695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3485'. [ 505.786925][T17695] binder: 17694:17695 ioctl c0306201 80000780 returned -14 [ 506.304756][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 506.522566][ T53] usb 7-1: USB disconnect, device number 31 [ 506.908202][T17714] ipvlan7: entered promiscuous mode [ 506.975708][T17717] ipvlan5: entered promiscuous mode [ 507.007399][T17718] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 507.148989][T17723] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 507.344659][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 507.474662][ T53] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 507.634672][ T53] usb 8-1: Using ep0 maxpacket: 16 [ 507.646204][ T53] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 507.648824][ T53] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.656240][ T53] usb 8-1: config 0 has no interfaces? [ 507.659820][ T53] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 507.664291][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.669151][ T53] usb 8-1: Product: syz [ 507.671391][ T53] usb 8-1: Manufacturer: syz [ 507.673829][ T53] usb 8-1: SerialNumber: syz [ 507.677995][ T53] usb 8-1: config 0 descriptor?? [ 508.384685][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 508.413250][ T837] usb 8-1: USB disconnect, device number 26 [ 508.495364][T17735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3496'. [ 508.588285][T17735] binder: 17734:17735 ioctl c0306201 80000780 returned -14 [ 508.611349][T17739] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 509.424669][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 510.211322][T17765] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 510.464742][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 511.055853][T14396] Process accounting resumed [ 511.504688][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 511.947657][T17773] Process accounting resumed [ 512.186113][T17787] overlayfs: missing 'lowerdir' [ 512.544691][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 513.257026][T17807] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 513.584746][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 514.162375][ T838] Process accounting resumed [ 514.624746][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 514.915347][T17818] Process accounting resumed [ 515.664771][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 516.027116][ T24] Process accounting resumed [ 516.714741][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 516.801940][T17857] Process accounting resumed [ 517.488946][ T837] Process accounting resumed [ 517.704426][T17877] Process accounting resumed [ 517.744668][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 518.784802][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 519.824693][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 519.932906][T17932] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 520.874671][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 521.341745][T17957] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 521.346986][T17957] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 521.904764][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 522.166881][T17963] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 522.944727][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 523.248016][T17994] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 523.254785][T17994] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 523.984792][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 524.066157][T18006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3563'. [ 524.185064][T18009] binder: BINDER_SET_CONTEXT_MGR already set [ 524.186946][T18009] binder: 18005:18009 ioctl 4018620d 80000040 returned -16 [ 524.190969][ T53] Process accounting resumed [ 524.202014][T18009] binder: 18005:18009 ioctl c0306201 80000780 returned -14 [ 524.374975][T18008] Process accounting resumed [ 524.561347][T18025] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 524.675768][ T34] Process accounting resumed [ 525.024666][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 525.237154][T18034] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 525.240732][T18034] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 525.440041][T18039] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 525.541305][ T6343] Process accounting resumed [ 525.541366][T18029] Process accounting resumed [ 526.064720][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 526.314710][T18042] Process accounting resumed [ 526.549836][ T5996] Process accounting resumed [ 527.114659][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 527.549488][T18053] Process accounting resumed [ 527.764362][T18070] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 527.865234][T18075] input: syz0 as /devices/virtual/input/input30 [ 528.090024][T18084] overlayfs: missing 'lowerdir' [ 528.144750][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 529.184655][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 529.237939][T18103] fuse: Unknown parameter 'use00000000000000000000' [ 529.521671][ T53] Process accounting resumed [ 529.761276][T18108] Process accounting resumed [ 530.224722][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.653157][T18128] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 531.264654][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 531.827469][T18141] ipvlan6: entered promiscuous mode [ 532.304672][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.832402][T18156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3602'. [ 532.901679][T18156] binder: 18155:18156 ioctl c0306201 80000780 returned -14 [ 533.344800][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 534.034901][ T6039] Process accounting resumed [ 534.394694][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 534.896347][T18185] Process accounting resumed [ 535.367475][T18204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3612'. [ 535.434703][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.446814][T18204] binder: 18203:18204 ioctl c0306201 80000780 returned -14 [ 535.479703][ T5996] Process accounting resumed [ 535.725274][T18209] Process accounting resumed [ 535.743003][T18214] fuse: Unknown parameter 'user_i00000000000000000000' [ 535.865963][T18223] netlink: 'syz.1.3618': attribute type 5 has an invalid length. [ 535.913967][T18226] ipvlan3: entered promiscuous mode [ 536.126625][T18232] ipvlan7: entered promiscuous mode [ 536.129527][T15992] bridge_slave_1: left promiscuous mode [ 536.132848][T15992] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.141242][T15992] bridge_slave_0: left promiscuous mode [ 536.143084][T15992] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.313828][T15992] bond3 (unregistering): (slave gretap1): Releasing active interface [ 536.562612][T15992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.567597][T15992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.571114][T15992] bond0 (unregistering): Released all slaves [ 536.584378][T15992] bond1 (unregistering): (slave bond2): Releasing backup interface [ 536.588438][T15992] bond1 (unregistering): Released all slaves [ 536.665154][T15992] bond2 (unregistering): Released all slaves [ 536.736153][T15992] bond3 (unregistering): Released all slaves [ 536.853728][T15992] tipc: Disabling bearer [ 536.865130][T15992] tipc: Disabling bearer [ 536.867938][T15992] tipc: Left network mode [ 536.909453][T18241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3622'. [ 536.991059][T18241] binder: 18240:18241 ioctl c0306201 80000780 returned -14 [ 537.119731][T15992] hsr_slave_0: left promiscuous mode [ 537.124538][T15992] hsr_slave_1: left promiscuous mode [ 537.132965][T15992] batman_adv: batadv0: Removing interface: dummy0 [ 537.152223][T15992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.157778][T15992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.209500][T18254] fuse: Unknown parameter 'user_i00000000000000000000' [ 537.551650][ T10] Process accounting resumed [ 537.629662][T18260] Process accounting resumed [ 538.213053][T15992] team0 (unregistering): Port device team_slave_1 removed [ 538.312184][T15992] team0 (unregistering): Port device team_slave_0 removed [ 539.007903][T18283] ipvlan6: entered promiscuous mode [ 539.231197][T15992] IPVS: stop unused estimator thread 0... [ 539.593450][T18279] Process accounting resumed [ 539.623795][T18291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3634'. [ 539.698300][T18291] binder: 18290:18291 ioctl c0306201 80000780 returned -14 [ 539.807942][T18297] ipvlan7: entered promiscuous mode [ 539.893955][T18300] input: syz0 as /devices/virtual/input/input31 [ 541.288658][T18308] overlayfs: missing 'workdir' [ 541.361244][ T6343] Process accounting resumed [ 542.351730][T18315] Process accounting resumed [ 542.445883][T18337] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 542.724651][T14396] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 542.874768][T14396] usb 6-1: Using ep0 maxpacket: 16 [ 542.895367][T14396] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 542.898701][T14396] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.902823][T14396] usb 6-1: config 0 has no interfaces? [ 542.908471][T14396] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 542.912377][T14396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.915636][T14396] usb 6-1: Product: syz [ 542.917010][T14396] usb 6-1: Manufacturer: syz [ 542.918550][T14396] usb 6-1: SerialNumber: syz [ 542.921378][T14396] usb 6-1: config 0 descriptor?? [ 543.559834][ T6039] usb 6-1: USB disconnect, device number 24 [ 543.638619][T18355] input: syz0 as /devices/virtual/input/input32 [ 544.724134][T15543] Process accounting resumed [ 545.269295][T18373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3655'. [ 545.498326][T18370] Process accounting resumed [ 546.091612][T18383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3658'. [ 546.163683][T18383] binder: 18382:18383 ioctl c0306201 80000780 returned -14 [ 546.450965][T18395] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 547.506431][T18423] input: syz0 as /devices/virtual/input/input33 [ 548.331162][T18429] input: syz0 as /devices/virtual/input/input34 [ 548.604642][ T5996] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 548.764728][ T5996] usb 8-1: Using ep0 maxpacket: 16 [ 548.768315][ T5996] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 548.771334][ T5996] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.774868][ T5996] usb 8-1: config 0 has no interfaces? [ 548.778602][ T5996] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 548.781854][ T5996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.784728][ T5996] usb 8-1: Product: syz [ 548.786468][ T5996] usb 8-1: Manufacturer: syz [ 548.788297][ T5996] usb 8-1: SerialNumber: syz [ 548.790775][ T5996] usb 8-1: config 0 descriptor?? [ 549.705514][ T5996] usb 8-1: USB disconnect, device number 27 [ 550.239154][T18448] ipvlan8: entered promiscuous mode [ 550.517981][T18457] fuse: Bad value for 'fd' [ 550.661638][T18462] input: syz0 as /devices/virtual/input/input35 [ 552.447732][T18482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3686'. [ 552.498221][T18485] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 552.528894][T18489] fuse: Bad value for 'fd' [ 552.673017][T18500] input: syz0 as /devices/virtual/input/input36 [ 553.607055][T18508] input: syz0 as /devices/virtual/input/input37 [ 553.722809][T18511] ipvlan8: entered promiscuous mode [ 553.746578][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3695'. [ 553.878576][T18521] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 553.968777][T18524] fuse: Bad value for 'fd' [ 554.441657][T15543] Process accounting resumed [ 554.994779][ T5996] Process accounting resumed [ 555.163148][T18548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3705'. [ 555.297792][T18554] input: syz0 as /devices/virtual/input/input38 [ 555.494888][T18557] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 555.515046][T18537] Process accounting resumed [ 555.519266][T18543] Process accounting resumed [ 555.544246][T18559] fuse: Unknown parameter '0x0000000000000004' [ 555.954634][ T5996] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 556.155842][ T5996] usb 8-1: Using ep0 maxpacket: 16 [ 556.234976][ T5996] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 556.246087][ T5996] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.249301][ T5996] usb 8-1: config 0 has no interfaces? [ 556.271511][ T5996] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 556.274278][ T5996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.276872][ T5996] usb 8-1: Product: syz [ 556.278312][ T5996] usb 8-1: Manufacturer: syz [ 556.279868][ T5996] usb 8-1: SerialNumber: syz [ 556.283168][ T5996] usb 8-1: config 0 descriptor?? [ 556.644017][T18579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3714'. [ 556.728430][T18584] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 556.793386][T18585] input: syz0 as /devices/virtual/input/input39 [ 557.476216][ T837] Process accounting resumed [ 557.908206][ T837] usb 8-1: USB disconnect, device number 28 [ 557.948550][T18593] fuse: Unknown parameter '0x0000000000000004' [ 558.048682][T18589] Process accounting resumed [ 558.239425][T18607] ipvlan4: entered promiscuous mode [ 558.265270][T18608] ipvlan8: entered promiscuous mode [ 558.983553][T18616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3723'. [ 559.123681][T18623] input: syz0 as /devices/virtual/input/input40 [ 559.916966][T18633] ipvlan9: entered promiscuous mode [ 560.187725][T18644] input: syz0 as /devices/virtual/input/input41 [ 560.826813][ T837] Process accounting resumed [ 561.118681][T18654] input: syz0 as /devices/virtual/input/input42 [ 561.163871][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3732'. [ 561.374950][T18649] Process accounting resumed [ 561.422553][T18665] ipvlan9: entered promiscuous mode [ 561.561214][T18673] input: syz0 as /devices/virtual/input/input43 [ 562.308285][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.310293][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.748306][ T34] Process accounting resumed [ 563.130914][T18697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3741'. [ 563.642297][T18685] Process accounting resumed [ 563.647555][ T60] Process accounting resumed [ 563.810361][T18707] Process accounting resumed [ 563.899610][T18719] input: syz0 as /devices/virtual/input/input44 [ 564.805901][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'. [ 565.752135][ T5996] Process accounting resumed [ 565.972531][T18747] Process accounting resumed [ 567.266329][ T6343] Process accounting resumed [ 568.004054][T18770] Process accounting resumed [ 568.408853][T18801] input: syz0 as /devices/virtual/input/input45 [ 569.861858][T18814] ipvlan10: entered promiscuous mode [ 570.136901][T18818] ipvlan10: entered promiscuous mode [ 570.908411][T18821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3781'. [ 570.992214][T18821] binder: 18819:18821 ioctl c0306201 80000780 returned -14 [ 571.437690][T18837] input: syz0 as /devices/virtual/input/input46 [ 571.637536][ T60] Process accounting resumed [ 572.562281][T18836] Process accounting resumed [ 572.776406][T18848] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 575.474696][ T60] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 575.754635][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 575.827144][ T60] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 575.848014][ T60] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.866752][ T60] usb 7-1: config 0 has no interfaces? [ 575.916096][ T60] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 575.918956][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.921449][ T60] usb 7-1: Product: syz [ 575.922825][ T60] usb 7-1: Manufacturer: syz [ 575.924319][ T60] usb 7-1: SerialNumber: syz [ 575.941009][ T60] usb 7-1: config 0 descriptor?? [ 576.109301][T18884] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 576.665226][ T60] usb 7-1: USB disconnect, device number 32 [ 577.139413][ T34] Process accounting resumed [ 577.320541][T18901] Process accounting resumed [ 577.912687][T18920] input: syz0 as /devices/virtual/input/input47 [ 578.062876][T18922] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 578.946468][ T6343] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 578.981761][ T34] Process accounting resumed [ 579.124807][ T6343] usb 6-1: Using ep0 maxpacket: 16 [ 579.129487][ T6343] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 579.133065][ T6343] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.137313][ T6343] usb 6-1: config 0 has no interfaces? [ 579.141375][ T6343] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 579.144242][ T6343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.146806][ T6343] usb 6-1: Product: syz [ 579.148142][ T6343] usb 6-1: Manufacturer: syz [ 579.149619][ T6343] usb 6-1: SerialNumber: syz [ 579.152175][ T6343] usb 6-1: config 0 descriptor?? [ 579.209314][T18938] Process accounting resumed [ 579.362839][ T6343] usb 6-1: USB disconnect, device number 25 [ 580.384391][ T5996] Process accounting resumed [ 580.407337][T18961] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 580.525496][ T53] Process accounting resumed [ 580.696939][T18957] Process accounting resumed [ 580.966194][ T34] Process accounting resumed [ 581.117103][T18978] Process accounting resumed [ 581.306683][T18968] Process accounting resumed [ 581.694670][T15543] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 581.854698][T15543] usb 6-1: Using ep0 maxpacket: 16 [ 581.857981][T15543] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 581.860721][T15543] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.863904][T15543] usb 6-1: config 0 has no interfaces? [ 581.867331][T15543] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 581.870308][T15543] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.872823][T15543] usb 6-1: Product: syz [ 581.874175][T15543] usb 6-1: Manufacturer: syz [ 581.875759][T15543] usb 6-1: SerialNumber: syz [ 581.879662][T15543] usb 6-1: config 0 descriptor?? [ 581.967453][T18999] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 582.639416][T15543] usb 6-1: USB disconnect, device number 26 [ 583.638456][T19020] ipvlan9: entered promiscuous mode [ 583.892285][ T53] Process accounting resumed [ 584.093591][T19027] Process accounting resumed [ 584.182783][T19033] input: syz0 as /devices/virtual/input/input48 [ 584.427946][T19035] netlink: 'syz.3.3826': attribute type 5 has an invalid length. [ 584.430354][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3826'. [ 585.453278][T19048] input: syz0 as /devices/virtual/input/input49 [ 587.251071][T19055] input: syz0 as /devices/virtual/input/input50 [ 587.359248][T19057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3833'. [ 587.377008][T19057] binder: BINDER_SET_CONTEXT_MGR already set [ 587.379112][T19057] binder: 19056:19057 ioctl 4018620d 80000040 returned -16 [ 587.384359][T19057] binder: 19056:19057 ioctl c0306201 80000780 returned -14 [ 588.171359][T19079] ipvlan11: entered promiscuous mode [ 589.389792][T19098] input: syz0 as /devices/virtual/input/input51 [ 590.153886][T19101] ipvlan11: entered promiscuous mode [ 590.378451][T19109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3846'. [ 590.383402][T19109] binder: BINDER_SET_CONTEXT_MGR already set [ 590.385853][T19109] binder: 19108:19109 ioctl 4018620d 80000040 returned -16 [ 590.388733][T19109] binder: 19108:19109 ioctl c0306201 80000780 returned -14 [ 590.594637][ T6343] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 590.595461][T19117] input: syz0 as /devices/virtual/input/input52 [ 590.744639][ T6343] usb 7-1: Using ep0 maxpacket: 16 [ 590.751896][ T6343] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 590.755662][ T6343] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.759301][ T6343] usb 7-1: config 0 has no interfaces? [ 590.763080][ T6343] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 590.766304][ T6343] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.768761][ T6343] usb 7-1: Product: syz [ 590.770377][ T6343] usb 7-1: Manufacturer: syz [ 590.772016][ T6343] usb 7-1: SerialNumber: syz [ 590.787874][ T6343] usb 7-1: config 0 descriptor?? [ 590.891860][T19123] input: syz0 as /devices/virtual/input/input53 [ 592.573600][ T53] usb 7-1: USB disconnect, device number 33 [ 593.697775][T19158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3857'. [ 593.948576][T19158] binder: 19157:19158 ioctl c0306201 80000780 returned -14 [ 595.343027][T19168] binder: 19167:19168 ioctl c0306201 80000780 returned -14 [ 595.684788][ T34] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 595.864710][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 595.869854][ T34] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 595.872638][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.876231][ T34] usb 7-1: config 0 has no interfaces? [ 595.880091][ T34] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 595.882944][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.885671][ T34] usb 7-1: Product: syz [ 595.887030][ T34] usb 7-1: Manufacturer: syz [ 595.888525][ T34] usb 7-1: SerialNumber: syz [ 595.895139][ T34] usb 7-1: config 0 descriptor?? [ 596.229181][T19195] input: syz0 as /devices/virtual/input/input54 [ 596.730378][ T24] usb 7-1: USB disconnect, device number 34 [ 597.801659][T19211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3869'. [ 597.892837][T19211] binder: 19210:19211 ioctl c0306201 80000780 returned -14 [ 597.961951][T19217] input: syz0 as /devices/virtual/input/input55 [ 600.749223][T19257] input: syz0 as /devices/virtual/input/input56 [ 601.899474][T19261] input: syz0 as /devices/virtual/input/input57 [ 602.025600][T19265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3881'. [ 602.161041][T19273] input: syz0 as /devices/virtual/input/input58 [ 602.531390][T19265] binder: 19264:19265 ioctl c0306201 80000780 returned -14 [ 602.769923][ T60] Process accounting resumed [ 603.021946][T19281] Process accounting resumed [ 603.629703][T19298] ipvlan12: entered promiscuous mode [ 604.864842][T19319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3895'. [ 604.885873][T19319] binder: BINDER_SET_CONTEXT_MGR already set [ 604.887899][T19319] binder: 19318:19319 ioctl 4018620d 80000040 returned -16 [ 604.890121][T19319] binder: 19318:19319 ioctl c0306201 80000780 returned -14 [ 604.980220][ T60] Process accounting resumed [ 605.261407][T19324] Process accounting resumed [ 605.282216][T19333] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 606.402222][T19356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3905'. [ 606.408537][T19356] binder: BINDER_SET_CONTEXT_MGR already set [ 606.414788][T19356] binder: 19355:19356 ioctl 4018620d 80000040 returned -16 [ 606.418544][T19356] binder: 19355:19356 ioctl c0306201 80000780 returned -14 [ 606.803728][T14396] Process accounting resumed [ 606.981264][T19372] Process accounting resumed [ 608.695861][T19395] ipvlan5: entered promiscuous mode [ 611.813325][T19444] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 612.138631][T19451] input: syz0 as /devices/virtual/input/input59 [ 612.259039][T19457] input: syz0 as /devices/virtual/input/input60 [ 613.128887][ T24] Process accounting resumed [ 614.318503][T19469] Process accounting resumed [ 614.426694][T19494] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 614.929680][T19501] input: syz0 as /devices/virtual/input/input61 [ 615.156133][T19504] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 615.338155][T19508] input: syz0 as /devices/virtual/input/input62 [ 615.967749][ T5996] Process accounting resumed [ 616.214636][ T838] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 616.374642][ T838] usb 7-1: Using ep0 maxpacket: 16 [ 616.439055][ T838] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 616.442586][ T838] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.483872][ T838] usb 7-1: config 0 has no interfaces? [ 616.630464][ T838] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 616.662101][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.664592][ T838] usb 7-1: Product: syz [ 616.665975][ T838] usb 7-1: Manufacturer: syz [ 616.667448][ T838] usb 7-1: SerialNumber: syz [ 616.706169][ T838] usb 7-1: config 0 descriptor?? [ 616.834273][T19510] Process accounting resumed [ 617.061680][ T5996] Process accounting resumed [ 617.388716][T19523] Process accounting resumed [ 618.360446][ T838] usb 7-1: USB disconnect, device number 35 [ 618.425141][T19539] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 618.432522][T19541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3949'. [ 618.524400][T19546] input: syz0 as /devices/virtual/input/input63 [ 618.534363][T19541] binder: 19540:19541 ioctl c0306201 80000780 returned -14 [ 618.804448][T19552] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 619.064871][ T34] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 619.214681][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 619.217897][ T34] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 619.220377][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.313933][ T34] usb 6-1: config 0 has no interfaces? [ 619.337593][ T34] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 619.340432][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.342857][ T34] usb 6-1: Product: syz [ 619.344241][ T34] usb 6-1: Manufacturer: syz [ 619.541734][ T34] usb 6-1: SerialNumber: syz [ 619.547251][ T34] usb 6-1: config 0 descriptor?? [ 619.577750][T19553] ipvlan6: entered promiscuous mode [ 620.197892][T19570] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 620.716149][ T5996] usb 6-1: USB disconnect, device number 27 [ 622.097128][T19594] ipvlan10: entered promiscuous mode [ 622.136595][T14396] Process accounting resumed [ 622.585809][ T60] Process accounting resumed [ 622.710698][T19592] Process accounting resumed [ 622.760602][T19598] Process accounting resumed [ 623.312270][T19616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3967'. [ 623.387937][T19616] binder: 19615:19616 ioctl c0306201 80000780 returned -14 [ 623.748928][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.751400][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.775585][T15543] Process accounting resumed [ 624.078399][T14396] Process accounting resumed [ 624.158379][T19639] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3974'. [ 624.224667][ T838] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 624.266219][T19643] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 624.374691][ T838] usb 7-1: Using ep0 maxpacket: 16 [ 624.377524][ T838] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 624.380086][ T838] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.383209][ T838] usb 7-1: config 0 has no interfaces? [ 624.386689][ T838] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 624.389972][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.392451][ T838] usb 7-1: Product: syz [ 624.393780][ T838] usb 7-1: Manufacturer: syz [ 624.395301][ T838] usb 7-1: SerialNumber: syz [ 624.398102][ T838] usb 7-1: config 0 descriptor?? [ 624.534673][ T60] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 624.627223][T19623] Process accounting resumed [ 624.684641][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 624.687484][ T60] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 624.690214][ T60] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.693840][ T60] usb 8-1: config 0 has no interfaces? [ 624.697539][ T60] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 624.700492][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.703068][ T60] usb 8-1: Product: syz [ 624.704465][ T60] usb 8-1: Manufacturer: syz [ 624.706454][ T60] usb 8-1: SerialNumber: syz [ 624.709321][ T60] usb 8-1: config 0 descriptor?? [ 624.961212][T19635] Process accounting resumed [ 625.062463][T19650] input: syz0 as /devices/virtual/input/input64 [ 625.458978][ T60] usb 7-1: USB disconnect, device number 36 [ 625.520379][ T838] usb 8-1: USB disconnect, device number 29 [ 625.672311][T19659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3981'. [ 625.913375][T19659] binder: 19658:19659 ioctl c0306201 80000780 returned -14 [ 626.099590][T15543] Process accounting resumed [ 627.000789][T19666] Process accounting resumed [ 627.134536][T19686] input: syz0 as /devices/virtual/input/input65 [ 628.081054][T19693] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 628.223968][T19701] input: syz0 as /devices/virtual/input/input66 [ 631.136874][ T6039] Process accounting resumed [ 631.814711][T19728] input: syz0 as /devices/virtual/input/input67 [ 632.016450][T19714] Process accounting resumed [ 632.055690][T19733] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 633.910016][ T24] Process accounting resumed [ 634.144929][T19759] Process accounting resumed [ 634.295360][ T24] Process accounting resumed [ 634.524373][T19764] Process accounting resumed [ 634.746296][T19781] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 635.445902][T19790] ipvlan7: entered promiscuous mode [ 635.681915][T19796] ipvlan12: entered promiscuous mode [ 635.835542][ T24] Process accounting resumed [ 636.080203][T19799] Process accounting resumed [ 636.393631][T19813] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 636.527779][T19815] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 636.924654][ T6021] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 637.524632][ T6021] usb 7-1: Using ep0 maxpacket: 16 [ 637.527667][ T6021] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 637.530271][ T6021] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.533419][ T6021] usb 7-1: config 0 has no interfaces? [ 637.537017][ T6021] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 637.539827][ T6021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.542308][ T6021] usb 7-1: Product: syz [ 637.543622][ T6021] usb 7-1: Manufacturer: syz [ 637.545167][ T6021] usb 7-1: SerialNumber: syz [ 637.547841][ T6021] usb 7-1: config 0 descriptor?? [ 637.643176][T19827] ipvlan13: entered promiscuous mode [ 638.303004][ T6021] usb 7-1: USB disconnect, device number 37 [ 638.535479][T19840] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 638.541359][ T6343] Process accounting resumed [ 638.734221][T19838] Process accounting resumed [ 638.833006][T19847] input: syz0 as /devices/virtual/input/input68 [ 638.847520][ T838] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 639.018289][ T838] usb 7-1: Using ep0 maxpacket: 16 [ 639.111938][ T838] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 639.115091][ T838] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.118258][ T838] usb 7-1: config 0 has no interfaces? [ 639.133612][ T838] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 639.140648][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.143157][ T838] usb 7-1: Product: syz [ 639.144469][ T838] usb 7-1: Manufacturer: syz [ 639.212007][ T838] usb 7-1: SerialNumber: syz [ 639.260169][ T838] usb 7-1: config 0 descriptor?? [ 639.863949][T19852] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 640.065852][ T6021] Process accounting resumed [ 640.272200][ T6343] usb 7-1: USB disconnect, device number 38 [ 640.835493][T19867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4035'. [ 640.874339][T19854] Process accounting resumed [ 640.879903][T19868] input: syz0 as /devices/virtual/input/input69 [ 641.013590][T19867] binder: 19866:19867 ioctl c0306201 80000780 returned -14 [ 641.590133][T19887] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 641.697320][T19884] ipvlan11: entered promiscuous mode [ 643.166627][T19909] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 644.438891][T19921] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 644.531070][T19922] ipvlan13: entered promiscuous mode [ 644.540333][T19925] ipvlan14: entered promiscuous mode [ 646.287346][T19956] input: syz0 as /devices/virtual/input/input70 [ 647.281128][T19964] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 647.341124][T19966] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 648.438907][T19989] ipvlan14: entered promiscuous mode [ 649.464371][T19998] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 654.709844][T20071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4085'. [ 655.165194][T20073] binder: 20067:20073 ioctl c0306201 80000780 returned -14 [ 656.330167][T20104] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 656.584664][ T6021] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 656.736708][ T6021] usb 8-1: Using ep0 maxpacket: 16 [ 656.741177][ T6021] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 656.744736][ T6021] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.748289][ T6021] usb 8-1: config 0 has no interfaces? [ 656.752916][ T6021] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 656.757049][ T6021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.759642][ T6021] usb 8-1: Product: syz [ 656.761115][ T6021] usb 8-1: Manufacturer: syz [ 656.763694][ T6021] usb 8-1: SerialNumber: syz [ 656.767738][ T6021] usb 8-1: config 0 descriptor?? [ 657.056468][ T6021] Process accounting resumed [ 657.578903][T20119] input: syz0 as /devices/virtual/input/input73 [ 657.672093][T15543] usb 8-1: USB disconnect, device number 30 [ 657.803037][T20113] Process accounting resumed [ 659.021524][T20141] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 659.391530][T20153] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 659.634786][ T60] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 659.794659][ T60] usb 6-1: Using ep0 maxpacket: 16 [ 659.800378][ T60] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 659.803360][ T60] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.808058][ T60] usb 6-1: config 0 has no interfaces? [ 659.812257][ T60] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 659.816020][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.818983][ T60] usb 6-1: Product: syz [ 659.821391][ T60] usb 6-1: Manufacturer: syz [ 659.823164][ T60] usb 6-1: SerialNumber: syz [ 659.846586][ T60] usb 6-1: config 0 descriptor?? [ 660.099608][T20163] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 660.364603][ T6021] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 660.378649][T20169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4110'. [ 660.464647][T20169] binder: 20167:20169 ioctl c0306201 80000780 returned -14 [ 660.514706][ T6021] usb 7-1: Using ep0 maxpacket: 16 [ 660.517641][ T6021] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 660.520198][ T6021] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.523338][ T6021] usb 7-1: config 0 has no interfaces? [ 660.526787][ T6021] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 660.529581][ T6021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.532038][ T6021] usb 7-1: Product: syz [ 660.533362][ T6021] usb 7-1: Manufacturer: syz [ 660.535679][ T6021] usb 7-1: SerialNumber: syz [ 660.538363][ T6021] usb 7-1: config 0 descriptor?? [ 660.659226][T15543] Process accounting resumed [ 660.814955][T20175] Process accounting resumed [ 660.834457][T20180] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 660.945542][ T34] usb 6-1: USB disconnect, device number 28 [ 661.256953][T15543] usb 7-1: USB disconnect, device number 39 [ 662.267952][T20206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4120'. [ 662.346796][T20206] binder: 20205:20206 ioctl c0306201 80000780 returned -14 [ 662.389012][ T60] Process accounting resumed [ 662.601438][T20212] Process accounting resumed [ 662.708305][T20223] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 663.034662][ T60] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 663.194679][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 663.198435][ T60] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 663.201755][ T60] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.205332][ T60] usb 7-1: config 0 has no interfaces? [ 663.209321][ T60] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 663.212475][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.215339][ T60] usb 7-1: Product: syz [ 663.216864][ T60] usb 7-1: Manufacturer: syz [ 663.218407][ T60] usb 7-1: SerialNumber: syz [ 663.222682][ T60] usb 7-1: config 0 descriptor?? [ 664.187599][ T60] usb 7-1: USB disconnect, device number 40 [ 664.242129][T15543] Process accounting resumed [ 665.258954][T20230] Process accounting resumed [ 665.273905][T20239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4128'. [ 665.362239][T20239] binder: 20238:20239 ioctl c0306201 80000780 returned -14 [ 665.953867][T20253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4131'. [ 666.181256][T20259] input: syz0 as /devices/virtual/input/input74 [ 666.254439][T20253] binder: 20252:20253 ioctl c0306201 80000780 returned -14 [ 666.990479][ T837] Process accounting resumed [ 667.361558][T20275] Process accounting resumed [ 667.565160][T20286] fuse: Unknown parameter 'use00000000000000000000' [ 668.470538][T20300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4143'. [ 668.540057][T20308] input: syz0 as /devices/virtual/input/input75 [ 668.573044][T20300] binder: 20299:20300 ioctl c0306201 80000780 returned -14 [ 668.833460][ T5996] Process accounting resumed [ 669.591263][ T60] Process accounting resumed [ 669.666897][T20314] Process accounting resumed [ 669.821032][ T6021] Process accounting resumed [ 669.992733][T20316] Process accounting resumed [ 670.097863][T20326] Process accounting resumed [ 672.499598][T20363] netlink: 'syz.0.4161': attribute type 5 has an invalid length. [ 672.663739][ T53] Process accounting resumed [ 673.143574][T20370] Process accounting resumed [ 674.037005][T20390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4170'. [ 674.898971][T20390] binder: 20389:20390 ioctl c0306201 80000780 returned -14 [ 674.980094][T20396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4172'. [ 675.055329][T20396] binder: 20395:20396 ioctl c0306201 80000780 returned -14 [ 675.313759][ T6021] Process accounting resumed [ 676.046995][T20410] Process accounting resumed [ 676.239606][ T6021] Process accounting resumed [ 676.260087][ T53] Process accounting resumed [ 677.126183][T20431] Process accounting resumed [ 677.130519][T20424] Process accounting resumed [ 677.292602][T20447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4183'. [ 677.521388][T20441] binder: 20440:20441 ioctl c0306201 80000780 returned -14 [ 677.980279][T20447] binder: 20446:20447 ioctl c0306201 80000780 returned -14 [ 681.000032][T20504] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 681.276153][ T837] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 681.594806][ T837] usb 6-1: Using ep0 maxpacket: 16 [ 681.632089][ T837] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 681.635819][ T837] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.640015][ T837] usb 6-1: config 0 has no interfaces? [ 681.725103][ T837] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 681.728798][ T837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.732064][ T837] usb 6-1: Product: syz [ 681.734104][ T837] usb 6-1: Manufacturer: syz [ 681.909335][ T837] usb 6-1: SerialNumber: syz [ 681.914290][ T837] usb 6-1: config 0 descriptor?? [ 683.457065][ T838] usb 6-1: USB disconnect, device number 29 [ 685.187438][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.189488][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.841065][ T5996] Process accounting resumed [ 686.031601][T20572] Process accounting resumed [ 686.109606][T20578] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 686.344661][ T837] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 686.494966][ T837] usb 8-1: Using ep0 maxpacket: 16 [ 686.498242][ T837] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 686.501555][ T837] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.506174][ T837] usb 8-1: config 0 has no interfaces? [ 686.510730][ T837] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 686.514180][ T837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.516682][ T837] usb 8-1: Product: syz [ 686.517939][ T837] usb 8-1: Manufacturer: syz [ 686.519326][ T837] usb 8-1: SerialNumber: syz [ 686.521823][ T837] usb 8-1: config 0 descriptor?? [ 687.410892][ T53] usb 8-1: USB disconnect, device number 31 [ 687.990037][T20600] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 688.907743][ T24] Process accounting resumed [ 689.229417][T20609] Process accounting resumed [ 689.229492][ T6039] Process accounting resumed [ 691.738571][T20617] Process accounting resumed [ 691.758523][T20634] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 692.034677][ T6343] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 692.504680][ T6343] usb 8-1: Using ep0 maxpacket: 16 [ 692.517664][ T6343] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 692.522093][ T6343] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.527961][ T6343] usb 8-1: config 0 has no interfaces? [ 692.532819][ T6343] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 692.535963][ T6343] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.538828][ T6343] usb 8-1: Product: syz [ 692.541359][ T6343] usb 8-1: Manufacturer: syz [ 692.544451][ T6343] usb 8-1: SerialNumber: syz [ 692.549765][ T6343] usb 8-1: config 0 descriptor?? [ 692.795237][ T837] Process accounting resumed [ 693.286667][ T53] usb 8-1: USB disconnect, device number 32 [ 693.685224][T20649] Process accounting resumed [ 694.459264][T20675] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 695.214665][ T837] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 695.364658][ T837] usb 8-1: Using ep0 maxpacket: 16 [ 695.367756][ T837] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 695.370573][ T837] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.373864][ T837] usb 8-1: config 0 has no interfaces? [ 695.378584][ T837] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 695.381517][ T837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.384145][ T837] usb 8-1: Product: syz [ 695.385589][ T837] usb 8-1: Manufacturer: syz [ 695.387139][ T837] usb 8-1: SerialNumber: syz [ 695.405384][ T837] usb 8-1: config 0 descriptor?? [ 695.498201][ T6343] Process accounting resumed [ 695.672643][ T838] usb 8-1: USB disconnect, device number 33 [ 695.676211][T20700] Process accounting resumed [ 697.246265][T20717] overlayfs: missing 'lowerdir' [ 697.633001][T20725] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 699.521228][ T838] Process accounting resumed [ 699.595874][ T6039] Process accounting resumed [ 699.722993][T20745] Process accounting resumed [ 699.893123][T20758] Process accounting resumed [ 700.389782][ T6039] Process accounting resumed [ 700.395124][T20768] overlayfs: missing 'lowerdir' [ 701.169635][T20771] Process accounting resumed [ 701.255213][T20785] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 701.544674][ T6021] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 701.694675][ T6021] usb 6-1: Using ep0 maxpacket: 16 [ 701.698724][ T6021] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 701.701410][ T6021] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.704710][ T6021] usb 6-1: config 0 has no interfaces? [ 701.708037][ T6021] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 701.711219][ T6021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.713812][ T6021] usb 6-1: Product: syz [ 701.715384][ T6021] usb 6-1: Manufacturer: syz [ 701.717380][ T6021] usb 6-1: SerialNumber: syz [ 701.721574][ T6021] usb 6-1: config 0 descriptor?? [ 702.533761][ T5996] usb 6-1: USB disconnect, device number 30 [ 702.654041][T20808] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 702.861239][T20814] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 702.975050][ T60] Process accounting resumed [ 703.114793][ T837] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 703.264652][ T837] usb 7-1: Using ep0 maxpacket: 16 [ 703.268820][ T837] usb 7-1: config index 0 descriptor too short (expected 1828, got 36) [ 703.272377][ T837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.276630][ T837] usb 7-1: config 0 has no interfaces? [ 703.279879][ T837] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 703.282732][ T837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.285318][ T837] usb 7-1: Product: syz [ 703.286670][ T837] usb 7-1: Manufacturer: syz [ 703.288150][ T837] usb 7-1: SerialNumber: syz [ 703.290878][ T837] usb 7-1: config 0 descriptor?? [ 703.856687][T20817] Process accounting resumed [ 704.050149][ T5996] usb 7-1: USB disconnect, device number 41 [ 704.565796][ T6021] Process accounting resumed [ 705.415901][T20836] Process accounting resumed [ 705.571364][ T6021] Process accounting resumed [ 705.730899][T20843] Process accounting resumed [ 705.988443][T20855] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 706.088733][T20854] overlayfs: missing 'lowerdir' [ 706.281904][T20862] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 707.300762][ T53] Process accounting resumed [ 707.487681][T20873] Process accounting resumed [ 709.001987][T20890] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 710.234475][ T6039] Process accounting resumed [ 711.202011][T20907] Process accounting resumed [ 711.335330][T20927] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 711.407460][T20929] input: syz0 as /devices/virtual/input/input85 [ 712.490192][ T60] Process accounting resumed [ 712.490366][T20948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4310'. [ 712.566936][T20949] binder: BINDER_SET_CONTEXT_MGR already set [ 712.568871][T20949] binder: 20947:20949 ioctl 4018620d 80000040 returned -16 [ 712.582089][T20949] binder: 20947:20949 ioctl c0306201 80000780 returned -14 [ 712.748629][T20953] Process accounting resumed [ 712.781744][T20957] ipvlan8: entered promiscuous mode [ 712.787435][T20959] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 713.020588][T20967] input: syz0 as /devices/virtual/input/input87 [ 716.001784][T20994] page: refcount:515 mapcount:0 mapping:ffff88806dfde250 index:0x0 pfn:0x5be00 [ 716.004930][T20994] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 716.007556][T20994] aops:hugetlbfs_aops ino:16e32 dentry name(?):"anon_hugepage" [ 716.009922][T20994] flags: 0x4fff000000000c1(locked|waiters|head|node=1|zone=1|lastcpupid=0x7ff) [ 716.012666][T20994] page_type: f4(hugetlb) [ 716.014005][T20994] raw: 04fff000000000c1 ffffea00014d0008 ffffc90004dc7d50 ffff88806dfde250 [ 716.016673][T20994] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 716.019332][T20994] head: 04fff000000000c1 ffffea00014d0008 ffffc90004dc7d50 ffff88806dfde250 [ 716.022021][T20994] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 716.024703][T20994] head: 04fff00000000009 ffffea00016f8001 0000000000000000 0000000000000000 [ 716.027377][T20994] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 716.030051][T20994] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 716.032293][T20994] page_owner tracks the page as allocated [ 716.034547][T20994] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 20939, tgid 20931 (syz.0.4307), ts 711965683427, free_ts 660947692200 [ 716.041617][T20994] post_alloc_hook+0x1c0/0x230 [ 716.043362][T20994] get_page_from_freelist+0x1321/0x3890 [ 716.045241][T20994] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 716.047086][T20994] alloc_surplus_hugetlb_folio+0x1ad/0x4a0 [ 716.048926][T20994] alloc_hugetlb_folio+0xed4/0x1560 [ 716.050547][T20994] hugetlb_fault+0x2005/0x3070 [ 716.052032][T20994] handle_mm_fault+0xbfa/0xd10 [ 716.053552][T20994] __get_user_pages+0x589/0x3b80 [ 716.055116][T20994] populate_vma_page_range+0x278/0x3a0 [ 716.056842][T20994] __mm_populate+0x1d8/0x380 [ 716.058303][T20994] vm_mmap_pgoff+0x362/0x450 [ 716.059753][T20994] ksys_mmap_pgoff+0x1c8/0x5c0 [ 716.061269][T20994] __do_fast_syscall_32+0x7c/0x3a0 [ 716.062891][T20994] do_fast_syscall_32+0x32/0x80 [ 716.064420][T20994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 716.066375][T20994] page last free pid 20150 tgid 20150 stack trace: [ 716.068375][T20994] free_unref_folios+0xa65/0x1800 [ 716.069942][T20994] folios_put_refs+0x56f/0x740 [ 716.071433][T20994] free_pages_and_swap_cache+0x3f0/0x4a0 [ 716.073184][T20994] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 716.075041][T20994] tlb_flush_mmu+0xe9/0x5a0 [ 716.076476][T20994] unmap_page_range+0x2040/0x4350 [ 716.078053][T20994] unmap_single_vma.constprop.0+0x153/0x240 [ 716.079894][T20994] unmap_vmas+0x218/0x470 [ 716.081258][T20994] exit_mmap+0x1b9/0xb90 [ 716.082596][T20994] __mmput+0x12a/0x410 [ 716.083881][T20994] mmput+0x62/0x70 [ 716.085086][T20994] do_exit+0x7c4/0x2bd0 [ 716.086403][T20994] do_group_exit+0xd3/0x2a0 [ 716.087830][T20994] __ia32_sys_exit_group+0x3e/0x50 [ 716.089437][T20994] ia32_sys_call+0xd56/0x1c40 [ 716.090916][T20994] __do_fast_syscall_32+0x7c/0x3a0 [ 716.092601][T20994] ------------[ cut here ]------------ [ 716.094293][T20994] kernel BUG at mm/filemap.c:154! [ 716.095872][T20994] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 716.098579][T20994] CPU: 0 UID: 0 PID: 20994 Comm: syz.0.4319 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 716.102890][T20994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 716.106185][T20994] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 716.108098][T20994] Code: 37 f4 ca ff 89 ee 31 ff 4c 8d 6b 30 e8 6a ef ca ff 85 ed 7e 17 e8 21 f4 ca ff 48 c7 c6 c0 f8 b8 8b 48 89 df e8 62 ba 11 00 90 <0f> 0b e8 0a f4 ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 716.113989][T20994] RSP: 0018:ffffc90003a47390 EFLAGS: 00010083 [ 716.115894][T20994] RAX: 0000000000029a54 RBX: ffffea00016f8000 RCX: ffffc9003293d000 [ 716.118339][T20994] RDX: 0000000000080000 RSI: ffffffff81f060be RDI: ffff88802476ccc4 [ 716.120787][T20994] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 716.123194][T20994] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88806dfde250 [ 716.125628][T20994] R13: ffffea00016f8030 R14: 0000000000001f80 R15: ffffea00016f8000 [ 716.128084][T20994] FS: 0000000000000000(0000) GS:ffff88809752d000(0063) knlGS:00000000f4c71b40 [ 716.130840][T20994] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 716.132892][T20994] CR2: 000000002d6fbffc CR3: 0000000060885000 CR4: 0000000000352ef0 [ 716.135332][T20994] Call Trace: [ 716.136406][T20994] [ 716.137335][T20994] filemap_remove_folio+0xf1/0x250 [ 716.138925][T20994] remove_inode_hugepages+0x74a/0xed0 [ 716.140595][T20994] ? lockdep_hardirqs_on+0x7c/0x110 [ 716.142195][T20994] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 716.144002][T20994] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 716.145848][T20994] ? wake_up_q+0xb0/0x160 [ 716.147195][T20994] ? lockdep_hardirqs_on+0x7c/0x110 [ 716.148817][T20994] ? up_write+0x1b2/0x520 [ 716.150165][T20994] hugetlbfs_fallocate+0xf3f/0x12e0 [ 716.151782][T20994] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 716.153543][T20994] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 716.155286][T20994] ? vfs_fallocate+0x608/0x10c0 [ 716.156833][T20994] vfs_fallocate+0x608/0x10c0 [ 716.158303][T20994] ? __pfx_vfs_fallocate+0x10/0x10 [ 716.159894][T20994] ? madvise_vma_behavior+0x222c/0x2420 [ 716.161606][T20994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 716.163404][T20994] madvise_vma_behavior+0x21ca/0x2420 [ 716.165081][T20994] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 716.166852][T20994] ? __pfx_mas_prev+0x10/0x10 [ 716.168319][T20994] ? find_vma_prev+0xda/0x160 [ 716.169796][T20994] ? __pfx_find_vma_prev+0x10/0x10 [ 716.171368][T20994] ? rcu_is_watching+0x12/0xc0 [ 716.172836][T20994] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 716.174570][T20994] madvise_walk_vmas+0x1ce/0x2c0 [ 716.176117][T20994] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 716.177822][T20994] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 716.179705][T20994] madvise_do_behavior+0x15d/0x3f0 [ 716.181307][T20994] ? __pfx___might_resched+0x10/0x10 [ 716.182972][T20994] ? __pfx_madvise_do_behavior+0x10/0x10 [ 716.184739][T20994] ? down_read+0x13d/0x480 [ 716.186149][T20994] do_madvise+0x161/0x230 [ 716.187504][T20994] ? __pfx_do_madvise+0x10/0x10 [ 716.189029][T20994] ? xfd_validate_state+0x61/0x180 [ 716.190626][T20994] __ia32_sys_madvise+0xa7/0x110 [ 716.192175][T20994] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 716.194238][T20994] __do_fast_syscall_32+0x7c/0x3a0 [ 716.195839][T20994] do_fast_syscall_32+0x32/0x80 [ 716.197367][T20994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 716.199327][T20994] RIP: 0023:0xf7fb3579 [ 716.200615][T20994] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 716.206551][T20994] RSP: 002b:00000000f4c7155c EFLAGS: 00000296 ORIG_RAX: 00000000000000db [ 716.209131][T20994] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600002 [ 716.211564][T20994] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 716.214000][T20994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 716.216435][T20994] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 716.218869][T20994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 716.221304][T20994] [ 716.222285][T20994] Modules linked in: [ 716.223512][T20994] ---[ end trace 0000000000000000 ]--- [ 716.225204][T20994] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 716.227129][T20994] Code: 37 f4 ca ff 89 ee 31 ff 4c 8d 6b 30 e8 6a ef ca ff 85 ed 7e 17 e8 21 f4 ca ff 48 c7 c6 c0 f8 b8 8b 48 89 df e8 62 ba 11 00 90 <0f> 0b e8 0a f4 ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 716.233008][T20994] RSP: 0018:ffffc90003a47390 EFLAGS: 00010083 [ 716.234881][T20994] RAX: 0000000000029a54 RBX: ffffea00016f8000 RCX: ffffc9003293d000 [ 716.237326][T20994] RDX: 0000000000080000 RSI: ffffffff81f060be RDI: ffff88802476ccc4 [ 716.239745][T20994] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 716.242194][T20994] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88806dfde250 [ 716.244618][T20994] R13: ffffea00016f8030 R14: 0000000000001f80 R15: ffffea00016f8000 [ 716.247073][T20994] FS: 0000000000000000(0000) GS:ffff88809752d000(0063) knlGS:00000000f4c71b40 [ 716.249838][T20994] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 716.251986][T20994] CR2: 000000002d6fbffc CR3: 0000000060885000 CR4: 0000000000352ef0 [ 716.254481][T20994] Kernel panic - not syncing: Fatal exception [ 716.256979][T20994] Kernel Offset: disabled [ 716.258449][T20994] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:02:11 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8556d120 RDI=ffffffff9b09f540 RBP=ffffffff9b09f500 RSP=ffffc90003a46c98 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000060 R14=fffffbfff3613efa R15=dffffc0000000000 RIP=ffffffff8556d147 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809752d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002d6fbffc CR3=0000000060885000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802b241f40 RCX=ffffffff81af48fd RDX=0000000000080000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc90007d6fa28 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed10056483e9 R15=ffff88802b33b6c0 RIP=ffffffff81bb5018 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809762d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f743fe90 CR3=000000002a312000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000009b4f84 RBX=0000000000000002 RCX=ffffffff8b82ac69 RDX=ffffed1005686646 RSI=ffffffff8c155d60 RDI=ffffffff819197a1 RBP=ffffed1003bd9910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed1005686645 R10=ffff88802b43322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801decc880 R14=ffffffff90a95b50 R15=0000000000000000 RIP=ffffffff8b8297cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809772d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7436c2c CR3=000000005e117000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88802b53b640 RCX=ffffffff81af5fe3 RDX=0000000000000001 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000044fd08 RSP=ffffc9000044fbb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9f6e R12=1ffff92000089f80 R13=0000000000000002 R14=0000000000000001 R15=ffffed10056a76c9 RIP=ffffffff81bb501a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809782d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000801abf98 CR3=0000000060885000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010c00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000