last executing test programs: 1m44.663145639s ago: executing program 1 (id=2418): syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mkdir(&(0x7f0000000140)='./file0\x00', 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@volatile, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x120001, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000002340)='./bus\x00') r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = io_uring_setup(0x2d54, 0x0) io_uring_setup(0x5651, &(0x7f0000000340)={0x0, 0x2a27, 0x80, 0x0, 0x230, 0x0, r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000007600000000000000000065000000000000009700010004"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) 1m42.292019863s ago: executing program 1 (id=2423): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x2000000) unshare(0x2a020400) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x84, @local, 0x4e20, 0x2, 'lblcr\x00', 0x4, 0xffffffff, 0x1d}, 0x2c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) ioctl$FIONREAD(r2, 0x5411, &(0x7f0000000140)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c07, 0xffffffffffffffff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/protocols\x00') syz_usb_connect(0x0, 0x29c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000841b7420da040d39bb2d0102030109028a020100000000090408f80af179fa020f24020205000d000cf67df8e6988f0724014004000009050c0340000e040809050201000208066c7c0f15bf333a2cfa4b5988a994c5a0a791e7"], 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r4, 0x80045105, &(0x7f0000000140)) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x5, 0x7e, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0xa1, 0x11, 0xfa, 0x20, 0xeb1a, 0x2870, 0x3c63, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x7f, 0x5, 0x40, 0x1, [{{0x9, 0x4, 0xb9, 0x5, 0x1, 0xb9, 0x4d, 0x54, 0x94, [], [{{0x9, 0x5, 0x3, 0x4, 0x8, 0x5, 0xfd, 0x2, [@generic={0x4a, 0x3, "eb9d8a5275322a64002d34979ec06e66e7733d3f77a0a69a54e6f8a135216e38f02e6f92a003a0c9d8203554c6a7f6d002bf2bb10c8d16ef694a5f295dcf3ad05e979bb99ed5e07a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}]}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x3e, &(0x7f0000000440)={0x5, 0xf, 0x3e, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x30, 0x5, 0xff, 0xf000, 0x100, [0x3fc0, 0xffc0cf, 0x0, 0x0, 0xffc0c0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0xd, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x3, 0xa, 0x7, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xe, 0xc, 0x1}]}, 0x9, [{0x0, 0x0}, {0x2, &(0x7f0000000500)=@string={0x2}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc1a}}, {0x0, 0x0}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x82c}}, {0x0, 0x0}, {0x0, 0x0}, {0x23, &(0x7f0000000700)=@string={0x23, 0x3, "1aeb39b93147e4e90fc0684a92b5d315a6dd225c59ffc9608c612fc11571f277d2"}}, {0x2, &(0x7f00000007c0)=@string={0x2}}]}) ioctl$SIOCSIFMTU(r5, 0x89f3, &(0x7f0000000040)={'bond0\x00'}) preadv(r3, &(0x7f0000001400), 0x0, 0xc002a0, 0x0) 1m39.233372946s ago: executing program 1 (id=2431): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xd, 0x800) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000002280)="f9", 0x1}], 0x1}}], 0x1, 0x0) lseek(r0, 0x9, 0x0) 1m38.303036109s ago: executing program 1 (id=2433): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) socket$packet(0x11, 0x2, 0x300) mount(0x0, 0x0, 0x0, 0xf6ff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x26c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) 1m35.73388014s ago: executing program 1 (id=2442): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_ZEROPAGE(r2, 0xc018aa06, &(0x7f0000000240)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$ndctl0(0xffffff9c, &(0x7f0000000100), 0x900, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00000001c0)={0x10000, 0x0, &(0x7f0000c44000/0x4000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000440)=""/237, 0xed}], 0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000390400"/18], 0x40}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m35.229525875s ago: executing program 1 (id=2445): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000002140)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "64f30ea84907e175d5966472c23d26ce8d6f3c"}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x44, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x13) syz_open_dev$ptys(0xc, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000080)) 1m35.145165157s ago: executing program 32 (id=2445): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000002140)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "64f30ea84907e175d5966472c23d26ce8d6f3c"}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x44, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x13) syz_open_dev$ptys(0xc, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000080)) 1m7.324869796s ago: executing program 3 (id=2558): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000280)=0x2, 0x4) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$kcm(0x2, 0x5, 0x84) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x14, r10, 0x1, 0x70bd2b, 0x25dfdaff}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="12", 0x1}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002) 1m6.171864958s ago: executing program 3 (id=2561): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r3) 1m3.679530128s ago: executing program 3 (id=2566): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x2300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_readv(r0, &(0x7f00000019c0)=[{&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/93, 0x5d}, {0x0}, {&(0x7f0000000740)=""/39, 0x27}, {&(0x7f0000000780)=""/163, 0xa3}, {0x0}], 0x9, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/92, 0x5c}, {&(0x7f0000001ac0)=""/251, 0xfb}, {&(0x7f00000008c0)=""/5, 0x5}], 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000380)={0x100000, 0x0, 0x0, r3, 0x8}) unshare(0x62040200) socket$inet_icmp(0x2, 0x2, 0x1) 1m2.192612778s ago: executing program 3 (id=2568): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) close(0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x804) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x7fffd, 0x0, 0x2, 0x21}) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r5, 0x0, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000140)={0x0, 0x0}) 1m0.951365641s ago: executing program 3 (id=2571): socket$nl_route(0x10, 0x3, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x1ff4, 0x2000, 0xfffffffc}, 0x0, &(0x7f0000000280)) getdents(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x3, 0x1f4, @empty}}, 0xfffffffc, 0x3, 0x989, 0x0, 0x84, 0x8000}, 0x9c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dynAflock=local,\x00']) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r3, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) 59.893724456s ago: executing program 3 (id=2573): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = open(0x0, 0x60142, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpgid(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) syz_clone3(&(0x7f0000000480)={0x20000000, &(0x7f0000000340), &(0x7f0000000380), 0x0, {}, &(0x7f0000000400)=""/55, 0x37, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, r1], 0x2, {r0}}, 0x58) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e20, @multicast2}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x1b, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) sendto$inet(r3, &(0x7f0000000040)="09248a927f1f65888000000041ba7860fcfaf65ac67600000000dfaaea00"/39, 0x27, 0x11, 0x0, 0x0) 44.764433371s ago: executing program 33 (id=2573): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = open(0x0, 0x60142, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpgid(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) syz_clone3(&(0x7f0000000480)={0x20000000, &(0x7f0000000340), &(0x7f0000000380), 0x0, {}, &(0x7f0000000400)=""/55, 0x37, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, r1], 0x2, {r0}}, 0x58) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e20, @multicast2}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x1b, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) sendto$inet(r3, &(0x7f0000000040)="09248a927f1f65888000000041ba7860fcfaf65ac67600000000dfaaea00"/39, 0x27, 0x11, 0x0, 0x0) 12.158829121s ago: executing program 4 (id=2654): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_mr_cache\x00') r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c09dbc7b73a7ad36e7f288650", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r8}, 0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={'crc32c\x00'}}) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x3, 0x400}, 0x0, &(0x7f0000000440)={0x4, 0x0, 0x10001, 0x1, 0x101, 0x0, 0x1, 0xfffffffffffffffd}, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0xffffffff, 0x0, 0xf}}, 0x0, 0x0}}) r10 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r10, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) sendmmsg$inet6(r5, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4003, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000b40)}], 0x2}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0x40}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="9f3371fed8c0c7fcbe68488a940dc5736ca78043c8d5e0f24c252251d1b51e2be08c4185f6ed04867f3e8318b0ff41a71621ca61ed89cfb85b82bbbef9be5a87b50ba8050f8be14b347e1d170eb9490e10cce2fc4dc57884cd62174f3c5eb4ba38bdeb", 0x63}], 0x1}}], 0x2, 0x44044) 11.145377896s ago: executing program 4 (id=2657): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0xe, 0x590, &(0x7f00000002c0)="4ce02b9d64e50d293ddb0ae4b8a0", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x2300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_readv(r0, &(0x7f00000019c0)=[{&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/93, 0x5d}, {0x0}, {&(0x7f0000000740)=""/39, 0x27}, {&(0x7f0000000780)=""/163, 0xa3}, {0x0}], 0x9, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/92, 0x5c}, {&(0x7f0000001ac0)=""/251, 0xfb}, {&(0x7f00000008c0)=""/5, 0x5}], 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000380)={0x100000, 0x0, 0x0, r4, 0x8}) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) 10.182101244s ago: executing program 4 (id=2661): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000280)=0x2, 0x4) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r9, @ANYBLOB="0100ffffffff000000000100000008000100", @ANYRES32=r8, @ANYBLOB="b00002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYRES32=r3], 0xcc}, 0x1, 0xf000}, 0x0) socket$kcm(0x2, 0x5, 0x84) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x14, r11, 0x1, 0x70bd2b, 0x25dfdaff}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 9.061273824s ago: executing program 4 (id=2663): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) write$cgroup_type(r1, &(0x7f0000000280), 0x9) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x541402, 0x10, 0x15}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 8.438799375s ago: executing program 0 (id=2664): socket$kcm(0x10, 0x0, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, 0x3, 0x2, 0x801}, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000080), 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a888e", 0x0, 0x80000fd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000e00)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500eeff00000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x26}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 8.255255822s ago: executing program 2 (id=2665): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r3) 7.879211006s ago: executing program 4 (id=2666): socket$nl_netfilter(0x10, 0x3, 0xc) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_io_uring_setup(0x231, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.207882656s ago: executing program 4 (id=2668): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x1c, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe2, 0x0) 6.921906444s ago: executing program 0 (id=2669): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0xe, 0x590, &(0x7f00000002c0)="4ce02b9d64e50d293ddb0ae4b8a0", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x2300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_readv(r0, &(0x7f00000019c0)=[{&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/93, 0x5d}, {0x0}, {&(0x7f0000000740)=""/39, 0x27}, {&(0x7f0000000780)=""/163, 0xa3}, {0x0}], 0x9, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/92, 0x5c}, {&(0x7f0000001ac0)=""/251, 0xfb}, {&(0x7f00000008c0)=""/5, 0x5}], 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000380)={0x100000, 0x0, 0x0, r4, 0x8}) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) 6.572505369s ago: executing program 5 (id=2670): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x3}, {0x5, 0x1, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x200000, 0x12b082) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) mq_open(0x0, 0x800, 0x106, &(0x7f0000000180)={0x32b, 0x80000000001, 0x0, 0x5}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r3}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000200)}, {&(0x7f0000000240)="be1ac182feb197b37fadc7e8ad4b3a9a9b", 0x11}, {&(0x7f00000004c0)="91f0807b6afddf80750c5a560c2081f08de8a721aa5e3cfd5a6bc6cabda994bf8693656d03e1ecd9d468f2d4bb42292991d19fba6097597c9e6f16fdcb2b551f2bfeaaf98a60bc01df68984cf336e2d257b29840e3adfa847b5f420ea7b5e4d1545ae88f63dfbb3ecdfa6633997cbaaa79e2ada80941ed932cbd7a0b11325041f526151f6be00828495864ad9f61c009821728b246b5957891caf322b4a8c9", 0x9f}, {0x0}], 0x5}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8814) 6.313752884s ago: executing program 2 (id=2671): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000280)=0x2, 0x4) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r9, @ANYBLOB="0100ffffffff000000000100000008000100", @ANYRES32=r8, @ANYBLOB="b00002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYRES32=r3], 0xcc}, 0x1, 0xf000}, 0x0) socket$kcm(0x2, 0x5, 0x84) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x14, r11, 0x1, 0x70bd2b, 0x25dfdaff}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 5.820407803s ago: executing program 0 (id=2672): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r3) 5.508880194s ago: executing program 5 (id=2673): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r3) 5.206591455s ago: executing program 2 (id=2674): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3}, &(0x7f0000000040), &(0x7f0000000080)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000940)={0x2d71e, 0x0, 0x0, 0x7ffe, 0x0, "00ff7f0a0a008000"}) unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) 4.229651869s ago: executing program 0 (id=2675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xa}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x50}}, 0x20004000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000003c0)={0x600, 0x0, 0x1d}) read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009c9abc0825105f0029fe0102030109021200caa70000000904"], 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x0) capset(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5eaa00f0000000007110f53aa47c323ec15599e118a674fa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, "d57f8080fc2b719aeafe679ea1376f83f99dfa2c00ff00"}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b23190987f70e06d038e7ff7fc6e5539b3264078b089b0c08384d9b0890e0878f0e1ac6e7049b334a959b4b9a240a5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe2c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c63d36770243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1008892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928900d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b03000000cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c113d12a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571ebff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4804afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa34046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d789364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c220300000007b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000ebffffffffffffff00", 0x1000}}, 0x1006) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2, 0x2, 0x801, 0x0, 0x0, {0x1}}, 0x14}}, 0x40000) 3.764689406s ago: executing program 2 (id=2676): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 2.803559538s ago: executing program 5 (id=2677): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x590, &(0x7f00000002c0)="4ce02b9d64e50d293ddb0ae4b8a0", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x2300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_readv(r0, &(0x7f00000019c0)=[{&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/93, 0x5d}, {0x0}, {&(0x7f0000000740)=""/39, 0x27}, {&(0x7f0000000780)=""/163, 0xa3}, {0x0}], 0x9, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/92, 0x5c}, {&(0x7f0000001ac0)=""/251, 0xfb}, {&(0x7f00000008c0)=""/5, 0x5}], 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000380)={0x100000, 0x0, 0x0, r3, 0x8}) unshare(0x62040200) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) 2.419327561s ago: executing program 0 (id=2678): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='trans=virtio,noextend,access=any,cache=fscache,v']) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$audio1(0xffffffffffffff9c, 0x0, 0x60202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000180)='./file0\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40002, 0x0) 2.240555858s ago: executing program 5 (id=2679): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006773da2085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_split\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r5}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_FPU(r8, 0x41a0ae8d, &(0x7f0000000640)={'\x00', 0x8, 0x4, 0x1, 0x0, 0x2, 0xf000, 0x100000, '\x00', 0x20}) fsopen(&(0x7f00000001c0)='qnx4\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='block_split\x00', r2}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x43400) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f00000005c0)={[{@cpuset_v2_mode}, {@noprefix}, {@xattr}, {@xattr}, {@name={'name', 0x3d, '-\'\\$-'}}, {@cpuset_v2_mode}, {@clone_children}, {@subsystem='net_cls'}]}) 1.505521125s ago: executing program 0 (id=2680): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) 1.425965765s ago: executing program 5 (id=2681): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x590, &(0x7f00000002c0)="4ce02b9d64e50d293ddb0ae4b8a0", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x2300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_readv(r0, &(0x7f00000019c0)=[{&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/93, 0x5d}, {0x0}, {&(0x7f0000000740)=""/39, 0x27}, {&(0x7f0000000780)=""/163, 0xa3}, {0x0}], 0x9, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/92, 0x5c}, {&(0x7f0000001ac0)=""/251, 0xfb}, {&(0x7f00000008c0)=""/5, 0x5}], 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000380)={0x100000, 0x0, 0x0, r3, 0x8}) unshare(0x62040200) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) 1.062574384s ago: executing program 2 (id=2682): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000280)=0x2, 0x4) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r9, @ANYBLOB="0100ffffffff000000000100000008000100", @ANYRES32=r8, @ANYBLOB="b00002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYRES32=r3], 0xcc}, 0x1, 0xf000}, 0x0) socket$kcm(0x2, 0x5, 0x84) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x14, r11, 0x1, 0x70bd2b, 0x25dfdaff}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 640.381924ms ago: executing program 5 (id=2683): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r1) 0s ago: executing program 2 (id=2684): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='trans=virtio,noextend,access=any,cache=fscache,v']) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$audio1(0xffffffffffffff9c, 0x0, 0x60202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000180)='./file0\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40002, 0x0) kernel console output (not intermixed with test programs): 9 [ 588.213742][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 588.686436][T13478] 9pnet_virtio: no channels available for device syz [ 588.905865][T13484] overlayfs: overlapping lowerdir path [ 589.243760][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 589.593972][ T5326] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 589.993840][ T5326] usb 7-1: Using ep0 maxpacket: 32 [ 589.998708][ T5326] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 590.001677][ T5326] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.005952][ T5326] usb 7-1: config 0 has no interface number 0 [ 590.008676][ T5326] usb 7-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 590.014017][ T5326] usb 7-1: config 0 interface 8 has no altsetting 0 [ 590.019650][ T5326] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 590.033546][ T5326] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.044926][ T5326] usb 7-1: Product: syz [ 590.050052][ T5326] usb 7-1: Manufacturer: syz [ 590.055750][ T5326] usb 7-1: SerialNumber: syz [ 590.072643][ T5326] usb 7-1: config 0 descriptor?? [ 590.285971][T13495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.289565][T13495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.293790][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 590.499027][T13518] syzkaller0: entered promiscuous mode [ 590.500708][T13518] syzkaller0: entered allmulticast mode [ 590.620002][T13521] program syz.1.1777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.323859][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 592.205964][ T5326] ath6kl: Failed to submit usb control message: -71 [ 592.207529][ T5326] ath6kl: unable to send the bmi data to the device: -71 [ 592.209157][ T5326] ath6kl: Unable to send get target info: -71 [ 592.215848][ T5326] ath6kl: Failed to init ath6kl core: -71 [ 592.217661][ T5326] ath6kl_usb 7-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 592.221349][ T5326] usb 7-1: USB disconnect, device number 40 [ 592.363756][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 592.891300][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1783'. [ 593.413766][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 594.443777][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 594.783822][ T72] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 594.941862][ T72] usb 7-1: Using ep0 maxpacket: 32 [ 594.946255][ T72] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 594.949163][ T72] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.953056][ T72] usb 7-1: config 0 has no interface number 0 [ 594.956154][ T72] usb 7-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 594.960685][ T72] usb 7-1: config 0 interface 8 has no altsetting 0 [ 594.966035][ T72] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 594.969203][ T72] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.972166][ T72] usb 7-1: Product: syz [ 594.974287][ T72] usb 7-1: Manufacturer: syz [ 594.976012][ T72] usb 7-1: SerialNumber: syz [ 594.979036][ T72] usb 7-1: config 0 descriptor?? [ 595.192282][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.195059][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.483764][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 595.833765][T12107] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 596.043835][ T5965] Bluetooth: hci1: command 0x0406 tx timeout [ 596.063920][T12107] usb 5-1: Using ep0 maxpacket: 16 [ 596.067349][T12107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 596.072470][T12107] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 596.075463][T12107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.077598][T12107] usb 5-1: Product: syz [ 596.078740][T12107] usb 5-1: Manufacturer: syz [ 596.080013][T12107] usb 5-1: SerialNumber: syz [ 596.083512][T12107] usb 5-1: config 0 descriptor?? [ 596.087193][T12107] hub 5-1:0.0: bad descriptor, ignoring hub [ 596.088933][T12107] hub 5-1:0.0: probe with driver hub failed with error -5 [ 596.093629][T12107] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input27 [ 596.482555][T13603] 9pnet_virtio: no channels available for device syz [ 596.523729][ T72] ath6kl: Failed to submit usb control message: -71 [ 596.523776][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 596.525499][ T72] ath6kl: unable to send the bmi data to the device: -71 [ 596.544117][ T1012] usb 5-1: USB disconnect, device number 38 [ 596.668773][ T72] ath6kl: Unable to send get target info: -71 [ 596.678524][ T72] ath6kl: Failed to init ath6kl core: -71 [ 596.680536][ T72] ath6kl_usb 7-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 596.688064][ T72] usb 7-1: USB disconnect, device number 41 [ 596.713234][T13606] overlayfs: overlapping lowerdir path [ 596.760339][T13606] block device autoloading is deprecated and will be removed. [ 597.563843][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 598.603785][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 599.643770][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 600.233817][ T8966] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 600.653788][ T8966] usb 8-1: Using ep0 maxpacket: 32 [ 600.672364][ T8966] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 600.676056][ T8966] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.680457][ T8966] usb 8-1: config 0 has no interface number 0 [ 600.683349][ T8966] usb 8-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 600.683756][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 600.687766][ T8966] usb 8-1: config 0 interface 8 has no altsetting 0 [ 600.694310][ T8966] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 600.697141][ T8966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.701147][ T8966] usb 8-1: Product: syz [ 600.703045][ T8966] usb 8-1: Manufacturer: syz [ 600.705163][ T8966] usb 8-1: SerialNumber: syz [ 600.708113][ T8966] usb 8-1: config 0 descriptor?? [ 600.920152][T13673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.923084][T13673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.723775][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 602.108242][ T8966] ath6kl: Failed to submit usb control message: -71 [ 602.113761][ T8966] ath6kl: unable to send the bmi data to the device: -71 [ 602.116692][ T8966] ath6kl: Unable to send get target info: -71 [ 602.135651][ T8966] ath6kl: Failed to init ath6kl core: -71 [ 602.139344][ T8966] ath6kl_usb 8-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 602.144708][ T8966] usb 8-1: USB disconnect, device number 31 [ 602.763800][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 603.803743][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 603.978404][ T1012] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 604.153926][ T1012] usb 7-1: Using ep0 maxpacket: 16 [ 604.165926][ T1012] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 604.169412][ T1012] usb 7-1: config 0 has no interface number 0 [ 604.171626][ T1012] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 240, changing to 11 [ 604.176548][ T1012] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 9790, setting to 1024 [ 604.185242][ T1012] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 604.188538][ T1012] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 604.192269][ T1012] usb 7-1: Product: syz [ 604.194689][ T1012] usb 7-1: SerialNumber: syz [ 604.198984][ T1012] usb 7-1: config 0 descriptor?? [ 604.204249][T13740] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 604.218217][ T1012] cm109 7-1:0.8: invalid payload size 1024, expected 4 [ 604.222144][ T1012] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input28 [ 604.323806][ T5999] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 604.503791][ T5999] usb 5-1: Using ep0 maxpacket: 32 [ 604.505679][ T5999] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 604.505695][ T5999] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.505704][ T5999] usb 5-1: config 0 has no interface number 0 [ 604.505720][ T5999] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 604.505733][ T5999] usb 5-1: config 0 interface 8 has no altsetting 0 [ 604.509157][ T5999] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 604.509172][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.509181][ T5999] usb 5-1: Product: syz [ 604.509188][ T5999] usb 5-1: Manufacturer: syz [ 604.509195][ T5999] usb 5-1: SerialNumber: syz [ 604.510300][ T5999] usb 5-1: config 0 descriptor?? [ 604.722584][ T30] usb 7-1: USB disconnect, device number 42 [ 604.722594][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 604.726398][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 604.773388][T13748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.778355][T13748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.781801][ T30] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 604.843778][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 605.883794][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 606.689173][ T5999] ath6kl: Failed to submit usb control message: -71 [ 606.690928][ T5999] ath6kl: unable to send the bmi data to the device: -71 [ 606.692689][ T5999] ath6kl: Unable to send get target info: -71 [ 606.702445][ T5999] ath6kl: Failed to init ath6kl core: -71 [ 606.714095][ T5999] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 606.724460][ T5999] usb 5-1: USB disconnect, device number 39 [ 606.923781][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 607.963755][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 608.601152][T13831] 9pnet_virtio: no channels available for device syz [ 608.664928][T13840] overlayfs: overlapping lowerdir path [ 609.003774][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 609.003796][ T1012] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 609.223747][ T1012] usb 8-1: Using ep0 maxpacket: 32 [ 609.254517][ T1012] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 609.257537][ T1012] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.261220][ T1012] usb 8-1: config 0 has no interface number 0 [ 609.263529][ T1012] usb 8-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 609.268162][ T1012] usb 8-1: config 0 interface 8 has no altsetting 0 [ 609.279545][ T1012] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 609.283177][ T1012] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.283862][T13855] netlink: 'syz.2.1841': attribute type 10 has an invalid length. [ 609.288243][ T1012] usb 8-1: Product: syz [ 609.288261][ T1012] usb 8-1: Manufacturer: syz [ 609.289529][T13855] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1841'. [ 609.290947][ T1012] usb 8-1: SerialNumber: syz [ 609.297284][ T1012] usb 8-1: config 0 descriptor?? [ 609.830235][T13843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.833276][T13843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.043740][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 611.083824][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 611.434464][ T5999] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 611.537510][ T1012] ath6kl: Failed to submit usb control message: -71 [ 611.540292][ T1012] ath6kl: unable to send the bmi data to the device: -71 [ 611.542508][ T1012] ath6kl: Unable to send get target info: -71 [ 611.548694][ T1012] ath6kl: Failed to init ath6kl core: -71 [ 611.551445][ T1012] ath6kl_usb 8-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 611.561989][ T1012] usb 8-1: USB disconnect, device number 32 [ 611.623996][ T5999] usb 7-1: Using ep0 maxpacket: 32 [ 611.629188][ T5999] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 611.631527][ T5999] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.634504][ T5999] usb 7-1: config 0 has no interface number 0 [ 611.634728][T13900] netlink: 'syz.3.1850': attribute type 10 has an invalid length. [ 611.636194][ T5999] usb 7-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 611.639049][T13900] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1850'. [ 611.645593][ T5999] usb 7-1: config 0 interface 8 has no altsetting 0 [ 611.650822][ T5999] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 611.653277][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.665392][ T5999] usb 7-1: Product: syz [ 611.669665][ T5999] usb 7-1: Manufacturer: syz [ 611.672392][ T5999] usb 7-1: SerialNumber: syz [ 611.674856][ T5999] usb 7-1: config 0 descriptor?? [ 611.882362][T13889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.894864][T13889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.123807][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 612.741577][ T5999] ath6kl: Failed to submit usb control message: -71 [ 612.744935][ T5999] ath6kl: unable to send the bmi data to the device: -71 [ 612.747336][ T5999] ath6kl: Unable to send get target info: -71 [ 612.757476][ T5999] ath6kl: Failed to init ath6kl core: -71 [ 612.759733][ T5999] ath6kl_usb 7-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 612.768187][ T5999] usb 7-1: USB disconnect, device number 43 [ 613.163751][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 614.203744][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 614.245857][T13941] qrtr: Invalid version 0 [ 615.243775][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 615.253804][ T8966] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 615.403845][ T8966] usb 5-1: Using ep0 maxpacket: 32 [ 615.416330][ T8966] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 615.418606][ T8966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.421540][ T8966] usb 5-1: config 0 has no interface number 0 [ 615.423184][ T8966] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 615.428825][ T8966] usb 5-1: config 0 interface 8 has no altsetting 0 [ 615.432443][ T8966] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 615.434886][ T8966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.437387][ T8966] usb 5-1: Product: syz [ 615.438523][ T8966] usb 5-1: Manufacturer: syz [ 615.439836][ T8966] usb 5-1: SerialNumber: syz [ 615.443145][ T8966] usb 5-1: config 0 descriptor?? [ 615.671721][T13955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.675099][T13955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.283778][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 616.518212][T13985] qrtr: Invalid version 0 [ 617.164865][ T8966] ath6kl: Failed to submit usb control message: -71 [ 617.166881][ T8966] ath6kl: unable to send the bmi data to the device: -71 [ 617.168905][ T8966] ath6kl: Unable to send get target info: -71 [ 617.171402][ T8966] ath6kl: Failed to init ath6kl core: -71 [ 617.179796][ T8966] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 617.183733][ T8966] usb 5-1: USB disconnect, device number 40 [ 617.323794][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 617.519070][T14007] netlink: 'syz.3.1873': attribute type 3 has an invalid length. [ 617.521434][T14007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1873'. [ 618.373759][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 619.049984][T14041] 9pnet_virtio: no channels available for device syz [ 619.403798][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 620.443766][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 621.483785][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 622.523756][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 622.824298][T14112] netlink: 'syz.2.1898': attribute type 1 has an invalid length. [ 622.827065][T14112] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1898'. [ 622.829463][T14112] NCSI netlink: No device for ifindex 0 [ 623.165010][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.453854][ T1012] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 623.573789][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 623.603869][ T1012] usb 8-1: Using ep0 maxpacket: 32 [ 623.607432][ T1012] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 623.609763][ T1012] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.612467][ T1012] usb 8-1: config 0 has no interface number 0 [ 623.614601][ T1012] usb 8-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 623.618206][ T1012] usb 8-1: config 0 interface 8 has no altsetting 0 [ 623.621639][ T1012] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 623.624391][ T1012] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.626486][ T1012] usb 8-1: Product: syz [ 623.627591][ T1012] usb 8-1: Manufacturer: syz [ 623.628881][ T1012] usb 8-1: SerialNumber: syz [ 623.631060][ T1012] usb 8-1: config 0 descriptor?? [ 623.655246][T14131] netlink: 'syz.2.1902': attribute type 10 has an invalid length. [ 623.657444][T14131] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1902'. [ 623.944849][T14118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.947259][T14118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.603849][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 625.510630][T14154] 9pnet_virtio: no channels available for device syz [ 625.558081][ T1012] ath6kl: Failed to submit usb control message: -71 [ 625.559868][ T1012] ath6kl: unable to send the bmi data to the device: -71 [ 625.561696][ T1012] ath6kl: Unable to send get target info: -71 [ 625.571750][ T1012] ath6kl: Failed to init ath6kl core: -71 [ 625.573775][ T1012] ath6kl_usb 8-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 625.580952][ T1012] usb 8-1: USB disconnect, device number 33 [ 625.643797][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 625.920788][T14166] overlayfs: overlapping lowerdir path [ 626.683771][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 627.614262][ T6018] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 627.733792][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 627.763783][ T6018] usb 8-1: Using ep0 maxpacket: 32 [ 627.767871][ T6018] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 627.770106][ T6018] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.782269][ T6018] usb 8-1: config 0 has no interface number 0 [ 627.786614][ T6018] usb 8-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 627.791730][ T6018] usb 8-1: config 0 interface 8 has no altsetting 0 [ 627.798996][ T6018] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 627.801622][ T6018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.806110][ T6018] usb 8-1: Product: syz [ 627.807274][ T6018] usb 8-1: Manufacturer: syz [ 627.808575][ T6018] usb 8-1: SerialNumber: syz [ 627.811129][ T6018] usb 8-1: config 0 descriptor?? [ 628.030688][T14205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.045183][T14205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.763766][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 629.098431][T14225] syz.1.1924: attempt to access beyond end of device [ 629.098431][T14225] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 629.102108][T14225] FAT-fs (nbd1): unable to read boot sector [ 629.803747][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 630.568708][ T6018] ath6kl: Failed to submit usb control message: -71 [ 630.570439][ T6018] ath6kl: unable to send the bmi data to the device: -71 [ 630.573861][ T6018] ath6kl: Unable to send get target info: -71 [ 630.583487][ T6018] ath6kl: Failed to init ath6kl core: -71 [ 630.585618][ T6018] ath6kl_usb 8-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 630.590860][ T6018] usb 8-1: USB disconnect, device number 34 [ 630.853749][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 631.310385][T14259] netlink: 'syz.1.1930': attribute type 10 has an invalid length. [ 631.312537][T14259] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1930'. [ 631.438598][T14262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1931'. [ 631.893844][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 632.612971][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 632.612981][ T39] audit: type=1326 audit(1732215168.628:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.1938" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x0 [ 632.693850][ T5999] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 632.863816][ T5999] usb 6-1: Using ep0 maxpacket: 32 [ 632.867718][ T5999] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 632.870396][ T5999] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.873315][ T5999] usb 6-1: config 0 has no interface number 0 [ 632.876065][ T5999] usb 6-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 632.880589][ T5999] usb 6-1: config 0 interface 8 has no altsetting 0 [ 632.886219][ T5999] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 632.889255][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.892983][ T5999] usb 6-1: Product: syz [ 632.895004][ T5999] usb 6-1: Manufacturer: syz [ 632.896757][ T5999] usb 6-1: SerialNumber: syz [ 632.902312][ T5999] usb 6-1: config 0 descriptor?? [ 632.923783][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 633.124385][T14285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.130535][T14285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.400209][T14314] netlink: 'syz.3.1940': attribute type 10 has an invalid length. [ 633.402593][T14314] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1940'. [ 633.963819][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 634.525705][ T5999] ath6kl: Failed to submit usb control message: -71 [ 634.527539][ T5999] ath6kl: unable to send the bmi data to the device: -71 [ 634.529355][ T5999] ath6kl: Unable to send get target info: -71 [ 634.538622][ T5999] ath6kl: Failed to init ath6kl core: -71 [ 634.540535][ T5999] ath6kl_usb 6-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 634.545192][ T5999] usb 6-1: USB disconnect, device number 34 [ 635.003781][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 636.053751][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 637.083773][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 638.123830][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 638.233851][ T5999] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 638.393766][ T5999] usb 8-1: Using ep0 maxpacket: 8 [ 638.398689][ T5999] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 638.401273][ T5999] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 638.404273][ T5999] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 638.407040][ T5999] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 638.409680][ T5999] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.413340][ T5999] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 638.416204][ T5999] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.632781][ T5999] usb 8-1: GET_CAPABILITIES returned 0 [ 638.634308][ T5999] usbtmc 8-1:16.0: can't read capabilities [ 639.173786][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 640.191262][ T39] audit: type=1400 audit(1732215176.208:411): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=14435 comm="syz.0.1965" [ 640.203791][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 641.243803][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 641.253177][T14451] trusted_key: encrypted_key: insufficient parameters specified [ 641.293966][ T30] usb 8-1: USB disconnect, device number 35 [ 641.605163][T14464] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 641.658195][T14466] 9pnet_virtio: no channels available for device syz [ 641.790059][T14467] overlayfs: overlapping lowerdir path [ 641.864714][T14467] block device autoloading is deprecated and will be removed. [ 642.283769][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 643.323751][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 644.363743][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 645.085797][T14508] syz.1.1980 (14508): drop_caches: 2 [ 645.413760][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 646.443870][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 647.002492][T14547] 9pnet_virtio: no channels available for device syz [ 647.071449][T14548] overlayfs: overlapping lowerdir path [ 647.483791][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 647.934284][T14573] nbd1: detected capacity change from 0 to 12 [ 647.944291][T12703] block nbd1: Send control failed (result -89) [ 647.946296][T12703] block nbd1: Request send failed, requeueing [ 647.953197][T14575] block nbd1: NBD_DISCONNECT [ 647.956746][T12703] block nbd1: Disconnected due to user request. [ 647.960763][T14575] block nbd1: Send disconnect failed -89 [ 647.965656][ T830] blk_print_req_error: 7 callbacks suppressed [ 647.965668][ T830] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 647.971051][ T830] buffer_io_error: 7 callbacks suppressed [ 647.971063][ T830] Buffer I/O error on dev nbd1, logical block 0, async page read [ 647.978116][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 647.980712][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 647.983044][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 647.988232][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 647.990815][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 647.994765][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 647.997895][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.001111][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.003605][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.011563][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.015198][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.018405][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.020878][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.023445][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.027789][T12703] ldm_validate_partition_table(): Disk read failed. [ 648.034647][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.037940][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.043962][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.046456][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.047634][T14573] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 648.048651][T12703] Dev nbd1: unable to read RDB block 0 [ 648.053312][T12703] nbd1: unable to read partition table [ 648.056193][T12703] nbd1: partition table beyond EOD, truncated [ 648.063189][T12703] ldm_validate_partition_table(): Disk read failed. [ 648.065389][T12703] Dev nbd1: unable to read RDB block 0 [ 648.066936][T12703] nbd1: unable to read partition table [ 648.068400][T12703] nbd1: partition table beyond EOD, truncated [ 648.076396][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.079487][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.079676][T14570] ldm_validate_partition_table(): Disk read failed. [ 648.085202][T14570] Dev nbd1: unable to read RDB block 0 [ 648.087132][T14570] nbd1: unable to read partition table [ 648.089827][T14570] nbd1: partition table beyond EOD, truncated [ 648.523778][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 649.563826][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 650.613801][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 651.427435][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 651.643812][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 651.852980][T14668] netlink: 'syz.1.2014': attribute type 3 has an invalid length. [ 651.856856][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2014'. [ 651.900228][T14671] syz.2.2013 (14671): drop_caches: 2 [ 652.683822][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 653.324959][ T5965] Bluetooth: hci3: unexpected event 0x03 length: 16 > 11 [ 653.370521][ T39] audit: type=1326 audit(1732215189.388:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14698 comm="syz.1.2022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 653.384131][ T39] audit: type=1326 audit(1732215189.388:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14698 comm="syz.1.2022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 653.392529][ T39] audit: type=1326 audit(1732215189.398:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14698 comm="syz.1.2022" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 653.400820][ T39] audit: type=1326 audit(1732215189.398:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14698 comm="syz.1.2022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 653.410901][ T39] audit: type=1326 audit(1732215189.398:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14698 comm="syz.1.2022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 653.421824][ T39] audit: type=1326 audit(1732215189.408:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14698 comm="syz.1.2022" exe="/syz-executor" sig=0 arch=40000003 syscall=355 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 653.430240][ T39] audit: type=1326 audit(1732215189.408:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14698 comm="syz.1.2022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 653.436531][ T39] audit: type=1326 audit(1732215189.408:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14698 comm="syz.1.2022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 653.447836][ T39] audit: type=1326 audit(1732215189.428:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14698 comm="syz.1.2022" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 653.457198][ T39] audit: type=1326 audit(1732215189.428:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14698 comm="syz.1.2022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 653.723817][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 654.517812][ T6018] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 654.773742][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 654.874424][ T6018] usb 7-1: Using ep0 maxpacket: 16 [ 654.881654][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 654.888412][ T6018] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 654.891056][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.893258][ T6018] usb 7-1: Product: syz [ 654.894485][ T6018] usb 7-1: Manufacturer: syz [ 654.895846][ T6018] usb 7-1: SerialNumber: syz [ 654.898689][ T6018] usb 7-1: config 0 descriptor?? [ 654.906988][ T6018] hub 7-1:0.0: bad descriptor, ignoring hub [ 654.908771][ T6018] hub 7-1:0.0: probe with driver hub failed with error -5 [ 654.912147][ T6018] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input29 [ 655.272104][T14722] syz.0.2026: attempt to access beyond end of device [ 655.272104][T14722] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 655.277236][T14722] FAT-fs (nbd0): unable to read boot sector [ 655.496054][ T30] usb 7-1: USB disconnect, device number 44 [ 655.803794][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 656.843756][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 657.384300][ T8966] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 657.583955][ T8966] usb 5-1: Using ep0 maxpacket: 32 [ 657.590361][ T8966] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 657.593472][ T8966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.601537][ T8966] usb 5-1: config 0 has no interface number 0 [ 657.615612][ T8966] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 657.641033][ T8966] usb 5-1: config 0 interface 8 has no altsetting 0 [ 657.656051][ T8966] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 657.662571][ T8966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.669484][ T8966] usb 5-1: Product: syz [ 657.670820][ T8966] usb 5-1: Manufacturer: syz [ 657.672362][ T8966] usb 5-1: SerialNumber: syz [ 657.684142][ T8966] usb 5-1: config 0 descriptor?? [ 657.740214][T14769] input: syz0 as /devices/virtual/input/input30 [ 657.893741][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 657.915869][T14757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.921743][T14757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.923791][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 659.963801][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 660.022231][ T8966] ath6kl: Failed to submit usb control message: -71 [ 660.025432][ T8966] ath6kl: unable to send the bmi data to the device: -71 [ 660.027579][ T8966] ath6kl: Unable to send get target info: -71 [ 660.040258][ T8966] ath6kl: Failed to init ath6kl core: -71 [ 660.044356][ T8966] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 660.054668][ T8966] usb 5-1: USB disconnect, device number 41 [ 660.522644][T14799] syz.2.2043: attempt to access beyond end of device [ 660.522644][T14799] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 660.524077][ T5326] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 660.530469][T14799] FAT-fs (nbd2): unable to read boot sector [ 660.693894][ T5326] usb 5-1: Using ep0 maxpacket: 32 [ 660.735849][ T5326] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 660.738789][ T5326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.742431][ T5326] usb 5-1: config 0 has no interface number 0 [ 660.744987][ T5326] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 660.749778][ T5326] usb 5-1: config 0 interface 8 has no altsetting 0 [ 660.760551][ T5326] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 660.763391][ T5326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.766107][ T5326] usb 5-1: Product: syz [ 660.769621][ T5326] usb 5-1: Manufacturer: syz [ 660.771881][ T5326] usb 5-1: SerialNumber: syz [ 660.784921][ T5326] usb 5-1: config 0 descriptor?? [ 661.003792][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 661.025121][T14794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.029172][T14794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.043775][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 662.299322][T14819] 9pnet_virtio: no channels available for device syz [ 662.357659][T14819] IPVS: stopping master sync thread 6390 ... [ 663.083781][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 663.199329][ T5326] ath6kl: Failed to submit usb control message: -71 [ 663.218659][ T5326] ath6kl: unable to send the bmi data to the device: -71 [ 663.221110][ T5326] ath6kl: Unable to send get target info: -71 [ 663.226630][ T5326] ath6kl: Failed to init ath6kl core: -71 [ 663.237548][ T5326] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 663.254697][ T5326] usb 5-1: USB disconnect, device number 42 [ 664.123823][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 664.239441][ T6018] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 664.793822][ T6018] usb 8-1: Using ep0 maxpacket: 16 [ 664.797163][ T6018] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 664.805593][ T6018] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 664.807825][ T6018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.813763][ T6018] usb 8-1: Product: syz [ 664.819368][ T6018] usb 8-1: Manufacturer: syz [ 664.820989][ T6018] usb 8-1: SerialNumber: syz [ 664.823641][ T6018] usb 8-1: config 0 descriptor?? [ 664.826522][ T6018] hub 8-1:0.0: bad descriptor, ignoring hub [ 664.829270][ T6018] hub 8-1:0.0: probe with driver hub failed with error -5 [ 664.833215][ T6018] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input31 [ 665.173735][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 666.213748][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 666.392510][T14861] syz.3.2056: attempt to access beyond end of device [ 666.392510][T14861] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 666.396980][T14861] FAT-fs (nbd3): unable to read boot sector [ 667.243832][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 668.042217][T14896] netlink: 'syz.2.2065': attribute type 10 has an invalid length. [ 668.283763][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 668.567744][T14896] team0: Port device netdevsim0 added [ 668.793861][ T6000] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 668.975339][ T6000] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 668.978202][ T6000] usb 5-1: config 0 has no interface number 0 [ 668.982257][ T6000] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a26, bcdDevice=bb.83 [ 668.986354][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.989134][ T6000] usb 5-1: Product: syz [ 668.990581][ T6000] usb 5-1: Manufacturer: syz [ 668.992360][ T6000] usb 5-1: SerialNumber: syz [ 669.002595][ T6000] usb 5-1: config 0 descriptor?? [ 669.073847][T12107] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 669.244400][T12107] usb 6-1: Using ep0 maxpacket: 16 [ 669.263882][T12107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 669.286501][T12107] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 669.294205][T12107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.298060][T12107] usb 6-1: Product: syz [ 669.299356][T12107] usb 6-1: Manufacturer: syz [ 669.301482][T12107] usb 6-1: SerialNumber: syz [ 669.318302][T12107] usb 6-1: config 0 descriptor?? [ 669.323735][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 669.326664][T12107] hub 6-1:0.0: bad descriptor, ignoring hub [ 669.328399][T12107] hub 6-1:0.0: probe with driver hub failed with error -5 [ 669.331436][T12107] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input32 [ 669.392398][ T6018] usb 8-1: USB disconnect, device number 36 [ 669.546480][ T6000] hub 5-1:0.1: bad descriptor, ignoring hub [ 669.549616][ T6000] hub 5-1:0.1: probe with driver hub failed with error -5 [ 669.584285][ T6000] usb 5-1: USB disconnect, device number 43 [ 670.373864][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 670.843479][ T8966] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 671.003977][ T8966] usb 8-1: Using ep0 maxpacket: 16 [ 671.012145][ T8966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 671.021455][ T8966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.025079][ T8966] usb 8-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 671.028273][ T8966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.032642][ T8966] usb 8-1: config 0 descriptor?? [ 671.303417][ T8966] usb 8-1: string descriptor 0 read error: -71 [ 671.315499][ T8966] usbhid 8-1:0.0: can't add hid device: -71 [ 671.317136][ T8966] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 671.322032][ T8966] usb 8-1: USB disconnect, device number 37 [ 671.413736][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 671.884402][T14948] netlink: 'syz.3.2079': attribute type 10 has an invalid length. [ 671.887605][T14948] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2079'. [ 672.453855][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 673.118882][ T6018] usb 6-1: USB disconnect, device number 35 [ 673.483796][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 674.473874][ T6000] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 674.533742][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 674.633843][ T6000] usb 8-1: Using ep0 maxpacket: 32 [ 674.636790][ T6000] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 674.638901][ T6000] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.642724][ T6000] usb 8-1: config 0 has no interface number 0 [ 674.645696][ T6000] usb 8-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 674.649495][ T6000] usb 8-1: config 0 interface 8 has no altsetting 0 [ 674.654348][ T6000] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 674.658182][ T6000] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.661187][ T6000] usb 8-1: Product: syz [ 674.662795][ T6000] usb 8-1: Manufacturer: syz [ 674.665872][ T6000] usb 8-1: SerialNumber: syz [ 674.672764][ T6000] usb 8-1: config 0 descriptor?? [ 674.953493][T15007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.959845][T15007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.563766][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 676.181265][ T5965] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 676.193529][T15027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2093'. [ 676.603757][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 677.073092][T15039] trusted_key: encrypted_key: insufficient parameters specified [ 677.120068][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2104'. [ 677.539614][ T6000] ath6kl: Failed to submit usb control message: -71 [ 677.545394][ T6000] ath6kl: unable to send the bmi data to the device: -71 [ 677.547540][ T6000] ath6kl: Unable to send get target info: -71 [ 677.554565][ T6000] ath6kl: Failed to init ath6kl core: -71 [ 677.559384][ T6000] ath6kl_usb 8-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 677.568281][ T6000] usb 8-1: USB disconnect, device number 38 [ 677.653738][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 678.683804][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 679.723745][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 680.203827][ T6000] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 680.271547][T15097] trusted_key: encrypted_key: insufficient parameters specified [ 680.353857][ T6000] usb 5-1: Using ep0 maxpacket: 32 [ 680.356723][ T6000] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 680.358819][ T6000] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.361488][ T6000] usb 5-1: config 0 has no interface number 0 [ 680.363129][ T6000] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 680.375423][ T6000] usb 5-1: config 0 interface 8 has no altsetting 0 [ 680.380153][ T6000] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 680.382586][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.387805][ T6000] usb 5-1: Product: syz [ 680.389170][ T6000] usb 5-1: Manufacturer: syz [ 680.390582][ T6000] usb 5-1: SerialNumber: syz [ 680.394288][ T6000] usb 5-1: config 0 descriptor?? [ 680.603134][T15093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.606777][T15093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.763790][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 681.441114][T15116] syz.1.2115: attempt to access beyond end of device [ 681.441114][T15116] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 681.444792][T15116] FAT-fs (nbd1): unable to read boot sector [ 681.803759][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 682.293388][ T6000] ath6kl: Failed to submit usb control message: -71 [ 682.295391][ T6000] ath6kl: unable to send the bmi data to the device: -71 [ 682.298417][ T6000] ath6kl: Unable to send get target info: -71 [ 682.301879][ T6000] ath6kl: Failed to init ath6kl core: -71 [ 682.306621][ T6000] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 682.325439][ T6000] usb 5-1: USB disconnect, device number 44 [ 682.853751][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 683.883747][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 684.733360][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.923761][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 685.813395][T15182] 9pnet_virtio: no channels available for device syz [ 685.875607][T15183] overlayfs: overlapping lowerdir path [ 685.963828][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 686.051912][T15187] Illegal XDP return value 3327848694 on prog (id 275) dev syz_tun, expect packet loss! [ 686.274587][T15192] netlink: 'syz.1.2130': attribute type 10 has an invalid length. [ 686.290040][T15192] team0: Port device netdevsim0 added [ 687.003741][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 687.297225][T15213] fuse: Bad value for 'fd' [ 687.483952][T15213] nbd1: detected capacity change from 0 to 22 [ 687.499305][T15218] block nbd1: shutting down sockets [ 687.508518][ C3] blk_print_req_error: 40 callbacks suppressed [ 687.508582][ C3] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.512974][ C3] buffer_io_error: 40 callbacks suppressed [ 687.512983][ C3] Buffer I/O error on dev nbd1, logical block 0, async page read [ 687.519455][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.522083][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 687.524758][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.527491][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 687.529866][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.532312][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 687.534444][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.537414][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 687.539591][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.542422][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 687.545263][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.548350][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 687.551265][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.555032][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 687.557378][T12703] ldm_validate_partition_table(): Disk read failed. [ 687.559166][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.561541][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 687.563589][T12703] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 687.566279][T12703] Buffer I/O error on dev nbd1, logical block 0, async page read [ 687.568651][T12703] Dev nbd1: unable to read RDB block 0 [ 687.570186][T12703] nbd1: unable to read partition table [ 687.572241][T12703] nbd1: partition table beyond EOD, truncated [ 687.576343][T12703] ldm_validate_partition_table(): Disk read failed. [ 687.578936][T12703] Dev nbd1: unable to read RDB block 0 [ 687.581004][T12703] nbd1: unable to read partition table [ 687.582947][T12703] nbd1: partition table beyond EOD, truncated [ 687.587194][T15213] ldm_validate_partition_table(): Disk read failed. [ 687.590037][T15213] Dev nbd1: unable to read RDB block 0 [ 687.592216][T15213] nbd1: unable to read partition table [ 687.595393][T15213] nbd1: partition table beyond EOD, truncated [ 688.053736][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 688.123851][ T6000] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 688.287760][ T6000] usb 7-1: Using ep0 maxpacket: 32 [ 688.302817][ T6000] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 688.306601][ T6000] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.310163][ T6000] usb 7-1: config 0 has no interface number 0 [ 688.312639][ T6000] usb 7-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 688.317826][ T6000] usb 7-1: config 0 interface 8 has no altsetting 0 [ 688.322026][ T6000] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 688.325826][ T6000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.328995][ T6000] usb 7-1: Product: syz [ 688.330676][ T6000] usb 7-1: Manufacturer: syz [ 688.332627][ T6000] usb 7-1: SerialNumber: syz [ 688.335025][ T6000] usb 7-1: config 0 descriptor?? [ 688.556510][T15244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.562192][T15244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.803860][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 688.806752][T15254] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2143'. [ 688.811481][T15254] vlan0: entered allmulticast mode [ 689.083876][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 689.855925][ T6000] ath6kl: Failed to submit usb control message: -71 [ 689.862332][ T6000] ath6kl: unable to send the bmi data to the device: -71 [ 689.864246][ T6000] ath6kl: Unable to send get target info: -71 [ 689.868255][ T6000] ath6kl: Failed to init ath6kl core: -71 [ 689.870654][ T6000] ath6kl_usb 7-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 689.885275][ T6000] usb 7-1: USB disconnect, device number 45 [ 690.123757][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 690.451350][ T5965] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 690.469282][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2149'. [ 690.512655][T15274] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 690.514606][T15273] IPVS: stopping master sync thread 15274 ... [ 691.163761][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 691.376585][T15283] netlink: 'syz.0.2151': attribute type 10 has an invalid length. [ 691.378681][T15283] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 691.381050][T15283] bond0: (slave wlan1): Opening slave failed [ 691.436340][T15285] 9pnet_virtio: no channels available for device syz [ 691.554611][T15289] overlayfs: overlapping lowerdir path [ 692.203763][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 693.243755][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 693.302877][T12107] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz1 [ 693.616553][T15304] syz.2.2155 (15304) used greatest stack depth: 21024 bytes left [ 694.062219][T15328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2158'. [ 694.283749][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 694.429410][T15333] sp0: Synchronizing with TNC [ 694.532819][T11787] Bluetooth: hci4: sending frame failed (-49) [ 694.537602][ T5965] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 694.707751][T15328] orangefs_mount: mount request failed with -4 [ 695.323803][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 695.525239][T15355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2168'. [ 695.753041][T15361] trusted_key: encrypted_key: insufficient parameters specified [ 696.363735][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 697.413744][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 697.742469][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'. [ 697.745995][T15392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2176'. [ 697.770647][T15392] vlan0: entered allmulticast mode [ 698.443773][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 698.541436][T15407] 9pnet_fd: Insufficient options for proto=fd [ 698.827074][T15410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2179'. [ 699.345182][T15418] trusted_key: encrypted_key: insufficient parameters specified [ 699.483961][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 700.533758][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 701.359080][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 701.359094][ T39] audit: type=1400 audit(1732215237.378:446): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=15442 comm="syz.3.2188" [ 701.573791][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 702.323084][T15471] netlink: 'syz.0.2193': attribute type 10 has an invalid length. [ 702.325518][T15471] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 702.332874][T15471] team0: Port device netdevsim0 added [ 702.613778][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 702.753232][T15479] syzkaller1: entered promiscuous mode [ 702.759007][T15479] syzkaller1: entered allmulticast mode [ 703.344862][ T6000] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 703.643747][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 703.973851][ T6000] usb 8-1: Using ep0 maxpacket: 32 [ 703.979323][ T6000] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 703.981539][ T6000] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.984269][ T6000] usb 8-1: config 0 has no interface number 0 [ 703.986183][ T6000] usb 8-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 703.989900][ T6000] usb 8-1: config 0 interface 8 has no altsetting 0 [ 703.993640][ T6000] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 703.996157][ T6000] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.998334][ T6000] usb 8-1: Product: syz [ 704.004093][ T6000] usb 8-1: Manufacturer: syz [ 704.007301][ T6000] usb 8-1: SerialNumber: syz [ 704.010310][ T6000] usb 8-1: config 0 descriptor?? [ 704.241774][T15484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.246507][T15484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.683845][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 704.761000][ T6000] ath6kl: Failed to submit usb control message: -71 [ 704.763820][ T6000] ath6kl: unable to send the bmi data to the device: -71 [ 704.765634][ T6000] ath6kl: Unable to send get target info: -71 [ 704.768065][ T6000] ath6kl: Failed to init ath6kl core: -71 [ 704.769825][ T6000] ath6kl_usb 8-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 704.781586][ T6000] usb 8-1: USB disconnect, device number 39 [ 705.358926][T15526] netlink: 'syz.3.2208': attribute type 10 has an invalid length. [ 705.700739][T15526] team0: Port device netdevsim0 added [ 705.723772][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 705.958177][ T6000] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 706.119115][ T6000] usb 5-1: Using ep0 maxpacket: 32 [ 706.128565][ T6000] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 706.131051][ T6000] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.137529][ T6000] usb 5-1: config 0 has no interface number 0 [ 706.140174][ T6000] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 706.145237][ T6000] usb 5-1: config 0 interface 8 has no altsetting 0 [ 706.158370][ T6000] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 706.161863][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.166399][ T6000] usb 5-1: Product: syz [ 706.168185][ T6000] usb 5-1: Manufacturer: syz [ 706.169564][ T6000] usb 5-1: SerialNumber: syz [ 706.174912][ T6000] usb 5-1: config 0 descriptor?? [ 706.273933][ T8966] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 706.382703][T15530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.385357][T15530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.434014][ T8966] usb 6-1: Using ep0 maxpacket: 8 [ 706.439266][ T8966] usb 6-1: config 0 has no interfaces? [ 706.441338][ T8966] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 706.444848][ T8966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.450294][ T8966] usb 6-1: config 0 descriptor?? [ 706.671649][ T8966] usb 6-1: USB disconnect, device number 36 [ 706.763940][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 706.912648][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2219'. [ 707.358253][ T6000] ath6kl: Failed to submit usb control message: -71 [ 707.361221][ T6000] ath6kl: unable to send the bmi data to the device: -71 [ 707.365235][T15556] ucma_write: process 2179 (syz.1.2220) changed security contexts after opening file descriptor, this is not allowed. [ 707.365607][ T6000] ath6kl: Unable to send get target info: -71 [ 707.387216][ T6000] ath6kl: Failed to init ath6kl core: -71 [ 707.389697][ T6000] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 707.404963][ T6000] usb 5-1: USB disconnect, device number 45 [ 707.803761][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 707.847760][ T30] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz1 [ 708.843801][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 709.883782][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 709.944986][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 709.948468][T15615] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2233'. [ 709.955258][T15605] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2231'. [ 709.956276][T15615] vlan0: entered allmulticast mode [ 709.963779][T12107] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 710.123776][T12107] usb 5-1: Using ep0 maxpacket: 32 [ 710.129525][T12107] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 710.134514][T12107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.138531][T12107] usb 5-1: config 0 has no interface number 0 [ 710.141968][T12107] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 710.147235][T12107] usb 5-1: config 0 interface 8 has no altsetting 0 [ 710.161111][T12107] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 710.164592][T12107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.167525][T12107] usb 5-1: Product: syz [ 710.168935][T12107] usb 5-1: Manufacturer: syz [ 710.170314][T12107] usb 5-1: SerialNumber: syz [ 710.174151][T12107] usb 5-1: config 0 descriptor?? [ 710.392783][T15604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.397595][T15604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.800952][T15640] syz.3.2236: attempt to access beyond end of device [ 710.800952][T15640] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 710.804619][T15640] FAT-fs (nbd3): unable to read boot sector [ 710.856922][ T30] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz1] on syz1 [ 710.923750][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.712655][T12107] ath6kl: Failed to submit usb control message: -71 [ 711.723348][T12107] ath6kl: unable to send the bmi data to the device: -71 [ 711.736154][T12107] ath6kl: Unable to send get target info: -71 [ 711.737184][T15655] bridge0: port 1(syz_tun) entered blocking state [ 711.741719][T15655] bridge0: port 1(syz_tun) entered disabled state [ 711.746166][T12107] ath6kl: Failed to init ath6kl core: -71 [ 711.750777][T12107] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 711.759328][T12107] usb 5-1: USB disconnect, device number 46 [ 711.759750][T15655] syz_tun: entered promiscuous mode [ 711.948433][ T39] audit: type=1326 audit(1732215247.968:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15654 comm="syz.0.2239" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x0 [ 711.963758][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 713.003870][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 713.143640][T15686] 9pnet_virtio: no channels available for device syz [ 713.155568][T15686] overlayfs: overlapping lowerdir path [ 713.438965][T15695] 9pnet_virtio: no channels available for device syz [ 713.449261][T15695] overlayfs: overlapping lowerdir path [ 713.496998][T13960] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 713.653833][T13960] usb 6-1: Using ep0 maxpacket: 32 [ 713.659766][T13960] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 713.662689][T13960] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.665760][T13960] usb 6-1: config 0 has no interface number 0 [ 713.667602][T13960] usb 6-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 713.671272][T13960] usb 6-1: config 0 interface 8 has no altsetting 0 [ 713.675456][T13960] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 713.678102][T13960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.680448][T13960] usb 6-1: Product: syz [ 713.682103][T13960] usb 6-1: Manufacturer: syz [ 713.683575][T13960] usb 6-1: SerialNumber: syz [ 713.690675][T13960] usb 6-1: config 0 descriptor?? [ 713.855257][T15707] raw_sendmsg: syz.0.2252 forgot to set AF_INET. Fix it! [ 713.907458][T15690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.910655][T15690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.055243][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 714.093792][T12107] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 714.253754][T12107] usb 5-1: Using ep0 maxpacket: 8 [ 714.265021][T12107] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 714.268726][T12107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.271464][T12107] usb 5-1: Product: syz [ 714.273399][T12107] usb 5-1: Manufacturer: syz [ 714.274793][T12107] usb 5-1: SerialNumber: syz [ 714.281005][T12107] usb 5-1: config 0 descriptor?? [ 714.286536][T12107] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 714.495676][T15704] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2252'. [ 714.514621][T12107] pwc: Failed to set LED on/off time (-71) [ 714.516960][T12107] pwc: send_video_command error -71 [ 714.518431][T12107] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 714.521015][T12107] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 714.525926][T12107] usb 5-1: USB disconnect, device number 47 [ 715.083736][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 715.310145][T13960] ath6kl: Failed to submit usb control message: -71 [ 715.312497][T13960] ath6kl: unable to send the bmi data to the device: -71 [ 715.315699][T13960] ath6kl: Unable to send get target info: -71 [ 715.325120][T13960] ath6kl: Failed to init ath6kl core: -71 [ 715.327032][T13960] ath6kl_usb 6-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 715.331532][T13960] usb 6-1: USB disconnect, device number 37 [ 716.123758][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 717.163762][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 717.244177][ T6018] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 717.393896][ T6018] usb 6-1: Using ep0 maxpacket: 32 [ 717.403735][ T6018] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 717.408746][ T6018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.411696][ T6018] usb 6-1: config 0 has no interface number 0 [ 717.414013][ T6018] usb 6-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 717.417930][ T6018] usb 6-1: config 0 interface 8 has no altsetting 0 [ 717.424168][ T6018] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 717.428595][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.430955][ T6018] usb 6-1: Product: syz [ 717.432265][ T6018] usb 6-1: Manufacturer: syz [ 717.433607][ T6018] usb 6-1: SerialNumber: syz [ 717.443363][ T6018] usb 6-1: config 0 descriptor?? [ 717.664888][T15760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.668098][T15760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.203760][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 719.103450][ T6018] ath6kl: Failed to submit usb control message: -71 [ 719.105328][ T6018] ath6kl: unable to send the bmi data to the device: -71 [ 719.107237][ T6018] ath6kl: Unable to send get target info: -71 [ 719.110456][ T6018] ath6kl: Failed to init ath6kl core: -71 [ 719.112310][ T6018] ath6kl_usb 6-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 719.116571][ T6018] usb 6-1: USB disconnect, device number 38 [ 719.243782][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 719.815622][ T39] audit: type=1326 audit(1732215255.828:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 719.840637][ T39] audit: type=1326 audit(1732215255.858:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 719.846737][ T39] audit: type=1326 audit(1732215255.858:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2277" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 719.852243][ T39] audit: type=1326 audit(1732215255.858:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 719.857790][ T39] audit: type=1326 audit(1732215255.868:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 719.863737][ T39] audit: type=1326 audit(1732215255.868:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2277" exe="/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 719.869213][ T39] audit: type=1326 audit(1732215255.868:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 719.875252][ T39] audit: type=1326 audit(1732215255.868:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 720.293766][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 721.083794][T10073] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 721.253747][T10073] usb 5-1: Using ep0 maxpacket: 32 [ 721.258624][T10073] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 721.261510][T10073] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.265795][T10073] usb 5-1: config 0 has no interface number 0 [ 721.268105][T10073] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 721.272651][T10073] usb 5-1: config 0 interface 8 has no altsetting 0 [ 721.279998][T10073] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 721.283358][T10073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.286570][T10073] usb 5-1: Product: syz [ 721.288089][T10073] usb 5-1: Manufacturer: syz [ 721.297684][T10073] usb 5-1: SerialNumber: syz [ 721.316665][T10073] usb 5-1: config 0 descriptor?? [ 721.323797][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 721.578740][T15817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.585151][T15817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.363862][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 722.993807][ T6000] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 723.154516][ T6000] usb 7-1: Using ep0 maxpacket: 8 [ 723.157636][ T6000] usb 7-1: config 0 has no interfaces? [ 723.159343][ T6000] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 723.162539][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.166731][ T6000] usb 7-1: config 0 descriptor?? [ 723.349749][T10073] ath6kl: Failed to submit usb control message: -71 [ 723.351608][T10073] ath6kl: unable to send the bmi data to the device: -71 [ 723.353414][T10073] ath6kl: Unable to send get target info: -71 [ 723.364195][T10073] ath6kl: Failed to init ath6kl core: -71 [ 723.365968][T10073] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 723.373918][T10073] usb 5-1: USB disconnect, device number 48 [ 723.402106][T15845] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 723.403833][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 723.410508][ T6000] usb 7-1: USB disconnect, device number 46 [ 724.443801][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 724.924731][T15880] 9pnet_fd: Insufficient options for proto=fd [ 725.461695][T15905] 9pnet_virtio: no channels available for device syz [ 725.483766][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 725.592031][T15910] overlayfs: overlapping lowerdir path [ 726.523816][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 726.640198][T15924] vivid-001: ================= START STATUS ================= [ 726.642885][T15924] vivid-001: Radio HW Seek Mode: Bounded [ 726.649562][T15924] vivid-001: Radio Programmable HW Seek: false [ 726.651788][T15924] vivid-001: RDS Rx I/O Mode: Block I/O [ 726.659326][T15924] vivid-001: Generate RBDS Instead of RDS: false [ 726.661284][T15924] vivid-001: RDS Reception: true [ 726.662613][T15924] vivid-001: RDS Program Type: 0 inactive [ 726.664163][T15924] vivid-001: RDS PS Name: inactive [ 726.665538][T15924] vivid-001: RDS Radio Text: inactive [ 726.667372][T15924] vivid-001: RDS Traffic Announcement: false inactive [ 726.669162][T15924] vivid-001: RDS Traffic Program: false inactive [ 726.670989][T15924] vivid-001: RDS Music: false inactive [ 726.672502][T15924] vivid-001: ================== END STATUS ================== [ 727.563771][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 728.603813][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 728.733940][ T6000] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 728.872971][ T39] audit: type=1326 audit(1732215264.888:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.0.2318" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 728.880817][ T39] audit: type=1326 audit(1732215264.888:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.0.2318" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 728.888266][ T39] audit: type=1326 audit(1732215264.888:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.0.2318" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 728.894963][ T39] audit: type=1326 audit(1732215264.888:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.0.2318" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 728.901339][ T39] audit: type=1326 audit(1732215264.888:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.0.2318" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 728.907242][ T6000] usb 8-1: Using ep0 maxpacket: 32 [ 728.920116][ T6000] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 728.922285][ T6000] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.925321][ T6000] usb 8-1: config 0 has no interface number 0 [ 728.926975][ T6000] usb 8-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 728.930381][ T6000] usb 8-1: config 0 interface 8 has no altsetting 0 [ 728.947303][ T6000] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 728.949874][ T6000] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.952168][ T6000] usb 8-1: Product: syz [ 728.953358][ T6000] usb 8-1: Manufacturer: syz [ 728.953796][ T39] audit: type=1326 audit(1732215264.888:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.0.2318" exe="/syz-executor" sig=0 arch=40000003 syscall=355 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 728.957457][ T6000] usb 8-1: SerialNumber: syz [ 728.960425][ T39] audit: type=1326 audit(1732215264.888:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.0.2318" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 728.967730][ T39] audit: type=1326 audit(1732215264.888:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.0.2318" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 728.973508][ T39] audit: type=1326 audit(1732215264.888:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.0.2318" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 728.979625][ T39] audit: type=1326 audit(1732215264.888:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.0.2318" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 728.993628][ T6000] usb 8-1: config 0 descriptor?? [ 729.199163][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.201550][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.643754][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 730.055726][T15989] overlayfs: overlapping lowerdir path [ 730.501013][ T6000] ath6kl: Failed to submit usb control message: -71 [ 730.508631][ T6000] ath6kl: unable to send the bmi data to the device: -71 [ 730.542011][ T6000] ath6kl: Unable to send get target info: -71 [ 730.562457][ T6000] ath6kl: Failed to init ath6kl core: -71 [ 730.573292][ T6000] ath6kl_usb 8-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 730.593146][ T6000] usb 8-1: USB disconnect, device number 40 [ 730.683846][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 731.703141][T16026] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2331'. [ 731.733764][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 732.763765][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 733.813751][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 734.058308][T16056] overlayfs: overlapping lowerdir path [ 734.853787][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 735.281669][T16084] vivid-000: ================= START STATUS ================= [ 735.293766][T16084] vivid-000: Radio HW Seek Mode: Bounded [ 735.295926][T16084] vivid-000: Radio Programmable HW Seek: false [ 735.297642][T16084] vivid-000: RDS Rx I/O Mode: Block I/O [ 735.299408][T16084] vivid-000: Generate RBDS Instead of RDS: false [ 735.301222][T16084] vivid-000: RDS Reception: true [ 735.302651][T16084] vivid-000: RDS Program Type: 0 inactive [ 735.305310][T16084] vivid-000: RDS PS Name: inactive [ 735.308427][T16084] vivid-000: RDS Radio Text: inactive [ 735.310355][T16084] vivid-000: RDS Traffic Announcement: false inactive [ 735.312997][T16084] vivid-000: RDS Traffic Program: false inactive [ 735.315935][T16084] vivid-000: RDS Music: false inactive [ 735.318131][T16084] vivid-000: ================== END STATUS ================== [ 735.883791][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 736.923833][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 737.183967][ T6000] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 737.334511][ T6000] usb 5-1: Using ep0 maxpacket: 32 [ 737.339820][ T6000] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 737.342195][ T6000] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.346199][ T6000] usb 5-1: config 0 has no interface number 0 [ 737.348534][ T6000] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 737.352415][ T6000] usb 5-1: config 0 interface 8 has no altsetting 0 [ 737.356578][ T6000] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 737.359130][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.361468][ T6000] usb 5-1: Product: syz [ 737.362675][ T6000] usb 5-1: Manufacturer: syz [ 737.365163][ T6000] usb 5-1: SerialNumber: syz [ 737.371955][ T6000] usb 5-1: config 0 descriptor?? [ 737.581304][T16113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.585335][T16113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.963851][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 738.684253][ T6000] ath6kl: Failed to submit usb control message: -71 [ 738.686657][ T6000] ath6kl: unable to send the bmi data to the device: -71 [ 738.709342][ T6000] ath6kl: Unable to send get target info: -71 [ 738.719301][ T6000] ath6kl: Failed to init ath6kl core: -71 [ 738.725773][ T6000] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 738.731826][ T6000] usb 5-1: USB disconnect, device number 49 [ 739.003762][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 739.408748][T16158] netlink: 728 bytes leftover after parsing attributes in process `syz.2.2360'. [ 739.411961][T16158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2360'. [ 739.762748][ T96] Bluetooth: (null): Too short H5 packet [ 739.789483][ T93] Bluetooth: (null): Invalid header checksum [ 739.791237][ T93] Bluetooth: (null): Invalid header checksum [ 739.867460][ T93] Bluetooth: (null): Invalid header checksum [ 739.984735][ T12] Bluetooth: (null): Invalid header checksum [ 740.044849][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 740.105699][ T12] Bluetooth: (null): Invalid header checksum [ 741.083790][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 742.133800][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 743.123831][T16233] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2373'. [ 743.163838][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 743.413847][ T6018] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 743.663822][ T6018] usb 8-1: Using ep0 maxpacket: 32 [ 743.685136][ T6018] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 743.687323][ T6018] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.689910][ T6018] usb 8-1: config 0 has no interface number 0 [ 743.691527][ T6018] usb 8-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 743.712677][ T6018] usb 8-1: config 0 interface 8 has no altsetting 0 [ 743.717712][ T6018] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 743.720919][ T6018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.727842][ T6018] usb 8-1: Product: syz [ 743.729417][ T6018] usb 8-1: Manufacturer: syz [ 744.203760][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 744.282240][ T6018] usb 8-1: SerialNumber: syz [ 744.296300][ T6018] usb 8-1: config 0 descriptor?? [ 744.628332][T16235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.631348][T16235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.243903][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 745.485061][T16273] netlink: 'syz.2.2381': attribute type 1 has an invalid length. [ 745.808792][ T6018] ath6kl: Failed to submit usb control message: -71 [ 745.810740][ T6018] ath6kl: unable to send the bmi data to the device: -71 [ 745.814907][ T6018] ath6kl: Unable to send get target info: -71 [ 746.263957][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.285194][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 746.581457][ T6018] ath6kl: Failed to init ath6kl core: -71 [ 746.594505][ T6018] ath6kl_usb 8-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 746.606960][ T6018] usb 8-1: USB disconnect, device number 41 [ 746.749110][T16294] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2386'. [ 746.810762][T16302] syzkaller1: entered promiscuous mode [ 746.812348][T16302] syzkaller1: entered allmulticast mode [ 747.323765][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 748.342277][T16323] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 748.345486][T16323] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 748.348592][T16323] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 748.363785][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 749.048111][T16342] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2396'. [ 749.403796][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 750.443836][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 751.049677][T16378] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2403'. [ 751.493777][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 751.694645][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 751.694768][ T39] audit: type=1326 audit(1732215287.718:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.3.2406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 751.714008][ T39] audit: type=1326 audit(1732215287.718:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.3.2406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 751.721789][ T39] audit: type=1326 audit(1732215287.718:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.3.2406" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 751.728995][ T39] audit: type=1326 audit(1732215287.718:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.3.2406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 751.735243][ T39] audit: type=1326 audit(1732215287.718:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.3.2406" exe="/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 751.741866][ T39] audit: type=1326 audit(1732215287.718:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.3.2406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 751.749021][ T39] audit: type=1326 audit(1732215287.718:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.3.2406" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 751.947967][T16398] netlink: 'syz.1.2407': attribute type 4 has an invalid length. [ 752.086870][T16404] netlink: 'syz.1.2408': attribute type 4 has an invalid length. [ 752.145594][T16404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2408'. [ 752.523800][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 753.563922][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 753.976287][T16424] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2413'. [ 754.426824][T16430] 9pnet_fd: Insufficient options for proto=fd [ 754.603827][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 754.803872][T12107] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 754.957509][T16443] overlay: Unknown parameter 'volatile:/' [ 754.987628][T12107] usb 7-1: Using ep0 maxpacket: 32 [ 755.022030][T12107] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 755.032381][T12107] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.041366][T12107] usb 7-1: config 0 has no interface number 0 [ 755.044547][T12107] usb 7-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 755.062666][T12107] usb 7-1: config 0 interface 8 has no altsetting 0 [ 755.124178][T12107] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 755.128723][T12107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.151042][T12107] usb 7-1: Product: syz [ 755.158113][T12107] usb 7-1: Manufacturer: syz [ 755.167377][T12107] usb 7-1: SerialNumber: syz [ 755.201683][T12107] usb 7-1: config 0 descriptor?? [ 755.496078][T16437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.501730][T16437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.643866][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 755.862689][T16454] netlink: 'syz.3.2419': attribute type 5 has an invalid length. [ 755.878925][T16458] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 756.683841][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 757.493006][T12107] ath6kl: Failed to submit usb control message: -71 [ 757.514439][T12107] ath6kl: unable to send the bmi data to the device: -71 [ 757.517117][T12107] ath6kl: Unable to send get target info: -71 [ 757.535932][T12107] ath6kl: Failed to init ath6kl core: -71 [ 757.540070][T12107] ath6kl_usb 7-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 757.559761][T12107] usb 7-1: USB disconnect, device number 47 [ 757.723799][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 757.923836][T12107] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 758.084415][T12107] usb 6-1: Using ep0 maxpacket: 32 [ 758.114578][T12107] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 758.116773][T12107] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.125802][T12107] usb 6-1: config 0 has no interface number 0 [ 758.127489][T12107] usb 6-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 758.131681][T12107] usb 6-1: config 0 interface 8 has no altsetting 0 [ 758.145862][T12107] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 758.148544][T12107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.150995][T12107] usb 6-1: Product: syz [ 758.152263][T12107] usb 6-1: Manufacturer: syz [ 758.159862][T12107] usb 6-1: SerialNumber: syz [ 758.166440][T12107] usb 6-1: config 0 descriptor?? [ 758.399068][T16471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.406774][T16471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.763780][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 759.803865][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 760.371030][T12107] ath6kl: Failed to submit usb control message: -71 [ 760.374026][T12107] ath6kl: unable to send the bmi data to the device: -71 [ 760.376372][T12107] ath6kl: Unable to send get target info: -71 [ 760.379359][T12107] ath6kl: Failed to init ath6kl core: -71 [ 760.381907][T12107] ath6kl_usb 6-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 760.388279][T12107] usb 6-1: USB disconnect, device number 39 [ 760.843829][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 761.372262][T16516] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2434'. [ 761.633928][ T8966] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 761.783771][ T8966] usb 6-1: Using ep0 maxpacket: 16 [ 761.785474][ T8966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.785507][ T8966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.785533][ T8966] usb 6-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 761.785552][ T8966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.788648][ T8966] usb 6-1: config 0 descriptor?? [ 761.883781][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 762.350855][T16530] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2436'. [ 762.923750][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 762.958437][T16545] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2443'. [ 763.117094][ T8966] usbhid 6-1:0.0: can't add hid device: -71 [ 763.119613][ T8966] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 763.130294][ T8966] usb 6-1: USB disconnect, device number 40 [ 763.254411][T16558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2440'. [ 763.260894][T16558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2440'. [ 763.299639][T16558] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 763.584963][ T30] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 763.739243][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 763.762283][ T30] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 763.765518][ T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.768944][ T30] usb 7-1: config 0 has no interface number 0 [ 763.782626][ T30] usb 7-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 763.802726][ T30] usb 7-1: config 0 interface 8 has no altsetting 0 [ 763.812016][ T30] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 763.814929][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.817180][ T30] usb 7-1: Product: syz [ 763.827151][ T30] usb 7-1: Manufacturer: syz [ 763.828523][ T30] usb 7-1: SerialNumber: syz [ 763.830826][ T30] usb 7-1: config 0 descriptor?? [ 763.873327][T16567] 9pnet: Unknown protocol version 9p2000. [ 763.963808][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 764.041355][T16560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.045301][T16560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.114517][ T6553] syz_tun (unregistering): left promiscuous mode [ 764.451578][T16574] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2446'. [ 764.727936][T11787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 764.735406][T11787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 764.740999][T11787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 764.745327][T11787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 764.748668][T11787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 764.750963][T11787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 764.855170][T16577] chnl_net:caif_netlink_parms(): no params data found [ 764.994981][T16577] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.997421][T16577] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.999842][T16577] bridge_slave_0: entered allmulticast mode [ 765.002749][T16577] bridge_slave_0: entered promiscuous mode [ 765.003753][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 765.006596][T16577] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.009061][T16577] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.011445][T16577] bridge_slave_1: entered allmulticast mode [ 765.014584][T16577] bridge_slave_1: entered promiscuous mode [ 765.130555][T16577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.207017][T16577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.251854][T16577] team0: Port device team_slave_0 added [ 765.260504][T16577] team0: Port device team_slave_1 added [ 765.306822][T16577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.309464][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.318635][T16577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.324551][T16577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.327379][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.338542][T16577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.406149][T16577] hsr_slave_0: entered promiscuous mode [ 765.409197][T16577] hsr_slave_1: entered promiscuous mode [ 765.411838][T16577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 765.423768][T16577] Cannot create hsr debugfs directory [ 765.576558][T16577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 765.582930][T16577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 765.588020][T16577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 765.593307][T16577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 765.631858][T16577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.678009][T16577] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.686626][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.689698][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.706294][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.708626][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.839876][T16577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.044472][T16577] veth0_vlan: entered promiscuous mode [ 766.048307][T16577] veth1_vlan: entered promiscuous mode [ 766.053771][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 766.060678][T16577] veth0_macvtap: entered promiscuous mode [ 766.063970][T16577] veth1_macvtap: entered promiscuous mode [ 766.069880][T16577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.072836][T16577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.076236][T16577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.081583][T16577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.084587][T16577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.087935][T16577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.091374][T16577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.093597][T16577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.096681][T16577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.098996][T16577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.137297][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.140915][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.174339][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.176427][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.226504][ T30] ath6kl: Failed to submit usb control message: -71 [ 766.234228][ T30] ath6kl: unable to send the bmi data to the device: -71 [ 766.236790][ T30] ath6kl: Unable to send get target info: -71 [ 766.239631][ T30] ath6kl: Failed to init ath6kl core: -71 [ 766.241414][ T30] ath6kl_usb 7-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 766.275861][ T30] usb 7-1: USB disconnect, device number 48 [ 766.430517][T16616] netlink: 'syz.3.2451': attribute type 1 has an invalid length. [ 766.844074][T11787] Bluetooth: hci1: command tx timeout [ 767.083737][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 767.975492][T16643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2456'. [ 768.123745][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 768.902758][T16656] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 768.923505][T16659] overlayfs: overlapping lowerdir path [ 768.924171][T11787] Bluetooth: hci1: command tx timeout [ 769.163751][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 770.203772][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 770.520811][T16685] overlayfs: overlapping lowerdir path [ 771.003927][T11787] Bluetooth: hci1: command tx timeout [ 771.243767][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 771.372068][T16707] overlayfs: overlapping lowerdir path [ 771.515636][T16706] netlink: 'syz.2.2469': attribute type 4 has an invalid length. [ 772.067125][T16724] overlayfs: overlapping lowerdir path [ 772.293809][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 772.377944][T16735] overlayfs: overlapping lowerdir path [ 772.715274][T16750] overlayfs: overlapping lowerdir path [ 773.093771][T11787] Bluetooth: hci1: command tx timeout [ 773.324491][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 774.052486][T16780] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2485'. [ 774.080736][T16780] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2485'. [ 774.106170][T16783] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 774.224947][T16787] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2487'. [ 774.363734][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 774.635657][T16798] overlayfs: overlapping lowerdir path [ 775.403848][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 776.170328][T16830] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 776.443750][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 777.483781][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 778.007299][T16858] overlayfs: overlapping lowerdir path [ 778.533764][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 779.239841][T16886] 9pnet: Unknown protocol version 9p2000. [ 779.476206][T11787] Bluetooth: hci3: SCO packet for unknown connection handle 1955 [ 779.563859][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 779.738731][T16896] netlink: 'syz.0.2510': attribute type 1 has an invalid length. [ 780.603814][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 780.838249][T16919] overlayfs: overlapping lowerdir path [ 781.653760][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 782.422854][T16938] random: crng reseeded on system resumption [ 782.683917][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 783.579986][T16973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2525'. [ 783.723782][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 784.112140][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'. [ 784.124869][T16990] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.127755][T16990] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.144698][T16990] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.147043][T16990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.151307][T16990] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.153341][T16990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.194856][T16990] team0: Port device bridge0 added [ 784.763727][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 784.824115][T17018] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2536'. [ 785.353149][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2538'. [ 785.813780][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 786.684457][ T1012] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 786.844220][ T1012] usb 8-1: Using ep0 maxpacket: 32 [ 786.853745][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 786.856082][ T1012] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 786.858690][ T1012] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.861560][ T1012] usb 8-1: config 0 has no interface number 0 [ 786.863572][ T1012] usb 8-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 786.869168][ T1012] usb 8-1: config 0 interface 8 has no altsetting 0 [ 786.891356][ T1012] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 786.899670][ T1012] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.901745][ T1012] usb 8-1: Product: syz [ 786.902843][ T1012] usb 8-1: Manufacturer: syz [ 786.904383][ T1012] usb 8-1: SerialNumber: syz [ 786.911021][ T1012] usb 8-1: config 0 descriptor?? [ 787.003905][ T3220] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 787.132586][T17051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.136244][T17051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.163864][ T3220] usb 9-1: Using ep0 maxpacket: 32 [ 787.174414][ T3220] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 787.178464][ T3220] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.182060][ T3220] usb 9-1: config 0 has no interface number 0 [ 787.185691][ T3220] usb 9-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 787.189767][ T3220] usb 9-1: config 0 interface 8 has no altsetting 0 [ 787.197060][ T3220] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 787.199692][ T3220] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.201941][ T3220] usb 9-1: Product: syz [ 787.203443][ T3220] usb 9-1: Manufacturer: syz [ 787.205246][ T3220] usb 9-1: SerialNumber: syz [ 787.214945][ T3220] usb 9-1: config 0 descriptor?? [ 787.460066][T17058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.464703][T17058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.883748][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 788.591846][ T1012] ath6kl: Failed to submit usb control message: -71 [ 788.593619][ T1012] ath6kl: unable to send the bmi data to the device: -71 [ 788.595553][ T1012] ath6kl: Unable to send get target info: -71 [ 788.597575][ T1012] ath6kl: Failed to init ath6kl core: -71 [ 788.599391][ T1012] ath6kl_usb 8-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 788.623313][ T1012] usb 8-1: USB disconnect, device number 42 [ 788.923755][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 789.027574][ T3220] ath6kl: Failed to submit usb control message: -71 [ 789.033285][ T3220] ath6kl: unable to send the bmi data to the device: -71 [ 789.038984][ T3220] ath6kl: Unable to send get target info: -71 [ 789.057030][ T3220] ath6kl: Failed to init ath6kl core: -71 [ 789.066948][ T3220] ath6kl_usb 9-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 789.084368][ T3220] usb 9-1: USB disconnect, device number 2 [ 789.963910][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 791.003785][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 792.054895][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 792.136947][T16627] Bluetooth: hci4: Frame reassembly failed (-84) [ 792.251207][T16627] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 792.257619][T17125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2556'. [ 793.107976][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 794.129980][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 794.138911][ T5965] Bluetooth: hci4: command 0x1003 tx timeout [ 794.152309][T11787] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 795.173882][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 796.203911][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 797.254120][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 798.294136][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 799.015627][T17203] afs: Unknown parameter 'dynAflock' [ 799.338041][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 800.396789][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 801.405913][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 802.421552][T17231] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2578'. [ 802.443907][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 802.626235][ T5326] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 802.837282][ T5326] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 802.842973][ T5326] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.870129][ T5326] usb 9-1: config 0 descriptor?? [ 802.908533][ T5326] cp210x 9-1:0.0: cp210x converter detected [ 803.484646][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 803.501025][ T5326] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 803.699713][ T5326] cp210x 9-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 803.710018][ T5326] cp210x 9-1:0.0: GPIO initialisation failed: -71 [ 803.751009][ T5326] usb 9-1: cp210x converter now attached to ttyUSB0 [ 803.771539][ T5326] usb 9-1: USB disconnect, device number 3 [ 803.780133][ T5326] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 803.792147][ T5326] cp210x 9-1:0.0: device disconnected [ 804.387527][T17250] netlink: 'syz.4.2583': attribute type 1 has an invalid length. [ 804.523839][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 805.565928][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 805.897197][T17258] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 805.919597][T17258] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 805.945865][T17258] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 805.948915][T17258] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 805.962193][T17258] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 806.594746][T17270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2586'. [ 806.609472][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.615210][T17270] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 807.643952][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 807.666023][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.967128][ T5965] Bluetooth: hci1: command 0x0c1a tx timeout [ 807.969880][ T5965] Bluetooth: hci3: command 0x0406 tx timeout [ 807.972528][ T5965] Bluetooth: hci2: command 0x0c1a tx timeout [ 808.684109][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 809.726069][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 809.743941][ T5326] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 809.917207][ T5326] usb 7-1: Using ep0 maxpacket: 32 [ 809.968432][ T5326] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 809.973312][ T5326] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.980297][ T5326] usb 7-1: config 0 has no interface number 0 [ 809.994244][ T5326] usb 7-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 810.000195][ T5326] usb 7-1: config 0 interface 8 has no altsetting 0 [ 810.025686][ T5326] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 810.046007][T11787] Bluetooth: hci1: command 0x0c1a tx timeout [ 810.056497][ T5326] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.059819][ T5326] usb 7-1: Product: syz [ 810.061564][ T5326] usb 7-1: Manufacturer: syz [ 810.066426][ T5326] usb 7-1: SerialNumber: syz [ 810.112314][ T5326] usb 7-1: config 0 descriptor?? [ 810.384028][T17281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.402834][T17281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.763794][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 811.817868][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 812.142201][T11787] Bluetooth: hci1: command 0x0c1a tx timeout [ 812.494923][ T5326] ath6kl: Failed to submit usb control message: -71 [ 812.513108][ T5326] ath6kl: unable to send the bmi data to the device: -71 [ 812.517006][ T5326] ath6kl: Unable to send get target info: -71 [ 812.520960][ T5326] ath6kl: Failed to init ath6kl core: -71 [ 812.531080][ T5326] ath6kl_usb 7-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 812.551069][ T5326] usb 7-1: USB disconnect, device number 49 [ 812.843993][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 813.909910][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 814.946548][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 815.278153][ T5965] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 815.314008][ T5965] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 815.332438][ T5965] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 815.341314][ T5965] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 815.371431][ T5965] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 815.379838][ T5965] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 815.863339][T17318] chnl_net:caif_netlink_parms(): no params data found [ 815.964638][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 816.366586][T17318] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.369385][T17318] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.406120][T17318] bridge_slave_0: entered allmulticast mode [ 816.410218][T17318] bridge_slave_0: entered promiscuous mode [ 816.426712][T17318] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.429625][T17318] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.432485][T17318] bridge_slave_1: entered allmulticast mode [ 816.464825][T17318] bridge_slave_1: entered promiscuous mode [ 816.682336][T17318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.706062][T17318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.943656][T17318] team0: Port device team_slave_0 added [ 816.961988][T17318] team0: Port device team_slave_1 added [ 817.021914][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 817.120295][T17318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.123208][T17318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.148450][T17318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.195143][T17318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.198825][T17318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.213447][T17318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.370384][T17318] hsr_slave_0: entered promiscuous mode [ 817.430506][T17318] hsr_slave_1: entered promiscuous mode [ 817.448216][T17318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 817.468367][T17318] Cannot create hsr debugfs directory [ 817.494445][ T5965] Bluetooth: hci4: command tx timeout [ 818.053818][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 818.159883][T17318] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 818.201010][T17318] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 818.211099][T17318] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 818.274381][T17318] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 818.462959][T17318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.522621][T17318] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.617595][T17318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 818.637161][T17318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 818.658893][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.678946][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.699971][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.713153][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.962740][T17318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.097802][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 819.563905][ T5965] Bluetooth: hci4: command tx timeout [ 820.018157][T17318] veth0_vlan: entered promiscuous mode [ 820.057029][T17318] veth1_vlan: entered promiscuous mode [ 820.136045][T17318] veth0_macvtap: entered promiscuous mode [ 820.162809][T17318] veth1_macvtap: entered promiscuous mode [ 820.186782][T17318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.190484][T17318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.197180][T17318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.200973][T17318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.205761][T17318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.244185][T17318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.249439][T17318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.258608][T17318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.262547][T17318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.295252][T17318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.304945][T17318] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.310065][T17318] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.336722][T17318] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.350965][T17318] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.676263][T17355] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2601'. [ 820.680002][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.683101][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.823651][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.847360][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.484082][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 821.646365][ T9] usb 10-1: config 0 has no interfaces? [ 821.649329][ T9] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 821.653883][ T5965] Bluetooth: hci4: command tx timeout [ 821.770964][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.818509][ T9] usb 10-1: config 0 descriptor?? [ 823.224127][ T3220] usb 10-1: USB disconnect, device number 2 [ 823.725704][ T5965] Bluetooth: hci4: command tx timeout [ 824.062445][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2607'. [ 824.130268][T17388] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2607'. [ 825.710622][T17408] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.2610'. [ 825.819794][T17412] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2611'. [ 826.984362][T17431] input: syz0 as /devices/virtual/input/input34 [ 827.237025][T17431] input: syz0 as /devices/virtual/input/input35 [ 828.051538][T17441] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2617'. [ 829.982714][T17470] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2623'. [ 837.748125][T17544] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 840.523130][T17562] < [ 841.676592][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2644'. [ 841.702843][T17570] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 848.225082][T17619] overlayfs: overlapping lowerdir path [ 848.254840][T17617] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2656'. [ 849.643404][T17637] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2661'. [ 849.858550][ T45] Bluetooth: hci3: Frame reassembly failed (-84) [ 851.885156][T11787] Bluetooth: hci3: command 0x1003 tx timeout [ 851.887556][ T5965] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 852.393648][T17672] overlayfs: overlapping lowerdir path [ 852.832111][T17681] netlink: 'syz.4.2668': attribute type 1 has an invalid length. [ 852.839255][T17681] netlink: 'syz.4.2668': attribute type 4 has an invalid length. [ 852.842340][T17681] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.2668'. [ 853.396840][T17687] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2671'. [ 855.348554][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'. [ 855.362680][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2675'. [ 855.488998][T17704] program syz.0.2675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 855.746673][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 855.984032][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 855.987886][ T9] usb 5-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 855.991206][ T9] usb 5-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 856.019986][ T9] usb 5-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 856.023213][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.026600][ T9] usb 5-1: Product: syz [ 856.030215][ T9] usb 5-1: Manufacturer: syz [ 856.031850][ T9] usb 5-1: SerialNumber: syz [ 856.117815][ T9] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 856.136442][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 856.197735][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 856.203592][ T9] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 856.211882][ T9] usb 5-1: media controller created [ 856.241183][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 856.274913][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 856.372582][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 856.375530][ T9] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 856.423301][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input36 [ 856.424880][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 856.424924][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 856.454318][ T9] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 856.556051][ T9] usb 5-1: USB disconnect, device number 50 [ 856.700964][ T9] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 857.409252][T17722] overlayfs: overlapping lowerdir path [ 857.888451][T17721] cgroup: Invalid name [ 858.297023][ T5965] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 858.300154][T11787] Bluetooth: hci3: command 0x1003 tx timeout [ 858.877086][T17739] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2682'. [ 859.641702][ C0] ================================================================== [ 859.646986][ C0] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2d90/0x3c40 [ 859.650204][ C0] Read of size 8 at addr ffff888024a4b418 by task pool_workqueue_/3 [ 859.653892][ C0] [ 859.654701][ C0] CPU: 0 UID: 0 PID: 3 Comm: pool_workqueue_ Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 859.679462][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 859.684527][ C0] Call Trace: [ 859.685765][ C0] [ 859.686823][ C0] dump_stack_lvl+0x116/0x1f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 859.690265][ C0] print_report+0xc3/0x620 [ 859.692585][ C0] ? __virt_addr_valid+0x5e/0x590 [ 859.698105][ C0] ? __phys_addr+0xc6/0x150 [ 859.700066][ C0] kasan_report+0xd9/0x110 [ 859.701966][ C0] ? __lock_acquire+0x2d90/0x3c40 [ 859.714190][ C0] ? __lock_acquire+0x2d90/0x3c40 [ 859.733856][ C0] __lock_acquire+0x2d90/0x3c40 [ 859.735989][ C0] ? __pfx_lock_release+0x10/0x10 [ 859.737921][ C0] ? rcu_is_watching+0x12/0xc0 [ 859.739712][ C0] ? __smp_call_single_queue+0x174/0x1e0 [ 859.741797][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 859.743555][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 859.756703][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 859.759095][ C0] lock_acquire.part.0+0x11b/0x380 [ 859.761139][ C0] ? p9_req_put+0xaf/0x250 [ 859.762834][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 859.775112][ C0] ? rcu_is_watching+0x12/0xc0 [ 859.777275][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 859.779018][ C0] ? p9_req_put+0xaf/0x250 [ 859.780341][ C0] ? lock_acquire+0x2f/0xb0 [ 859.781653][ C0] ? p9_req_put+0xaf/0x250 [ 859.783027][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 859.814709][ C0] ? p9_req_put+0xaf/0x250 [ 859.817085][ C0] p9_req_put+0xaf/0x250 [ 859.825908][ C0] req_done+0x1e7/0x2f0 [ 859.833917][ C0] ? __pfx_req_done+0x10/0x10 [ 859.836386][ C0] ? __pfx_req_done+0x10/0x10 [ 859.838908][ C0] vring_interrupt+0x31b/0x400 [ 859.867584][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 859.870376][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 859.873210][ C0] handle_irq_event+0xab/0x1e0 [ 859.876522][ C0] handle_edge_irq+0x263/0xd10 [ 859.880588][ C0] __common_interrupt+0xdf/0x250 [ 859.890621][ C0] common_interrupt+0x61/0xe0 [ 859.894858][ C0] asm_common_interrupt+0x26/0x40 [ 859.898618][ C0] RIP: 0010:handle_softirqs+0x1da/0x8f0 [ 859.906265][ C0] Code: 89 44 24 18 48 89 6c 24 10 48 c7 c7 20 72 6b 8b e8 7b 05 cd 09 65 66 c7 05 19 88 b3 7e 00 00 e8 4c 96 44 00 fb bb ff ff ff ff <49> c7 c6 c0 b0 c0 8d 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 859.912341][ C0] RSP: 0018:ffffc90000007f28 EFLAGS: 00000206 [ 859.914391][ C0] RAX: 000000000000f956 RBX: 00000000ffffffff RCX: 1ffffffff207c0b1 [ 859.924801][T17750] overlayfs: overlapping lowerdir path [ 859.944291][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd3c0 RDI: ffffffff8bd16fe0 [ 859.944311][ C0] RBP: ffff88801cedc880 R08: 0000000000000001 R09: 0000000000000001 [ 859.944321][ C0] R10: ffffffff903e47d7 R11: 0000000000000000 R12: 0000000000000200 [ 859.944331][ C0] R13: 000000000000000a R14: 0000000000000001 R15: 0000000000000000 [ 859.944350][ C0] ? handle_softirqs+0x1d4/0x8f0 [ 859.944370][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 859.944392][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 859.944409][ C0] __irq_exit_rcu+0x109/0x170 [ 859.944423][ C0] irq_exit_rcu+0x9/0x30 [ 859.944438][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 859.944457][ C0] [ 859.944462][ C0] [ 859.944468][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 859.944488][ C0] RIP: 0010:preempt_schedule_irq+0x4c/0x90 [ 859.944506][ C0] Code: df 55 65 48 8b 2d e4 69 e5 74 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 df e9 3d f6 e8 2a 78 76 f6 fb bf 01 00 00 00 ff 9c ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 fd 8b 3d [ 859.944519][ C0] RSP: 0018:ffffc90000357d28 EFLAGS: 00000206 [ 859.944532][ C0] RAX: 000000000000f953 RBX: ffffed10039db910 RCX: 1ffffffff207c0b1 [ 859.944542][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd3c0 RDI: 0000000000000001 [ 859.944552][ C0] RBP: ffff88801cedc880 R08: 0000000000000001 R09: 0000000000000001 [ 859.944561][ C0] R10: ffffffff903e47d7 R11: 0000000000000000 R12: 0000000000000000 [ 859.944570][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 859.944584][ C0] ? preempt_schedule_irq+0x46/0x90 [ 859.944600][ C0] irqentry_exit+0x36/0x90 [ 859.944616][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 859.944634][ C0] RIP: 0010:lockdep_unregister_key+0x1b2/0x2b0 [ 859.944653][ C0] Code: 54 fd ff ff 48 89 df e8 ec c3 ff ff 89 c3 e8 05 db ff ff 9c 58 f6 c4 02 0f 85 92 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 84 db <75> 4f 5b 5d 41 5c 41 5d 41 5e 41 5f e9 4d 8b 0a 00 48 c7 c0 d4 7a [ 859.944667][ C0] RSP: 0018:ffffc90000357df0 EFLAGS: 00000246 [ 859.944679][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 859.944690][ C0] RDX: dffffc0000000000 RSI: ffffffff8b6cd680 RDI: ffffffff8bd16fe0 [ 859.944701][ C0] RBP: ffff88804dee5138 R08: ffffffff93585884 R09: 000000000001df82 [ 859.944712][ C0] R10: ffffffff96bbc6df R11: ffff88802b429458 R12: 0000000000000000 [ 859.944724][ C0] R13: 0000000000000246 R14: ffffffff96d6b480 R15: ffff88804dee5140 [ 859.944741][ C0] pwq_release_workfn+0x5e5/0xa50 [ 859.944757][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 859.944773][ C0] kthread_worker_fn+0x305/0xba0 [ 859.944792][ C0] ? __pfx_pwq_release_workfn+0x10/0x10 [ 859.944821][ C0] ? __pfx_kthread_worker_fn+0x10/0x10 [ 859.944839][ C0] kthread+0x2c1/0x3a0 [ 859.944858][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 859.944874][ C0] ? __pfx_kthread+0x10/0x10 [ 859.944891][ C0] ret_from_fork+0x45/0x80 [ 859.944905][ C0] ? __pfx_kthread+0x10/0x10 [ 859.944921][ C0] ret_from_fork_asm+0x1a/0x30 [ 859.944946][ C0] [ 859.944952][ C0] [ 859.944955][ C0] Allocated by task 17747: [ 859.944963][ C0] kasan_save_stack+0x33/0x60 [ 859.944977][ C0] kasan_save_track+0x14/0x30 [ 859.944989][ C0] __kasan_kmalloc+0xaa/0xb0 [ 859.945000][ C0] p9_client_create+0xc8/0x11a0 [ 859.945019][ C0] v9fs_session_init+0x1f8/0x1a80 [ 859.945037][ C0] v9fs_mount+0xc6/0xa30 [ 859.945050][ C0] legacy_get_tree+0x109/0x220 [ 859.945068][ C0] vfs_get_tree+0x8f/0x380 [ 859.945085][ C0] path_mount+0x6e1/0x1f10 [ 859.945097][ C0] __ia32_sys_mount+0x292/0x310 [ 859.945110][ C0] __do_fast_syscall_32+0x73/0x120 [ 859.945127][ C0] do_fast_syscall_32+0x32/0x80 [ 859.945144][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 859.945165][ C0] [ 859.945168][ C0] Freed by task 17747: [ 859.945175][ C0] kasan_save_stack+0x33/0x60 [ 859.945187][ C0] kasan_save_track+0x14/0x30 [ 859.945198][ C0] kasan_save_free_info+0x3b/0x60 [ 859.945215][ C0] __kasan_slab_free+0x51/0x70 [ 859.945228][ C0] kfree+0x14f/0x4b0 [ 859.945238][ C0] p9_client_create+0x97d/0x11a0 [ 859.945287][ C0] v9fs_session_init+0x1f8/0x1a80 [ 859.945309][ C0] v9fs_mount+0xc6/0xa30 [ 859.945325][ C0] legacy_get_tree+0x109/0x220 [ 859.945346][ C0] vfs_get_tree+0x8f/0x380 [ 859.945368][ C0] path_mount+0x6e1/0x1f10 [ 859.945383][ C0] __ia32_sys_mount+0x292/0x310 [ 859.945398][ C0] __do_fast_syscall_32+0x73/0x120 [ 859.945419][ C0] do_fast_syscall_32+0x32/0x80 [ 859.945436][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 859.945458][ C0] [ 859.945463][ C0] The buggy address belongs to the object at ffff888024a4b400 [ 859.945463][ C0] which belongs to the cache kmalloc-512 of size 512 [ 859.945479][ C0] The buggy address is located 24 bytes inside of [ 859.945479][ C0] freed 512-byte region [ffff888024a4b400, ffff888024a4b600) [ 859.945498][ C0] [ 859.945502][ C0] The buggy address belongs to the physical page: [ 859.945508][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24a48 [ 859.945524][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 859.945538][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 859.945555][ C0] page_type: f5(slab) [ 859.945571][ C0] raw: 00fff00000000040 ffff88801ac42c80 0000000000000000 dead000000000001 [ 859.945587][ C0] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 859.945603][ C0] head: 00fff00000000040 ffff88801ac42c80 0000000000000000 dead000000000001 [ 859.945617][ C0] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 859.945633][ C0] head: 00fff00000000002 ffffea0000929201 ffffffffffffffff 0000000000000000 [ 859.945648][ C0] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 859.945657][ C0] page dumped because: kasan: bad access detected [ 859.945665][ C0] page_owner tracks the page as allocated [ 859.945670][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17422, tgid 17421 (syz.2.2613), ts 827688407097, free_ts 514994430743 [ 859.945695][ C0] post_alloc_hook+0x2d1/0x350 [ 859.945712][ C0] get_page_from_freelist+0xfce/0x2f80 [ 859.945731][ C0] __alloc_pages_noprof+0x223/0x25a0 [ 859.945748][ C0] alloc_pages_mpol_noprof+0x2c9/0x610 [ 859.945765][ C0] new_slab+0x2c9/0x410 [ 859.945783][ C0] ___slab_alloc+0xd1d/0x16f0 [ 859.945813][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 859.945828][ C0] __kmalloc_cache_noprof+0x2c5/0x310 [ 859.945841][ C0] inetdev_init+0x66/0x5a0 [ 859.945856][ C0] inetdev_event+0xb17/0x16b0 [ 859.945872][ C0] notifier_call_chain+0xb9/0x410 [ 859.945890][ C0] call_netdevice_notifiers_info+0xbe/0x140 [ 859.945908][ C0] register_netdevice+0x1728/0x1e20 [ 859.945925][ C0] register_netdev+0x2f/0x50 [ 859.945940][ C0] ip6gre_init_net+0x260/0x3b0 [ 859.945958][ C0] ops_init+0x1df/0x5f0 [ 859.945971][ C0] page last free pid 12257 tgid 12256 stack trace: [ 859.945979][ C0] free_unref_page+0x661/0x1080 [ 859.945992][ C0] __put_partials+0x14c/0x170 [ 859.946004][ C0] qlist_free_all+0x4e/0x120 [ 859.946016][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 859.946031][ C0] __kasan_slab_alloc+0x69/0x90 [ 859.946046][ C0] kmem_cache_alloc_noprof+0x121/0x2f0 [ 859.946060][ C0] create_new_namespaces+0x30/0xad0 [ 859.946074][ C0] __do_sys_setns+0x22a/0x1920 [ 859.946088][ C0] __do_fast_syscall_32+0x73/0x120 [ 859.946106][ C0] do_fast_syscall_32+0x32/0x80 [ 859.946125][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 859.946146][ C0] [ 859.946149][ C0] Memory state around the buggy address: [ 859.946158][ C0] ffff888024a4b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 859.946167][ C0] ffff888024a4b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 859.946177][ C0] >ffff888024a4b400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 859.946184][ C0] ^ [ 859.946191][ C0] ffff888024a4b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 859.946201][ C0] ffff888024a4b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 859.946210][ C0] ================================================================== [ 859.946220][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 859.946229][ C0] CPU: 0 UID: 0 PID: 3 Comm: pool_workqueue_ Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 859.946246][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 859.946256][ C0] Call Trace: [ 859.946264][ C0] [ 859.946271][ C0] dump_stack_lvl+0x3d/0x1f0 [ 859.946294][ C0] panic+0x71d/0x800 [ 859.946316][ C0] ? __pfx_panic+0x10/0x10 [ 859.946335][ C0] ? rcu_is_watching+0x12/0xc0 [ 859.946355][ C0] ? __pfx_lock_release+0x10/0x10 [ 859.946379][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 859.946401][ C0] check_panic_on_warn+0xab/0xb0 [ 859.946422][ C0] end_report+0x117/0x180 [ 859.946437][ C0] kasan_report+0xe9/0x110 [ 859.946453][ C0] ? __lock_acquire+0x2d90/0x3c40 [ 859.946476][ C0] ? __lock_acquire+0x2d90/0x3c40 [ 859.946499][ C0] __lock_acquire+0x2d90/0x3c40 [ 859.946523][ C0] ? __pfx_lock_release+0x10/0x10 [ 859.946543][ C0] ? rcu_is_watching+0x12/0xc0 [ 859.946561][ C0] ? __smp_call_single_queue+0x174/0x1e0 [ 859.946579][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 859.946600][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 859.946618][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 859.946638][ C0] lock_acquire.part.0+0x11b/0x380 [ 859.946659][ C0] ? p9_req_put+0xaf/0x250 [ 859.946679][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 859.946702][ C0] ? rcu_is_watching+0x12/0xc0 [ 859.946721][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 859.946741][ C0] ? p9_req_put+0xaf/0x250 [ 859.946762][ C0] ? lock_acquire+0x2f/0xb0 [ 859.946775][ C0] ? p9_req_put+0xaf/0x250 [ 859.946796][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 859.946823][ C0] ? p9_req_put+0xaf/0x250 [ 859.946843][ C0] p9_req_put+0xaf/0x250 [ 859.946864][ C0] req_done+0x1e7/0x2f0 [ 859.946882][ C0] ? __pfx_req_done+0x10/0x10 [ 859.946900][ C0] ? __pfx_req_done+0x10/0x10 [ 859.946916][ C0] vring_interrupt+0x31b/0x400 [ 859.946935][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 859.946954][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 859.946976][ C0] handle_irq_event+0xab/0x1e0 [ 859.946995][ C0] handle_edge_irq+0x263/0xd10 [ 859.947015][ C0] __common_interrupt+0xdf/0x250 [ 859.947039][ C0] common_interrupt+0x61/0xe0 [ 859.947111][ C0] asm_common_interrupt+0x26/0x40 [ 859.947144][ C0] RIP: 0010:handle_softirqs+0x1da/0x8f0 [ 859.947168][ C0] Code: 89 44 24 18 48 89 6c 24 10 48 c7 c7 20 72 6b 8b e8 7b 05 cd 09 65 66 c7 05 19 88 b3 7e 00 00 e8 4c 96 44 00 fb bb ff ff ff ff <49> c7 c6 c0 b0 c0 8d 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 859.947193][ C0] RSP: 0018:ffffc90000007f28 EFLAGS: 00000206 [ 859.947218][ C0] RAX: 000000000000f956 RBX: 00000000ffffffff RCX: 1ffffffff207c0b1 [ 859.947238][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd3c0 RDI: ffffffff8bd16fe0 [ 859.947256][ C0] RBP: ffff88801cedc880 R08: 0000000000000001 R09: 0000000000000001 [ 859.947274][ C0] R10: ffffffff903e47d7 R11: 0000000000000000 R12: 0000000000000200 [ 859.947290][ C0] R13: 000000000000000a R14: 0000000000000001 R15: 0000000000000000 [ 859.947315][ C0] ? handle_softirqs+0x1d4/0x8f0 [ 859.947332][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 859.947357][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 859.947375][ C0] __irq_exit_rcu+0x109/0x170 [ 859.947391][ C0] irq_exit_rcu+0x9/0x30 [ 859.947408][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 859.947428][ C0] [ 859.947434][ C0] [ 859.947441][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 859.947463][ C0] RIP: 0010:preempt_schedule_irq+0x4c/0x90 [ 859.947484][ C0] Code: df 55 65 48 8b 2d e4 69 e5 74 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 df e9 3d f6 e8 2a 78 76 f6 fb bf 01 00 00 00 ff 9c ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 fd 8b 3d [ 859.947500][ C0] RSP: 0018:ffffc90000357d28 EFLAGS: 00000206 [ 859.947514][ C0] RAX: 000000000000f953 RBX: ffffed10039db910 RCX: 1ffffffff207c0b1 [ 859.947526][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd3c0 RDI: 0000000000000001 [ 859.947537][ C0] RBP: ffff88801cedc880 R08: 0000000000000001 R09: 0000000000000001 [ 859.947548][ C0] R10: ffffffff903e47d7 R11: 0000000000000000 R12: 0000000000000000 [ 859.947559][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 859.947574][ C0] ? preempt_schedule_irq+0x46/0x90 [ 859.947594][ C0] irqentry_exit+0x36/0x90 [ 859.947612][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 859.947634][ C0] RIP: 0010:lockdep_unregister_key+0x1b2/0x2b0 [ 859.947657][ C0] Code: 54 fd ff ff 48 89 df e8 ec c3 ff ff 89 c3 e8 05 db ff ff 9c 58 f6 c4 02 0f 85 92 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 84 db <75> 4f 5b 5d 41 5c 41 5d 41 5e 41 5f e9 4d 8b 0a 00 48 c7 c0 d4 7a [ 859.947672][ C0] RSP: 0018:ffffc90000357df0 EFLAGS: 00000246 [ 859.947687][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 859.947698][ C0] RDX: dffffc0000000000 RSI: ffffffff8b6cd680 RDI: ffffffff8bd16fe0 [ 859.947709][ C0] RBP: ffff88804dee5138 R08: ffffffff93585884 R09: 000000000001df82 [ 859.947721][ C0] R10: ffffffff96bbc6df R11: ffff88802b429458 R12: 0000000000000000 [ 859.947732][ C0] R13: 0000000000000246 R14: ffffffff96d6b480 R15: ffff88804dee5140 [ 859.947751][ C0] pwq_release_workfn+0x5e5/0xa50 [ 859.947770][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 859.947790][ C0] kthread_worker_fn+0x305/0xba0 [ 859.947822][ C0] ? __pfx_pwq_release_workfn+0x10/0x10 [ 859.947839][ C0] ? __pfx_kthread_worker_fn+0x10/0x10 [ 859.947859][ C0] kthread+0x2c1/0x3a0 [ 859.947876][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 859.947895][ C0] ? __pfx_kthread+0x10/0x10 [ 859.947914][ C0] ret_from_fork+0x45/0x80 [ 859.947929][ C0] ? __pfx_kthread+0x10/0x10 [ 859.947947][ C0] ret_from_fork_asm+0x1a/0x30 [ 859.947974][ C0] [ 859.961859][ C0] Kernel Offset: disabled VM DIAGNOSIS: 18:52:19 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff850812c0 RDI=ffffffff9a889b60 RBP=ffffffff9a889b20 RSP=ffffc90000007308 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552030203a555043 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35113be R15=dffffc0000000000 RIP=ffffffff850812e7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c311136 CR3=000000006c1dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000033839a1 RBX=0000000000000001 RCX=ffffffff8b1d4f59 RDX=0000000000000000 RSI=ffffffff8b6cd3c0 RDI=ffffffff8bd16fe0 RBP=ffffed1003772910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7035 R10=ffff88802b5381ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801bb94880 R14=ffffffff903e47d0 R15=0000000000000000 RIP=ffffffff8b1d633f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88802b500000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020113018 CR3=000000005c152000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000005 RBX=ffff8880217d5360 RCX=0000000000000004 RDX=fffffbfff2d7b3a0 RSI=0000000000000008 RDI=ffff8880217d5388 RBP=dffffc0000000000 RSP=ffffc900038675d0 R8 =0000000000000000 R9 =0000000000000006 R10=ffffffff96bd9cff R11=0000000000000003 R12=ffffed10042faa6b R13=ffff8880217d4880 R14=0000000000000004 R15=0000000000000001 RIP=ffffffff81699670 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f66e40 CR3=000000004c49a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73fdff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000001a67ea7 RBX=0000000000000003 RCX=ffffffff8b1d4f59 RDX=0000000000000000 RSI=ffffffff8b6cd3c0 RDI=ffffffff8bd16fe0 RBP=ffffed1003775488 RSP=ffffc90000497e08 R8 =0000000000000001 R9 =ffffed10056e7035 R10=ffff88802b7381ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801bbaa440 R14=ffffffff903e47d0 R15=0000000000000000 RIP=ffffffff8b1d633f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020125000 CR3=0000000069e1e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000