last executing test programs: 1m26.013123882s ago: executing program 3 (id=415): mkdir(0x0, 0x34) chdir(0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x10) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f04000000, 0x0, 0xfe, 0x7, 0x1f0e, r1, 0x0, 0x0, 0x24}]) 1m25.885208798s ago: executing program 3 (id=417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70, 0x2c}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}}, 0x3e) 1m25.076308536s ago: executing program 3 (id=419): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000005000000020000008000000000000000", @ANYRES32, @ANYBLOB="0000000000001cb5547a9e08f47d000000000000d90773647457ecae595986a756141ca0483eb8c9085bb3926f74059a972fe541ac4c3fa6f69e46d7e8d36d206264f7526cc747baa2a917df98e67b5c3a401d170f8a0c315c3f99448a9542643a6bff08cb4480e99faee202ae9177a607f6dc0b88ed63ce07c3c798682eaecdc748b197502ee7c044a60a00000000000000e51eb1ccbbf5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r4, &(0x7f0000000000), 0x8) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x4, 0xfffe, 0x200, 0x2}, {0x10000, 0x65ad, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0xfffffffffffffff7}, {0x2, 0x8, 0xfffffffffffffffc, 0x8}, 0x100, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@loopback, 0x40000, 0x5, 0x0, 0xb7}}, 0xe4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{}, {0x0, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x0, 0x1, {{0x0, 0x0, 0x0, r8, 0x1100, 0x8800}}}}}}, @IFLA_LINK={0x8}, @IFLA_TARGET_NETNSID]}, 0xfffffe98}, 0x1, 0x0, 0x0, 0xc045}, 0x24004004) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in6=@remote, 0x4e20, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0xa0, 0xc, r8, r10}, {0x3ff, 0x4, 0x9, 0xfffffffffffffffa, 0xa, 0x7fffffffffffffff, 0x0, 0xb}, {0xbb53, 0x9, 0x2, 0x5}, 0x0, 0x6e6bb1, 0x0, 0x1, 0x2, 0x1}, {{@in=@multicast1, 0x4d2, 0x32}, 0xa, @in6=@private1, 0x3507, 0x3, 0x2, 0xb6, 0x826, 0x8, 0xfb}}, 0xe4) socket$nl_route(0x10, 0x3, 0x0) 1m24.073872176s ago: executing program 3 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x10000a0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x50, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @broadcast, @initial, {0x9, 0x1}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x6, @val={0x8c, 0x10, {0xbf4, "27292a3b9173", @short="7a84936ce4bc72c5"}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000d80)) getuid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) inotify_rm_watch(r3, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r10 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6, 0x0, r9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000500), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r10, 0x47f6, 0x0, 0x4, 0x0, 0x0) 1m23.077556003s ago: executing program 3 (id=430): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x100000000000000, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x3}, {0x200000000004, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 1m22.824913562s ago: executing program 3 (id=431): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8a\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfp\xe3k\xd8?\xd9OeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x00'/392, 0x3) r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(r0, &(0x7f0000000240), 0x0, 0x3, 0xd4bd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x101, 0x0, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x22000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0xfffffffffffffffe}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 1m22.76909859s ago: executing program 32 (id=431): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8a\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfp\xe3k\xd8?\xd9OeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x00'/392, 0x3) r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(r0, &(0x7f0000000240), 0x0, 0x3, 0xd4bd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x101, 0x0, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x22000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0xfffffffffffffffe}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 6.492329354s ago: executing program 4 (id=852): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000003c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r5, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r5, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r7, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="000000001000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 5.6042666s ago: executing program 2 (id=855): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x850) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x60000}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000180)="e1fc09895540ed9aa4a8f263dfdeee01ba861d83d5af6815b0e43bfba014c12f2a6f5dd0ea97867c2b6583da5aeb16a0216b5ae0856c0395bab7c2ac12aa6716c6b78ccccdbadadbae2d64515e10604542eb8a0eb7cb6c33047087379cbc99d1680bebdbe33bde668ba48c894c4be33871174ce9e375df97ae474f181cce486e5db9b77cea488454a2ef5e7d1598ace0628f76eb0821fc64195529083d", 0x9d}, {&(0x7f0000000240)="c8d639b69c8e350f874567ffa3aa9e72815f17559b8542cc6cbab41df67a46e32a4df0f22250453723352b549930a0894af3eb2c90f7dfded20b1ac63e937b03ddc6613a316db5ebd43c81af8a8e29a52531e406ce85c1a835acfe157920b8362bf506ab53413ffcf38a223b753dc813c4f3aaf126", 0x75}, {&(0x7f00000002c0)="659bfdcbd4f9364c9a51178c275f741ba4dab4e6f8f497178d94fb772f5e88703b9346fa32fb839c96b99fec57aaff4ab22a8e7b315e15c4e25baa7f183b651b0bba6887f14dc392a0b65b2c836aa9b2fa87d0ed7f2ae15cf4a1ea7f0099686cfae0dd01f249200cbaba2f1147c32201729f156d6dc3d4ed8a1941d6fd7943aa2a66ed3f7c0a11c9d6e41dc9ce3a02819be34f0e428a6ec0e65bb5b5ac6e0f886d020609f08146478e425a6ecac64fe31ffb749d31efbccb2ebcaf655e603a08", 0xc0}, {&(0x7f0000000380)="2eff6b7474ffdfecc041c21af3c51b73439f0caaeb2638dee7a5c45065f67d3713e6409a3e4ec377fc274b76dbbeac30bc82a23f3ce79e35c05250bf9b5a4950f3e237a7dc21f5c8e1752a54410542b2f0a2cb7267358bb8e9a178f0a550797c0f205c5c05708871f997b77c50af212232e7117b3c750e5764a4a430c7ffb3e62c5c2d679f1922484424c02ec8fbe9a96a42776b4768501e70dc68a5a5530e48ff17ef88b1468c2766ab661c43c6e6f77e225da3019127bdc5cbff85cf141c072b33244fa0bb45f41c852ade95083bc7338167941f80a15051ce3fc23a1e577c20774d764aa321391b4151fa98", 0xed}, {&(0x7f0000000480)="3f7a07ce2f2a0421f21d121567ffed44e2fbeaa638b6764104074ebeb71d62c0cd908fe1607d20db51d996ec223074c7ec0c75466087b46ded6eeb2c4f09a11baa944657f0d9d4064369e20094d139f313e6d092315e37e36ce3877b13348aeada3dd622d36c18d4a7b481451a7f98bdb5ce692cac98a241a4bedefaa02fdea32235524063d4f6491a2e43b591cacfda585ddc182690b64e53572ec76b3c3c7bfaf050d859c6f5bbb692a1809464f8b47e6379c4069880dc45cf5084497f08f540f4af061646420456c433d658d60de12979a6fa3aba3113156fca4a37f9a398388949e832fb", 0xe6}], 0x5, 0x0, 0x0, 0x4000010}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0xd8000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f00000002c0)="d123cfb69714acaee40767c9d68b05d615a4e54e4a16e0b06a5c98844ae8d8e0db30aa35e701f05da45bfce9dc0e399719282fe954ae345a0d326d491b17a1a546cf1b17288b3e58f6ef39c78e30c463fb3b893b07b43b3ca4ccc138c53cb4d90dab506ff34960fba0d210c07bb32b77be0d102c60d8b970294ebd6b15b89b6b4a81bdc0a7ca2280ca0b8153c500ed36ef21d918386b667340b5f24306d58cfe9773af93ae7897b9de7336c02e438a804d746eeb6d5fae9adc57200e76b88af6bd186d1d4909977e26fb2c5dec837fd176e7b2c8df918603e62f7679c2f81f9ecad10c5ead29ab8efc6d442360eb1660052ec79a5d47402d", &(0x7f0000000480)=""/45, &(0x7f0000000700)="e1c94816c99b22e06b13a28919ab371ee1fe90f19e313509533c5f96e119ee93e3c6b7f42f4aeadda7aa6f4d43e036064feb82544f95b3cb2cefab337fcd043af02588975be6a39084b80faf92ee50850f7abd09502b9fa6b07414e23ad5eb3a8a8df4a64f6bd93dbe60a5cd2fff6057acffac976f72b1df599dcafada9c9d7c84b2ef32102bbf2a70459663ca06a0ad211b84e0e5584cfb5faa798e8de332746b806f494275b862e9aae751e6281c0bc81f542a231a6f99c31cac4ea21e164ec7830229c98671dcf8a3d87d9786a341276c48e4a3fd5bb87cb08e7e90b1ab13223f38f5b5b6d867d18ce83600"/251, &(0x7f0000000840)="520c80ee986334a248704f1746da1d8cb618742995dc35113ded9dc5e06c93ffc5cdb4dc97194f8ed49f0f28b1818ed24887c82e0efc52bc1ecbbc6cab36b830887a50ca3164ce5e54d80e58b1fce76ec3c4fefe338aa08dc4ea2789c21a56fda41b7b32da738f2d203e88dabe1dd70f0b1068b895ea4cae020d0588f7cc96fc3f35bffcbb1bb11be4bf75f597ad103539a8fdb406c718888696535acbc97fe34da2b8e29c80e26d989bda7b716821ae6338d4c6272e02db375c22391b22fc99bc9770b54266f1ddc4db73b9aa3e168b73a9259a7c5de7291cf57f2ce39443df562e3264ea0d69970b872bcc4c4a507d5e4b", 0xfffffff6}, 0x38) sched_setscheduler(r1, 0x0, &(0x7f00000006c0)=0xfffdffff) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffd, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0x2, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) vmsplice(r9, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) 5.603031977s ago: executing program 4 (id=856): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getqdisc={0x30, 0x26, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x6}, {0x10, 0xd}, {0xa, 0xa}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) prlimit64(r1, 0xf, &(0x7f00000001c0)={0x8, 0x7f}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r5 = epoll_create(0x10000e9) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r7 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000040)={r7, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000080)={0x30000009}) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0), &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008880) 4.740013891s ago: executing program 2 (id=858): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgid(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000240)=0x0) r3 = inotify_init() io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x23011, r4, 0x6a855000) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x14, 0x12, 0xa01, 0x4, 0x0, {0x80, 0x2}}, 0x14}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_pwait(r7, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, 0x0, 0x0) 4.493511908s ago: executing program 1 (id=860): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000012240)=[{{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000a40)="4198e63ebf3ca270fca0877a9347cb6e03946d3db210b71045e1baf66248afcd6f17f7d022398bfa443431b1c05b5b182163d577faf327a011cee3b54708b6887fc9d8af07973bd03f973558eb2f1e4ca9b39198ef4831b620f066b24b218d08d1200e3b93a3e9e2d9a872970889", 0x6e}, {&(0x7f0000000ac0)="6ac4d3593480d9dc4b156aea5504456f8e934ec1ef0c4dd9e42c5f486e5b8abe81298add8512df633098dcc4a14b4cf0ddb43c097e791f8da5d5610555fc84ffbfe4f76f", 0x44}, {&(0x7f0000000b40)="5038f67ad6cb0415a315887838a580e13994f206772e85cd7bce56ca707e46006f78378e9d547fbe7586bbf400804fc5948fca95425c49e0e51dfea4a1e6b7bdfc7a33a8d30076658466", 0x4a}, {&(0x7f0000000bc0)="280f58317f3e7f7c328defcf787532db901dff9dc23fe67d6f289315a9bde99da78879a2c07ebabcc16066c93824496c23153ee0d8436b76f89830dcdaee65d3105358be32ed10bd2003d3c9d79500d6a67d5ae0cad20db328efb66743cc9044699d0b15e47ecaf9bbfc7679501994198d921694e04e02121fb17806f1bb070f584f6c0e20415631a9b3911b8a9a3e35ed50bc0df3e4c14380d3d0b104e0070251990464afaaeb4ef8df50994614fd5160b589f3495b1b78aacb14da94f855d69e20751c6353f55d69aeac58ce14ee0507176c404a7f92f24f2a08ab14b2da656d7023a1c2451df0240e90181ecbbeb1fb6a2039", 0xf4}, {&(0x7f0000000280)="20e5237d0f10531e487ba3d18d5c75237ff542fdb1bdaf38b38dc7d7f196a8bf864eef36adc8cd3035c9a37a326a91663cccfde9045a8eb1bc", 0x39}, {&(0x7f0000000680)}], 0x6, &(0x7f0000000e00)=[@rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r1, r1, 0xffffffffffffffff, r1, r0]}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r1, r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r0, r1, r0, r1]}}], 0xa8, 0x40}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000f40)="39fa1a803a75a39d43403e0c7cf3aa944b11077cdbe29903169892f770f4", 0x1e}, {&(0x7f0000000f80)="403e0c5e70fbbd074b20a55958b275e8d542526777cd85caeb679d71b45c812a9b8503c51170b81e02c95b17f88867a2c4b20870d116acccba73319a67e1f88816ae768f964888490c5d3562c9fc67ae51d012936d2c12e393ee5e1d6ea61d075115168ffb5024d9b7486e85f507fc6a6b7bfaac49815f46bc1fb575ad64048e8cc6b63357225a2b", 0x88}, {&(0x7f0000001040)="15e24768de0e9ab4eb591fdc468db5ea4b70b2555bb6efcc7b26f30bc98a40db1da4b9bbc6d8310dd4b80ffc1dd8ff0b4f390f16ee48fde5ad19f6d6ee13022e16be27406c7b", 0x46}], 0x3, &(0x7f0000001140)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x4c, 0x54}}, {{&(0x7f00000011c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001240)}, {&(0x7f0000001280)="57e4753cbc9c7aa3a86d295336c2a6323d8bcae528b068443645156b03fc2c4dc3f87bdf638c013aa9789f94246e089545b790a1b06c042c423e3bc3659e5dcc0cb50002f58867c1b6058e19a5ef0fa5c5d1057f5ba63c08bf5537f00a30a004e6e1193552a99940d7b3d6067d81f9d6aee0c67ff7a21b3cef76bc0fcae950ee0c4eb6c49eb59158b18024a043a097cb35e515df74fba208afb50ef904ff5a9b", 0xa0}, {&(0x7f0000001340)="4327cf765402fce00135e2e3ad9567b3261e9c452e6289ca779cad07397355e0529bffb3e2a6e91eb74ffeab47d1a934e767855f", 0x34}, {&(0x7f0000001380)="a97c135d5d5bd91044", 0x9}, {&(0x7f00000013c0)="746c706e4917dc51ba193e8b5830ae796efb8bbe4022d689ab51dc7be830fe075e4b8716519a9a6bb3ae1640b9b78f24144828725991f0a87602b3672750e8eec1d9fd5447dfc61af5b4b466bd2de8d45d17e6763212c6bed6e98ecece3f173f034db48b4b98f9c8685933ba06d11488f594d49a987d77c35db6c2cd221a96eba28c2c990c805e8f25a701514c9530fff21ba01e70f5bcf32f5ddb3c6d8d362bfa3d961b7b8156e0cb9756eb5d5079890eb134f80eda8a8f104920909c04abf0219513", 0xc3}, {&(0x7f00000014c0)="d422a413576e6d6651fb87855120d5e00d841bf3c483b0b10cccb63c05509dcda5b26b2e7adfd102e66e75cac2601b1d3aeafc81eca8db4fc065de5cdab52c24e82d4fc4ba9e0bead1b116f7279087", 0x4f}], 0x6, 0x0, 0x0, 0x40001}}, {{&(0x7f0000001580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001600)="0bcfdbc371d6f252deaf9d1d80ee3a900e644c4cf850b04fb2c1ece2d5251ca735c435fbde985bb94a5c06bf76554cc9bcf9c9917fc0772c680911532e805cf3f668c03ea8f6c36d8e2b9d02fdedcf3f1ef59a428cb34bcaff2fd8d24104107c8bdde99f7c30b02131399c933fb39464c48974156bdd1df93b573c7bd2dee020b3acd74d57", 0x85}, {&(0x7f00000016c0)="e14ac5b7c211b3c99a35d61a2510f7aae7f8e1eb4b694a7f75268af570a4c010eb3b5f3927265261075bcad48a03a8532708a5b3c16068b6f5a0787d30a46fb778c6274ae6015fbdd1b532660188504a626d8d11e8ae302343c9f759efe232b9480518f30892bc1db8d4fdd49fcc846b9979114f36058e2f5e2505b3d2756b5389ff957af81a9fdd3053a185f7583d77b14ce3a7c6fd0298ee693d5c9157ba74c41f315a2bed016d624e02c1540e46d52846e8c400982cd6750dd54579b0bf7f8ab49028a5c81ac8a6a57f01f76086e782d6540f5c8ede78", 0xd8}, {&(0x7f00000017c0)="0269dd9c398cd82c2d1a21ca2b7140924f5daa19847f492013c65279533bad1742e4aaf55dfc880cc7c76bd8a9880de091532802dace761e5f504089762650f7a43c40a7e34d74247af8ccc8daa51d27db4206d4bf0306db7daa1de24690653606411839d34e659fc02e43b649828df763da801df9c529fb2058c08beece1bd6c3030533406cf8810651378352c7562065c756342d41ce5639c9e8a04138ab98818451d85121d67f62", 0xa9}], 0x3, &(0x7f0000001900)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x18}}], 0x30, 0x10}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000007080)="e9b2659720f4d4fe971feddc026ea1521a2c4efa78ba025236c8fff0a73b70e7b86464e085089669121c364c053e97035bd75e670edc3a47235ece11494b8988179691066b791c4d1f7fa76cc1938457880ba6122646667f094853b78ebda40cf22806f99f9a1b313e82a6d0057aa2e45f12742b8ae1729f0f636af659da4f512d59ff438ae0be310c8a2623a436fcd3fab01b394de3cc6f9bb7f879514b910a87661f68a0087e5f1b4aa79c027f23842ca40059c78941c255b9a0e2130bcf8af48bd5a1f09ea8f7f5d327400c1841d1b1927b10e4200f", 0xd7}, {&(0x7f0000001940)="29f8df0b13bf9a357171a4af4f55", 0xe}, {&(0x7f0000001980)="fdd4a3da74ac8efb0b973de87c44b24f3c6e86d06e812110dc0496870e18617e7a39066048156164b17ac8bad1002f0d561a5ffff90c8ff06d2cd3e6ef54a32a4ef3688f7f2e8e8caac84a092e95e89143224ab747c3da6112f837810262eb0574904a43e90fff19685a7bd5ab2c9835c915c3fc62f3c1977f3f", 0x7a}, {&(0x7f0000007180)="4a34ba9349de1a4e2577a75019b3606daa91bd54e7485f4cd9bc0ffd3751a8dd77b8ec77d7eb2e775408277562ea30febb83b1771b49733c7bddfe8f5ec8dc9937765c16a02c8e97df476926441eb29b4262db0cd309c13cbe00f265f987b784799f3b2dd977e64fa7ed51fe9d11f76983e4a14216cf1b4705f2ff7392ea7147c957d57f1945d269", 0x88}], 0x4, 0x0, 0x0, 0x890}}, {{0x0, 0x0, &(0x7f0000008400)=[{&(0x7f0000007240)="854cdcdb530aa5cb5bea639efb2d9d63a23b30ba8367a861b8b772d8129ca5b73018c07af7c7", 0x26}, {&(0x7f0000007280)="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", 0x1000}, {&(0x7f0000000d00)="a302c6a338725dc3c0241fc53518fe8c07bd219c51e712b200b1d42a4a7fe05d35942e0bfc7cb63854ce4ecb4e178b98cd67bd78cd8914dc5363497caab79772f9f220c971217aafd8e778e6", 0x4c}, {&(0x7f0000008300)="7c9f01b72e8a77ad264176a9c587aceb0daa11bf65d653fbe3876f6836fa62f2e149b357e41aee00ff", 0x29}, {&(0x7f0000008340)="75ff1af679c9d7d20fbc83323fb3de122aee288ea7de21ab2ac69f1a02a5d3dc49a3b1736e951c90461ca6c3cef4903eb9a15b9077c0f24dddf18cc6b8eea9ffaacc4b3204094ec9", 0x48}, {&(0x7f00000083c0)}], 0x6, &(0x7f0000002a40)=[@cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10, 0x1, 0x1, [r1]}}], 0xc0, 0x40}}, {{&(0x7f000000a680)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000ba80)=[{&(0x7f000000a700)="8f075c12de09e1d5631d5de6fe05c7985e722d1c3a5837a004aa17a55c38742a4125edf1ae4ea84200797426f917dddb6d9d192c08ef2803f9c971e40e3bbd26a8471a30475846b47730f6220d413a1584f83d4cff195685f3713766e79b36a77fa2d0cf0aaafda147e9bda464c7b64edacd829549b32f2c17b76a8bdcb1e70ee623560cca322f95a25afcd5cbf0aa8dffadcea390d8f0db4fcec4931b9bd1f41b019b0194bf393b618e7efa7f04f2c6bd45f1f5e11bd4ee08cef39445d5964975724caad179bdafe361083f41aa2ab94aabfa968540860f34c8a1697d977bf1adaf45d61d8cb20e312c0ba212375fea3fa0a93ae91c460710e1dce35456", 0xfe}, {&(0x7f000000a800)="76f2069572f11d8f5bc7982ea951d55a862fed3ce84781a5ea16d9901991241c5bacefe05f83c8b212c6ec7f44fd7edd8d8d6c6ac0d7c283744ab028d93492e368d63356d84e740b51510c0cbd4f9a071c11c11956ccf4806e48afdd8e3b428eb99af007ee7977614534b93bfb5411ba6a487602abaa550261ffcd0d2c2cddd20962aeb47e3af710f897c3b81011475e4e494dded01e815c2af58186dce686d7c0a921bf676d236023a993972828f66e1e0b651cb52be899", 0xb8}, {&(0x7f000000a8c0)="6fd384ef4cba676e40a65ace64", 0xd}, {&(0x7f000000a900)="38bcd2ab73f9b3759bd4d1f66c137a94f301369cdd414ee8a46e43b6cc21823fbe58f958757b8c39db75589427f45a7d71ab417361089fc89b0d4c0c026d05866a259aa86cb206974f2e5be180f711432e4b50f6a6f4b923327926d3f0d145151ed80b19cc3dcceb99a6fc93", 0x6c}, {&(0x7f000000a980)="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", 0x1000}, {&(0x7f000000b980)="9771fb0402db60fda50b91bde921b3774538f26297d2c3c31025f34592a45a0b78e3b29fa97f9c3351207b030861eac3a9821fb52c1308185ef63ec29ce544bac2e006870a60f2e5d2e93c7a359b3d42b6bed2a27f9a54375ee2012b3898e98b05362e785121a8c74bbf6f86583ddd787464d41bab724d7ef47fb2b6b0535719bf01a93d112eafbe12a83c3df3556a629e540e4f4d8a500ab18f34e9760d1649cf669e9c988f628164b01142a7031474400378129e108070059525df4ac0ee885378dced2d30f4ca61006b1ddaf238b415f81e49e24308b4298b9b5bdf56ac50e8be", 0xe2}], 0x6, &(0x7f0000002cc0)=ANY=[@ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="340000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="063c9df23ff3487705f82b906ba7dc1fbbcee432b3d61c007d905f35b6dd91f741f0c7e47cfdcc7b75eafdba4a5b86624320125872da545123a8993e4b288f3ef0720c8a34456f866620f351c15cb55e3e672420fe81d4e1441ac086730af6a5e4b7572ec94fa590e12a0da3cea499100f676639c169c850f2f7a623877e5d0167bf9c296ea0a2151ce7a226feae5ae5cb9f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x94, 0x8080}}, {{&(0x7f000000dbc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f000000dd00)=[{&(0x7f000000dc40)="15e2c187857ab7278f9c379586630229", 0x10}, {&(0x7f000000dc80)="8a4b74537a72dc07ad62e40ce66b149580c252882abafdf1333548ab1bc0e9fade8a3f1b3326c6c9aa0c71b98935784bd968e68a8e63aba0faf6f8418b85eac989dd27aba18720e428f528ac6d59728433248aa921f9", 0x56}], 0x2, &(0x7f000000dd40)=[@cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48, 0x40800}}, {{&(0x7f000000fe00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000120c0)=[{&(0x7f000000fe80)="11d9be7601ef66d24f560b294c9adce60ef8b70672fe0bc00854dda73a296d6c95893b8c8c8b96a527768b5575ec00b2ea585d67cd51f6c4d4e4fd552c7810657306881eee0ed946082780e55ca218bbfa591c7f63be184eaa0e1d0784cdcacea480f0abad79b94da757838b789b6266d322d3c96357f10113c1e98b11583faf22947a1874d3b92c72afb3efa54d9717cd065ee44c7104b06f355dc683446a22545f58570d2be899a6953ff55ef724d1f37479064459bb610c48debc66ebe520c151ff1e44c7bf5e3d2e6b3a6bdc291c71457dc98d55b2fd73937dc4b1df7b04a888f701bcbfd68c65d92662754d4ef6838868afa89d4f24c159393613a499c8e0d370da8e9cc1be840b23c4df39a5176e8dc3ea70a8602ee6d1454447b2e1ff66c53ba149e84ed232d48035bd601fdc30709945166976c4cb4c2f7120b3a58365ae563924f3d44e939fc32fe78837511fe151fb6c6eb7469ed0fb06d6a27f60583a4c640f1169e3f29026a15829714993f5fdebaa43c955599900dae84d8bd96d716e4b83a49a28168e6f52740643334b9c722a8f6549b51e6af36eba2d3c4aa9c2125e91c6be27c028a855b17c810b09dd1396b46045ad513fc1cd839f5267b124d7554a65d23f6e981605aba8e28cda93ba4a3680936855ec6e825affa43dc8b383cfaf72d873e46383e115ba130b2f1911fd083f2da2bd01f51e930e8bef32a6be7ac5d6443e9e0809fd1cff798dba55e11070226877cf0eac37856ec573207e081df465e05829242ca8543be83256c0de668e66b136c6be77eb8163480d46080d4830545c0028c4ae284f9fed14afe3c6120af5ee97f13cad0a24e34a482bdd5853ebd340069caafa47a0b2888d580f40bf621ad27138d03761cbc59507d2ce81897740e8f1cbe5ef75c7e8ff7532cad83b9d79696e0d13e39ccb856bb639d3bb613868ac51dd9f504f11d3e936a3c542761caa156935dd302c227b4b268cf988c0106eadec04d5ca3a68e506258985ee3bac3c67e5015724285dea58052055ac2f1defad051809db14cff21671432798cf41b42348a8422a062580dd686a87711f28f1d8d437fdf65416b8df7e63acac03d3813750877cc46fe8011f3bdeb97325d82f81a6a53b481714ae8a36b89d489673a66254eba7e9dd87cf3f90ba4ec29a2664f31610ec20ed38cf5acc96afb8b6e680781e5961fbc2cce967cde71fbe54aeccb373a314018c44c9fbb9d6eec8c8fb4b0226d8e2ee41f982b2ef5393b18aa7b1ed0546b805f5c1eaa2c5776c1398f3ed04b43dfb5610286c6c64238804fc2e71c8fc0ed043cb2403d68b988ace27cff0ae4b22d8a526f290334270ef2a5288868e08f95c7e885694c4de1c8ae43203dac4078504afb287f4bf7396f8d171df46647d7470a9992ea01da3a1937f3b9466a5cb700b7796410c3cc03456852996ffdbe3715198db83a78ce6457d1e267f6d9e2a13f8ca79f4681f91a33b01f769a6c0a6e99d817018cb8dface9904aaa66c98d79213bda217b8eb53ea3c6df7094c1947b76e88ff989bda6fa9cc4bcbd95407b117050bb4fbc4be8c7354297d8c2bbe1626635e18c145762223c8302e77174383814f4c86fb093c1b38de0cbc2ddba42b4b048a427de1b409b031fa3ff158e7b4c3bea487590af8e9ce85b444ec4fed2d79ec23a6af16811b48ea9a0ef21d09b939bcdb67ae6e4c0269f0ddbafa0ff74af51c2046d97b1e8b51b1af8d6d5af7c6d831bd494eeb9b97ac9d135c73eccb90ec757a779b8669f13d6f336feb48b57191570c751e9a5757775df4b7a341b8836ac15b88692b43df8676cca2d4ab6811c0a17ebb57cecd19dfce3e2e942d5aa2ffdd33335ffa8ea9179276ad33d08cc2fd0dc6df5a71d1ae4f7bc9229a5371b0e06e288d942e2a2f7a820caeab2c94c28ae175ae80750445f61bec74bcb2283eae0e5a216cdb4322381f58fcfec47b4593ebd34719e08155dc97ee085ef8bde8bec96760358640f5b880757f6290308fd235e21211bd726f5773cc20a4e46ff7a0e4abdd56b3d78f98873b9bc4656d468e74aef08f16e3683a063f49daa690adce3a491f30aa2722f131b9d905fd36cf2de35e1ac88b6b711f033b563e5a5f3e7edd267f34f0b11203c036064977a1088b4385a3e307eb8d7a416b62e0b345c442d4233078f525efe14684c3a7528cda5c10e74e199c6db4cfb0c8552862b4626e3f2ad44f1bade9a3c40142085834e0a7af90ba271e6d25a1e80456f4984e0032a7a6f58078157341ceb65e89401fe2bc58046a99d0ee5f8500aca2ad8710051322bdf8560c5b4ac215416ce15add3b3779884f8a8c6de65e3a16c1a3bf6a64e3145beb13a7da50efe0419474f6d04ffc7b6c7f1921da2a3125787ecb7cd7e7fe5b347aadec2c1c3ca33ea675ab9587fdab98a6a115404ae4c104c8c6827c93aaed8c6f35063807316b35b6601e2911fd1bc045296dc56001fdede6b5a92882d4b726dbfc7d941ca319422caf260f23fc236480892cd97f97b705235636a51af4afe934b96522337815505e7fea6d7f811e3bd19fc4f78edfbf007fd39e9d81f77c57c0c93728bf657e3d35b020288c932c8978c0eab35a87b720752ed3e9215521262b419110ab94d457ef9faa0adf583f1dc48fd7cf8cd036865a9f42c38aa317e16e95ddb074d552a2804e1699d1a792dd14c624263b180143d5993cfddd196aace74919358478d4e74a922f816872aaf4b65ce45629cbb803dce8e6a7b0be250900ad445054ad3ed424aa603f62c9730ab5f0b13123372817fb599dea449658cd0582e43879693cbe038c41c8107f7d35a650b75b159f207493af1d06e7db647bf6cc69637ee0767d5077e539fab7b6c938996eecec8f6f39e6111f1eaf07a700bb3360bc7106d352c988c37d348ea39f794b9dcd5d3ab75e2b0410973cb9ca3d6c7bc7e7e9c09898067c0a6eca6556961f4c35a947c2a1d57c90105ea76abaabbe6971fdb61bbebe6aedcfdb7465dbc40a322c1f8aec003738a3e56f4db37b7095bab5c6b1d254f92dac2c1c1f9a8b66fa0b029180259ea7cae202790811d1662d30730ec9001a434b2ece1ca58da925d406b73ed76d7c2bdce3e02fb410189f742f715797f882168c1c07c96409c28fa3d19ca3d55559e082acbb665384866b60c14bfbf4387894f95536d921bd1ea75791efcb96b380fd61c3f7a6ac24da69494e2b074bf6e0b4e88a7f6d036347e39417a69494a459f449cd4fcc3855ec317724c58a288fce16ae92a7a61b5ba04ea2d174aaa0330b9b184c055727211b12d57f84a4ffc86f6ebf492d2295577a1067da4127e8e6ae7f4eb0a48c42828b32929de0514c6004ce85a29f335bcacf3a35eb43f1956e20e114a192ead0244f0f7e6f5560979f3d5eb6221164f06bef4d0f5ab144a671d2d4cdcc4aae149cf24b2f3233c2f7fe62d357eb0b8f0d349a4a2617e3ce9580218f711f17ef71c6b4d466661662d3abc46cca86eebf88f42ddd2f4bfefe28cd7edcb5cfe0916d7cea31258081107828f7da2f99458c0de5629a3284e88714f57c4e2e355314f28c6a06f170c674446a9bcb9090445f18561991c62ea454d203f9bd9ccf31302b286c4891d867fb41d3787d9faa0cb195ac5fa1212856e9c251a7c96f4c7ceb3d7429a5d18709ed14dcf10f275a1415d7a557c2638cdb99431f3c031edc5015fdf9d270dcd03dbf075e64fef733e99f43f94bc4cb0189cde0bc9aebe0a4c04f3b03cb8b6e96a7b5f768c0e96ad81ec67973c3c85a1b3db29a4ffe6963c6ba4d1dbba95cc9d6419a053f0ad950d73b14136a32119864dc7a8499d4df64684ab2fac7e059b4981499e9543e8b7c41fb8c544c8bbe079285a04fd4e3fc0faff53b730365c297e511b0d07cc7ac89e2ebff2cf8e2e53c2812013617d0c2bc32124d9ddf4b8fcba693b1882f39c77dfc51f8a19bb13f0ca8af9de1c19577ae70c0f96f30f58dc038853b4d541a86d9a499963aeeb710192d7c3d509ab3fa295a105f361c18c0636d244b223ae5a01fa5259da95b1b8036c052a0a195da52d21f00c03ab20ea0108e93268f24d4258d9e4a537845dd67888265d2636152aecc46ff22f5302ac3e8918bb25cafd2497e884bdcabdb526d5de24147e80303d936703046e894869848dec03d7b0abebdb290e84fa598cb10360afd2981b3bf5889f5637d969f9cc5af79b528db89685982049ba57dca021644f889a9070935532d0f2bcbb0a45c0a2e5cf21d408d33991f2014e6a66250741c492ab821a3509579d390009c1e4412176fea090099eb28adc7c11f82382a72a7ae742832aabfaae795ebc3bf557017a6220b8349a52d60fe9d2f48ee9d0d24d8bf36ae09cb31d055b9350612241fdc909b3ef5664874e3936fe61d4498b74b454bf538419e8913d573ba172914610cf1fd35970b3c606ae3167f18175343d4ceb4e3662a88e271f5bfcf767be58d6e40ef7da6a5dbdef258d8f895ce55d24beb3f7a4e0304794295fa748850d48123f466d05524d9122b344b8507ec3f57e9252378035cb80ddc9a03a6e6497809a7e173ca0587e6b2b68b7394a777e26368c6394696e5757548fd4253d7a8485571acecad8112c8f3a02c4bd5a43f736cb7256c0f8d6d3ff69660da6e31a150be194b5ee32ff72c7ca16cb4e7a46acf30dc76f3ea6ea3d5784f90f77abce76291df0abb475d7d71363cece22140104b1478aa2cc35b572ca23d10f4d8a24c535fa50aea70072ad178bab241b961fef40a5b05a29c740c360a3115a6bd84fd902782f1d8fd7d687a66060f276c5bb3db546db5a09b1658a1b40fdaa410ee490ce0030c54f030bb440fbb158e55096433f5a79bbc2dce4159d6084c68382eb2e61535b9108b9c89e9a498e8bb981de36c55b7e4470771eafe2ce44a340cc0b9fae06778b949072831dd9a7ae5561e2c27df912a46452d66da947efc8b9589d8a1a54cf952eba346b8bff3d1491fffb2fab5b254ed33958416a229105c92bd39c50cb496e5a98a972cfca827492a13ca6c60f424498765e2b6840596d0327e440794df552c1cc5f70b2efa532b9df786e979d6d793654f66b3c4634b18aed2e46c5542d59d4903e88bc6c25e24da7f059cc77cee34a291aa7b66f18d4241567f430621cbefac9d0df75eb8f9d7c53fbc2702ce3066012f2827254d9cfbea2bb124f2fa90c123e5bc8601b2ac0aecfe8b5731b9c34202fafcec1464754a95672e84108642d9b19316b63c697733867cc669315a81ae49cc3b12fd790ca2d3c232457946b519de12ad4b690ffbca4d2313fdcfaf1c5b1f74900aa2d359495bd204ba952080a7ecea0945ccec56f52164dfaaed918c73a0efa7bffa55ed45d170d3331ea9192443576f9641d67595637ffd91af31d80ee90543a50897abcd2f748bd3144268ee4f0f4b946c10792b78a960a86f5b189bc3023b6d542c3da7024640dc5a25c2841477175a53f0af21bded4651247baee52ab742de22269dcd567ccfc3b613dad26499be271cd3a575e7ac25af1f7d15b55d4f728547eeb07493aca24d060d8a78c37ea15e631230bd3cfa77c59d9d26531c7b115fc411a684ad3852ebfc3ca333492dcb74a7c6a52fab945c38e01529df4ebdc921e7511035b7830deeeb23337f2cb147a1190da078fd879d86b32fe7502f37b3625b44b30cb89630f401db030d8cdbb89fc6b761ae53bf06fa6131ddae762e44df4d18558f23d34af4dfa6a1181029d94b58e2108562b5dc29eb02f020952e56", 0x1000}, {&(0x7f0000010e80)="0a81551d79ddf828ea22151137213f837c02ec5c9b6b643e88ad1cb6e9e012699b0eb5504b06f568ae043e09bafa6025755da7b540f58fae13f61a998eb983634d41def7b35305ba605870c2e33f874970c8e020e830b8db5d6237464f422db3a4d7f42bb3b98e74aa327b555ba1809a1a4d6b1a961b24dea0f0c72a3166c1ae2bde902067cd08723a705705", 0x8c}, {&(0x7f0000010f40)="22358103b2d51968eb7045c5f4a832663509e7852ad7625aab04d67c5bb528d9e128", 0x22}, {&(0x7f0000010f80)="ab0fbd1c8934ae54d86ceeb5088ba4aeab908043f00b35ecbdb414074ea00a44ed61adc41e060789c8cc033c01f61681441781a40b8f428ce48049c54cdb0bea3c7c4f6155ebe44b3cd6c56484e34795fb5670a01bcf32437ac0ab765657a4691a488c15840a96a51cd9f499ccd7d5f116318ce5e6759825fbb6cc695ebc7294fa399881dc4ef4e6c9b44f4d6a47cd7be95f9fa8d3574d892fd08ff8f9b1c0dc886384ddc8495eb367ecd73317a03c6cf3fd7220c9ac7183dbbc52a6de1c8155d32315a7106d34b7c2afcdbd421d93acf6f041e662b568de85845671cfe8ccd6718b48b75764279ae428ffc0ef8bfdd3768b2d43bdd4df831cc5060cabf093aadaf7e070616226efe1fc168955bc8217c1b21c48944db34fb33c7f1f7344861b74482da6970d87474b81c6bb8cfbd95c30ea9d51f76833d3fe6f93a96bad8b72b9242daa83594c0cadccd159fa035f18d828a083e0819c2ced55e366dc826ae51bae8557f14b06e5a5d5045e820feed45d1b24902210e54e45e29056482097dceb786369935ca3dc0449cf22f8818fbd89dae03999ed78cd3221975fd3cdfcaaa4d56190c96986a425ab5d9a7a4fce3ab9818c6fffde5b95d4a76f533604fcd8d8583bfacee5625b63ee25eeb4936ccc5bc88cc3ab4f77efb122d5431ae9d3d4a1859f54dc7d4ef69809e8a4b3aee080297746a80fc7260bda6b726f88d0ace6032e678aa5f51b2fc64978aae49f1c4764686b8aa2ddb88190619731d7c1d61832e590bd385b78e4b575ebaafe0365ede87cbb6716ee128d1f6ea4fb3d90aeae7699d50e97bd5cdc0664a59c90f1d862d514d0328100b5023487adfa2f6f760a2896442ab78fd67598dc0becf1813116759cf275632738c49abadc53ff8d54db360be042962a9aae1a481f924d5ea1dcf36d1c6ff8d5e9885d4e0f1bfd046bcc3ad83c35247e39b5a4f7851b431b62f80014767d5ffcac0064d021b4f21fb9e9834696107a9583786ec8403c2b0bf6120a653d2270670a5e11305884aa27276706f34a68129f3540a401703f8ae864bc34412e72ac2a067ec62802e255748a69e4ae550ef26d7b8ef7b19f8a0fc53d9fe3754f30361779f6eb18ef57c665f4ef6b790f7cf7d7947a315d1fd94e6b6dcd0974ccf372a13afd690ce6bb93cbdad679303313cc3e89f7b61f2e94873a63243aa4dc92e2764078a20c70508d249cb259b5843294a7ef96fe4b1102b6b18638bd45ded9786adf89b117fb7e30779ca55fa2428a83ea6e84456076694fd8ea85c5d45dd7abcafd981eaef28b40d8d15b002017a0c845e196542ea70a1e5d1d44f4da5c1cb7c1ab260a875e629dae007ea7856c67c966e152d5692fa4c3e0f31704a7d6b92160e4c95bff1e885cc3e7e28b6dced17e14430fa8e05251053ae4b142e62de4568a6d68613b61440d8793099195d2f7db32cf2b2923c27c3224ae44ea701e55ec4e024f356605d58f0b9d16f81f701e169973dde51006a4ea333250b8f73dbbcc6fc7469d06a13ac322400f52a9c9a870c197d20752b19969734c044ec0d943dbf2496362298eb76533206653a12e8288fea506c21bb654f0a96c001bc53f260f4c2880f8957ce8c38dc9b91d4d021735f04f95ff9cc2f982966585211b0a597996788ef2ea5cb3f9fd86611e9ae2f49508a703fdc34a827c183aa66fd15299a07e47161d0129d77a956746da390413ac8e36440216734fe4cec5751a99fbcf8e012a7c0db2bc2e3118bc2a22e5ea6de3bb0eff117a926be7fda0da4fa7dcc7a6679ca05eb8fb505571061f8a7e1b52638f3f115fe757a45f6f7f931d071331f4883233fc4bd7b59beb0d328a818098eb70c7711775a331e0851ea87b3541e18520f8840d3d94b1cc129b3844035f4f5b02af6b470e452c2228de7450811c75d376405efa0934060df4dc30b3a3ceccb05681411401b49d7ca2d304dca3d2659901f5901fb2727dbae498d77a2b4237fea4c759de176fcb54315ad32dea4075b86feeb8a2e55755c55d6ddfb6552ed697028d2fad207fe4ee5d22c105fb2dc56ad5804a0f6e14d7a718cb945cf303e740901446612e04e08800cd248bb9127c7e8c18e75cfe95a4c7807424185d237eb9fd8570dc831b0b061c9e82fe7fbd9538e1542cad0305d344b858a0fb6748a50d88fef0cf06c21aad73b5fbf9e69bd3140eb64a98bd4af4535fee2719896fdc98d6db089d2bef9b958f0212d9613ba1f8cf39227036fefff5c867a9154a06bff5c830a065608e9aebb1c3dd1e72e7b6d9c86a11a7a85252b3b53170092279f8a7a2a26982bd85672abb39c7a1d1f8bb1ab3a5b6a819d643a91ab9cb234cc1e8ff0cdedaa126575cb0ec3551ceb7e60ea7c5ea655f7f5133ed9440ad7cf793b1375042f50b537ec1c81162bb9f909909c9e165ef583cd8e4180ec37562347db5c310dc4365c6c304811319e6599c1a133468100cdcdd17c86d52baeb728ed0486dcd2117841ef7173b2d06963f22b69c14318c785a393715088d7ebd1ce174529ddfe452f0f78682eb7e5ec8724d00e823559e1cf2f9dd3caf15b99035fef947614a52b8600c0d2ec318d508c01458feddc252e8ba595a21b452ba25f7c4ce1e5d06ce4b9d03a2e5fd95a3b751f211ad2792698e5961b0e40bf1d04d5b3ac54b4519d9caf8fe4db2c233494e781d546d80dad69fb55972215238eec349226ae32be224bd2b4b4bb7c9c8c23401642e4609f791ec1736d7236f4c2579542e07411056313274a5ab745bcc08902e996c662877ae3dfe405a8bb5a541155f6e5c495f4a237af10cd95487eb13a018349a17b7b9a0fcf5d7437de91aea94129bd318b8fbc2ee244ba96bf9c825e8d5b30389b75c86c3fcdb73bc75a80dbdec6ef84e9fa1603a99d91d25722a4f83b84aa6de281e29f4c004cf2d9bb713babb76354079389b004bf7d9653d7c3a444a487b78d37932aeb6f6b1d5af373ded65e49212fc63322f6cd664613e53d4b8a5b45a07ffb1337b4fa3d6e69d56359e1e99971e36268339941b7b5e57c1edc933f60dd959fc64728743f3a011b05a62d8e7f9ec435ce273cba5f508b0554bc82584c362b2650495f42a4a40803171d87e0724230f3998f64ca6d1c2d4322944ec3ce4e10a7a67d8dac6f85f298c3c12b3a7911409cae130fa84a78447ee6de3e7572977fd0400cb94c850836f40b736edd91c9924969342224c34f36a1e6bb94cf8aa7adea361226d757e96003975a2df68643ad9fa5191177b9c3cced763ad4d8577c1300491b97671be353336a0b1b835006aee04628fba84085141b49e6c56d68969a9894577dd62bf47b7f867acd21b90e945f590b6ccae0eec02b6cd7d0f1c81a74388db8d68a3eb6cefbc10f19a1906f8e7e4032373d525c265fb1ea8ec1f82bb73d442753272582b73105222c82d3e6f23acb4c57f9571b6b9e7b91b7731e6d7ae95449dcd25c6aa5a6a7b428cf4a3216981b1a298960f48d523e8c3ca90b54cb578c8f158fd8addb4a480857eb1872afae44460d62779bb9373dbb42f071512efe06a968a6da5fabd35b2b605513b555921c22c17df80194b3174b99b1b202591b582ab79fa70a3409098bfe7533abad10fd5d5c719e9da6308caa43b4cce8cb1873750d2710752e110edc21baaced70b537e83c550c5452147d6b8e6534db7238f015766fd02f26b2b49b0082aef42656b7869c387ceb910dde13c60d6a44745ccb98d92406b83941073b9eb086b2149a4c3746785c85d973e40c83b41f82f1711d8c4274303c07978b6d91e225ffbf30fd58e6c0cd796a7ad559c6a44a512e8565a6bbb316a21eef7d41e000a43e23ae1c4b173318704fd2e2321f7e7fba2d29dfc00456f7dac9e0bc2075c62aeeb7238b25d0dd45ce19fa26eb47c8c8ae0265e56cca3cac88b6beed6b49c29f4586ed254353b8075554f08fdd83bc9b4eebb5eb7b656611f004abd09f3c1bf3f2f5f2aaccf514abc44d669d485fbcc34453539e8af9cc07813679f1b7e4ccc60d85793b831d479f64e414ff3d51a4421cbdc0b1f134b16d33486d97dc49203ed714eb7d223a49af16c10d6e495a9b3a5cde5c68de6df421ecff38680c0a5c4117e41975ed0082f7c3a5bf8bdc13f63c99b25da5d39e525bafc9337f0f8fe3cabe73379a093483094447518e50dafa88b09853887b3f02c548f8e0f5a28b7fa2deb07790c271ac91d6dd7bc75e33b82b1866b156e2c545f9e76c10e1fbd3afedfe287d6c070d66b31e2a8bcb3af26de1d22c0b5aee5cf66ffcff2f1c437e1bafcae8ddb24d6611580827224094de58300a3eeb36f215b022acfc0cb4b8accdeea1e6f6c00504c65aaf4243280d483760cf5a8281b04cddb2771e956ee533683f62f297a9abfd7157b0c8743544b8561df50b8c129429e7a73b384f405f827559a7bed9e3836f2cc2f1e66fa9219dfb3297e26d0624b1d143d31fda996cce9e46d77ddba9b55ffc91c81d8bd2bbc0d7351c30578e830420f815d4a49bbd86b0d3ad5efa45e2389ab6bdb436af0d64c4bf4cf7735d006904a22ff70bec9ee379eeaf074fda24a3abfe5646d704cbaff5c4273b7c0079f67864db27d4b7661eba6a3fa2b2f8ad6b21cbc35b501d65bfe332df6f45f9be8b4d92bab5b5f96d1d186da103295431bf1a7fca77d488e2e7b87cde504e747df07cc366f7946430a5728663a84b264e352e20728fde3ec4271c880bdbb6c6c46bfc91248ffe739dd3632627e2e5a8529d929bdc613570a6adfc1631d8e7f473d899fa0e6fa5df7f1747aba4d220cf764c313d0c3bc82cc40c1dc4455d9a4548e9811cc79db70ed53d81ee288a8d3a0b395da59139bd12f91981d29a3b0c569381578dd8320f33b77896e4ca856beaabdaa385ec3ac3d1ed51d8dd916e00eb7a9395ddff1b4c12e83d939bc4287495875a082b733d5555472a1dd6ccfb702e4818d588fd8ebed31f17f10da830a169110cee3c0a8aa3b0cb5c4b542c9d589686ffc6c19506da5fad597aa1a616f94f3e418481ea1c4406c45795d8f5f49b948344846368bb7d8704529a873d45e110f62a824390e2cee2a7e8c09afd250f3dfb842f059c8361da1274051ab07947cdd42b1f1acba04b39760bb53542234dc3f558fd8f9afb8d88fec25dc6ff0f9b256a9530a21130b04abdd75741da800912d5266ede3908f070c991eacfab3c1daf4a1f44206f1ac5c4471cae4148bb0c4d76d8fbd4c436a8a2465148f4c521e4a85414e918464c6753fc1d968be046a7f0149371eece3b7b236452bb809c7b51945aa75697b46ec47da0e3602b7e313e994768adeb3b5dd6c223d570f544a895358e44ba9d9679616aa3e65d0d3e0fcf346d31f4f410af2661378c3ff8a326d33acf21b67485cbb5e7b46208b7a9196409a832f3a488f608d2fa4e4634d035dec0482f42daaa4fb03926fa26b1c2b9566b176e9f5d7b759a34f16253004db01dbca91d5ff260ec90d79a05a6e489f672f64911cdc9d071a9a8469e6966487b877f831fc8c7f77f746070a74f2c174d841915d758a799b594e0e0205dbafa25b647580356d16e1747b497e629f69b6202e20b46b078a06d8e6397aa32d6342e636edb1964d83609b74f4042678acdbd265880ee0ee787fc2be67b33b93b5e01162e4c45d07e2a86584f3f8216f0de26c09a8ddbc42e257b6da9bb32d198b60b6b39d2a50e3f14e860cfdba5b80b30510f38b6e5d282dfa5ad28d33acb1792a9ea7b0f00c7e12ee48103b31059d166b4125dde64ffa58fd1ee9e255", 0x1000}, {&(0x7f0000011f80)="01dbeeb63b06e76d1ee4b4ffd08151330406426e91db830695922cf512807cef274126767f5aa99e82f2655814cb68f9da646a4bc6feee5094b4c3e2104a75cfb7335a147cd93a7e614886e0fec675f6ae4100ab40773317364f688b30b3e7c71f86e8a33a82af98a68a83cd9b0cb5ad00963a1db7708f364cff16a28ad00da7fe32fd71d1a517c28eb96f46f5cef84f971f268b7c8990fd3b382a611ae09669a68d280edc18020183836d9bdc28593cb6723eb54bb1409871b0721d12a41c23cfbd61aa9d1fc2338fb4fa4b6598", 0xce}, {&(0x7f0000012080)="248e202de79c275bd9ab711249a8d3d1509535d9ffe28df3709993679b6ab6e4aa9ff1e70ff862caa17e5667e90e65cb8486cf534fcb414444f8f819", 0x3c}], 0x6, &(0x7f0000012140)=[@cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0x34, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xac}}], 0x9, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000001c0)={0x0, 'dvmrp1\x00', {0x1}, 0x8}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0x8, 0xc001) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysfs$1(0x1, &(0x7f0000000000)='ocfs2\x00') openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x2e, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000980)=""/146, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/157}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0xc}], 0x4f, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000201000f0000000000000000008500000013000000850000000e0000009500000000000000b3ac0054087eab1acbe101f83f04c9a9b0eca1f6e2ad7252c6efc9223d0294fcec54a4dee7753eeb9a3a13443d6a51906ab9410cfee166d1ce1bd4931ac1e55c5bd48ba2989edc52423b8fce516d3f20c2a1aa82374357d0489bcb59a14dad7efabe25985621b28ce65123c3897f7e67f8cd4f5dcf6fb2c1fe4af1f90077e17153f889f7bbe8c436cc5b93c57bbb25a4d461a469e670e1388bb5cc39a5bb6f931e261adbdc2ef3628e3c"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xb1, 0x0, &(0x7f00000008c0)="e079000000205c40c89b6f5b6c7a162824d1ad50423bfe1aeb3543f541c7be5d8cd61b0baae62b60afc019ff94e338647526465fde787413f1854c7a5271343e054d5636481556370fd3bbb54617a5751856943871de2f5a14d1121affe392e2a8422afe658dce72ec5f10ea9febd7fc82de98e3849afdf1dca053cce56287b91059a84403bdfae9d173bc9b6f8ba2c6332f2b3520a4dabc1ad05ffbefd62241864c384959f5989ec89965298006d2bca9", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x8) timer_create(0x2, 0x0, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x21c) 4.342188727s ago: executing program 1 (id=864): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111a40000000000180000000001000000000000000000e8940000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000000)=@secondary) execveat(0xffffffffffffffff, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d80)={[&(0x7f0000000d40)='GPL\x00']}, &(0x7f0000001000)={[&(0x7f0000000dc0)='/dev/usb/hiddev#\x00', &(0x7f0000000e00)='builtin_and_secondary_trusted\x00', &(0x7f0000000e40)='\x00', &(0x7f0000000e80)=']\x00', &(0x7f0000000ec0)='/&}\x00', &(0x7f0000000f00)='\x00', &(0x7f0000000f40)='&\x00', &(0x7f0000000f80)='asymmetric\x00', &(0x7f0000000fc0)='\x00']}, 0x1000) keyctl$get_persistent(0x16, 0x0, r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect(0x1, 0x553, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0xcf, 0x3a, 0x62, 0xff, 0x4fc, 0xffff, 0x1d96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x541, 0x3, 0x91, 0x9, 0xc0, 0xff, [{{0x9, 0x4, 0x75, 0x8, 0x4, 0x9c, 0xa, 0xbb, 0x5, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfe, 0x1, 0x4, 0xf5}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7f, 0x1, 0xb, 0xe, "8fb8", 'Mk\v'}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0x6, "b0b1"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1ff, 0x1000, 0xac, "543a903b6cfa3f"}]}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x3, 0x6, 0x400, 0xa, 0x4}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x1, "23cb68846244"}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x0, 0x8, "88ed42"}, @mixer_unit={0x8, 0x24, 0x4, 0x6, 0x4, "ae57f8"}]}], [{{0x9, 0x5, 0x4, 0x3, 0x400, 0xa6, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xa0, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x8, 0x81, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0xb0, 0xe, 0x0, [@generic={0xab, 0x22, "06c829e7dacf1660f80ab9dc0bd9a6280512f82859abe63884d2156894e10a358f341fff0110eaab379fb44832d8a9ac9e7c71cd10a734b2a99e0ec21585880ab383077f487182bb27930f0e6a50323528e15d108ae15b0bb7ccb05def490e9d3b3e2d77c2ce262435da4f2f1b8cc75c72e10ffd30724ace8ece3a6afa7ee3637d6fa8ab599bacfdfb58d6564239cbf87a2d1ae6e6235572546fa165acdf6374fa3130c617b4c43f0b"}, @generic={0x67, 0x21, "8e6f83e0a4e839db5c61d76ee25b762be7e588ec8662fa0cd52e6b27f5c4e0aa285c0f85333e9776d252e2ec9f20ad0edc00d59c7c8ca668f88b07438b57b43fa4df9774869bfeb14efbb69fd2900ae1f5f5dea056d9eb988a29cedc6e8ce91f12e27022b4"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0xa8, 0x6, 0x3}}]}}, {{0x9, 0x4, 0x0, 0x76, 0x9, 0x62, 0x42, 0x51, 0xd, [@uac_control={{0xa, 0x24, 0x1, 0xe, 0x8}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x98}]}], [{{0x9, 0x5, 0x0, 0x1, 0x200, 0x4, 0x6, 0x7}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x4, 0xfd, 0x3, [@generic={0xaa, 0x23, "53443d41cde68bdc5ce460a7e532270d82b6fd1fdb882ebae29adfc0e0d3d4ee2fb8fbc7340e91e6abd4afaf34a162a0b04247a9b9cb4dfe8e11f4e1e0f802c89e9ee0591c27bda661b47e4f2c06058e15b1baa048d78a9bb63b16c229ff3d2eac131553cb0b97bc41c91ec238f9b8bfe60074a43f8c194b262c68a3056dae41df0360190a90d9c2b7f1e189bef3efc292213982301703db283f548f59a7ffb1b938fd8deeb12afc"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x1d, 0xf8, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x2, 0x9, 0x3, [@generic={0x2d, 0xb, "b03869e62cdb004f6c82868558d1d3bfd51eb72fb2675631d381195e4811541716d4e6652f893fba8ad8de"}, @generic={0xfa, 0x23, "2d6e45217154844584234410637deafe27a71d52b5e4eb5f2b4596c3ddcc50a6539312b1110a4c09ddf3a6b5232354d04bc0da5a251caf84c235cb70975f0c0e94e1c4263836542c657fdf530ccd82f06899dc5d8dacb18db8fe8da668f993afac7a3863e09e47d286d69f4c6148b74d212d83b0950b5064369eb180622ba4a4910136cccff0982f9ec52898108fe36bcaab43984cdf492dbe988ca00025b2fae5eb24d513ef466ac885643b6837d327b9500dc0ff4363c5982a0c22151557464af97a40f9131a60fd0ccca43e4634a255a11544d50949dd9a54e487d8ef5119fd288e91f3066e8b0427ccc0ea8f70a6a3164b31103bc1f1"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x1, 0x80, 0xc}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x6, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x7, 0xfe, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x10}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0xf2, 0x2, 0x9, [@generic={0x53, 0x11, "27c4df23f4bd083c5ae5a152cfe69db234c7cafa2ef3ab81c6f9f35f818aa4245c41efd1bd1de5dd94faf0bb0f08117d868f633bcabfbdbc01de47c4dfa3bae5e4cd0738d008ec6a038b3453e22d24cf80"}, @generic={0x44, 0xb, "8e41466a89060e833302ac32f14689f9be781903a606dac535d934cb4304ab24b31e7f787e42be175c947ae82f6552170e2917791db2e77cad9e2e241dc6007298fb"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0xff, 0x1, 0xe0}}]}}, {{0x9, 0x4, 0xb6, 0x9, 0x1, 0xcf, 0xf3, 0x15, 0xff, [], [{{0x9, 0x5, 0x0, 0x4, 0x200, 0x5, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xba, 0x9}, @generic={0x91, 0x4, "04b8e44072ae1107d1af39a980b6b733940a51382e7886ac5d0e300d1df0f09c4bf681c57cdbcd7791ae5473c63edc85694e6f53c751437e6390241d108972993a06d4bc5a9bbbd2190ac6345f64d24f35754695f53fbc00dff6290634352ee89857c659793f28419e68e16e11985d9385d90303ef8779b7a985a157d46fa3de7362705e66316e262346c2f02db04f"}]}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x9, 0x2, 0x7, 0x40, 0x2}, 0x108, &(0x7f00000003c0)={0x5, 0xf, 0x108, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x7, 0x8000}, @generic={0xb6, 0x10, 0xa, "4f57469ae65849cf6a6158bf17184f46109d62fac8f9cf706548f0e50806127fc503157dfc82e0125111a089ee19a518fb5f005d48d9bd4798e919697c02bb9df59325db996b2dbd21eb344e7c679184575d6a49b8339b9f6320ea0c8790d4e887728201d12aff4ce2f0ac665642422ea2fbee8bb9b6bdfbfc2a5e0043e0f60d8ee89e3d8a831a86482307ec067d345a5469fa374ab0e568fd75d42852439505e2364b585a636b8625dca873e660cc73ea9a85"}, @generic={0x32, 0x10, 0x1, "81a1184f582b4b02e01fa2c15e1d65ef84f1e1b1933c480d195d750ed54a8ed8af1ec024c010ccf29f97ec97412573"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a4abd7e40affa66b85d6776978391237"}]}, 0x4, [{0xd7, &(0x7f0000000b00)=@string={0xd7, 0x3, "8a088bff22a64d6c2d029eadea107e7c0ca106852a638b017b0df4bc6c278893bfebe67293a95aa47b1c8b9c8f1250739990827b848a9ee6d1fbd175ed9a44494085792337172550d4112417c74a56189add0d0cc00f9536d5f21bec6baef9ac3e23c65717e4dc77103fdee98b9588cd80b564b11f3a83b5ddb303c03af3603db1b35df30b951924851594fc4bbb90387638bf52e28743b13621e18ce69e23aba6dafb3e77c1965d5726b4afe97e817c0f9775e27abb1d270fa56d9e5b1a7c75a629026ff6e8ad4498e74ce1d648a9f5944c4d87db"}}, {0x7d, &(0x7f00000001c0)=@string={0x7d, 0x3, "8aac813ee4206ea7215d8822c3134889849b2439446cb1c9520d249d44f2cbb068c7f199d47219f83e5410da0682f587cd6aee269d4503dc092627bc241d6043b80ee2fb243220f17bc2fdc6bf3975a1259f9496ef67b299e867ab16dd7330add5bdfa7c0dfdca4bea25f24c04da6d3ef273e6beec4961a69e94a7"}}, {0xfa, &(0x7f0000000c00)=ANY=[@ANYBLOB="fa240f55a5d437ece4e53a1e5ef42f08ce5e29641d73bff5db6c6ca8d9de20cd9fcac4537e15de114b99043cf926cb1dd9f5c6320eb8abf02e677879b224ab873cba730c9a0ea06a99c0823d86cc91e783ce4ba91dcfda2886d9e9cb636cbcfecc25bdeabf23fd3026551816789f05294550ecf63c2d3624d765f1cef2199c38530510128f95ce9dd45c67a7e19642d073a01e27a64a93e2deff90bf6a48593c396ef1112e8d5001bc0f07db2b255379df6c603331cef767ed0daf85bbabf360fa07d95061666d5c680000006ec0f9a09a822187d0066841bd8c2cd815db4c5b154d38af20b5d558ada03fe4b64850"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44d}}]}) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r4, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001500), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@bloom_filter={0x1e, 0x5, 0x4f020570, 0x8001, 0x5d000, r4, 0x8fd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x6, @value=r5, @void, @value=r4}, 0x50) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x101040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x7f, 0x0, 0x3, [0x0], [0x0, 0xfffffffc, 0x9], [0x0, 0x9, 0x2], [0xffffffffffffffff, 0x0, 0x7fff, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000100)={r11, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r12}) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r13}, 0x4) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x19, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1316}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$printer(r2, &(0x7f0000001140)={0xc, &(0x7f0000001040)={0x40, 0xf, 0x7f, {0x7f, 0x21, "b655c82cfcf834da69117c51c2337092f62a452bd8ef1bdb48c148b0765a847380134ebc92804734377c7eccfe43cb5d810ccf01be3bb7f48b1920d3faef5cd78c7d825427c370c81aa5cb181ad93e35b7a41a07f87b3cb3420423c7f11ade5467123f16e15729bc4635cf598a0466f6d09889de2d5a80b2912b7bd01e"}}, &(0x7f0000001100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}}, &(0x7f0000001440)={0x1c, &(0x7f0000001240)={0x20, 0x18, 0xbf, "c30f83535a13cc7d5f12ea2c2f54ab913f20ad18dd42768d47e98772d86788effbd5807732424db2552cff8c93c3bcc8fbbaab8d55868e0fe24317636c5a3abdd228a4211c349572ac90be21cbe732c8937d0a072b55dc57a2f57e19790d7310661923abb2604728cb4b3edf1a892f21c43b956b572538e15a2788a68471576454af7c9349d5edfb0d78c92741f19ae90ba94ef1b215a98ee7e2cfe91a101b06b106dfdfa3154e93de554b58f5851db528e4798bff8b6074de4a3c1d042144"}, 0x0, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001340)={0x20, 0x0, 0x56, {0x54, "f13e3004a9bdb6404c804cc5d199f264c57746fb49a882e655f848e3ed7f633c6903f6b53ae1e21b66c872c4bfb8cbd2daac51229fd7502866119370c6bc7206cbb418e97eba76b4551ba5cdc179588845d79c62"}}, &(0x7f00000013c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000001400)={0x20, 0x0, 0x1, 0x5}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000100)={0x3, 0x900, 0x7}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000001640)={0xc, &(0x7f0000001540)={0x20, 0x17, 0xad, {0xad, 0xa, "3c1ae9033246ce14501c437f2bc876d9eb3bf43114cb06ad641f1dc79dc320df164ce006f508b21da21c0f636167b179f7762cfb992589b8d1f97a27db4207e2667e3d37668fea6fb9194c81a688352700c97ba87b2be055105ae92dc6005564247bc1eb7f760bb0471e9b38261a7880214d2e2fc8c5afc5e60ca75b6ec664f62a2af68851783af5864c7446fe0271818c6efafb07475ccfe5ebc96964eace17caecdc1b381bdb33eb1bb4"}}, &(0x7f0000001600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001880)={0x24, 0x0, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000001740)={0x20, 0x80, 0x1c, {0x3, 0x2, 0x10, 0x6, 0x8, 0x97, 0x1, 0x200, 0x800, 0x401, 0x2, 0x1}}, &(0x7f0000001780)={0x20, 0x85, 0x4, 0x200}, &(0x7f00000017c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001800)={0x20, 0x87, 0x2, 0x400}, &(0x7f0000001840)={0x20, 0x89, 0x2, 0x1}}) r15 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a30000000000800410072786500140033006c6f0000001f00000000000000c03af5"], 0x38}, 0x1, 0x0, 0x0, 0x200008d4}, 0x0) 4.144138449s ago: executing program 4 (id=867): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000005000000020000008000000000000000", @ANYRES32, @ANYBLOB="0000000000001cb5547a9e08f47d000000000000d90773647457ecae595986a756141ca0483eb8c9085bb3926f74059a972fe541ac4c3fa6f69e46d7e8d36d206264f7526cc747baa2a917df98e67b5c3a401d170f8a0c315c3f99448a9542643a6bff08cb4480e99faee202ae9177a607f6dc0b88ed63ce07c3c798682eaecdc748b197502ee7c044a60a00000000000000e51eb1ccbbf5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r4, &(0x7f0000000000), 0x8) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{}, {0x0, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x0, 0x1, {{0x0, 0x0, 0x0, r8, 0x1100, 0x8800}}}}}}, @IFLA_LINK={0x8}, @IFLA_TARGET_NETNSID]}, 0xfffffe98}, 0x1, 0x0, 0x0, 0xc045}, 0x24004004) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in6=@remote, 0x4e20, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0xa0, 0xc, r8, r10}, {0x3ff, 0x4, 0x9, 0xfffffffffffffffa, 0xa, 0x7fffffffffffffff, 0x0, 0xb}, {0xbb53, 0x9, 0x2, 0x5}, 0x0, 0x6e6bb1, 0x0, 0x1, 0x2, 0x1}, {{@in=@multicast1, 0x4d2, 0x32}, 0xa, @in6=@private1, 0x3507, 0x3, 0x2, 0xb6, 0x826, 0x8, 0xfb}}, 0xe4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000a65d564bea00001000010029bd70001b00df2500000000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b000000000008000d0010000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) 3.263088904s ago: executing program 0 (id=869): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x9, 0x7fff, 0xf9, 0x0, 0x1, 0x2cb02, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x3f00000000000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x801, 0x1ffa, 0x8c, 0x10, 0x1, 0xcb02, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080)) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.163973905s ago: executing program 4 (id=870): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) dup(r1) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5000000}, 0x48) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.969499036s ago: executing program 4 (id=871): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000240)=0x0) r2 = inotify_init() io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xa0000001}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x14, 0x12, 0xa01, 0x4, 0x0, {0x80, 0x2}}, 0x14}}, 0x0) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f00000008c0)={0x9, {"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", 0x1000}}, 0x1006) 2.893977666s ago: executing program 1 (id=872): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x28, 0x801, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000000100)={0xf, 0x97c5, {0xffffffffffffffff}, {0xee01}, 0x0, 0x1}) ioprio_set$pid(0x0, r6, 0x2007) setresgid(0xee00, 0xee01, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd38}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r8}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="300000001f8a65bc2dbd2c4bd6e752d82684e341"], 0x14}], 0x1}, 0x0) 2.274230021s ago: executing program 0 (id=873): read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) clock_nanosleep(0x2, 0x3f, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000002740)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f1f, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.934532111s ago: executing program 1 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff00000000711043000000001f95"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.933901319s ago: executing program 1 (id=875): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$sock(r3, &(0x7f00000004c0)={&(0x7f0000000200)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e92f93c0ddd4dd02a41812b87b3f8f005eed7172", 0x14}, {&(0x7f0000000340)="2659071cfd7895d79e8972b8cd2bf6442e3ba89218e2cc13f592a4f2433542693fb66e8cc4d15651313ccdb8043d6dd9d103fcf4e20f28450f3d08d41d69a2f7d4b91c0f69407160", 0x48}, {&(0x7f00000003c0)="120118f73c9cc104d80eb51106be39176498f246fdedbe87be4ef0e35c97b0db0467f64eaceb7250339c41ef1959d1c78df662fb04cfb75441c93036f09b88dc7fe7850ec5cf019290a4476cfa6d2f2390d05b7e043138330b70bb98e337f731c0c07496f471fb7f3edd56b609b9b77c93c609a8fbab27df5750eecd47fdf72851c5c34f323fd1afb9fd63dd7057de15cf421de60709d1967a7188422cbf46d96e10dc", 0xa3}, {&(0x7f0000000580)="9f5ae358d6b0bedfd7729dc02727bb150d025c278a31aebb4e34f8b28f049be958c5b8c4a9c76d28182f2b846360aeb0921eb15e2d9eb9459033473c7381c22c7db24e74836786e8d1714ae1366ced83f4e4728c448ce0dccf9f2ba1fb73ce82a3e3b8074ee5eda34cbcfe39f70a3f172d58f39fcc02e397ef913eb012185be640eb5dce705939704afb85dba4c20e48cddc3002d6744b454eaa57bd41cacdb8942458374879b8e7d70b65cf3b122536fce10083edc15c3276cff4b84a63c617c55215091bfa229ff5921c758830b32fcddc79f484990f27d72d0e35c7b3497f5b51692d988c82da9bb38ee952", 0xed}, {&(0x7f0000000780)="7ecf3daea9c577e8b2fae7547b6b980b76b401ded0fa1256228580230e435305305400de002952b58899a68fef3f3a030091a868e67c2febc3302494cabdca84bc481adb52045ab938dc6320069b11a541e7a7e7bd3679efafbaad62fc906afbfb6a5ecd1f3d7b7017643228b6146e929c079cedcbd48c3fca4011b6e6439a2789c0e0309d25847615048929303c", 0x8e}, {&(0x7f0000000840)="c071d56be0f7763ce1d474f27c571154ccb02f24c18b753e03ffc3487d941144c1be402a1b84894d23c8c15f399e86d5a38d98a8a9dcc18be90c7dc678afe63bd5f0b695f37f9549da68e6fe4751859f84a106ed7892d27bf9fa13c4341b25800078bae49ef2e0ef64237031cc8200d49d1b996489280bb61b9b14f718fa09210e73841ba432a70b43cb43d37f9cd03f8124bd77b3310987e245f5b903b44e846e3256950ae309321b5fb037eaeb61e358e297352d7a261414f6e7e3fdfd9b33", 0xc0}], 0x6, &(0x7f0000000480)=[@txtime={{0x14, 0x1, 0x3d, 0x8001}}, @mark={{0x10, 0x1, 0x24, 0x4}}, @mark={{0x10, 0x1, 0x24, 0x1}}], 0x34}, 0x80) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x10, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x11, {{}, {0x0}, 0x0}}], 0x48}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x78d9}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) (async) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) sendmsg$sock(r3, &(0x7f00000004c0)={&(0x7f0000000200)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e92f93c0ddd4dd02a41812b87b3f8f005eed7172", 0x14}, {&(0x7f0000000340)="2659071cfd7895d79e8972b8cd2bf6442e3ba89218e2cc13f592a4f2433542693fb66e8cc4d15651313ccdb8043d6dd9d103fcf4e20f28450f3d08d41d69a2f7d4b91c0f69407160", 0x48}, {&(0x7f00000003c0)="120118f73c9cc104d80eb51106be39176498f246fdedbe87be4ef0e35c97b0db0467f64eaceb7250339c41ef1959d1c78df662fb04cfb75441c93036f09b88dc7fe7850ec5cf019290a4476cfa6d2f2390d05b7e043138330b70bb98e337f731c0c07496f471fb7f3edd56b609b9b77c93c609a8fbab27df5750eecd47fdf72851c5c34f323fd1afb9fd63dd7057de15cf421de60709d1967a7188422cbf46d96e10dc", 0xa3}, {&(0x7f0000000580)="9f5ae358d6b0bedfd7729dc02727bb150d025c278a31aebb4e34f8b28f049be958c5b8c4a9c76d28182f2b846360aeb0921eb15e2d9eb9459033473c7381c22c7db24e74836786e8d1714ae1366ced83f4e4728c448ce0dccf9f2ba1fb73ce82a3e3b8074ee5eda34cbcfe39f70a3f172d58f39fcc02e397ef913eb012185be640eb5dce705939704afb85dba4c20e48cddc3002d6744b454eaa57bd41cacdb8942458374879b8e7d70b65cf3b122536fce10083edc15c3276cff4b84a63c617c55215091bfa229ff5921c758830b32fcddc79f484990f27d72d0e35c7b3497f5b51692d988c82da9bb38ee952", 0xed}, {&(0x7f0000000780)="7ecf3daea9c577e8b2fae7547b6b980b76b401ded0fa1256228580230e435305305400de002952b58899a68fef3f3a030091a868e67c2febc3302494cabdca84bc481adb52045ab938dc6320069b11a541e7a7e7bd3679efafbaad62fc906afbfb6a5ecd1f3d7b7017643228b6146e929c079cedcbd48c3fca4011b6e6439a2789c0e0309d25847615048929303c", 0x8e}, {&(0x7f0000000840)="c071d56be0f7763ce1d474f27c571154ccb02f24c18b753e03ffc3487d941144c1be402a1b84894d23c8c15f399e86d5a38d98a8a9dcc18be90c7dc678afe63bd5f0b695f37f9549da68e6fe4751859f84a106ed7892d27bf9fa13c4341b25800078bae49ef2e0ef64237031cc8200d49d1b996489280bb61b9b14f718fa09210e73841ba432a70b43cb43d37f9cd03f8124bd77b3310987e245f5b903b44e846e3256950ae309321b5fb037eaeb61e358e297352d7a261414f6e7e3fdfd9b33", 0xc0}], 0x6, &(0x7f0000000480)=[@txtime={{0x14, 0x1, 0x3d, 0x8001}}, @mark={{0x10, 0x1, 0x24, 0x4}}, @mark={{0x10, 0x1, 0x24, 0x1}}], 0x34}, 0x80) (async) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x10, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x11, {{}, {0x0}, 0x0}}], 0x48}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) (async) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x78d9}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) (async) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) (async) 1.563603162s ago: executing program 2 (id=876): ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x850) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x60000}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000180)="e1fc09895540ed9aa4a8f263dfdeee01ba861d83d5af6815b0e43bfba014c12f2a6f5dd0ea97867c2b6583da5aeb16a0216b5ae0856c0395bab7c2ac12aa6716c6b78ccccdbadadbae2d64515e10604542eb8a0eb7cb6c33047087379cbc99d1680bebdbe33bde668ba48c894c4be33871174ce9e375df97ae474f181cce486e5db9b77cea488454a2ef5e7d1598ace0628f76eb0821fc64195529083d", 0x9d}, {&(0x7f0000000240)="c8d639b69c8e350f874567ffa3aa9e72815f17559b8542cc6cbab41df67a46e32a4df0f22250453723352b549930a0894af3eb2c90f7dfded20b1ac63e937b03ddc6613a316db5ebd43c81af8a8e29a52531e406ce85c1a835acfe157920b8362bf506ab53413ffcf38a223b753dc813c4f3aaf126", 0x75}, {&(0x7f00000002c0)="659bfdcbd4f9364c9a51178c275f741ba4dab4e6f8f497178d94fb772f5e88703b9346fa32fb839c96b99fec57aaff4ab22a8e7b315e15c4e25baa7f183b651b0bba6887f14dc392a0b65b2c836aa9b2fa87d0ed7f2ae15cf4a1ea7f0099686cfae0dd01f249200cbaba2f1147c32201729f156d6dc3d4ed8a1941d6fd7943aa2a66ed3f7c0a11c9d6e41dc9ce3a02819be34f0e428a6ec0e65bb5b5ac6e0f886d020609f08146478e425a6ecac64fe31ffb749d31efbccb2ebcaf655e603a08", 0xc0}, {&(0x7f0000000380)="2eff6b7474ffdfecc041c21af3c51b73439f0caaeb2638dee7a5c45065f67d3713e6409a3e4ec377fc274b76dbbeac30bc82a23f3ce79e35c05250bf9b5a4950f3e237a7dc21f5c8e1752a54410542b2f0a2cb7267358bb8e9a178f0a550797c0f205c5c05708871f997b77c50af212232e7117b3c750e5764a4a430c7ffb3e62c5c2d679f1922484424c02ec8fbe9a96a42776b4768501e70dc68a5a5530e48ff17ef88b1468c2766ab661c43c6e6f77e225da3019127bdc5cbff85cf141c072b33244fa0bb45f41c852ade95083bc7338167941f80a15051ce3fc23a1e577c20774d764aa321391b4151fa98", 0xed}, {&(0x7f0000000480)="3f7a07ce2f2a0421f21d121567ffed44e2fbeaa638b6764104074ebeb71d62c0cd908fe1607d20db51d996ec223074c7ec0c75466087b46ded6eeb2c4f09a11baa944657f0d9d4064369e20094d139f313e6d092315e37e36ce3877b13348aeada3dd622d36c18d4a7b481451a7f98bdb5ce692cac98a241a4bedefaa02fdea32235524063d4f6491a2e43b591cacfda585ddc182690b64e53572ec76b3c3c7bfaf050d859c6f5bbb692a1809464f8b47e6379c4069880dc45cf5084497f08f540f4af061646420456c433d658d60de12979a6fa3aba3113156fca4a37f9a398388949e832fb", 0xe6}], 0x5, 0x0, 0x0, 0x4000010}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0xd8000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f00000002c0)="d123cfb69714acaee40767c9d68b05d615a4e54e4a16e0b06a5c98844ae8d8e0db30aa35e701f05da45bfce9dc0e399719282fe954ae345a0d326d491b17a1a546cf1b17288b3e58f6ef39c78e30c463fb3b893b07b43b3ca4ccc138c53cb4d90dab506ff34960fba0d210c07bb32b77be0d102c60d8b970294ebd6b15b89b6b4a81bdc0a7ca2280ca0b8153c500ed36ef21d918386b667340b5f24306d58cfe9773af93ae7897b9de7336c02e438a804d746eeb6d5fae9adc57200e76b88af6bd186d1d4909977e26fb2c5dec837fd176e7b2c8df918603e62f7679c2f81f9ecad10c5ead29ab8efc6d442360eb1660052ec79a5d47402d", &(0x7f0000000480)=""/45, &(0x7f0000000700)="e1c94816c99b22e06b13a28919ab371ee1fe90f19e313509533c5f96e119ee93e3c6b7f42f4aeadda7aa6f4d43e036064feb82544f95b3cb2cefab337fcd043af02588975be6a39084b80faf92ee50850f7abd09502b9fa6b07414e23ad5eb3a8a8df4a64f6bd93dbe60a5cd2fff6057acffac976f72b1df599dcafada9c9d7c84b2ef32102bbf2a70459663ca06a0ad211b84e0e5584cfb5faa798e8de332746b806f494275b862e9aae751e6281c0bc81f542a231a6f99c31cac4ea21e164ec7830229c98671dcf8a3d87d9786a341276c48e4a3fd5bb87cb08e7e90b1ab13223f38f5b5b6d867d18ce83600"/251, &(0x7f0000000840)="520c80ee986334a248704f1746da1d8cb618742995dc35113ded9dc5e06c93ffc5cdb4dc97194f8ed49f0f28b1818ed24887c82e0efc52bc1ecbbc6cab36b830887a50ca3164ce5e54d80e58b1fce76ec3c4fefe338aa08dc4ea2789c21a56fda41b7b32da738f2d203e88dabe1dd70f0b1068b895ea4cae020d0588f7cc96fc3f35bffcbb1bb11be4bf75f597ad103539a8fdb406c718888696535acbc97fe34da2b8e29c80e26d989bda7b716821ae6338d4c6272e02db375c22391b22fc99bc9770b54266f1ddc4db73b9aa3e168b73a9259a7c5de7291cf57f2ce39443df562e3264ea0d69970b872bcc4c4a507d5e4b", 0xfffffff6}, 0x38) sched_setscheduler(r1, 0x0, &(0x7f00000006c0)=0xfffdffff) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffd, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0x2, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) vmsplice(r9, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) 1.33399077s ago: executing program 0 (id=877): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4f27, 0x7, 0x4d34a271, 0x2, 0x2, 0xcc7, 0x10043, 0x201, 0x84, 0x1000000, 0x4, 0x4b, 0x1, 0xfffffffd, 0xa, 0x10000105, 0x3, 0x1a458, 0x2, 0x3fff7fff, 0x85, 0x8, 0x8, 0x20001e58, 0x8001, 0xe69, 0x3c, 0x1, 0x4006, 0xfffffffc, 0xfffffff8]}) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0xfffffffc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x40000e5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r7, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r9}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r12 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1e) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r7, 0x4068aea3, &(0x7f0000000340)={0xce, 0x0, r12}) r13 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r14, 0x4138ae84, 0x0) linkat(r7, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000240)='./file0\x00', 0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r7, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0x1b, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 1.083822529s ago: executing program 0 (id=878): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000005000000020000008000000000000000", @ANYRES32, @ANYBLOB="0000000000001cb5547a9e08f47d000000000000d90773647457ecae595986a756141ca0483eb8c9085bb3926f74059a972fe541ac4c3fa6f69e46d7e8d36d206264f7526cc747baa2a917df98e67b5c3a401d170f8a0c315c3f99448a9542643a6bff08cb4480e99faee202ae9177a607f6dc0b88ed63ce07c3c798682eaecdc748b197502ee7c044a60a00000000000000e51eb1ccbbf5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r4, &(0x7f0000000000), 0x8) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{}, {0x0, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x0, 0x1, {{0x0, 0x0, 0x0, r8, 0x1100, 0x8800}}}}}}, @IFLA_LINK={0x8}, @IFLA_TARGET_NETNSID]}, 0xfffffe98}, 0x1, 0x0, 0x0, 0xc045}, 0x24004004) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in6=@remote, 0x4e20, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0xa0, 0xc, r8, r10}, {0x3ff, 0x4, 0x9, 0xfffffffffffffffa, 0xa, 0x7fffffffffffffff, 0x0, 0xb}, {0xbb53, 0x9, 0x2, 0x5}, 0x0, 0x6e6bb1, 0x0, 0x1, 0x2, 0x1}, {{@in=@multicast1, 0x4d2, 0x32}, 0xa, @in6=@private1, 0x3507, 0x3, 0x2, 0xb6, 0x826, 0x8, 0xfb}}, 0xe4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000a65d564bea00001000010029bd70001b00df2500000000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b000000000008000d0010000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) 1.014425003s ago: executing program 4 (id=879): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x2219e566e760a58b, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) syz_usb_disconnect(r0) 692.504987ms ago: executing program 2 (id=880): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x80ff, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x3}, {0x200000000004, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 691.880585ms ago: executing program 2 (id=881): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1e4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3926d983}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x907}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff1eb3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x1}, 0x24000040) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x1b3, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb0800478a01a5006700000a119078ac1e0001ac141433940400008313dee0000002ac1414bbe0000002e0000002"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f00000000c0)=0x3, 0x4) r8 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000400000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$hiddev(r10, &(0x7f0000000100)=""/100, 0x64) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 613.670436ms ago: executing program 2 (id=882): syz_open_dev$MSR(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) io_submit(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x3c, 0x0, @void}, 0x10) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) openat$dlm_plock(0xffffff9c, &(0x7f0000000340), 0x705a82, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x1800}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 613.466968ms ago: executing program 1 (id=883): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cf", 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xffffffff, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x102) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x700000000000000, 0xfffffffffffffffc, 0x6}}}, 0x118) shutdown(0xffffffffffffffff, 0x3b3ec04e0e1636c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 74.267675ms ago: executing program 0 (id=884): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1e8301, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='contention_end\x00'}, 0x18) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x1f, 0x0, 0x1, 0x0, 0x0, 0x500}, 0x0) 0s ago: executing program 0 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) (async) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000300000007000000693e3c5fd32185b8c28a1c7ebc55d044223d36cdaef21262815c51dff1cd2f6e7cf6602277fe03442c3f7d3fe9dd792ca3e9f745f0947d7adb449719519f37daa58b4c5b4696b7b6ad8e527c06363cd052924c7935d661df9657ad7f243dbeefd2ca7d557f2e9c032e17f3a0b6658113ff5a20c366b52e6590eb9070ffaaf25b25bcc42f8756f569c09e52765f7daafc5e55835ee0009b506ff280b3ede4cc7a763bb78544ce2a828538c3bedb8d337ac2625cf211bd004a7a1d7292edf839e3205d49ede5c96a3b191119a9193089642196d5a2c2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002f0001010000ca95f399720d5b9e0080"], 0x14}], 0x1}, 0x0) ioprio_get$pid(0x2, 0x0) fcntl$setlease(r4, 0x400, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005f7e05bf43000000000000000000", @ANYRES32=0x0, @ANYBLOB="80000200f900010008001b0000000000"], 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) epoll_create1(0x0) (async) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) r9 = openat$hpet(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) fcntl$setstatus(r9, 0x4, 0x2000) (async) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x4f2b, 0x5, 0x3, 0x4, 0x5, 0xcc7, 0xf, 0xb, 0xa, 0x100, 0x2, 0x1, 0xfffffffd, 0x40, 0x6, 0x101, 0x0, 0x1a449, 0x2, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0xa, 0xe69, 0x3f, 0x8, 0x2, 0x0, 0xfffffff8]}) kernel console output (not intermixed with test programs): e team_slave_1 removed [ 115.342130][ T7138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.256798][ T5979] udevd[5979]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 116.766540][ T7165] team0: Port device team_slave_0 removed [ 116.770221][ T55] IPVS: starting estimator thread 0... [ 116.781532][ T7165] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 116.796390][ T7168] tipc: Started in network mode [ 116.797965][ T7168] tipc: Node identity ac1414aa, cluster identity 4711 [ 116.804258][ T7168] tipc: Enabled bearer , priority 10 [ 116.867574][ T7169] IPVS: using max 42 ests per chain, 100800 per kthread [ 117.179585][ T7185] __nla_validate_parse: 6 callbacks suppressed [ 117.179602][ T7185] netlink: 40 bytes leftover after parsing attributes in process `syz.3.280'. [ 117.188081][ T7185] netlink: 40 bytes leftover after parsing attributes in process `syz.3.280'. [ 117.220938][ T55] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.370846][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 117.381129][ T55] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 117.384740][ T55] usb 5-1: config 0 has no interface number 0 [ 117.387416][ T55] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.400622][ T55] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 117.405541][ T55] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.410527][ T55] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 117.416130][ T55] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 117.419501][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.424647][ T55] usb 5-1: config 0 descriptor?? [ 117.452171][ T55] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 117.528373][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 117.742729][ T1017] usb 5-1: USB disconnect, device number 9 [ 117.742782][ C3] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 117.749203][ T1017] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 117.812415][ T54] tipc: Node number set to 2886997162 [ 117.962305][ T7181] ldusb: No device or device unplugged -19 [ 117.983885][ T7181] netlink: 'syz.0.281': attribute type 2 has an invalid length. [ 118.219371][ T7203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.287'. [ 118.608203][ T7205] netlink: 'syz.1.288': attribute type 10 has an invalid length. [ 118.611626][ T7205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.288'. [ 118.852990][ T7222] : entered promiscuous mode [ 118.899682][ T7225] tipc: Enabled bearer , priority 0 [ 119.023358][ T7220] syzkaller0: entered promiscuous mode [ 119.025647][ T7220] syzkaller0: entered allmulticast mode [ 119.144219][ T7220] tipc: Resetting bearer [ 119.167356][ T7219] tipc: Resetting bearer [ 119.180660][ T6061] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 119.185251][ T7219] tipc: Disabling bearer [ 119.316746][ T7248] comedi comedi3: adq12b: I/O port conflict (0x4f27,16) [ 119.344670][ T6061] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 119.347973][ T6061] usb 8-1: config 0 has no interface number 0 [ 119.351229][ T6061] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 119.356238][ T6061] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 119.363239][ T6061] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 119.368841][ T6061] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 119.372505][ T6061] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 119.375817][ T6061] usb 8-1: Product: syz [ 119.377683][ T6061] usb 8-1: SerialNumber: syz [ 119.381895][ T6061] usb 8-1: config 0 descriptor?? [ 119.387076][ T6061] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 119.393151][ T6061] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input23 [ 119.565937][ T7256] nvme_fabrics: unknown parameter or missing value 'FREEZING' in ctrl creation request [ 119.927147][ T3246] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 120.172186][ T3246] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 120.175958][ T3246] usb 6-1: config 0 has no interface number 0 [ 120.178850][ T3246] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 120.183887][ T3246] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.189023][ T3246] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 120.212827][ T3246] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 120.217276][ T3246] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 120.231470][ T3246] usb 6-1: Product: syz [ 120.233559][ T3246] usb 6-1: SerialNumber: syz [ 120.240247][ T3246] usb 6-1: config 0 descriptor?? [ 120.245831][ T3246] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 120.249530][ T3246] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input24 [ 121.157537][ T7279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.399305][ T7279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.493695][ T7279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.853965][ T7279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.958388][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.975778][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.003310][ T1136] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.027089][ T1136] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.184349][ T7288] comedi comedi3: pcl818: I/O port conflict (0x4f23,16) [ 122.292546][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 123.039467][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.042332][ T54] usb 8-1: USB disconnect, device number 6 [ 123.042454][ C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 123.058607][ T54] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 123.129355][ T7309] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 123.149278][ T7309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.253751][ T7309] bond1: (slave veth3): Enslaving as an active interface with a down link [ 123.572102][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.572355][ T1017] usb 6-1: USB disconnect, device number 7 [ 123.574924][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 123.620922][ T1017] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 123.696376][ T7338] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 123.698558][ T7338] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.704634][ T7338] vhci_hcd vhci_hcd.0: Device attached [ 123.721773][ T7341] vhci_hcd: connection closed [ 123.722541][ T46] vhci_hcd: stop threads [ 123.725847][ T46] vhci_hcd: release socket [ 123.727412][ T46] vhci_hcd: disconnect device [ 123.880773][ T55] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 123.967199][ T53] IPVS: starting estimator thread 0... [ 123.970716][ T7350] tipc: Started in network mode [ 123.972392][ T7350] tipc: Node identity ac1414aa, cluster identity 4711 [ 123.975047][ T7350] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 123.977329][ T7350] tipc: Enabled bearer , priority 10 [ 124.000796][ T3246] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 124.032350][ T55] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 124.036530][ T55] usb 8-1: config 0 interface 0 has no altsetting 0 [ 124.041716][ T55] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.045532][ T55] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 124.049010][ T55] usb 8-1: Product: syz [ 124.050919][ T55] usb 8-1: Manufacturer: syz [ 124.053377][ T55] usb 8-1: SerialNumber: syz [ 124.058296][ T55] usb 8-1: config 0 descriptor?? [ 124.068259][ T55] usb 8-1: selecting invalid altsetting 0 [ 124.070968][ T7352] IPVS: using max 29 ests per chain, 69600 per kthread [ 124.120729][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 124.173262][ T3246] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 124.177193][ T3246] usb 5-1: config 0 has no interface number 0 [ 124.180159][ T3246] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 124.186329][ T3246] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 124.191552][ T3246] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 124.197765][ T3246] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 124.202253][ T3246] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 124.206168][ T3246] usb 5-1: Product: syz [ 124.208388][ T3246] usb 5-1: SerialNumber: syz [ 124.213800][ T3246] usb 5-1: config 0 descriptor?? [ 124.219484][ T3246] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 124.231555][ T3246] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input25 [ 124.260647][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 124.271497][ T10] usb 8-1: USB disconnect, device number 7 [ 124.297261][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 124.303378][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.333'. [ 124.308138][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.333'. [ 124.410697][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 124.422578][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 124.550665][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 124.690675][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 124.830614][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 124.970680][ T53] tipc: Node number set to 2886997162 [ 125.110646][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 125.380712][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 125.910658][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 126.583683][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 127.003121][ T7397] rdma_rxe: rxe_newlink: failed to add lo [ 127.329731][ T7398] netlink: 'syz.3.341': attribute type 10 has an invalid length. [ 127.368700][ T7398] batman_adv: batadv0: Adding interface: team0 [ 127.371096][ T7398] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.378091][ T7400] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 127.382059][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.387682][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.391258][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 127.391316][ T6040] usb 5-1: USB disconnect, device number 10 [ 127.394291][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 127.403110][ T7398] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 127.410401][ T6040] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 127.471474][ T7391] netlink: 'syz.3.341': attribute type 10 has an invalid length. [ 127.475156][ T7391] netlink: 2 bytes leftover after parsing attributes in process `syz.3.341'. [ 127.481380][ T7391] team0: entered promiscuous mode [ 127.483293][ T7391] team_slave_1: entered promiscuous mode [ 127.486690][ T7391] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.489322][ T7391] batman_adv: batadv0: Interface activated: team0 [ 127.493192][ T7391] batman_adv: batadv0: Interface deactivated: team0 [ 127.495828][ T7391] batman_adv: batadv0: Removing interface: team0 [ 127.499447][ T7391] bridge0: port 3(team0) entered blocking state [ 127.505081][ T7403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.345'. [ 127.508612][ T7391] bridge0: port 3(team0) entered disabled state [ 127.511729][ T7391] team0: entered allmulticast mode [ 127.514196][ T7391] team_slave_1: entered allmulticast mode [ 127.518606][ T7391] bridge0: port 3(team0) entered blocking state [ 127.521234][ T7391] bridge0: port 3(team0) entered forwarding state [ 127.530421][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 127.534272][ T7404] bridge_slave_1: left allmulticast mode [ 127.536857][ T7404] bridge_slave_1: left promiscuous mode [ 127.539576][ T7404] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.550942][ T7404] bridge_slave_0: left allmulticast mode [ 127.553500][ T7404] bridge_slave_0: left promiscuous mode [ 127.556384][ T7404] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.874844][ T7415] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.370480][ T6040] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 128.574008][ T6040] usb 5-1: unable to get BOS descriptor or descriptor too short [ 128.589551][ T6040] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 128.594952][ T6040] usb 5-1: can't read configurations, error -71 [ 129.010675][ C3] net_ratelimit: 2 callbacks suppressed [ 129.010694][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 129.146806][ T7447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.211514][ T40] audit: type=1326 audit(1756887850.871:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.360" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 129.315375][ T7457] overlayfs: failed to resolve './file1': -2 [ 129.326789][ T7457] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 130.050652][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 130.079621][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 130.240307][ T7471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.366'. [ 130.301111][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.367'. [ 130.309604][ T7474] vlan2: entered promiscuous mode [ 130.311838][ T7474] bond0: entered promiscuous mode [ 130.313489][ T7474] bond_slave_0: entered promiscuous mode [ 130.315515][ T7474] bond_slave_1: entered promiscuous mode [ 130.367544][ T5979] udevd[5979]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 130.376796][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.368'. [ 130.433454][ T7481] netlink: 60 bytes leftover after parsing attributes in process `syz.3.369'. [ 130.436303][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 130.439302][ T7481] netlink: 60 bytes leftover after parsing attributes in process `syz.3.369'. [ 130.910722][ T6062] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 131.070804][ T6062] usb 6-1: Using ep0 maxpacket: 8 [ 131.075104][ T6062] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 131.078884][ T6062] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 131.082978][ T6062] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 131.086739][ T6062] usb 6-1: config 250 has no interface number 0 [ 131.089335][ T6062] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 131.093769][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 131.096648][ T6062] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 131.101337][ T6062] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.105100][ T6062] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 131.109081][ T6062] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 131.114583][ T6062] usb 6-1: config 250 interface 228 has no altsetting 0 [ 131.119127][ T6062] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 131.122543][ T6062] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 131.126024][ T6062] usb 6-1: Product: syz [ 131.127859][ T6062] usb 6-1: SerialNumber: syz [ 131.134484][ T6062] hub 6-1:250.228: bad descriptor, ignoring hub [ 131.137094][ T6062] hub 6-1:250.228: probe with driver hub failed with error -5 [ 131.411314][ T6062] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 131.527449][ T7500] 9pnet: Found fid 0 not clunked [ 132.049759][ T7507] wireguard0: entered promiscuous mode [ 132.052130][ T7507] wireguard0: entered allmulticast mode [ 132.075758][ T7511] overlayfs: failed to clone lowerpath [ 132.079080][ T7511] overlayfs: failed to clone upperpath [ 132.130635][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 132.475463][ T1172] Bluetooth: (null): Invalid header checksum [ 132.478117][ T1172] Bluetooth: (null): Invalid header checksum [ 132.581790][ T1172] Bluetooth: (null): Invalid header checksum [ 132.620955][ T24] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 132.707147][ T13] Bluetooth: (null): Invalid header checksum [ 132.743640][ T7537] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 132.746531][ T7537] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 132.749964][ T7537] vhci_hcd vhci_hcd.0: Device attached [ 132.754875][ T7537] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 132.757131][ T7537] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.759908][ T7537] vhci_hcd vhci_hcd.0: Device attached [ 132.762666][ T7537] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 132.766715][ T7537] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 132.768978][ T7537] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 132.771965][ T7537] vhci_hcd vhci_hcd.0: Device attached [ 132.776423][ T7537] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 132.778656][ T7537] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 132.781474][ T7537] vhci_hcd vhci_hcd.0: Device attached [ 132.785161][ T7537] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(20) [ 132.787378][ T7537] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 132.789890][ T7537] vhci_hcd vhci_hcd.0: Device attached [ 132.792667][ T7537] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 132.796406][ T7537] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 132.800179][ T7537] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 132.803303][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.811447][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.815140][ T7545] vhci_hcd: connection closed [ 132.816862][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.816878][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.824985][ T7547] vhci_hcd: connection closed [ 132.826540][ T12] Bluetooth: (null): Invalid header checksum [ 132.829629][ T7541] vhci_hcd: connection closed [ 132.831310][ T7543] vhci_hcd: connection closed [ 132.833328][ T7539] vhci_hcd: connection closed [ 132.836532][ T13] vhci_hcd: stop threads [ 132.839575][ T13] vhci_hcd: release socket [ 132.841207][ T13] vhci_hcd: disconnect device [ 132.843579][ T13] vhci_hcd: stop threads [ 132.845145][ T13] vhci_hcd: release socket [ 132.846930][ T13] vhci_hcd: disconnect device [ 132.848708][ T13] vhci_hcd: stop threads [ 132.850401][ T13] vhci_hcd: release socket [ 132.853455][ T13] vhci_hcd: disconnect device [ 132.855428][ T13] vhci_hcd: stop threads [ 132.857143][ T13] vhci_hcd: release socket [ 132.859040][ T13] vhci_hcd: disconnect device [ 132.863955][ T13] vhci_hcd: stop threads [ 132.865730][ T13] vhci_hcd: release socket [ 132.867641][ T13] vhci_hcd: disconnect device [ 132.931766][ T12] Bluetooth: (null): Invalid header checksum [ 133.037119][ T24] usb 8-1: usb_control_msg returned -32 [ 133.039316][ T24] usbtmc 8-1:16.0: can't read capabilities [ 133.043360][ T13] Bluetooth: (null): Invalid header checksum [ 133.151650][ T12] Bluetooth: (null): Invalid header checksum [ 133.170636][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 133.272347][ T13] Bluetooth: (null): Invalid header checksum [ 133.352629][ T24] usb 6-1: USB disconnect, device number 8 [ 133.382667][ T24] usblp0: removed [ 133.422735][ T13] Bluetooth: (null): Too short H5 packet [ 133.424915][ T13] Bluetooth: (null): Invalid header checksum [ 133.491651][ T13] Bluetooth: (null): Invalid header checksum [ 133.602364][ T1136] Bluetooth: (null): Invalid header checksum [ 133.611547][ T7566] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 133.722288][ T91] Bluetooth: (null): Invalid header checksum [ 133.830912][ T91] Bluetooth: (null): Invalid header checksum [ 133.940807][ T12] Bluetooth: (null): Invalid header checksum [ 134.051205][ T12] Bluetooth: (null): Invalid header checksum [ 134.160928][ T91] Bluetooth: (null): Invalid header checksum [ 134.220614][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 134.281025][ T12] Bluetooth: (null): Invalid header checksum [ 134.391094][ T13] Bluetooth: (null): Invalid header checksum [ 134.511481][ T13] Bluetooth: (null): Invalid header checksum [ 134.623858][ T1136] Bluetooth: (null): Invalid header checksum [ 134.731315][ T13] Bluetooth: (null): Invalid header checksum [ 134.841154][ T1136] Bluetooth: (null): Invalid header checksum [ 134.961259][ T12] Bluetooth: (null): Invalid header checksum [ 134.992882][ T7589] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 135.062206][ T12] Bluetooth: (null): Invalid header checksum [ 135.170959][ T1136] Bluetooth: (null): Invalid header checksum [ 135.260643][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 135.408689][ T6040] usb 8-1: USB disconnect, device number 8 [ 135.648888][ T7607] ufs: failed to set blocksize [ 135.694214][ T7608] ufs: failed to set blocksize [ 135.732062][ T7609] __nla_validate_parse: 1 callbacks suppressed [ 135.732079][ T7609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.401'. [ 135.926023][ T7622] netlink: 7 bytes leftover after parsing attributes in process `syz.0.409'. [ 135.940667][ T7622] netlink: 7 bytes leftover after parsing attributes in process `syz.0.409'. [ 136.166696][ T7628] netlink: 'syz.2.412': attribute type 10 has an invalid length. [ 136.186764][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 136.290876][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 136.480829][ T1466] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 136.631927][ T1466] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 136.634436][ T1466] usb 5-1: config 0 has no interface number 0 [ 136.636420][ T1466] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 136.640355][ T1466] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 136.644424][ T1466] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 136.651262][ T1466] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 136.653983][ T1466] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 136.656409][ T1466] usb 5-1: Product: syz [ 136.657691][ T1466] usb 5-1: SerialNumber: syz [ 136.661354][ T1466] usb 5-1: config 0 descriptor?? [ 136.666901][ T1466] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 136.671941][ T1466] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input27 [ 137.340632][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 137.754100][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.760217][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.899709][ T7646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.370632][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 138.890699][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 139.063269][ T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 139.065990][ T10] usb 6-1: config 0 has no interface number 0 [ 139.067970][ T10] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 139.071701][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 139.075365][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 139.081102][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 139.084877][ T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 139.088312][ T10] usb 6-1: Product: syz [ 139.090166][ T10] usb 6-1: SerialNumber: syz [ 139.094499][ T10] usb 6-1: config 0 descriptor?? [ 139.099477][ T10] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 139.103918][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input28 [ 139.410709][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 139.528935][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.529558][ T53] usb 5-1: USB disconnect, device number 13 [ 139.531442][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 139.545488][ T53] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 139.820001][ T7667] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 139.900172][ T7667] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 139.901576][ T7667] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 139.947302][ T7672] gretap1: entered promiscuous mode [ 139.952260][ T7672] bond2: (slave gretap1): making interface the new active one [ 139.955498][ T7672] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 139.972203][ T7672] macvlan2: entered promiscuous mode [ 139.976222][ T7672] macvlan2: entered allmulticast mode [ 139.979568][ T7672] bond2: entered promiscuous mode [ 139.984556][ T7672] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 139.999783][ T7672] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 140.008371][ T7672] bond2: left promiscuous mode [ 140.120539][ T7677] netlink: 'syz.2.424': attribute type 5 has an invalid length. [ 140.123260][ T7677] netlink: 'syz.2.424': attribute type 7 has an invalid length. [ 140.450640][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 140.740828][ T53] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 140.905505][ T53] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 140.908529][ T53] usb 5-1: config 0 has no interface number 0 [ 140.912758][ T53] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 140.917045][ T53] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 140.920838][ T53] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 140.926571][ T53] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 140.929911][ T53] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 140.941115][ T53] usb 5-1: Product: syz [ 140.942549][ T53] usb 5-1: SerialNumber: syz [ 140.956636][ T53] usb 5-1: config 0 descriptor?? [ 140.961799][ T53] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 140.965934][ T53] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input29 [ 141.049642][ T1136] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.130271][ T1136] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.198810][ T1136] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.282051][ T1136] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.490664][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 141.520409][ T5986] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.525695][ T5986] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.529310][ T5986] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.533837][ T5986] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.537126][ T5986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.550021][ T5984] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.550161][ T1136] team0: left allmulticast mode [ 141.555115][ T5984] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.558510][ T5984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.560291][ T1136] team_slave_1: left allmulticast mode [ 141.566699][ T5984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.572078][ T5984] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.580354][ T1136] bridge0: port 3(team0) entered disabled state [ 141.609395][ T1136] bridge_slave_1: left allmulticast mode [ 141.612669][ T1136] bridge_slave_1: left promiscuous mode [ 141.615248][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.631636][ T1136] bridge_slave_0: left allmulticast mode [ 141.634001][ T1136] bridge_slave_0: left promiscuous mode [ 141.636549][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.958658][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 141.960857][ T53] usb 6-1: USB disconnect, device number 9 [ 141.960923][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 142.136450][ T53] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 142.290814][ T7720] autofs: Unknown parameter 'ZùqDõâÚCé7DìÛ&C$§”뙾‡4ã_É4DY!˜Ièu•²&¢}Æ‹žm{DL•"fa&Ñ]‘»¢J‡¨A' [ 142.480091][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.486498][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.491649][ T1136] bond0 (unregistering): Released all slaves [ 142.540613][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 142.568773][ T1136] bond1 (unregistering): (slave veth3): Releasing active interface [ 142.571103][ T7726] trusted_key: syz.2.438 sent an empty control message without MSG_MORE. [ 142.576160][ T1136] bond1 (unregistering): Released all slaves [ 142.720096][ T7694] lo speed is unknown, defaulting to 1000 [ 142.749122][ T1136] : left promiscuous mode [ 142.857864][ T1136] tipc: Left network mode [ 143.082119][ T7694] chnl_net:caif_netlink_parms(): no params data found [ 143.314836][ T7694] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.318146][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.332158][ T7694] bridge_slave_0: entered allmulticast mode [ 143.335858][ T7694] bridge_slave_0: entered promiscuous mode [ 143.344610][ T1136] hsr_slave_0: left promiscuous mode [ 143.347220][ T1136] hsr_slave_1: left promiscuous mode [ 143.349296][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.352278][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.355299][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.357688][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.384584][ T1136] veth1_macvtap: left promiscuous mode [ 143.386849][ T1136] veth0_macvtap: left promiscuous mode [ 143.388847][ T1136] veth1_vlan: left promiscuous mode [ 143.390973][ T1136] veth0_vlan: left promiscuous mode [ 143.571207][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 143.651843][ T5986] Bluetooth: hci3: command tx timeout [ 143.785857][ T7755] omfs: Invalid superblock (0) [ 143.880822][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 143.880953][ T1017] usb 5-1: USB disconnect, device number 14 [ 143.882763][ C3] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 144.610663][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 144.652669][ T1017] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 145.023149][ T1136] team_slave_1 (unregistering): left promiscuous mode [ 145.026210][ T1136] team0 (unregistering): Port device team_slave_1 removed [ 145.134625][ T7775] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 145.546509][ T7694] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.549656][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.553023][ T7694] bridge_slave_1: entered allmulticast mode [ 145.556902][ T7694] bridge_slave_1: entered promiscuous mode [ 145.650789][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 145.654841][ T7694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.663423][ T7694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.740666][ T5986] Bluetooth: hci3: command tx timeout [ 145.749386][ T7694] team0: Port device team_slave_0 added [ 145.756125][ T7694] team0: Port device team_slave_1 added [ 145.811179][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.814280][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.825201][ T7694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.831647][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.834437][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.847204][ T7694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.897549][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'. [ 145.919380][ T7694] hsr_slave_0: entered promiscuous mode [ 145.923022][ T7694] hsr_slave_1: entered promiscuous mode [ 145.925467][ T7694] debugfs: 'hsr0' already exists in 'hsr' [ 145.927530][ T7694] Cannot create hsr debugfs directory [ 145.960641][ T53] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 145.982391][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 146.124423][ T53] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 146.127707][ T53] usb 6-1: config 0 has no interface number 0 [ 146.130169][ T53] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 146.135787][ T53] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 146.139716][ T53] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 146.151340][ T53] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 146.154988][ T53] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 146.162801][ T7694] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.163608][ T53] usb 6-1: Product: syz [ 146.177380][ T53] usb 6-1: SerialNumber: syz [ 146.178274][ T7694] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.181082][ T53] usb 6-1: config 0 descriptor?? [ 146.192686][ T7694] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.203713][ T7694] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.206357][ T53] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 146.209340][ T53] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input30 [ 146.285946][ T7694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.308306][ T7694] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.332562][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.335531][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.349565][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.351900][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.399733][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 146.513769][ T7694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.690735][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.895072][ T7694] veth0_vlan: entered promiscuous mode [ 146.904527][ T7694] veth1_vlan: entered promiscuous mode [ 146.921964][ T7694] veth0_macvtap: entered promiscuous mode [ 146.929463][ T7694] veth1_macvtap: entered promiscuous mode [ 146.948331][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.958381][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.966052][ T1172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.968906][ T1172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.973488][ T1172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.979814][ T1172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.017510][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.024057][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.046255][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.049318][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.450940][ T1017] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 147.602351][ T1017] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 147.605817][ T1017] usb 5-1: config 0 has no interface number 0 [ 147.608425][ T1017] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 147.613318][ T1017] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 147.617740][ T1017] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 147.623317][ T1017] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 147.627114][ T1017] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 147.630357][ T1017] usb 5-1: Product: syz [ 147.632212][ T1017] usb 5-1: SerialNumber: syz [ 147.636382][ T1017] usb 5-1: config 0 descriptor?? [ 147.641597][ T1017] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 147.647476][ T1017] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input31 [ 147.740657][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 147.810899][ T5986] Bluetooth: hci3: command tx timeout [ 147.846459][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 148.780674][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 148.886271][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 148.886431][ T1328] usb 6-1: USB disconnect, device number 10 [ 148.888463][ C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 148.911846][ T1328] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 149.410379][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 149.460656][ T3246] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 149.612988][ T3246] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 149.620764][ T3246] usb 6-1: config 0 has no interface number 0 [ 149.623137][ T3246] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 149.627505][ T3246] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 149.633374][ T3246] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 149.640323][ T3246] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 149.647736][ T3246] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 149.650336][ T3246] usb 6-1: Product: syz [ 149.652008][ T3246] usb 6-1: SerialNumber: syz [ 149.656895][ T3246] usb 6-1: config 0 descriptor?? [ 149.663698][ T3246] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 149.666889][ T3246] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input32 [ 149.810633][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 149.890729][ T5986] Bluetooth: hci3: command tx timeout [ 150.363263][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 150.363454][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 150.363628][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 150.363753][ T3246] usb 5-1: USB disconnect, device number 15 [ 150.363811][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 150.363821][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 150.365942][ T3246] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 150.842409][ T7886] 8021q: VLANs not supported on wg0 [ 150.860659][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 150.970716][ T2298] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 151.122089][ T2298] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 151.125330][ T2298] usb 9-1: config 0 has no interface number 0 [ 151.127885][ T2298] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 151.132474][ T2298] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 151.136851][ T2298] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 151.140976][ T2298] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 151.143997][ T2298] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 151.146694][ T2298] usb 9-1: Product: syz [ 151.147995][ T2298] usb 9-1: SerialNumber: syz [ 151.150877][ T2298] usb 9-1: config 0 descriptor?? [ 151.156661][ T2298] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 151.160896][ T2298] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input33 [ 151.360226][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 151.630717][ T1328] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 151.791813][ T1328] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 151.794713][ T1328] usb 5-1: config 0 has no interface number 0 [ 151.796762][ T1328] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 151.800358][ T1328] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 151.804133][ T1328] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 151.808577][ T1328] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 151.813317][ T1328] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 151.816172][ T1328] usb 5-1: Product: syz [ 151.817631][ T1328] usb 5-1: SerialNumber: syz [ 151.821927][ T1328] usb 5-1: config 0 descriptor?? [ 151.830382][ T1328] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 151.834832][ T1328] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input34 [ 151.890678][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 152.045053][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.469'. [ 152.045096][ T7899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.469'. [ 152.269634][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 152.270984][ T34] usb 6-1: USB disconnect, device number 11 [ 152.271931][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 152.303400][ T34] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 152.930739][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 153.423679][ T7916] Illegal XDP return value 2965061278 on prog (id 64) dev syz_tun, expect packet loss! [ 153.885854][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.888933][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.891071][ T6040] usb 9-1: USB disconnect, device number 2 [ 153.891857][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 153.912808][ T6040] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 153.970643][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 154.682869][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.685957][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.689066][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.692185][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.695281][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.697990][ T24] usb 5-1: USB disconnect, device number 16 [ 154.700024][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 154.700037][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 154.708084][ T24] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 154.785543][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'. [ 154.792013][ T7938] vlan2: entered promiscuous mode [ 154.838535][ T7941] netlink: 60 bytes leftover after parsing attributes in process `syz.4.480'. [ 154.841588][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.480'. [ 154.844771][ T7941] netlink: 60 bytes leftover after parsing attributes in process `syz.4.480'. [ 154.904819][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 155.010667][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 155.390669][ T6040] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 155.562646][ T6040] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 155.565280][ T6040] usb 5-1: config 0 has no interface number 0 [ 155.567989][ T6040] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 155.571841][ T6040] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 155.575247][ T6040] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 155.580200][ T6040] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 155.587769][ T6040] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 155.592234][ T6040] usb 5-1: Product: syz [ 155.593953][ T6040] usb 5-1: SerialNumber: syz [ 155.597736][ T6040] usb 5-1: config 0 descriptor?? [ 155.603073][ T6040] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 155.607745][ T6040] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input35 [ 155.821233][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 156.050736][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 157.090597][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 157.190744][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.489'. [ 157.381121][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 157.458778][ T7996] team0 (unregistering): Port device team_slave_0 removed [ 157.492066][ T7996] team0 (unregistering): Port device team_slave_1 removed [ 158.130696][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 158.707215][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 158.707440][ T29] usb 5-1: USB disconnect, device number 17 [ 158.709404][ C3] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 158.719521][ T29] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 158.786439][ T8039] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.947763][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 158.977941][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 159.170682][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 159.621495][ T8071] befs: (nbd4): No write support. Marking filesystem read-only [ 159.625217][ T8071] block nbd4: Attempted send on invalid socket [ 159.627314][ T8071] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.630145][ T8071] befs: (nbd4): unable to read superblock [ 159.840782][ T6062] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 160.011119][ T6062] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 160.014126][ T6062] usb 6-1: config 0 has no interface number 0 [ 160.016030][ T6062] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 160.019478][ T6062] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 160.031560][ T6062] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.037699][ T6062] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 160.042410][ T6062] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 160.046641][ T6062] usb 6-1: Product: syz [ 160.053540][ T6062] usb 6-1: SerialNumber: syz [ 160.066639][ T6062] usb 6-1: config 0 descriptor?? [ 160.101151][ T6062] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 160.105489][ T6062] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input36 [ 160.210648][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 160.292021][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 161.250635][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 161.819609][ T8112] syz.0.522: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 161.825846][ T8112] CPU: 1 UID: 0 PID: 8112 Comm: syz.0.522 Not tainted syzkaller #0 PREEMPT(full) [ 161.825872][ T8112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.825884][ T8112] Call Trace: [ 161.825890][ T8112] [ 161.825898][ T8112] dump_stack_lvl+0x16c/0x1f0 [ 161.825928][ T8112] warn_alloc+0x248/0x3a0 [ 161.825953][ T8112] ? __pfx_warn_alloc+0x10/0x10 [ 161.825973][ T8112] ? __pfx_stack_trace_save+0x10/0x10 [ 161.826004][ T8112] ? kasan_save_stack+0x42/0x60 [ 161.826058][ T8112] ? kasan_save_stack+0x33/0x60 [ 161.826079][ T8112] ? kasan_save_track+0x14/0x30 [ 161.826100][ T8112] ? xskq_create+0x52/0x1d0 [ 161.826119][ T8112] ? xsk_setsockopt+0x792/0x9a0 [ 161.826137][ T8112] ? do_sock_setsockopt+0xf3/0x1d0 [ 161.826169][ T8112] ? xskq_create+0xfb/0x1d0 [ 161.826190][ T8112] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 161.826219][ T8112] ? xskq_create+0xfb/0x1d0 [ 161.826245][ T8112] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 161.826273][ T8112] ? xskq_create+0xfb/0x1d0 [ 161.826292][ T8112] vmalloc_user_noprof+0x9e/0xe0 [ 161.826309][ T8112] ? xskq_create+0xfb/0x1d0 [ 161.826330][ T8112] xskq_create+0xfb/0x1d0 [ 161.826352][ T8112] xsk_setsockopt+0x792/0x9a0 [ 161.826373][ T8112] ? __pfx_xsk_setsockopt+0x10/0x10 [ 161.826391][ T8112] ? find_held_lock+0x2b/0x80 [ 161.826413][ T8112] ? aa_sock_opt_perm+0xfd/0x1c0 [ 161.826432][ T8112] ? __pfx_xsk_setsockopt+0x10/0x10 [ 161.826454][ T8112] do_sock_setsockopt+0xf3/0x1d0 [ 161.826486][ T8112] __sys_setsockopt+0x120/0x1a0 [ 161.826523][ T8112] __ia32_sys_setsockopt+0xbc/0x160 [ 161.826547][ T8112] ? lockdep_hardirqs_on+0x7c/0x110 [ 161.826571][ T8112] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 161.826597][ T8112] __do_fast_syscall_32+0x7c/0x3a0 [ 161.826621][ T8112] do_fast_syscall_32+0x32/0x80 [ 161.826644][ T8112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.826666][ T8112] RIP: 0023:0xf70de579 [ 161.826680][ T8112] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.826695][ T8112] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 161.826713][ T8112] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 161.826725][ T8112] RDX: 0000000000000002 RSI: 0000000080000900 RDI: 0000000000000004 [ 161.826736][ T8112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.826745][ T8112] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 161.826755][ T8112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.826779][ T8112] [ 161.826806][ T8112] Mem-Info: [ 161.935269][ T8112] active_anon:14527 inactive_anon:25 isolated_anon:0 [ 161.935269][ T8112] active_file:3962 inactive_file:46306 isolated_file:0 [ 161.935269][ T8112] unevictable:1768 dirty:203 writeback:0 [ 161.935269][ T8112] slab_reclaimable:7453 slab_unreclaimable:55840 [ 161.935269][ T8112] mapped:34529 shmem:9867 pagetables:1244 [ 161.935269][ T8112] sec_pagetables:298 bounce:0 [ 161.935269][ T8112] kernel_misc_reclaimable:0 [ 161.935269][ T8112] free:31852 free_pcp:13598 free_cma:0 [ 161.953663][ T8112] Node 0 active_anon:8064kB inactive_anon:0kB active_file:0kB inactive_file:14216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:9648kB dirty:16kB writeback:0kB shmem:3856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7856kB pagetables:1228kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB [ 161.966092][ T8112] Node 1 active_anon:50044kB inactive_anon:100kB active_file:15848kB inactive_file:171008kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:128468kB dirty:796kB writeback:0kB shmem:35612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6012kB pagetables:3748kB sec_pagetables:88kB all_unreclaimable? no Balloon:0kB [ 161.978539][ T8112] Node 0 DMA free:2404kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:440kB local_pcp:128kB free_cma:0kB [ 161.994670][ T8112] lowmem_reserve[]: 0 288 288 288 288 [ 161.996565][ T8112] Node 0 DMA32 free:17332kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:4096KB free_highatomic:1440KB active_anon:8064kB inactive_anon:0kB active_file:0kB inactive_file:14216kB unevictable:3536kB writepending:16kB present:1032196kB managed:295120kB mlocked:0kB bounce:0kB free_pcp:15832kB local_pcp:4032kB free_cma:0kB [ 162.006388][ T8112] lowmem_reserve[]: 0 0 0 0 0 [ 162.008904][ T8112] Node 1 DMA32 free:107672kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50032kB inactive_anon:100kB active_file:15848kB inactive_file:171008kB unevictable:3536kB writepending:796kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:38016kB local_pcp:12540kB free_cma:0kB [ 162.008961][ T8112] lowmem_reserve[]: 0 0 0 0 0 [ 162.009030][ T8112] Node 0 DMA: 33*4kB (U) 6*8kB (UE) 5*16kB (UE) 9*32kB (U) 1*64kB (E) 0*128kB 1*256kB (E) 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2404kB [ 162.009183][ T8112] Node 0 DMA32: 91*4kB (MEH) 67*8kB (UMEH) 41*16kB (UMEH) 191*32kB (UMEH) 83*64kB (UMEH) 14*128kB (UM) 4*256kB (UME) 1*512kB (M) 1*1024kB (E) 0*2048kB 0*4096kB = 17332kB [ 162.009279][ T8112] Node 1 DMA32: 116*4kB (UE) 357*8kB (UME) 736*16kB (UME) 126*32kB (UME) 62*64kB (UME) 158*128kB (UME) 43*256kB (UME) 24*512kB (ME) 4*1024kB (UM) 8*2048kB (UM) 5*4096kB (UM) = 107576kB [ 162.009418][ T8112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.009427][ T8112] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 162.009436][ T8112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.009492][ T8112] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.009502][ T8112] 60131 total pagecache pages [ 162.009507][ T8112] 0 pages in swap cache [ 162.009511][ T8112] Free swap = 124996kB [ 162.009516][ T8112] Total swap = 124996kB [ 162.009521][ T8112] 524155 pages RAM [ 162.009525][ T8112] 0 pages HighMem/MovableOnly [ 162.009529][ T8112] 209480 pages reserved [ 162.009533][ T8112] 0 pages cma reserved [ 162.290710][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 162.922465][ T8114] uprobe: syz.0.523:8114 failed to unregister, leaking uprobe [ 163.057091][ T8123] tmpfs: Unknown parameter 'mpoñ'ÁË¡Á+¨’á‚Æ [ 163.057091][ T8123] l' [ 163.093852][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 163.094218][ T1017] usb 6-1: USB disconnect, device number 12 [ 163.096537][ C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 163.115603][ T1017] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 163.330632][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 163.762557][ T8146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.532'. [ 164.380638][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 164.500696][ T2298] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 164.671973][ T2298] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 164.675446][ T2298] usb 5-1: config 0 has no interface number 0 [ 164.678004][ T2298] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 164.683137][ T2298] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 164.687598][ T2298] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 164.693933][ T2298] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 164.697481][ T2298] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 164.701088][ T2298] usb 5-1: Product: syz [ 164.702801][ T2298] usb 5-1: SerialNumber: syz [ 164.706738][ T2298] usb 5-1: config 0 descriptor?? [ 164.970693][ T2298] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 164.975100][ T2298] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input37 [ 164.979751][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 165.206157][ T8169] netlink: 'syz.4.537': attribute type 10 has an invalid length. [ 165.410632][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 165.457560][ T8174] sctp: [Deprecated]: syz.1.539 (pid 8174) Use of int in max_burst socket option deprecated. [ 165.457560][ T8174] Use struct sctp_assoc_value instead [ 166.460611][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 166.814211][ T8218] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.311193][ T8221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.390189][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.392621][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.395052][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.397950][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.400695][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.403067][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.405404][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.407751][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.410087][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.413419][ T2298] usb 5-1: USB disconnect, device number 18 [ 167.415353][ C3] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 167.428069][ T2298] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 167.490627][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 167.501604][ T8224] comedi comedi3: pcl818: I/O port conflict (0x4f23,16) [ 167.617825][ T8237] (unnamed net_device) (uninitialized): (slave batadv0): Device is not bonding slave [ 167.621029][ T8237] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv0) [ 167.711140][ T8248] netlink: 'syz.2.556': attribute type 10 has an invalid length. [ 167.910894][ T1328] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 168.084263][ T1328] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 168.087669][ T1328] usb 6-1: config 0 has no interface number 0 [ 168.090347][ T1328] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 168.095530][ T1328] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 168.100066][ T1328] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 168.108719][ T1328] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 168.112554][ T1328] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 168.115722][ T1328] usb 6-1: Product: syz [ 168.117550][ T1328] usb 6-1: SerialNumber: syz [ 168.122198][ T1328] usb 6-1: config 0 descriptor?? [ 168.127330][ T1328] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 168.132703][ T1328] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input38 [ 168.137773][ T8259] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 168.329795][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 168.540676][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 169.471975][ T8294] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.570643][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 169.750976][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 169.950688][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 170.620613][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 170.855105][ T8324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.927565][ C2] cm109_urb_ctl_callback: 7 callbacks suppressed [ 170.927579][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.927853][ T1017] usb 6-1: USB disconnect, device number 13 [ 170.929603][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 170.962762][ T1017] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 171.066967][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.070315][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.082000][ T8335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.650677][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 171.762872][ T8351] netlink: 'syz.2.587': attribute type 4 has an invalid length. [ 171.914529][ T8360] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.980618][ T6062] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 172.161837][ T6062] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 172.164261][ T6062] usb 9-1: config 0 has no interface number 0 [ 172.166061][ T6062] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 172.169250][ T6062] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 172.173341][ T6062] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 172.178108][ T6062] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 172.180698][ T6062] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 172.183080][ T6062] usb 9-1: Product: syz [ 172.184312][ T6062] usb 9-1: SerialNumber: syz [ 172.187423][ T6062] usb 9-1: config 0 descriptor?? [ 172.191733][ T6062] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 172.194877][ T6062] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input39 [ 172.227201][ T40] audit: type=1326 audit(1756887893.881:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.233966][ T40] audit: type=1326 audit(1756887893.881:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.240532][ T40] audit: type=1326 audit(1756887893.881:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.591" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.248162][ T40] audit: type=1326 audit(1756887893.881:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.255115][ T40] audit: type=1326 audit(1756887893.891:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.591" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.262983][ T40] audit: type=1326 audit(1756887893.891:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.269777][ T40] audit: type=1326 audit(1756887893.891:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.276436][ T40] audit: type=1326 audit(1756887893.891:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.591" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.283054][ T40] audit: type=1326 audit(1756887893.891:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.290002][ T40] audit: type=1326 audit(1756887893.891:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.591" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 172.394012][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 172.474143][ T8368] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 172.476217][ T8368] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 172.479142][ T8368] vhci_hcd vhci_hcd.0: Device attached [ 172.486624][ T8368] futex_wake_op: syz.0.591 tries to shift op by 144; fix this program [ 172.690707][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 172.761002][ T6062] usb 38-1: SetAddress Request (2) to port 0 [ 172.802871][ T8382] FAULT_INJECTION: forcing a failure. [ 172.802871][ T8382] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 172.807536][ T8382] CPU: 0 UID: 0 PID: 8382 Comm: syz.1.592 Not tainted syzkaller #0 PREEMPT(full) [ 172.807551][ T8382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.807558][ T8382] Call Trace: [ 172.807562][ T8382] [ 172.807566][ T8382] dump_stack_lvl+0x16c/0x1f0 [ 172.807584][ T8382] should_fail_ex+0x512/0x640 [ 172.807603][ T8382] _copy_from_iter+0x29f/0x1720 [ 172.807622][ T8382] ? __asan_memset+0x23/0x50 [ 172.807635][ T8382] ? __pfx__copy_from_iter+0x10/0x10 [ 172.807652][ T8382] ? __alloc_skb+0x200/0x380 [ 172.807670][ T8382] ? __pfx___alloc_skb+0x10/0x10 [ 172.807683][ T8382] ? __pfx___mutex_lock+0x10/0x10 [ 172.807702][ T8382] skb_copy_datagram_from_iter+0x124/0x740 [ 172.807721][ T8382] tun_get_user+0x185c/0x3ce0 [ 172.807739][ T8382] ? __pfx_tun_get_user+0x10/0x10 [ 172.807751][ T8382] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 172.807772][ T8382] ? find_held_lock+0x2b/0x80 [ 172.807784][ T8382] ? tun_get+0x191/0x370 [ 172.807804][ T8382] tun_chr_write_iter+0xdc/0x210 [ 172.807817][ T8382] vfs_write+0x7d3/0x11d0 [ 172.807830][ T8382] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 172.807843][ T8382] ? __pfx_vfs_write+0x10/0x10 [ 172.807855][ T8382] ? find_held_lock+0x2b/0x80 [ 172.807874][ T8382] ksys_write+0x12a/0x250 [ 172.807886][ T8382] ? __pfx_ksys_write+0x10/0x10 [ 172.807900][ T8382] ? rcu_is_watching+0x12/0xc0 [ 172.807914][ T8382] __do_fast_syscall_32+0x7c/0x3a0 [ 172.807931][ T8382] do_fast_syscall_32+0x32/0x80 [ 172.807946][ T8382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.807960][ T8382] RIP: 0023:0xf701e579 [ 172.807969][ T8382] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 172.807980][ T8382] RSP: 002b:00000000f53ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 172.807990][ T8382] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 172.807997][ T8382] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 172.808004][ T8382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.808010][ T8382] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 172.808016][ T8382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.808029][ T8382] [ 173.266608][ T6062] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 173.641158][ T8369] vhci_hcd: connection closed [ 173.644336][ T1172] vhci_hcd: stop threads [ 173.648452][ T1172] vhci_hcd: release socket [ 173.651784][ T1172] vhci_hcd: disconnect device [ 173.660624][ T6062] usb 38-1: enqueue for inactive port 0 [ 173.730662][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 173.880234][ T8400] netlink: 'syz.1.594': attribute type 5 has an invalid length. [ 173.883643][ T8400] netlink: 'syz.1.594': attribute type 7 has an invalid length. [ 173.895390][ T8400] : entered promiscuous mode [ 174.083944][ T6062] usb usb38-port1: attempt power cycle [ 174.727485][ T6062] usb usb38-port1: unable to enumerate USB device [ 174.770602][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 174.921080][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 175.224620][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.227577][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.229902][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.232318][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.234698][ T34] usb 9-1: USB disconnect, device number 3 [ 175.237108][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.239279][ C3] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 175.243541][ T34] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 175.324231][ T8421] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.668408][ T8437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.605'. [ 175.810632][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 176.630703][ T1328] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 176.781867][ T1328] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 176.785289][ T1328] usb 9-1: config 0 has no interface number 0 [ 176.787671][ T1328] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 176.788497][ T8461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.796971][ T1328] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.801940][ T1328] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 176.807863][ T1328] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 176.811674][ T1328] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 176.814825][ T1328] usb 9-1: Product: syz [ 176.816573][ T1328] usb 9-1: SerialNumber: syz [ 176.820799][ T1328] usb 9-1: config 0 descriptor?? [ 176.824792][ T1328] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 176.829635][ T1328] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input40 [ 176.850619][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 177.027004][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 177.753674][ T8472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.614'. [ 177.890637][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 178.700749][ T6062] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 178.872705][ T6062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.872727][ T6062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.872740][ T6062] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.872762][ T6062] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.872775][ T6062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.877770][ T6062] usb 5-1: config 0 descriptor?? [ 178.899384][ T8494] lo speed is unknown, defaulting to 1000 [ 178.899433][ T8494] lo speed is unknown, defaulting to 1000 [ 178.900034][ T8494] lo speed is unknown, defaulting to 1000 [ 178.903472][ T8494] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.908270][ T8494] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 178.921458][ T8494] lo speed is unknown, defaulting to 1000 [ 178.942442][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 178.952676][ T8494] lo speed is unknown, defaulting to 1000 [ 178.953723][ T8494] lo speed is unknown, defaulting to 1000 [ 178.954825][ T8494] lo speed is unknown, defaulting to 1000 [ 179.295461][ T8489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.298362][ T8489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.311766][ T8489] syz0: rxe_newlink: already configured on lo [ 179.322765][ T6062] usbhid 5-1:0.0: can't add hid device: -71 [ 179.324748][ T6062] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 179.332521][ T6062] usb 5-1: USB disconnect, device number 19 [ 179.561677][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.562454][ T1466] usb 9-1: USB disconnect, device number 4 [ 179.564699][ C3] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 179.619758][ T1466] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 179.663913][ T8505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.970651][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 180.943924][ T8530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.010729][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 181.248119][ T8538] 9pnet_virtio: no channels available for device € [ 181.661328][ T8544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.800771][ T24] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 181.811637][ T8547] netlink: 7 bytes leftover after parsing attributes in process `syz.2.635'. [ 181.815851][ T8547] netlink: 7 bytes leftover after parsing attributes in process `syz.2.635'. [ 181.831810][ T6040] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 181.983055][ T6040] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 181.985682][ T6040] usb 6-1: config 0 has no interface number 0 [ 181.987694][ T6040] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 181.991447][ T6040] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 181.994931][ T6040] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 181.999243][ T6040] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 182.002633][ T6040] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 182.005223][ T6040] usb 6-1: Product: syz [ 182.006844][ T6040] usb 6-1: SerialNumber: syz [ 182.009948][ T6040] usb 6-1: config 0 descriptor?? [ 182.015090][ T6040] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 182.018610][ T6040] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input41 [ 182.024769][ T24] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 182.050605][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 182.090654][ T24] usb 9-1: config 0 has no interface number 0 [ 182.093617][ T24] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 182.097393][ T24] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 182.103155][ T24] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 182.114785][ T24] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 182.117668][ T24] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 182.120226][ T24] usb 9-1: Product: syz [ 182.125841][ T24] usb 9-1: SerialNumber: syz [ 182.160099][ T24] usb 9-1: config 0 descriptor?? [ 182.184296][ T24] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 182.216728][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 182.218767][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input42 [ 182.413547][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 183.090610][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 183.124750][ T8572] netlink: 'syz.0.641': attribute type 2 has an invalid length. [ 183.127212][ T8572] netlink: 'syz.0.641': attribute type 11 has an invalid length. [ 183.129603][ T8572] netlink: 132 bytes leftover after parsing attributes in process `syz.0.641'. [ 184.130660][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 184.680073][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.682490][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.684813][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.687188][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.689683][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.691991][ T1017] usb 9-1: USB disconnect, device number 5 [ 184.700726][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.702967][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 184.742030][ T1017] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 184.798917][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.801424][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.804525][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.807589][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.816552][ T6062] usb 6-1: USB disconnect, device number 14 [ 184.816556][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 184.836961][ T6062] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 185.049794][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.651'. [ 185.051383][ T8606] @ÿ: renamed from veth0_vlan (while UP) [ 185.170661][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 185.226226][ T8616] netlink: 60 bytes leftover after parsing attributes in process `syz.1.653'. [ 185.231570][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.653'. [ 185.234420][ T8616] netlink: 60 bytes leftover after parsing attributes in process `syz.1.653'. [ 185.244429][ T5979] udevd[5979]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 185.334181][ T8619] cgroup: fork rejected by pids controller in /syz1 [ 185.680709][ T1328] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 185.717520][ T8757] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.832364][ T1328] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 185.835791][ T1328] usb 6-1: config 0 has no interface number 0 [ 185.838398][ T1328] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 185.843444][ T1328] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 185.848055][ T1328] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 185.855140][ T1328] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 185.858992][ T1328] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 185.862526][ T1328] usb 6-1: Product: syz [ 185.864340][ T1328] usb 6-1: SerialNumber: syz [ 185.868496][ T1328] usb 6-1: config 0 descriptor?? [ 185.869249][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.658'. [ 185.874846][ T1328] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 185.880857][ T34] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 185.881325][ T1328] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input43 [ 185.918028][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 185.955253][ T8768] netlink: 56 bytes leftover after parsing attributes in process `syz.2.660'. [ 186.036143][ T34] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 186.050935][ T34] usb 9-1: config 0 has no interface number 0 [ 186.056589][ T34] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 186.063980][ T34] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.070941][ T34] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.079396][ T34] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 186.085696][ T34] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 186.086188][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 186.090134][ T34] usb 9-1: Product: syz [ 186.096502][ T34] usb 9-1: SerialNumber: syz [ 186.107275][ T34] usb 9-1: config 0 descriptor?? [ 186.116300][ T34] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 186.124878][ T34] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input44 [ 186.220684][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 186.337097][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 187.034915][ T8789] could not open pipe file descriptor [ 187.260657][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 187.506858][ T5986] Bluetooth: hci3: link tx timeout [ 187.507033][ T5986] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.290672][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 188.780988][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.822449][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.840567][ C1] hrtimer: interrupt took 63461584 ns [ 188.905088][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.931630][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.998359][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.332969][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 189.343586][ T1017] usb 6-1: USB disconnect, device number 15 [ 189.343704][ C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 189.381370][ T1017] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 189.545891][ T2298] usb 9-1: USB disconnect, device number 6 [ 189.548717][ C3] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 189.571441][ T5986] Bluetooth: hci3: command 0x0406 tx timeout [ 189.572280][ T2298] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 189.649908][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 189.738176][ T8825] team0 (unregistering): Port device team_slave_0 removed [ 189.744880][ T8825] team0 (unregistering): Port device team_slave_1 removed [ 189.868858][ T8833] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.370710][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 190.707516][ T8849] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.010708][ T24] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 191.172697][ T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 191.175321][ T24] usb 5-1: config 0 has no interface number 0 [ 191.177356][ T24] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 191.183013][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.186505][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.189228][ T8863] netlink: 32 bytes leftover after parsing attributes in process `syz.4.684'. [ 191.191819][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 191.197684][ T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 191.201316][ T24] usb 5-1: Product: syz [ 191.203014][ T24] usb 5-1: SerialNumber: syz [ 191.206986][ T24] usb 5-1: config 0 descriptor?? [ 191.215893][ T24] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 191.220706][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input45 [ 191.414698][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 191.420705][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 192.450653][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 192.579891][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'. [ 193.176985][ T8898] virtio-fs: tag not found [ 193.490660][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 193.855225][ C2] cm109_urb_ctl_callback: 39 callbacks suppressed [ 193.855242][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 193.859623][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 193.860860][ T10] usb 5-1: USB disconnect, device number 20 [ 193.861841][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 193.869399][ T10] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 193.999344][ T8937] befs: (nbd0): No write support. Marking filesystem read-only [ 194.002857][ T8937] block nbd0: Attempted send on invalid socket [ 194.006574][ T8937] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.009845][ T8937] befs: (nbd0): unable to read superblock [ 194.287644][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 194.292956][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'. [ 194.340691][ T6040] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 194.469696][ T8942] netlink: 60 bytes leftover after parsing attributes in process `syz.1.711'. [ 194.491825][ T6040] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 194.494349][ T6040] usb 9-1: config 0 has no interface number 0 [ 194.496326][ T6040] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 194.499973][ T6040] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 194.504492][ T6040] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 194.511459][ T6040] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 194.514431][ T6040] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 194.517100][ T6040] usb 9-1: Product: syz [ 194.518441][ T6040] usb 9-1: SerialNumber: syz [ 194.521746][ T6040] usb 9-1: config 0 descriptor?? [ 194.529514][ T6040] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 194.534674][ T6040] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input46 [ 194.540755][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 194.555921][ T8944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.753811][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 194.879371][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.885629][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.580753][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 196.354389][ T8983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.620715][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 197.224750][ T8994] IPVS: set_ctl: invalid protocol: 232 100.1.1.2:20001 [ 197.262869][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.263066][ T6061] usb 9-1: USB disconnect, device number 7 [ 197.265090][ C2] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 197.272776][ T6061] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 197.346697][ T9002] dummy0: entered promiscuous mode [ 197.352829][ T9002] bond0: entered promiscuous mode [ 197.355228][ T9002] bond_slave_0: entered promiscuous mode [ 197.358051][ T9002] bond_slave_1: entered promiscuous mode [ 197.363581][ T9002] hsr1: entered allmulticast mode [ 197.365630][ T9002] dummy0: entered allmulticast mode [ 197.367715][ T9002] bond0: entered allmulticast mode [ 197.369638][ T9002] bond_slave_0: entered allmulticast mode [ 197.372009][ T9002] bond_slave_1: entered allmulticast mode [ 197.393628][ T8998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.724'. [ 197.650719][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 197.798581][ T9007] evm: overlay not supported [ 198.690754][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 199.173354][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.175422][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.179557][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 199.179566][ T40] audit: type=1326 audit(1756887920.831:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.1.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 199.188460][ T40] audit: type=1326 audit(1756887920.841:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.1.734" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 199.195179][ T40] audit: type=1326 audit(1756887920.841:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.1.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 199.204421][ T40] audit: type=1326 audit(1756887920.841:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.1.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 199.211900][ T40] audit: type=1326 audit(1756887920.841:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.1.734" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 199.218500][ T40] audit: type=1326 audit(1756887920.841:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.1.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 199.225453][ T40] audit: type=1326 audit(1756887920.861:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.1.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 199.232046][ T40] audit: type=1326 audit(1756887920.861:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.1.734" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 199.238593][ T40] audit: type=1326 audit(1756887920.861:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.1.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 199.245399][ T40] audit: type=1326 audit(1756887920.861:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.1.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 199.300767][ T6061] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 199.424446][ T9039] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 199.426522][ T9039] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.429811][ T9039] vhci_hcd vhci_hcd.0: Device attached [ 199.457086][ T6061] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 199.459706][ T6061] usb 5-1: config 0 has no interface number 0 [ 199.462042][ T6061] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 199.465788][ T6061] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 199.469319][ T6061] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 199.473876][ T6061] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 199.476778][ T6061] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 199.479392][ T6061] usb 5-1: Product: syz [ 199.480860][ T6061] usb 5-1: SerialNumber: syz [ 199.483955][ T6061] usb 5-1: config 0 descriptor?? [ 199.487327][ T6061] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 199.490552][ T6061] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input47 [ 199.660667][ T3246] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 199.688946][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 199.730800][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 200.020493][ T9040] vhci_hcd: connection reset by peer [ 200.029826][ T61] vhci_hcd: stop threads [ 200.032058][ T61] vhci_hcd: release socket [ 200.037161][ T61] vhci_hcd: disconnect device [ 200.780640][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 201.564573][ T54] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 201.722005][ T54] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 201.724536][ T54] usb 6-1: config 0 has no interface number 0 [ 201.726457][ T54] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 201.729937][ T54] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 201.733814][ T54] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 201.738395][ T54] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 201.741650][ T54] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 201.744337][ T54] usb 6-1: Product: syz [ 201.745779][ T54] usb 6-1: SerialNumber: syz [ 201.749940][ T54] usb 6-1: config 0 descriptor?? [ 201.755428][ T54] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 201.759208][ T54] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input48 [ 201.811274][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 201.956735][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 202.180355][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 202.182762][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 202.185084][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 202.187502][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 202.189780][ T34] usb 5-1: USB disconnect, device number 21 [ 202.189872][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 202.189882][ C3] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 202.226478][ T34] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 202.850801][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.081728][ T1116] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 203.084908][ T1116] sr 2:0:0:0: [sr0] tag#22 Sense Key : Illegal Request [current] [ 203.087582][ T1116] sr 2:0:0:0: [sr0] tag#22 Add. Sense: Invalid command operation code [ 203.090796][ T1116] sr 2:0:0:0: [sr0] tag#22 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 203.093612][ T1116] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 2 [ 203.097004][ T1116] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 203.099654][ T1116] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 203.150068][ T9105] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 203.179102][ T9105] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 203.187374][ T9105] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 203.236331][ T9109] macvlan2: entered promiscuous mode [ 203.238066][ T9109] macvlan2: entered allmulticast mode [ 203.240246][ T9109] bond4: entered promiscuous mode [ 203.243739][ T9109] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.249747][ T9109] bond4: left promiscuous mode [ 203.659226][ T9130] netlink: 'syz.4.758': attribute type 10 has an invalid length. [ 203.890771][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 204.163344][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.313261][ T9138] sp0: Synchronizing with TNC [ 204.463814][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 204.464384][ T1466] usb 6-1: USB disconnect, device number 16 [ 204.466042][ C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 204.480864][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 204.493950][ T1466] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 204.720715][ T6062] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 204.760667][ T3246] vhci_hcd: vhci_device speed not set [ 204.874290][ T6062] usb 9-1: unable to get BOS descriptor or descriptor too short [ 204.878248][ T6062] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 204.880727][ T6062] usb 9-1: can't read configurations, error -71 [ 204.940786][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 205.280029][ T9168] netlink: 7 bytes leftover after parsing attributes in process `syz.0.766'. [ 205.283966][ T9168] netlink: 7 bytes leftover after parsing attributes in process `syz.0.766'. [ 205.336406][ T9172] FAT-fs (nullb0): bogus number of reserved sectors [ 205.338609][ T9172] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 205.427300][ T9177] comedi comedi3: pcl818: I/O port conflict (0x4f23,16) [ 205.557086][ T9180] 9pnet_fd: Insufficient options for proto=fd [ 205.760721][ T6061] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 205.780752][ T6040] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 205.922073][ T6061] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.924603][ T6061] usb 5-1: config 0 has no interface number 0 [ 205.926559][ T6061] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 205.929826][ T6061] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 205.933157][ T6061] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 205.935970][ T6061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.939828][ T6061] usb 5-1: config 0 descriptor?? [ 205.942418][ T9181] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 205.944061][ T6040] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 205.948037][ T6040] usb 6-1: config 0 has no interface number 0 [ 205.949914][ T6061] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 205.950940][ T6040] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 205.958192][ T6040] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.961745][ T6040] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 205.966385][ T6040] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 205.970034][ T6040] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 205.970692][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 205.973156][ T6040] usb 6-1: Product: syz [ 205.976491][ T6040] usb 6-1: SerialNumber: syz [ 205.979104][ T6040] usb 6-1: config 0 descriptor?? [ 205.983595][ T6040] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 205.986945][ T6040] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input49 [ 206.184516][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 206.763253][ T9198] comedi comedi3: pcl730: I/O port conflict (0x4f27,4) [ 206.788116][ T9200] (unnamed net_device) (uninitialized): (slave batadv0): Device is not bonding slave [ 206.788132][ T9200] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv0) [ 206.835337][ T9202] netlink: 'syz.4.778': attribute type 10 has an invalid length. [ 207.010671][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 207.111059][ T13] Bluetooth: (null): Invalid header checksum [ 207.113400][ T13] Bluetooth: (null): Invalid header checksum [ 207.221055][ T1136] Bluetooth: (null): Invalid header checksum [ 207.241408][ T6062] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 207.330877][ T1136] Bluetooth: (null): Invalid header checksum [ 207.392840][ T6062] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.396043][ T6062] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.400017][ T6062] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.403013][ T6062] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.441338][ T1136] Bluetooth: (null): Invalid header checksum [ 207.551387][ T1172] Bluetooth: (null): Invalid header checksum [ 207.608707][ T6062] usb 9-1: usb_control_msg returned -32 [ 207.610510][ T6062] usbtmc 9-1:16.0: can't read capabilities [ 207.661329][ T1172] Bluetooth: (null): Invalid header checksum [ 207.771204][ T1136] Bluetooth: (null): Invalid header checksum [ 207.882515][ T13] Bluetooth: (null): Invalid header checksum [ 207.992424][ T61] Bluetooth: (null): Too short H5 packet [ 207.995140][ T61] Bluetooth: (null): Invalid header checksum [ 208.050714][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 208.100900][ T61] Bluetooth: (null): Invalid header checksum [ 208.211249][ T61] Bluetooth: (null): Invalid header checksum [ 208.321344][ T13] Bluetooth: (null): Invalid header checksum [ 208.352130][ T6061] usb 5-1: USB disconnect, device number 22 [ 208.352266][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 208.430961][ T13] Bluetooth: (null): Invalid header checksum [ 208.540954][ T1136] Bluetooth: (null): Invalid header checksum [ 208.650934][ T1136] Bluetooth: (null): Invalid header checksum [ 208.759222][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 208.759769][ T6040] usb 6-1: USB disconnect, device number 17 [ 208.761436][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 208.768080][ T1136] Bluetooth: (null): Invalid header checksum [ 208.782371][ T6040] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 208.871642][ T13] Bluetooth: (null): Invalid header checksum [ 208.970763][ T6061] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 208.980814][ T61] Bluetooth: (null): Invalid header checksum [ 209.092988][ T13] Bluetooth: (null): Invalid header checksum [ 209.100638][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 209.122042][ T6061] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 209.124704][ T6061] usb 5-1: config 0 has no interface number 0 [ 209.126722][ T6061] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 209.130463][ T6061] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 209.134094][ T6061] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 209.138961][ T6061] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 209.141959][ T6061] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 209.144462][ T6061] usb 5-1: Product: syz [ 209.145801][ T6061] usb 5-1: SerialNumber: syz [ 209.149057][ T6061] usb 5-1: config 0 descriptor?? [ 209.152523][ T6061] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 209.155491][ T6061] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input50 [ 209.202383][ T13] Bluetooth: (null): Invalid header checksum [ 209.320987][ T61] Bluetooth: (null): Invalid header checksum [ 209.354538][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 209.458399][ T61] Bluetooth: (null): Invalid header checksum [ 209.562620][ T1136] Bluetooth: (null): Invalid header checksum [ 209.686085][ T13] Bluetooth: (null): Invalid header checksum [ 209.793050][ T1172] Bluetooth: (null): Invalid header checksum [ 209.900873][ T13] Bluetooth: (null): Invalid header checksum [ 210.011376][ T61] Bluetooth: (null): Invalid header checksum [ 210.025085][ T6061] usb 9-1: USB disconnect, device number 10 [ 210.130669][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 210.457423][ T9279] netlink: 'syz.2.803': attribute type 10 has an invalid length. [ 210.462103][ T9279] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 210.517871][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.520619][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.520705][ T10] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 210.527442][ T9287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.682148][ T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 210.684706][ T10] usb 6-1: config 0 has no interface number 0 [ 210.686763][ T10] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 210.690371][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 210.694076][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 210.698860][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 210.701940][ T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 210.704537][ T10] usb 6-1: Product: syz [ 210.705965][ T10] usb 6-1: SerialNumber: syz [ 210.709068][ T10] usb 6-1: config 0 descriptor?? [ 210.713040][ T10] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 210.716322][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input51 [ 210.914734][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 211.170659][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 211.174341][ T9290] tipc: Enabling of bearer rejected, already enabled [ 211.925154][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 211.927574][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 211.927867][ T1328] usb 5-1: USB disconnect, device number 23 [ 211.929742][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 211.938572][ T1328] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 212.155367][ T9312] overlayfs: failed to clone upperpath [ 212.220604][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 212.506591][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 212.770690][ T10] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 212.922859][ T10] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 212.925423][ T10] usb 9-1: config 0 has no interface number 0 [ 212.927384][ T10] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 212.930966][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.934418][ T10] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 212.938599][ T10] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 212.942535][ T10] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 212.945112][ T10] usb 9-1: Product: syz [ 212.946477][ T10] usb 9-1: SerialNumber: syz [ 212.949227][ T10] usb 9-1: config 0 descriptor?? [ 212.952628][ T10] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 212.955787][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input52 [ 213.002910][ T9347] FAULT_INJECTION: forcing a failure. [ 213.002910][ T9347] name failslab, interval 1, probability 0, space 0, times 1 [ 213.008363][ T9347] CPU: 2 UID: 0 PID: 9347 Comm: syz.0.822 Not tainted syzkaller #0 PREEMPT(full) [ 213.008386][ T9347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.008397][ T9347] Call Trace: [ 213.008404][ T9347] [ 213.008411][ T9347] dump_stack_lvl+0x16c/0x1f0 [ 213.008440][ T9347] should_fail_ex+0x512/0x640 [ 213.008469][ T9347] should_failslab+0xc2/0x120 [ 213.008493][ T9347] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 213.008513][ T9347] ? fib_validate_source+0x12f/0x730 [ 213.008530][ T9347] ? dst_alloc+0x99/0x1a0 [ 213.008556][ T9347] dst_alloc+0x99/0x1a0 [ 213.008580][ T9347] rt_dst_alloc+0x35/0x3a0 [ 213.008608][ T9347] ip_route_input_rcu.part.0+0x5e8/0xdf0 [ 213.008632][ T9347] ? __pfx_ip_route_input_rcu.part.0+0x10/0x10 [ 213.008655][ T9347] ? __lock_acquire+0x62e/0x1ce0 [ 213.008683][ T9347] ip_route_input_noref+0x1c1/0x2e0 [ 213.008704][ T9347] ? __pfx_ip_route_input_noref+0x10/0x10 [ 213.008729][ T9347] ? nf_hook_slow_list+0x30e/0x460 [ 213.008758][ T9347] ip_rcv_finish_core+0x46f/0x22a0 [ 213.008786][ T9347] ip_list_rcv_finish+0x1b8/0x720 [ 213.008813][ T9347] ? __pfx_ip_list_rcv_finish+0x10/0x10 [ 213.008834][ T9347] ? __pfx_ip_rcv_finish+0x10/0x10 [ 213.008855][ T9347] ? ip_rcv_core+0x934/0xe80 [ 213.008880][ T9347] ip_list_rcv+0x335/0x450 [ 213.008904][ T9347] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.008927][ T9347] ? __pfx_ip_list_rcv+0x10/0x10 [ 213.008951][ T9347] ? kvm_sched_clock_read+0x11/0x20 [ 213.008978][ T9347] ? __pfx_ip_list_rcv+0x10/0x10 [ 213.009001][ T9347] __netif_receive_skb_list_core+0x752/0x950 [ 213.009025][ T9347] ? find_held_lock+0x2b/0x80 [ 213.009046][ T9347] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 213.009069][ T9347] ? lock_acquire+0x179/0x350 [ 213.009095][ T9347] ? do_csum+0x26f/0x2d0 [ 213.009117][ T9347] netif_receive_skb_list_internal+0x752/0xdb0 [ 213.009145][ T9347] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 213.009178][ T9347] ? __pfx_eth_type_trans+0x10/0x10 [ 213.009208][ T9347] napi_complete_done+0x23f/0x970 [ 213.009231][ T9347] ? __pfx_napi_complete_done+0x10/0x10 [ 213.009251][ T9347] ? napi_gro_frags+0x946/0x1210 [ 213.009279][ T9347] ? tun_get_user+0x2a82/0x3ce0 [ 213.009297][ T9347] tun_get_user+0x2a9c/0x3ce0 [ 213.009327][ T9347] ? __pfx_tun_get_user+0x10/0x10 [ 213.009347][ T9347] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 213.009382][ T9347] ? find_held_lock+0x2b/0x80 [ 213.009400][ T9347] ? tun_get+0x191/0x370 [ 213.009434][ T9347] tun_chr_write_iter+0xdc/0x210 [ 213.009455][ T9347] vfs_write+0x7d3/0x11d0 [ 213.009477][ T9347] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 213.009499][ T9347] ? __pfx_vfs_write+0x10/0x10 [ 213.009517][ T9347] ? find_held_lock+0x2b/0x80 [ 213.009553][ T9347] ksys_write+0x12a/0x250 [ 213.009594][ T9347] ? __pfx_ksys_write+0x10/0x10 [ 213.009616][ T9347] ? rcu_is_watching+0x12/0xc0 [ 213.009636][ T9347] __do_fast_syscall_32+0x7c/0x3a0 [ 213.009660][ T9347] do_fast_syscall_32+0x32/0x80 [ 213.009678][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.009692][ T9347] RIP: 0023:0xf70de579 [ 213.009700][ T9347] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 213.009711][ T9347] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 213.009722][ T9347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 213.009729][ T9347] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 213.009735][ T9347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.009742][ T9347] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 213.009748][ T9347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.009761][ T9347] [ 213.155070][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 213.250655][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.429637][ T10] usb 6-1: USB disconnect, device number 18 [ 213.475837][ T10] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 213.612870][ T9358] overlay: ./file0 is not a directory [ 213.783500][ T9368] netlink: 'syz.2.829': attribute type 5 has an invalid length. [ 213.786146][ T9368] netlink: 'syz.2.829': attribute type 7 has an invalid length. [ 214.290643][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 214.420118][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'. [ 215.198465][ T9403] lo speed is unknown, defaulting to 1000 [ 215.292537][ T9403] lo speed is unknown, defaulting to 1000 [ 215.340756][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 215.657829][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.658036][ T10] usb 9-1: USB disconnect, device number 11 [ 215.660036][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 215.676428][ T10] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 215.777351][ T9397] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 215.789147][ T9414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.839'. [ 215.851609][ T9419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.370741][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 216.420799][ T3246] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 216.571936][ T3246] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 216.574592][ T3246] usb 5-1: config 0 has no interface number 0 [ 216.576598][ T3246] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 216.580173][ T3246] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 216.583820][ T3246] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 216.588541][ T3246] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 216.591659][ T3246] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 216.594196][ T3246] usb 5-1: Product: syz [ 216.595524][ T3246] usb 5-1: SerialNumber: syz [ 216.598217][ T3246] usb 5-1: config 0 descriptor?? [ 216.602948][ T3246] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 216.605915][ T3246] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input53 [ 216.805056][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 217.347851][ T9452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.851'. [ 217.410711][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 217.616146][ T9458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 217.618467][ T9461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.621593][ T9461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.621706][ T9458] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 217.628785][ T9461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.631371][ T9461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.918059][ T9471] netlink: 256 bytes leftover after parsing attributes in process `syz.1.854'. [ 218.450789][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 218.456481][ T9491] infiniband syz1: set down [ 218.458571][ T9491] infiniband syz1: added syzkaller0 [ 218.476206][ T9491] RDS/IB: syz1: added [ 218.477537][ T9491] smc: adding ib device syz1 with port count 1 [ 218.484994][ T9491] smc: ib device syz1 port 1 has pnetid [ 218.529009][ T9501] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 218.531101][ T9501] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 218.535554][ T9501] vhci_hcd vhci_hcd.0: Device attached [ 218.802218][ T6062] usb 46-1: SetAddress Request (2) to port 0 [ 218.804171][ T6062] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 218.872357][ T12] smc: removing ib device syz1 [ 219.129884][ T9502] vhci_hcd: connection reset by peer [ 219.133635][ T1172] vhci_hcd: stop threads [ 219.135454][ T1172] vhci_hcd: release socket [ 219.136970][ T1172] vhci_hcd: disconnect device [ 219.333715][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 219.333816][ T6040] usb 5-1: USB disconnect, device number 24 [ 219.335964][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 219.344594][ T6040] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 219.490716][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 219.612149][ T9542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.800730][ T54] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 219.951814][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.955347][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.958415][ T54] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.963791][ T54] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.966681][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.973174][ T54] usb 6-1: config 0 descriptor?? [ 220.381691][ T9539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.384601][ T9539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.392924][ T9539] rdma_rxe: rxe_newlink: failed to add lo [ 220.413403][ T54] usbhid 6-1:0.0: can't add hid device: -71 [ 220.415579][ T54] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 220.419092][ T54] usb 6-1: USB disconnect, device number 19 [ 220.530698][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 221.140671][ T1328] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 221.292572][ T1328] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 221.295156][ T1328] usb 9-1: config 0 has no interface number 0 [ 221.297062][ T1328] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 221.300718][ T1328] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 221.304286][ T1328] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 221.308440][ T1328] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 221.311364][ T1328] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 221.314096][ T1328] usb 9-1: Product: syz [ 221.315459][ T1328] usb 9-1: SerialNumber: syz [ 221.318582][ T1328] usb 9-1: config 0 descriptor?? [ 221.322439][ T1328] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 221.325742][ T1328] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input54 [ 221.524455][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 221.570927][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 222.184898][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 222.185976][ T54] usb 9-1: USB disconnect, device number 12 [ 222.187123][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 222.194568][ T54] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 222.535858][ T9585] comedi comedi3: dt2801: I/O port conflict (0x4f27,2) [ 222.610789][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 223.110676][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 223.208796][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 223.239071][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880605f0400: rx timeout, send abort [ 223.244056][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880605f0400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 223.278705][ T10] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 223.282651][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 223.286824][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 223.293215][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 223.296979][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 223.300387][ T10] usb 9-1: Product: syz [ 223.305825][ T10] usb 9-1: Manufacturer: syz [ 223.307730][ T10] usb 9-1: SerialNumber: syz [ 223.312136][ T10] usb 9-1: config 0 descriptor?? [ 223.316024][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 223.318539][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 223.325808][ T10] usb 9-1: selecting invalid altsetting 0 [ 223.650681][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 223.803606][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.884'. [ 223.905406][ T6062] usb 46-1: device descriptor read/8, error -110 [ 223.921093][ T9618] comedi comedi3: c6xdigio: I/O port conflict (0x4f2b,3) [ 223.923580][ T9618] ------------[ cut here ]------------ [ 223.927921][ T9618] Unexpected driver unregister! [ 223.932708][ T9618] WARNING: CPU: 1 PID: 9618 at drivers/base/driver.c:273 driver_unregister+0x90/0xb0 [ 223.935680][ T9618] Modules linked in: [ 223.937192][ T9618] CPU: 1 UID: 0 PID: 9618 Comm: syz.0.885 Not tainted syzkaller #0 PREEMPT(full) [ 223.942332][ T9618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.945827][ T9618] RIP: 0010:driver_unregister+0x90/0xb0 [ 223.947655][ T9618] Code: 48 89 ef e8 b2 0d 4c fc 48 89 df e8 3a 93 ff ff 5b 5d e9 23 90 a6 fb e8 1e 90 a6 fb 90 48 c7 c7 00 8c 42 8c e8 71 86 65 fb 90 <0f> 0b 90 90 5b 5d e9 05 90 a6 fb e8 60 f6 0b fc eb 94 e8 59 f6 0b [ 223.954043][ T9618] RSP: 0018:ffffc9000384f770 EFLAGS: 00010282 [ 223.956023][ T9618] RAX: 0000000000000000 RBX: ffffffff901948a0 RCX: ffffffff817a02f8 [ 223.958585][ T9618] RDX: ffff88806d3b8000 RSI: ffffffff817a0305 RDI: 0000000000000001 [ 223.959250][ T6172] udevd[6172]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 223.961511][ T9618] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 223.966860][ T5979] udevd[5979]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 223.966880][ T9618] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff901947e0 [ 223.973288][ T9618] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88804473f000 [ 223.976515][ T9618] FS: 0000000000000000(0000) GS:ffff8880975c0000(0063) knlGS:00000000f548cb40 [ 223.980175][ T9618] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 223.983387][ T9618] CR2: 0000000080006680 CR3: 0000000071301000 CR4: 0000000000352ef0 [ 223.986551][ T9618] Call Trace: [ 223.987954][ T9618] [ 223.989175][ T9618] comedi_device_detach_locked+0x12c/0xa50 [ 223.991952][ T9618] comedi_device_detach+0x67/0xb0 [ 223.994068][ T9618] comedi_device_attach+0x43d/0x900 [ 223.996246][ T9618] do_devconfig_ioctl+0x1b1/0x710 [ 223.998335][ T9618] ? __mutex_lock+0x1c5/0x1060 [ 224.000319][ T9618] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 224.003066][ T9618] ? kasan_save_stack+0x42/0x60 [ 224.005133][ T9618] ? kasan_save_stack+0x33/0x60 [ 224.007219][ T9618] ? kasan_save_track+0x14/0x30 [ 224.009196][ T9618] ? kasan_save_free_info+0x3b/0x60 [ 224.011821][ T9618] ? __kasan_slab_free+0x60/0x70 [ 224.013899][ T9618] ? kfree+0x2b4/0x4d0 [ 224.015591][ T9618] ? tomoyo_path_number_perm+0x470/0x580 [ 224.017919][ T9618] comedi_unlocked_ioctl+0x165d/0x2f00 [ 224.020163][ T9618] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 224.023043][ T9618] ? kasan_quarantine_put+0x10a/0x240 [ 224.025261][ T9618] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.027422][ T9618] ? find_held_lock+0x2b/0x80 [ 224.029368][ T9618] ? tomoyo_path_number_perm+0x295/0x580 [ 224.032183][ T9618] ? tomoyo_path_number_perm+0x18d/0x580 [ 224.035034][ T9618] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.037497][ T9618] comedi_compat_ioctl+0x1d0/0x990 [ 224.039603][ T9618] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 224.042422][ T9618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.044521][ T9618] ? do_vfs_ioctl+0x128/0x14f0 [ 224.046090][ T9618] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 224.047706][ T9618] ? find_held_lock+0x2b/0x80 [ 224.049216][ T9618] ? hook_file_ioctl_common+0x145/0x410 [ 224.051538][ T9618] ? __fget_files+0x20e/0x3c0 [ 224.053164][ T9618] ? __ia32_compat_sys_openat+0x80/0x210 [ 224.054957][ T9618] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 224.056754][ T9618] __ia32_compat_sys_ioctl+0x23f/0x370 [ 224.058535][ T9618] __do_fast_syscall_32+0x7c/0x3a0 [ 224.060218][ T9618] do_fast_syscall_32+0x32/0x80 [ 224.061979][ T9618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.063878][ T9618] RIP: 0023:0xf70de579 [ 224.065195][ T9618] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 224.071662][ T9618] RSP: 002b:00000000f548c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 224.074906][ T9618] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000040946400 [ 224.077380][ T9618] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.079879][ T9618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.083190][ T9618] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 224.086274][ T9618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.088769][ T9618] [ 224.089788][ T9618] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 224.092393][ T9618] CPU: 1 UID: 0 PID: 9618 Comm: syz.0.885 Not tainted syzkaller #0 PREEMPT(full) [ 224.095400][ T9618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.098821][ T9618] Call Trace: [ 224.099903][ T9618] [ 224.100903][ T9618] dump_stack_lvl+0x3d/0x1f0 [ 224.102426][ T9618] vpanic+0x6e8/0x7a0 [ 224.103746][ T9618] ? __pfx_vpanic+0x10/0x10 [ 224.105271][ T9618] ? driver_unregister+0x90/0xb0 [ 224.106859][ T9618] panic+0xca/0xd0 [ 224.108116][ T9618] ? __pfx_panic+0x10/0x10 [ 224.109570][ T9618] ? check_panic_on_warn+0x1f/0xb0 [ 224.111300][ T9618] check_panic_on_warn+0xab/0xb0 [ 224.112874][ T9618] __warn+0xf6/0x3c0 [ 224.114151][ T9618] ? driver_unregister+0x90/0xb0 [ 224.115728][ T9618] report_bug+0x3c3/0x580 [ 224.117114][ T9618] ? driver_unregister+0x90/0xb0 [ 224.118716][ T9618] handle_bug+0x184/0x210 [ 224.120107][ T9618] exc_invalid_op+0x17/0x50 [ 224.121637][ T9618] asm_exc_invalid_op+0x1a/0x20 [ 224.123168][ T9618] RIP: 0010:driver_unregister+0x90/0xb0 [ 224.124866][ T9618] Code: 48 89 ef e8 b2 0d 4c fc 48 89 df e8 3a 93 ff ff 5b 5d e9 23 90 a6 fb e8 1e 90 a6 fb 90 48 c7 c7 00 8c 42 8c e8 71 86 65 fb 90 <0f> 0b 90 90 5b 5d e9 05 90 a6 fb e8 60 f6 0b fc eb 94 e8 59 f6 0b [ 224.130460][ T9618] RSP: 0018:ffffc9000384f770 EFLAGS: 00010282 [ 224.132444][ T9618] RAX: 0000000000000000 RBX: ffffffff901948a0 RCX: ffffffff817a02f8 [ 224.134903][ T9618] RDX: ffff88806d3b8000 RSI: ffffffff817a0305 RDI: 0000000000000001 [ 224.137348][ T9618] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 224.139818][ T9618] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff901947e0 [ 224.142419][ T9618] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88804473f000 [ 224.144899][ T9618] ? __warn_printk+0x198/0x350 [ 224.146430][ T9618] ? __warn_printk+0x1a5/0x350 [ 224.147931][ T9618] comedi_device_detach_locked+0x12c/0xa50 [ 224.149782][ T9618] comedi_device_detach+0x67/0xb0 [ 224.151410][ T9618] comedi_device_attach+0x43d/0x900 [ 224.153052][ T9618] do_devconfig_ioctl+0x1b1/0x710 [ 224.154674][ T9618] ? __mutex_lock+0x1c5/0x1060 [ 224.156209][ T9618] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 224.157924][ T9618] ? kasan_save_stack+0x42/0x60 [ 224.159415][ T9618] ? kasan_save_stack+0x33/0x60 [ 224.160985][ T9618] ? kasan_save_track+0x14/0x30 [ 224.163066][ T9618] ? kasan_save_free_info+0x3b/0x60 [ 224.165139][ T9618] ? __kasan_slab_free+0x60/0x70 [ 224.166662][ T9618] ? kfree+0x2b4/0x4d0 [ 224.167965][ T9618] ? tomoyo_path_number_perm+0x470/0x580 [ 224.169706][ T9618] comedi_unlocked_ioctl+0x165d/0x2f00 [ 224.171504][ T9618] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 224.173414][ T9618] ? kasan_quarantine_put+0x10a/0x240 [ 224.175173][ T9618] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.176869][ T9618] ? find_held_lock+0x2b/0x80 [ 224.178406][ T9618] ? tomoyo_path_number_perm+0x295/0x580 [ 224.180214][ T9618] ? tomoyo_path_number_perm+0x18d/0x580 [ 224.182041][ T9618] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.184008][ T9618] comedi_compat_ioctl+0x1d0/0x990 [ 224.185697][ T9618] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 224.187530][ T9618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.189423][ T9618] ? do_vfs_ioctl+0x128/0x14f0 [ 224.190998][ T9618] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 224.192654][ T9618] ? find_held_lock+0x2b/0x80 [ 224.194199][ T9618] ? hook_file_ioctl_common+0x145/0x410 [ 224.196042][ T9618] ? __fget_files+0x20e/0x3c0 [ 224.197596][ T9618] ? __ia32_compat_sys_openat+0x80/0x210 [ 224.199399][ T9618] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 224.201229][ T9618] __ia32_compat_sys_ioctl+0x23f/0x370 [ 224.203058][ T9618] __do_fast_syscall_32+0x7c/0x3a0 [ 224.204776][ T9618] do_fast_syscall_32+0x32/0x80 [ 224.206455][ T9618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.208537][ T9618] RIP: 0023:0xf70de579 [ 224.209897][ T9618] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 224.216155][ T9618] RSP: 002b:00000000f548c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 224.218809][ T9618] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000040946400 [ 224.221433][ T9618] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.224029][ T9618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.226622][ T9618] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 224.229178][ T9618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.231839][ T9618] [ 224.233535][ T9618] Kernel Offset: disabled [ 224.234987][ T9618] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:25:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000523fc5 RBX=0000000000000000 RCX=ffffffff8b90fbf9 RDX=0000000000000000 RSI=ffffffff8de4dc69 RDI=ffffffff8c162f00 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab9290 R15=0000000000000000 RIP=ffffffff8b90e75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080034000 CR3=0000000050726000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7404ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000044 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617a35 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc9000384f0e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000044 R14=ffffffff9b0fc6c0 R15=ffffffff856179d0 RIP=ffffffff85617a5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080006680 CR3=0000000071301000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000058f0af RBX=0000000000000002 RCX=ffffffff8b90fbf9 RDX=0000000000000000 RSI=ffffffff8de4dc69 RDI=ffffffff8c162f00 RBP=ffffed1003bdf910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801defc880 R14=ffffffff90ab9290 R15=0000000000000000 RIP=ffffffff8b90e75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056377468d000 CR3=000000006a1c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=0040 FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffff110049d280d RBX=ffff888024e94068 RCX=ffffffff8a5ce25e RDX=ffff888026032440 RSI=ffffffff8a5ce2b5 RDI=0000000000000005 RBP=ffffffff9b2a9540 RSP=ffffc90002cffdc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000003 R11=0000000000000000 R12=dffffc0000000000 R13=ffffffff9b2a9970 R14=ffff88806c6f2000 R15=ffff88806c6f2068 RIP=ffffffff8a5ce2c1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd20a2eb740 ffffffff 00c00000 GS =0000 ffff8880977c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd20a3f0700 CR3=000000006b816000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=000000000300003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd20a4bfb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000290008 0000ffff00280008 00000001001f0008 00000000003d0008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000110005 0000000200100005 0000000a000d0008 00306c7300030008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000fffe00330008 0000004400320008 0000012800040008 0000000000430005 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001001f0008 00000000003d0008 00000000001e0008 00000000001b0008 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3662203220206400 3320360a0a64205f 640a64655f202020 6565610062203120 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000