last executing test programs: 24m19.30966244s ago: executing program 32 (id=3310): socket(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') userfaultfd(0x801) fanotify_init(0x200, 0x0) memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\x9appp\xf0\n\x84\xae\n\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x1a\xcaR\xcf\xbcs\x86\xdf\xb9\xb9\x12\x8b\x04\xa3\xbd\xf2C\x93\xb8\x9a\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04(\xcc\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x3, 0x8000, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 24m11.322398954s ago: executing program 33 (id=3254): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0xc2, 0x4f, 0x19, 0x7, 0xc0, 0x9, 0xff, 0x6, 0xc, 0x0, 0x9}, {0x8, 0xa6f2, 0x6, 0xf5, 0x9, 0xff, 0x8, 0x3, 0x4, 0xc, 0x1, 0x6, 0x10005}, {0x1fb, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x1, 0x3, 0xf0c}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x0, 0x10003, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10, 0x0, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24m3.306196076s ago: executing program 34 (id=3315): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setpriority(0x1, 0x0, 0x8) 24m3.264217659s ago: executing program 35 (id=3316): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000013c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x7, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r3, 0x8, 0x3) 20m50.684731271s ago: executing program 7 (id=4060): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000022000000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x1520, 0xffffffffffffffff, 0x3}, 0x50) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 20m48.227617113s ago: executing program 7 (id=4065): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 20m48.205750546s ago: executing program 7 (id=4066): mmap(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x6a, 0x5, 0x30000000, 0x3) syz_clone(0x0, 0x0, 0xfffffffffffffdaf, 0x0, 0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000180)) write$P9_RLINK(r1, 0x0, 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x3c) r6 = syz_io_uring_setup(0x504f, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x22, &(0x7f0000000380)={0x0}, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 20m45.849040663s ago: executing program 7 (id=4072): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x800000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x20000002) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0x13c, 0x10, 0x1d4, 0x2a8, 0x2a8, 0x1d4, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x140}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2c4) r6 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x700, 0xfdef) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x80) 20m44.291130331s ago: executing program 7 (id=4075): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 20m43.814368387s ago: executing program 7 (id=4077): syz_open_dev$MSR(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) io_submit(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x3c, 0x0, @void}, 0x10) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) syz_emit_ethernet(0x1e, &(0x7f0000000200)={@link_local, @multicast, @void, {@can={0xc, {{0x4, 0x1, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "d11810f4c1963571"}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000540)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [{@seclabel}, {@context={'context', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@hash}], 0x2f}) 20m43.790791256s ago: executing program 36 (id=4077): syz_open_dev$MSR(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) io_submit(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x3c, 0x0, @void}, 0x10) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) syz_emit_ethernet(0x1e, &(0x7f0000000200)={@link_local, @multicast, @void, {@can={0xc, {{0x4, 0x1, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "d11810f4c1963571"}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000540)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [{@seclabel}, {@context={'context', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@hash}], 0x2f}) 20m20.714548083s ago: executing program 8 (id=4137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRES16, @ANYRESDEC, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x8) listen(r6, 0x80000001) syz_genetlink_get_family_id$tipc(0x0, r6) 20m19.788736534s ago: executing program 8 (id=4141): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000140)=@fd={0xfffffffe, 0xc, 0x4, 0x8, 0x401, {0x0, 0x2710}, {0x5, 0xc, 0x3, 0x1, 0x10, 0x65, "f846dd2f"}, 0x64e, 0x4, {}, 0x5}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000100000011, 0x3, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x727b, 0x0, 0x800000, 0x15b}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x80010, 0xffffffffffffffff, 0x23a78000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2, 0x8000000006, 0x0, 0xe448, 0x0, 0x0, {0x0, r6}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fchown(r9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r2, 0x26c8, 0xe00, 0x1, 0x0, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_type(r11, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r12, 0x0, 0x9) 20m17.970108561s ago: executing program 8 (id=4144): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x6, 0x0, 0x7}, 0x14, 0x0}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) 20m17.621226732s ago: executing program 8 (id=4154): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x800000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x20000002) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0x13c, 0x10, 0x1d4, 0x2a8, 0x2a8, 0x1d4, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x140}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2c4) r6 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x700, 0xfdef) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x80) 20m16.699685871s ago: executing program 8 (id=4148): socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x6, &(0x7f0000000300)=""/153) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) 20m16.3838707s ago: executing program 8 (id=4149): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x880) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r6 = dup2(r5, r5) write$tun(r6, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x46) recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) syz_io_uring_setup(0x466, &(0x7f0000000440)={0x0, 0x86ed, 0x80, 0x2, 0x804}, &(0x7f0000000280), &(0x7f0000000040)) 20m15.96902995s ago: executing program 37 (id=4149): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x880) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r6 = dup2(r5, r5) write$tun(r6, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x46) recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) syz_io_uring_setup(0x466, &(0x7f0000000440)={0x0, 0x86ed, 0x80, 0x2, 0x804}, &(0x7f0000000280), &(0x7f0000000040)) 19m49.563623922s ago: executing program 9 (id=4366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000001, 0x3032, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m49.479409095s ago: executing program 9 (id=4367): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xed6, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 19m49.342476783s ago: executing program 9 (id=4368): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000004500)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000100)='9', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1, 0x2, [0x205, 0x5]}, 0xc) 19m49.339761453s ago: executing program 9 (id=4369): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 19m49.299889183s ago: executing program 9 (id=4371): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) 19m48.743871018s ago: executing program 9 (id=4373): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0xe6e5, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xcc0}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) 19m48.743723829s ago: executing program 38 (id=4373): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0xe6e5, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xcc0}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) 19m46.891665727s ago: executing program 4 (id=4380): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x41}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x32, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x2000, 0x8, 0x2}]}]}, 0xec}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) 19m46.890637359s ago: executing program 4 (id=4381): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}}, 0x14}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x4000000000000045, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000040), &(0x7f0000000600)=[r3], &(0x7f0000000200)}) 19m46.834585485s ago: executing program 4 (id=4382): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 19m45.265306247s ago: executing program 4 (id=4398): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) 19m45.172494031s ago: executing program 4 (id=4400): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)="48ca8b9882", 0x5}], 0x1}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000027c0)=""/4096, 0x1000}], 0x1}, 0x10000) 19m45.092462486s ago: executing program 4 (id=4404): socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x6, &(0x7f0000000300)=""/153) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) 19m45.075319336s ago: executing program 39 (id=4404): socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x6, &(0x7f0000000300)=""/153) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) 19m22.803173059s ago: executing program 0 (id=4529): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000440)=""/172, 0xac, 0x0, &(0x7f0000000500)=""/84, 0x54}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000206010800007c1400000000000000000c000780080008400000002a0500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x8000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002400000000000f5"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 19m21.835330261s ago: executing program 0 (id=4531): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000380)=ANY=[@ANYBLOB="446d40285d47e6bcc8bc2b841b360f17a9c9236e7ac124337393c50d9dbb64e9368be4ee1fa43e5781b9d39f16ea98c049aafc96049c022160adefb0c2d051592286d9b5356088977b4cbc93d8438347e757d4b5e3c5a694e2a2ef9f065b7f1b06109621f7486a243d8e39a3a780b2c44abdeed7f14a1732d739155a7b", @ANYRES16=r2, @ANYBLOB="00010000000000ff"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x40000) socket(0x29, 0x5, 0x969) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x1, 0x0, 0xf}}, 0x18}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0xfe00, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="796104f5f94970d957000000fddbf471559f26fef7b776bb3ab69ac5ad1bf8b28d7a5859e721ddfdc0226f17d1c43604c1083343cac2d282d8bd0ec036245eb2b8b7029eaffda465859f3370d1b0353f769231ec8f1e22b98ba7c590007f1534489a0c7cb63dea27f7e3e1a6e209f2f07839635234e9ade5d2bd1102ff3f514df6df4edfa86f9314cc87a15586b26c11e48447f8df8acbe7228df66c1f4da12ddb61e34c39ac7f4e07d009336a"], 0x14}}, 0x40000) syz_emit_ethernet(0xf8, &(0x7f0000000780)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 19m20.914997357s ago: executing program 0 (id=4536): creat(&(0x7f0000000100)='./file0\x00', 0x9b) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r4, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x3ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x201, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101", 0x42}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) 19m19.795160754s ago: executing program 0 (id=4540): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0xa0000, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000002) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0x70) syz_open_dev$tty20(0xc, 0x4, 0x0) 19m18.853752804s ago: executing program 0 (id=4545): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, 0x0, 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xffffffffffffffbd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE, @NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0x68}, @NFTA_REJECT_TYPE, @NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0x80}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x9) bind$inet(r0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) 19m18.613741226s ago: executing program 0 (id=4546): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r1, @ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r5) 19m18.512672308s ago: executing program 40 (id=4546): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r1, @ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r5) 19m13.625638248s ago: executing program 1 (id=4558): socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) syz_usb_disconnect(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000027c0)={'ip6gre0\x00', 0x0}) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) 19m12.030827942s ago: executing program 1 (id=4565): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x70a, 0x41e3, 0x40, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x85, 0x0, &(0x7f0000005e80)) r4 = dup(r2) r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 19m11.711750221s ago: executing program 1 (id=4567): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x9, 0x2, 0xd, 0x0, 0xc3, 0x0, 0x31, 0x6, 0x6, 0x6, 0x9, 0x3, 0x0, 0x5, 0x2, 0x4, 0x4, 0x4, 0x4d, '\x00', 0x4, 0x7}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_setup(0x66ad, &(0x7f0000000140)={0x0, 0x8c63, 0x0, 0x1, 0xfffffdfc}, &(0x7f0000000040), &(0x7f0000000280)) 19m10.733276027s ago: executing program 1 (id=4572): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0xa0000, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000002) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0x70) syz_open_dev$tty20(0xc, 0x4, 0x0) 19m9.732558502s ago: executing program 1 (id=4584): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x70a, 0x41e3, 0x40, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x85, 0x0, &(0x7f0000005e80)) r4 = dup(r2) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) socket$inet6_tcp(0xa, 0x1, 0x0) 19m9.543721872s ago: executing program 1 (id=4577): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x70a, 0x41e3, 0x40, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x85, 0x0, &(0x7f0000005e80)) r4 = dup(r2) r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 19m9.365515613s ago: executing program 41 (id=4577): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x70a, 0x41e3, 0x40, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x85, 0x0, &(0x7f0000005e80)) r4 = dup(r2) r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.541951215s ago: executing program 5 (id=12051): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x7fff, @empty, 0x7}, 0x1c) 2.681364626s ago: executing program 2 (id=12061): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020}, 0x2020) 2.680946687s ago: executing program 5 (id=12062): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x69, &(0x7f0000000780)={0x0, 0xb8dc, 0x10, 0x1, 0x13d}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r4, 0xde2, 0xdb9c, 0x9, 0x0, 0x0) 2.667708684s ago: executing program 5 (id=12063): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x32d7, 0x0, 0x46, 0x0, 0x0) 1.861026685s ago: executing program 2 (id=12072): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x69, &(0x7f0000000780)={0x0, 0xb8dc, 0x10, 0x1, 0x13d}, &(0x7f00000001c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r4, 0xde2, 0xdb9c, 0x9, 0x0, 0x0) 1.831891406s ago: executing program 2 (id=12073): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000300)={0x0, 0x8, 0x7c, "dbedfa9c41670e737e138b6691bff2af53b603c97467b4af0d1c1d54f96a449f05244122e33e51e86239a9ebb6b6ac07b14fc28a506f2f6ad32687594ad3d61e1b3dee5fd91960a3167871d4d53a07cf9fbbe0b387b94db787aa9235b6d439e7af62e706944bdcc0c3b3afdc7ece5d062eaba5415693202cac9aacea"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x160, 0x80}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xb01}, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "dd01"}, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x86}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b0f2b5aa40bf85eda"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/10, 0xa}, {0x0}], 0x2) r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd00005efe0000000162e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b838570400"}, 0x80, 0x0}, 0x0) 1.783574093s ago: executing program 5 (id=12074): socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000006) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xb, 0x32, 0xffffffffffffffff, 0x40000000) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.272894915s ago: executing program 2 (id=12082): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x69, &(0x7f0000000780)={0x0, 0xb8dc, 0x10, 0x1, 0x13d}, &(0x7f00000001c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r4, 0xde2, 0xdb9c, 0x9, 0x0, 0x0) 1.27006099s ago: executing program 2 (id=12083): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x32d7, 0x0, 0x46, 0x0, 0x0) 672.280157ms ago: executing program 6 (id=12087): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x24000080) 671.880741ms ago: executing program 6 (id=12088): syz_open_dev$sg(0x0, 0xf9bb, 0x101) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r2}, [@IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) 622.861548ms ago: executing program 6 (id=12089): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000300)={0x0, 0x8, 0x7c, "dbedfa9c41670e737e138b6691bff2af53b603c97467b4af0d1c1d54f96a449f05244122e33e51e86239a9ebb6b6ac07b14fc28a506f2f6ad32687594ad3d61e1b3dee5fd91960a3167871d4d53a07cf9fbbe0b387b94db787aa9235b6d439e7af62e706944bdcc0c3b3afdc7ece5d062eaba5415693202cac9aacea"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x160, 0x80}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xb01}, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "dd01"}, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x86}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b0f2b5aa40bf85eda"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/10, 0xa}, {0x0}], 0x2) r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd00005efe0000000162e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b838570400"}, 0x80, 0x0}, 0x0) 529.000523ms ago: executing program 5 (id=12075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @empty, 0x106}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) shutdown(r0, 0x1) 513.501528ms ago: executing program 3 (id=12091): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000004c0), 0x10) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="1c9ca1fb88a402aed73a4364a5593768ae", 0x11}, {&(0x7f00000015c0)="ed463b47a5e15be18f0190e400a6cb790b1936018db66b35d292824c728b1517f91069e7ab23b1", 0x27}], 0x2}, 0x20000090) 454.524732ms ago: executing program 5 (id=12092): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0xc, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00030600"]}, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000001680)="f315", 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 453.941354ms ago: executing program 3 (id=12093): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x80000000, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"8022e64e74e6f67b82f0d8a62127912e8e0facb291d8f00126635901181631134a20c7ef49c18bc0bbece53852b95bb8302f6c2286d6b0fb5b13bbdd128c382cebf211c3853f6fb48ab335f3ac853cf7c64d4f27ece7c262cdabfa5660cde1d28dc3eab72b8cfa5b08d6129c86ca79bd9dc43c37e75246dcf04b3816fd90365c877a2c10e8ef4c444ecb4784a0afbf5e962e390bb1ad3bbce049ae51325e79f5ab8bfa80b35fff1da6833ec7fa9ebfc93da9e4b190e5e3a752eca97dc669a937e6ab654169108a38d414fb90e1b894494f314298428ef482b0ff9084c95e735b6b09ca2de115d77f6a657fb7da142c896f9dce212aa58af72879da88687ce4620501a4ba17e906a02662f902745e8ddfb50874ce099ac0fc00ed05470d176364b1f30495b4a088bdde663172734fa8107e5fc0cd4fa60869c83a6669a4ea3040dbaa38f2571543d8521e37ab5aa5be850e3ade4b9eb09e6de146aa0c8fc38fea7bb50efa589af6978ec8d970f908dc4676ea3d15b3b6ebe8ae56a6292704900e611367b278b6716b4d04279792aeb649688ac6bcb7a5e58cbab0c07c8916a7cef3bb0d6303523bad9c0ad5f3024dfbdf364792b75f0ba19d56c5b3bf645fc40061edf7e042de07fc652ec4958373d9f3af542adc030334cc63caa85c8a2628bb1d257c746b2cc57798c23e30f2799f5f392f6af7a3d0cc47299928634afd54ce987c1951989ef81b39f5c7ba4cb2a74250f15261fedf3a25396b83199151ea4b406c2e1aa3135f2a77a8d75b75ef0b25efcdb3b031d8eaed29862173e93994f8d6e6e70df79978551804744eefa635c71d4b38da513f3ea8f48853322cfe5ef1b1ee632e0fcd3eae1993d883fc91f0f2437dce252b6ce5175e7d119afcb9c3c92baf3df6716ce61b54d0dd7dda2360a4c93e26f3eaa4a1637d108966074638697f5b374cf9ae6b32dce29da73fece352c94a1bdb45d6e0fe98533562ee5e55d2f2d3ce5c301ca9c5706a1d0605414f103878eb88169e6681297616b4e1c8c1a43a33f5d99b619962066e7c5698470772696f58dbed61d8507119769e30101f22a2012a08b76c0d752cdb290d46f2504177164282fbd084a4817b5ed7448586bc3de1d30af5472e6b67d2ad120e14015970a5a6a7c7dcba4887bc4bb1c7fde1610ed25f4f64f25a9f79fad21b5e558fcc97c120c0977a92f5471cc391edf228ff4bf7f9fc7b92737e32b3af48780cb96f5623b5f01dcd3cea45d72ccdb7a36682fd3094542726b24790534728f2c0b2757edc7599ccb170b2db42c9460c42082081ab86d9d5fc971b4d7987ee2c70ced65e08d74474763c6d6ec671c42f6acaa4ccbd2fe981121c04571c1794450b9650b0249f2a633e880ab386510ea86298112a2f01f0ac7f81ee00"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 453.848222ms ago: executing program 3 (id=12094): socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000006) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xb, 0x32, 0xffffffffffffffff, 0x40000000) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 451.079678ms ago: executing program 3 (id=12095): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x80000000, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"8022e64e74e6f67b82f0d8a62127912e8e0facb291d8f00126635901181631134a20c7ef49c18bc0bbece53852b95bb8302f6c2286d6b0fb5b13bbdd128c382cebf211c3853f6fb48ab335f3ac853cf7c64d4f27ece7c262cdabfa5660cde1d28dc3eab72b8cfa5b08d6129c86ca79bd9dc43c37e75246dcf04b3816fd90365c877a2c10e8ef4c444ecb4784a0afbf5e962e390bb1ad3bbce049ae51325e79f5ab8bfa80b35fff1da6833ec7fa9ebfc93da9e4b190e5e3a752eca97dc669a937e6ab654169108a38d414fb90e1b894494f314298428ef482b0ff9084c95e735b6b09ca2de115d77f6a657fb7da142c896f9dce212aa58af72879da88687ce4620501a4ba17e906a02662f902745e8ddfb50874ce099ac0fc00ed05470d176364b1f30495b4a088bdde663172734fa8107e5fc0cd4fa60869c83a6669a4ea3040dbaa38f2571543d8521e37ab5aa5be850e3ade4b9eb09e6de146aa0c8fc38fea7bb50efa589af6978ec8d970f908dc4676ea3d15b3b6ebe8ae56a6292704900e611367b278b6716b4d04279792aeb649688ac6bcb7a5e58cbab0c07c8916a7cef3bb0d6303523bad9c0ad5f3024dfbdf364792b75f0ba19d56c5b3bf645fc40061edf7e042de07fc652ec4958373d9f3af542adc030334cc63caa85c8a2628bb1d257c746b2cc57798c23e30f2799f5f392f6af7a3d0cc47299928634afd54ce987c1951989ef81b39f5c7ba4cb2a74250f15261fedf3a25396b83199151ea4b406c2e1aa3135f2a77a8d75b75ef0b25efcdb3b031d8eaed29862173e93994f8d6e6e70df79978551804744eefa635c71d4b38da513f3ea8f48853322cfe5ef1b1ee632e0fcd3eae1993d883fc91f0f2437dce252b6ce5175e7d119afcb9c3c92baf3df6716ce61b54d0dd7dda2360a4c93e26f3eaa4a1637d108966074638697f5b374cf9ae6b32dce29da73fece352c94a1bdb45d6e0fe98533562ee5e55d2f2d3ce5c301ca9c5706a1d0605414f103878eb88169e6681297616b4e1c8c1a43a33f5d99b619962066e7c5698470772696f58dbed61d8507119769e30101f22a2012a08b76c0d752cdb290d46f2504177164282fbd084a4817b5ed7448586bc3de1d30af5472e6b67d2ad120e14015970a5a6a7c7dcba4887bc4bb1c7fde1610ed25f4f64f25a9f79fad21b5e558fcc97c120c0977a92f5471cc391edf228ff4bf7f9fc7b92737e32b3af48780cb96f5623b5f01dcd3cea45d72ccdb7a36682fd3094542726b24790534728f2c0b2757edc7599ccb170b2db42c9460c42082081ab86d9d5fc971b4d7987ee2c70ced65e08d74474763c6d6ec671c42f6acaa4ccbd2fe981121c04571c1794450b9650b0249f2a633e880ab386510ea86298112a2f01f0ac7f81ee00"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 407.414729ms ago: executing program 3 (id=12096): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009805}, 0x24000080) 406.433898ms ago: executing program 2 (id=12097): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000"], 0x0) r1 = syz_io_uring_setup(0x90e, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0xd) r3 = socket(0x26, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x730, &(0x7f0000001480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x12, 0x4, 0x0, 0x7, 0x722, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x38, 0x1, 0x2, [{@remote, 0x400}, {@loopback, 0x3}, {@broadcast, 0x800}, {@local, 0x9}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x4b, [@loopback, @multicast2]}]}}, "300ba08e8c46a2e7f8030537793ef460fc444134cecd7c1195aee5e46852ae975aeeeb523af3557c7b4644df41dd90af9455314b7a83fc7c0b8fb8e7644f867694ed19cb6a324252737aa78a569b3f827e86fd08b85a19c863c8e919d6cc837ba1d520aafe15e3db1caac3b6ede174f9cc0efd7e69cc4f40e8f2908a83f937df19eeefcdea3e6fb2a56d834566ee509c183a47f7e211455583eaff20d166e2d5482a27690a41e33fa0881eca6f33872828386c322287063617efd18ce4be64092e484a8e83223a08101e93330148793b479b0126f7c23cdf57d0f8ac6ca97e418a94538597905c23f74635c780d0e8bdd2d0207bf363964b8c6f7f5c008e18882ac20969e016a655533ef41ad241e52c62606939c5fd7ff739486f9182d1e9c7470c2fe525b1b6806132ecf485921fa213a02192d0aad551e25d3ea14af88231d656c3ac0e96c54a3d65f3d549aff7862da7bd310f1dca2e638c83c04bf71eb3dfc3fe79cd86b2206d6a00a8cb792c0d32164e1ca95d26fc27cfdda6ed837334b272d4fb044d5443e7ba8424cb435bc1001c2c3305ace81fc844f3c06feb4016222a7ed180cfe9a9341780ba8afd1315cbfa77c3ac767994a6b10767eba33ef7222e761e280f27acb7309886c20258c0bd58dd5f68224ea4c9eb47eca6c2bcea992ff782f939b2aa4d43ee22c3abfaafe7d62a84210b689498ef34a9e73b8bdf3c7d204b1131a21e8d2781d60d307f039733ce641abcf3ffeb7c05f21367827cfd4ff52bcb085442a3c436b6fd89ebf601ce68bb5c96d371ea519aef2787a2bbd82342e1e99334c8285f0159f51cb39a158052a0d044aeade40bb7e11454b02791cd354a78b104c33268c4fdff40581af720f8cc46499747cf524f69fa791087fc1d688810fed9a2436bae1e837d330889e4be4f7f01ca5fd39fa1e97351baefaf19e7976648ff5c9a6fce495cae6dbe9c2032362b99974c711e3156860e78b5ebeba476d99051963e6968f549609c0a061faddfeb77500f9f48ba1c80fae171afad26c79dd7d5f4114c31aedaf75ed524e027da933e8e36944d63bf88a68043d90f4035c5044b081db6b9a3dd6e64b417a8b043d21768b90d5fb46594723aae4ce1c2528654c5031d7eaf073b8ca2c917ff75eded07e7ab129c70a25f7ccb768b5553004cb8bacbb81f191bc00f45758bf89f364480dfc137a7bc01e80da4de5c1ee932b6779901ebd8268923f9811387fb07fb48f8a93e0ba1fa46cee8079f2627061e7efcc9f87abb46d5fc1a1c24271daf3932e550bcff820df91606af095e4d90cce6444b08c5c675eb986ad8e7966d4bf6b4307663e81d301a417a624c829a9a00bdddb905b772c6fccfb31cabcb39074dd3ff8d79651b105678bd944f7cdb1ab12c3fbb37ca236c8660dbbce18ddbe02c7486f79e38050da1991a0d81ffa3b2a7aa7de7c34e1507eebc9cbc4b3d51d2ecab3f99f1b9241ea5471b6686e38ec7d852f9c41feaa6e57768ec33f80729402a75d4f88eef656b56c9f8763cf90f816e26a0b135ef00be344e5a2bb24cb6d9750bb44d52baecc801574bee81f3ab43b067e79e6de8b87dc93267113c112b8303efaa76857df1cb39f1a5767f627d26d2049c3a4c024157f8d0b9df096e8fe362b4526eb44a15ab6d5d9fd5f4486aff99cd66ae781b00db0215caa1c58ab0ee601194f130137da78a4049916ab5ccb7c4a8b8f3a8ccac1a2f5a99945a6d7a66e04a5525895707dbc076e03a18c834c2174cada2d0e4143a94d3abc51e333b2a99b2f79f8ed76b0cdfd71bca6bfb7572467474e2910e064e695006d9a9a132dadd4041ca59e17f6b8dfc3551a837e2c7ac7dfdd5d75b22196705e4256da5906db24fa2096367a5c366714a5ee2a52df1de024ac80adb2113464e27cd9b1d21e915adb5d6468253c047dbce9d05c28dec9f7957bd6a097390a66fbb00062aa3ee16c8d0a1accc9d1e123b6c165d1ed47e0958b4ad94042df806c5946f8e7ed76a13d9eb484de872e4b6749b2f6b5ec18f301b6e1d27d464306b7da21461ede7a0441aac28e620d802c410baa8fee473e2a5d8ab95dd093a06ca83c15c1965bcc8ffbc51f7ff4ac6f3e8186139bb827398e5dd134e9f449eddd8db92046136786ef5fd9d69a253f10d519a83b5236bc40810ddfeff64544d56a54ab00361d8466c2677ebd7cbae3e218fe4b2535b443b3297bbfa4782cba77b3b4019e01de23f309bab0a763bf36b7892259a33a248c0419af10bdad386d42b23412e2bebbd855a6664f9e9010fe8c2ad615ba8cd3ecfc994939578245b8a417ce3971adb57957998de1249778f2719d7c1d641e394f17c410f8cf08b52b21487ff6e641d875ffef3dd51429df96f83c2fe3cd0699dff4691b48b21384ea7a732109f4e7c2137369be568c1d7139c6587b76b24070c3097082bb81a119f9ea1342b21f6ba296777d24f4e3013ced4"}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000680)=0x39) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 403.115609ms ago: executing program 3 (id=12098): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020}, 0x2020) 102.014877ms ago: executing program 6 (id=12099): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 99.618772ms ago: executing program 6 (id=12100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @empty, 0x106}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) shutdown(r0, 0x1) 0s ago: executing program 6 (id=12101): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) kernel console output (not intermixed with test programs): 9), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2308.194044][T11922] Workqueue: hci0 hci_rx_work [ 2308.194073][T11922] Call Trace: [ 2308.194080][T11922] [ 2308.194087][T11922] dump_stack_lvl+0x16c/0x1f0 [ 2308.194119][T11922] sysfs_warn_dup+0x7f/0xa0 [ 2308.194141][T11922] sysfs_create_dir_ns+0x24b/0x2b0 [ 2308.194167][T11922] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2308.194191][T11922] ? kobject_add_internal+0x25b/0x9b0 [ 2308.194218][T11922] ? lock_release+0x201/0x2f0 [ 2308.194245][T11922] ? do_raw_spin_unlock+0x172/0x230 [ 2308.194277][T11922] kobject_add_internal+0x2c4/0x9b0 [ 2308.194310][T11922] kobject_add+0x16e/0x240 [ 2308.194335][T11922] ? __pfx_kobject_add+0x10/0x10 [ 2308.194363][T11922] ? lock_release+0x201/0x2f0 [ 2308.194386][T11922] ? do_raw_spin_unlock+0x172/0x230 [ 2308.194418][T11922] ? kobject_put+0xab/0x5a0 [ 2308.194447][T11922] device_add+0x288/0x1aa0 [ 2308.194468][T11922] ? __pfx_dev_set_name+0x10/0x10 [ 2308.194487][T11922] ? __pfx_device_add+0x10/0x10 [ 2308.194503][T11922] ? mgmt_send_event_skb+0x2fb/0x460 [ 2308.194549][T11922] hci_conn_add_sysfs+0x17e/0x230 [ 2308.194573][T11922] le_conn_complete_evt+0x1075/0x1d70 [ 2308.194595][T11922] ? __pfx___might_resched+0x10/0x10 [ 2308.194619][T11922] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2308.194641][T11922] ? rcu_is_watching+0x12/0xc0 [ 2308.194659][T11922] ? lock_release+0x201/0x2f0 [ 2308.194687][T11922] hci_le_conn_complete_evt+0x23c/0x370 [ 2308.194708][T11922] hci_le_meta_evt+0x354/0x5e0 [ 2308.194731][T11922] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 2308.194755][T11922] hci_event_packet+0x685/0x11c0 [ 2308.194772][T11922] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2308.194792][T11922] ? __pfx_hci_event_packet+0x10/0x10 [ 2308.194812][T11922] ? kcov_remote_start+0x36a/0x6d0 [ 2308.194840][T11922] ? rcu_watching_snap_stopped_since+0x100/0x110 [ 2308.194863][T11922] ? rcu_is_watching+0x12/0xc0 [ 2308.194883][T11922] hci_rx_work+0x2c5/0x16b0 [ 2308.194904][T11922] ? rcu_is_watching+0x12/0xc0 [ 2308.194926][T11922] process_one_work+0x9cf/0x1b70 [ 2308.194958][T11922] ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10 [ 2308.194996][T11922] ? __pfx_process_one_work+0x10/0x10 [ 2308.195031][T11922] ? assign_work+0x1a0/0x250 [ 2308.195062][T11922] worker_thread+0x6c8/0xf10 [ 2308.195081][T11922] ? __pfx_worker_thread+0x10/0x10 [ 2308.195097][T11922] kthread+0x3c5/0x780 [ 2308.195124][T11922] ? __pfx_kthread+0x10/0x10 [ 2308.195152][T11922] ? ret_from_fork+0x25/0x6f0 [ 2308.195177][T11922] ? rcu_is_watching+0x12/0xc0 [ 2308.195198][T11922] ? rcu_is_watching+0x12/0xc0 [ 2308.195219][T11922] ? __pfx_kthread+0x10/0x10 [ 2308.195251][T11922] ret_from_fork+0x5d4/0x6f0 [ 2308.195277][T11922] ? __pfx_kthread+0x10/0x10 [ 2308.195306][T11922] ret_from_fork_asm+0x1a/0x30 [ 2308.195336][T11922] [ 2308.195358][T11922] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2308.355153][T11922] Bluetooth: hci0: failed to register connection device [ 2309.511380][T16566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10621'. [ 2309.719628][T16579] input: syz0 as /devices/virtual/input/input79 [ 2309.762561][T16584] netlink: 'syz.3.10629': attribute type 1 has an invalid length. [ 2309.773048][T16584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2309.783206][T16584] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10629'. [ 2309.841069][T16592] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2309.850827][T16592] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 2310.593666][T16613] fuse: Bad value for 'fd' [ 2311.224442][T16639] fuse: Bad value for 'fd' [ 2311.711392][T16648] syzkaller0: entered promiscuous mode [ 2311.713597][T16648] syzkaller0: entered allmulticast mode [ 2311.969320][T16665] fuse: Bad value for 'fd' [ 2313.615348][T16700] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 2313.617511][T16700] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2313.620116][T16700] vhci_hcd vhci_hcd.0: Device attached [ 2313.867930][ T3144] usb 47-1: new high-speed USB device number 5 using vhci_hcd [ 2314.590948][T16701] vhci_hcd: connection reset by peer [ 2314.618225][ T223] vhci_hcd: stop threads [ 2314.620262][ T223] vhci_hcd: release socket [ 2314.628544][ T223] vhci_hcd: disconnect device [ 2314.937846][ T1473] usb 11-1: new full-speed USB device number 80 using dummy_hcd [ 2315.110383][ T1473] usb 11-1: config 1 interface 0 has no altsetting 0 [ 2315.117841][ T1473] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2315.120731][ T1473] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.123307][ T1473] usb 11-1: Product: syz [ 2315.124788][ T1473] usb 11-1: Manufacturer: syz [ 2315.126335][ T1473] usb 11-1: SerialNumber: syz [ 2316.267087][T16754] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 2317.388200][T16787] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 2317.615199][ T1473] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2317.620518][ T1473] usb 11-1: USB disconnect, device number 80 [ 2317.624238][ T1473] usblp0: removed [ 2317.899209][T16802] vlan0: entered promiscuous mode [ 2317.979945][T16808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10708'. [ 2318.460507][T16819] bond1: (slave macvlan2): Releasing backup interface [ 2318.502940][T16819] team0: Mode changed to "activebackup" [ 2318.536138][T16821] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2318.539726][T16821] bond1: (slave macvlan3): Enslaving as a backup interface with a down link [ 2318.621131][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10716'. [ 2318.625061][T16827] tipc: Started in network mode [ 2318.627236][T16827] tipc: Node identity 7, cluster identity 4711 [ 2318.630711][T16827] tipc: Node number set to 7 [ 2318.988926][ T3144] vhci_hcd: vhci_device speed not set [ 2319.728633][T16852] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10724'. [ 2320.113085][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10726'. [ 2320.116771][T16856] tipc: Started in network mode [ 2320.118493][T16856] tipc: Node identity 7, cluster identity 4711 [ 2320.120593][T16856] tipc: Node number set to 7 [ 2320.164919][T16860] fuse: Bad value for 'fd' [ 2320.185518][T16862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10729'. [ 2320.678080][ T7048] Bluetooth: hci0: command 0x0406 tx timeout [ 2321.315785][T16882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10736'. [ 2321.330408][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10736'. [ 2321.395465][T16887] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 2321.553905][T16893] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10740'. [ 2323.672878][T16937] syzkaller0: entered promiscuous mode [ 2323.674682][T16937] syzkaller0: entered allmulticast mode [ 2323.900298][T16950] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10759'. [ 2323.903197][T16950] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10759'. [ 2323.906116][T16950] unsupported nlmsg_type 40 [ 2324.554083][T16948] Set syz1 is full, maxelem 65536 reached [ 2324.603845][T16962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10764'. [ 2324.708793][T16972] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2325.558863][T16989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10774'. [ 2325.629655][T17000] binder: 16997:17000 ioctl c0306201 80000680 returned -14 [ 2326.145409][T17016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10784'. [ 2326.189538][T17020] syzkaller0: entered promiscuous mode [ 2326.193014][T17020] syzkaller0: entered allmulticast mode [ 2326.242633][T11922] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 2326.361930][T17039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10795'. [ 2326.582692][T17063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10806'. [ 2326.681443][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10808'. [ 2328.472657][T17111] binder: 17110:17111 ioctl c0306201 0 returned -14 [ 2328.486387][T17113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10823'. [ 2329.324132][T17145] binder: 17144:17145 ioctl c0306201 0 returned -14 [ 2329.433239][T17155] bond1: option mode: unable to set because the bond device is up [ 2329.462218][T17162] macvlan4: entered allmulticast mode [ 2329.463999][T17162] bond0: entered allmulticast mode [ 2329.465831][T17162] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 2329.470975][T17162] bridge0: port 1(macvlan4) entered blocking state [ 2329.473244][T17162] bridge0: port 1(macvlan4) entered disabled state [ 2329.476727][T17162] macvlan4: entered promiscuous mode [ 2329.478540][T17162] bond0: entered promiscuous mode [ 2329.479639][T17164] binder: BINDER_SET_CONTEXT_MGR already set [ 2329.482484][T17164] binder: 17163:17164 ioctl 4018620d 80000100 returned -16 [ 2329.486828][T17164] binder: BINDER_SET_CONTEXT_MGR already set [ 2329.489300][T17164] binder: 17163:17164 ioctl 4018620d 800002c0 returned -16 [ 2329.665071][T17181] vlan0: entered promiscuous mode [ 2329.668719][T17182] bond1: option mode: unable to set because the bond device has slaves [ 2330.696658][T17220] hub 8-0:1.0: USB hub found [ 2330.699112][T17220] hub 8-0:1.0: 1 port detected [ 2332.451973][T17274] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2332.454797][T17274] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2332.457523][T17274] ALSA: mixer_oss: invalid OSS volume '÷uÑdFÿ¾ÞÙÙdèÚÿ³sïj@JŒ¶×uïg0ácd' [ 2332.460459][T17274] ALSA: mixer_oss: invalid OSS volume 'Óâ¯Ó÷Në—WÖ“YZ£µëS%®¢¢‡†fØèè¾V' [ 2332.462993][T17274] ALSA: mixer_oss: invalid OSS volume 'ò'ëlÈ¿D†ªTBxÝN' [ 2332.465160][T17274] ALSA: mixer_oss: invalid OSS volume 'ªày' [ 2332.467323][T17274] ALSA: mixer_oss: invalid OSS volume 'ø5y«’µ}›9´—r~¯M†¨+¨õÃÏ3óó' [ 2332.470296][T17274] ALSA: mixer_oss: invalid OSS volume '϶×Ï*kC9þ¨dË7ë¦2§;°"' [ 2332.472687][T17274] ALSA: mixer_oss: invalid OSS volume '*n’dVÅé8”mÝE¶§¤âÊ5×:êð4' [ 2332.475273][T17274] ALSA: mixer_oss: invalid OSS volume '¥çÍÊPKŒóÚµ1}Âæ {N&I„½½Ða 8*ʇ' [ 2332.477949][T17274] ALSA: mixer_oss: invalid OSS volume '€OCÔØ"¸Ê[ñƒ'måþïÕ/AÏO^ìþG&º-Û' [ 2332.480467][T17274] ALSA: mixer_oss: invalid OSS volume 'Êø§' [ 2333.304488][T17292] Set syz1 is full, maxelem 65536 reached [ 2333.843430][T17317] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2333.846104][T17317] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2333.849690][T17317] ALSA: mixer_oss: invalid OSS volume '÷uÑdFÿ¾ÞÙÙdèÚÿ³sïj@JŒ¶×uïg0ácd' [ 2333.852358][T17317] ALSA: mixer_oss: invalid OSS volume 'Óâ¯Ó÷Në—WÖ“YZ£µëS%®¢¢‡†fØèè¾V' [ 2333.854940][T17317] ALSA: mixer_oss: invalid OSS volume 'ò'ëlÈ¿D†ªTBxÝN' [ 2333.857190][T17317] ALSA: mixer_oss: invalid OSS volume 'ªày' [ 2333.859880][T17317] ALSA: mixer_oss: invalid OSS volume 'ø5y«’µ}›9´—r~¯M†¨+¨õÃÏ3óó' [ 2333.862537][T17317] ALSA: mixer_oss: invalid OSS volume '϶×Ï*kC9þ¨dË7ë¦2§;°"' [ 2333.864892][T17317] ALSA: mixer_oss: invalid OSS volume '*n’dVÅé8”mÝE¶§¤âÊ5×:êð4' [ 2333.867578][T17317] ALSA: mixer_oss: invalid OSS volume '¥çÍÊPKŒóÚµ1}Âæ {N&I„½½Ða 8*ʇ' [ 2333.870789][T17317] ALSA: mixer_oss: invalid OSS volume '€OCÔØ"¸Ê[ñƒ'måþïÕ/AÏO^ìþG&º-Û' [ 2333.873501][T17317] ALSA: mixer_oss: invalid OSS volume 'Êø§' [ 2334.961479][T17339] veth0_macvtap: left allmulticast mode [ 2334.985540][T17339] bond0: left allmulticast mode [ 2334.987736][T17339] bond0: left promiscuous mode [ 2334.991307][T15849] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.995408][T15849] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2335.000817][T15849] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2335.004606][T15849] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2336.307896][ T7330] usb 7-1: new full-speed USB device number 94 using dummy_hcd [ 2336.498474][ T7330] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2336.503136][ T7330] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2336.506858][ T7330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2336.510370][ T7330] usb 7-1: Product: syz [ 2336.512113][ T7330] usb 7-1: Manufacturer: syz [ 2336.514057][ T7330] usb 7-1: SerialNumber: syz [ 2337.122355][ T7330] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 94 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2337.426673][T17414] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2338.368538][T17433] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2338.371975][T17433] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2339.185540][T17444] kvm: pic: non byte read [ 2339.188475][T17444] kvm: pic: level sensitive irq not supported [ 2339.188751][T17444] kvm: pic: non byte read [ 2339.193227][T17444] kvm: pic: level sensitive irq not supported [ 2339.193487][T17444] kvm: pic: non byte read [ 2339.198584][T17444] kvm: pic: level sensitive irq not supported [ 2339.198895][T17444] kvm: pic: non byte read [ 2339.203592][T17444] kvm: pic: level sensitive irq not supported [ 2339.203820][T17444] kvm: pic: non byte read [ 2339.208680][T17444] kvm: pic: level sensitive irq not supported [ 2339.208960][T17444] kvm: pic: non byte read [ 2339.213491][T17444] kvm: pic: level sensitive irq not supported [ 2339.213721][T17444] kvm: pic: non byte read [ 2339.218246][T17444] kvm: pic: level sensitive irq not supported [ 2339.218489][T17444] kvm: pic: non byte read [ 2339.222799][T17444] kvm: pic: level sensitive irq not supported [ 2339.223054][T17444] kvm: pic: non byte read [ 2339.258514][T17441] Set syz1 is full, maxelem 65536 reached [ 2340.042528][T17493] syzkaller0: entered promiscuous mode [ 2340.044323][T17493] syzkaller0: entered allmulticast mode [ 2340.436721][T17508] bond1: option mode: unable to set because the bond device has slaves [ 2340.448012][T18008] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2340.556256][T17518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10984'. [ 2340.598063][T18008] usb 10-1: Using ep0 maxpacket: 16 [ 2340.602193][T18008] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2340.606906][T18008] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2340.610377][T18008] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2340.614958][T18008] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2340.619136][T18008] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2340.623833][T18008] usb 10-1: config 0 descriptor?? [ 2341.036955][T18008] HID 045e:07da: Invalid code 65791 type 1 [ 2341.045945][T18008] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:045E:07DA.0048/input/input80 [ 2341.054804][T18008] microsoft 0003:045E:07DA.0048: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2341.234245][ T841] usb 10-1: USB disconnect, device number 41 [ 2341.543246][T17535] bond1: option mode: unable to set because the bond device has slaves [ 2342.014761][T17552] geneve2: entered promiscuous mode [ 2342.227137][T17560] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10999'. [ 2342.253672][T17564] binder: BINDER_SET_CONTEXT_MGR already set [ 2342.255903][T17564] binder: 17563:17564 ioctl 4018620d 80000100 returned -16 [ 2342.261345][T17564] binder: BINDER_SET_CONTEXT_MGR already set [ 2342.263698][T17564] binder: 17563:17564 ioctl 4018620d 80004a80 returned -16 [ 2342.304955][T17565] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2342.307603][T17565] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2342.369418][T17572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11004'. [ 2342.375854][T17572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11004'. [ 2342.604728][T17585] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2342.608145][T17585] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 2342.751855][T17595] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2343.577004][T17615] bond1: option mode: unable to set because the bond device has slaves [ 2344.047900][ T7330] usb 7-1: USB disconnect, device number 94 [ 2344.053652][ T7330] usblp0: removed [ 2344.070328][T17628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11026'. [ 2344.093407][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11027'. [ 2344.099863][T17630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11027'. [ 2344.209313][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.580322][T17660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11038'. [ 2345.140923][T17675] bond1: option mode: unable to set because the bond device has slaves [ 2345.166411][T17677] binder: BINDER_SET_CONTEXT_MGR already set [ 2345.168716][T17677] binder: 17676:17677 ioctl 4018620d 80000140 returned -16 [ 2345.199211][T17679] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2345.579992][T17688] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2346.368079][ T841] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 2346.528816][ T841] usb 10-1: Using ep0 maxpacket: 32 [ 2346.533456][ T841] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2346.536727][ T841] usb 10-1: config 0 has no interface number 0 [ 2346.541595][ T841] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2346.545166][ T841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2346.548718][ T841] usb 10-1: Product: syz [ 2346.550514][ T841] usb 10-1: Manufacturer: syz [ 2346.552430][ T841] usb 10-1: SerialNumber: syz [ 2346.555411][ T841] usb 10-1: config 0 descriptor?? [ 2346.559839][ T841] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2346.563421][ T841] usb 10-1: selecting invalid altsetting 1 [ 2346.565728][ T841] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2346.570943][ T841] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2346.576078][ T841] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2346.579495][ T841] usb 10-1: media controller created [ 2346.590489][ T841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2346.644895][T17708] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 2346.647623][T17708] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2346.650995][T17708] vhci_hcd vhci_hcd.0: Device attached [ 2346.887888][ T3144] usb 49-1: new high-speed USB device number 3 using vhci_hcd [ 2347.429680][T17709] vhci_hcd: connection reset by peer [ 2347.432071][ T2812] vhci_hcd: stop threads [ 2347.433667][ T2812] vhci_hcd: release socket [ 2347.435414][ T2812] vhci_hcd: disconnect device [ 2347.640198][ T841] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2347.648037][ T841] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2347.668867][T17701] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 2347.678863][ T841] usb 10-1: USB disconnect, device number 42 [ 2348.201814][T17730] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2348.883721][T17746] macvlan4: left promiscuous mode [ 2348.886332][T17746] bridge0: port 1(macvlan4) entered disabled state [ 2349.934803][T17774] input: syz1 as /devices/virtual/input/input81 [ 2350.478689][T17781] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2351.252855][T17793] syz.5.11085: page allocation failure: order:9, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2351.257871][T17793] CPU: 2 UID: 0 PID: 17793 Comm: syz.5.11085 Not tainted syzkaller #0 PREEMPT(full) [ 2351.257898][T17793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2351.257911][T17793] Call Trace: [ 2351.257918][T17793] [ 2351.257926][T17793] dump_stack_lvl+0x16c/0x1f0 [ 2351.257955][T17793] warn_alloc+0x248/0x3a0 [ 2351.257979][T17793] ? __pfx_warn_alloc+0x10/0x10 [ 2351.257999][T17793] ? psi_memstall_leave+0x1e6/0x2d0 [ 2351.258022][T17793] ? __alloc_pages_direct_compact+0x466/0x580 [ 2351.258045][T17793] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 2351.258070][T17793] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 2351.258097][T17793] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 2351.258124][T17793] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2351.258146][T17793] ? rcu_is_watching+0x12/0xc0 [ 2351.258166][T17793] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2351.258191][T17793] ? keyring_get_key_chunk+0x22d/0x280 [ 2351.258215][T17793] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2351.258242][T17793] ? policy_nodemask+0xea/0x4e0 [ 2351.258267][T17793] alloc_pages_mpol+0x1fb/0x550 [ 2351.258291][T17793] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2351.258316][T17793] ? __pfx_assoc_array_find+0x10/0x10 [ 2351.258331][T17793] ? bpf_lsm_key_permission+0x9/0x10 [ 2351.258360][T17793] ? dns_resolver_preparse+0x319/0xe00 [ 2351.258386][T17793] ___kmalloc_large_node+0xed/0x160 [ 2351.258413][T17793] ? dns_resolver_preparse+0x319/0xe00 [ 2351.258438][T17793] __kmalloc_large_node_noprof+0x1c/0x70 [ 2351.258465][T17793] ? keyring_compare_object+0x72/0x210 [ 2351.258492][T17793] __kmalloc_noprof.cold+0xc/0x61 [ 2351.258518][T17793] ? search_nested_keyrings+0x5ea/0xea0 [ 2351.258547][T17793] dns_resolver_preparse+0x319/0xe00 [ 2351.258580][T17793] ? mt_find+0x3ef/0xa30 [ 2351.258606][T17793] ? __pfx_dns_resolver_preparse+0x10/0x10 [ 2351.258631][T17793] ? lock_acquire+0x2cd/0x350 [ 2351.258651][T17793] ? __pfx___might_resched+0x10/0x10 [ 2351.258665][T17793] ? down_read+0x13d/0x480 [ 2351.258679][T17793] ? security_key_permission+0x79/0x240 [ 2351.258692][T17793] ? __pfx_down_read+0x10/0x10 [ 2351.258706][T17793] ? key_task_permission+0x2e5/0x400 [ 2351.258718][T17793] ? __pfx_dns_resolver_preparse+0x10/0x10 [ 2351.258733][T17793] __key_create_or_update+0x458/0xe10 [ 2351.258749][T17793] ? __pfx___key_create_or_update+0x10/0x10 [ 2351.258763][T17793] ? lookup_user_key+0x2ce/0x1300 [ 2351.258778][T17793] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 2351.258791][T17793] ? __pfx_keyring_search_iterator+0x10/0x10 [ 2351.258807][T17793] key_create_or_update+0x42/0x60 [ 2351.258822][T17793] __do_sys_add_key+0x298/0x470 [ 2351.258832][T17793] ? __pfx___do_sys_add_key+0x10/0x10 [ 2351.258843][T17793] ? rcu_is_watching+0x12/0xc0 [ 2351.258854][T17793] __do_fast_syscall_32+0x7c/0x3a0 [ 2351.258869][T17793] do_fast_syscall_32+0x32/0x80 [ 2351.258882][T17793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2351.258896][T17793] RIP: 0023:0xf703e579 [ 2351.258905][T17793] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2351.258917][T17793] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 000000000000011e [ 2351.258928][T17793] RAX: ffffffffffffffda RBX: 00000000800003c0 RCX: 0000000080000400 [ 2351.258935][T17793] RDX: 0000000080000080 RSI: 00000000000fffff RDI: 000000001160733f [ 2351.258942][T17793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2351.258948][T17793] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2351.258954][T17793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2351.258963][T17793] [ 2351.258968][T17793] Mem-Info: [ 2351.383363][T17793] active_anon:2563 inactive_anon:1151 isolated_anon:0 [ 2351.383363][T17793] active_file:1531 inactive_file:10669 isolated_file:0 [ 2351.383363][T17793] unevictable:1790 dirty:230 writeback:0 [ 2351.383363][T17793] slab_reclaimable:7061 slab_unreclaimable:75949 [ 2351.383363][T17793] mapped:22822 shmem:2222 pagetables:2131 [ 2351.383363][T17793] sec_pagetables:341 bounce:0 [ 2351.383363][T17793] kernel_misc_reclaimable:0 [ 2351.383363][T17793] free:58233 free_pcp:972 free_cma:0 [ 2351.398683][T17793] Node 0 active_anon:928kB inactive_anon:460kB active_file:544kB inactive_file:4kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:164kB dirty:8kB writeback:0kB shmem:5368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7344kB pagetables:1716kB sec_pagetables:1204kB all_unreclaimable? yes Balloon:0kB [ 2351.408346][T17793] Node 1 active_anon:13904kB inactive_anon:4144kB active_file:5580kB inactive_file:42672kB unevictable:3624kB isolated(anon):0kB isolated(file):0kB mapped:95832kB dirty:912kB writeback:0kB shmem:8120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:8848kB pagetables:6520kB sec_pagetables:160kB all_unreclaimable? no Balloon:0kB [ 2351.418198][T17793] Node 0 DMA free:2452kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:16kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2351.427170][T17793] lowmem_reserve[]: 0 288 288 288 288 [ 2351.428918][T17793] Node 0 DMA32 free:26720kB boost:10240kB min:23460kB low:26764kB high:30068kB reserved_highatomic:0KB free_highatomic:0KB active_anon:928kB inactive_anon:444kB active_file:544kB inactive_file:4kB unevictable:3536kB writepending:8kB present:1032196kB managed:295148kB mlocked:0kB bounce:0kB free_pcp:344kB local_pcp:0kB free_cma:0kB [ 2351.438682][T17793] lowmem_reserve[]: 0 0 0 0 0 [ 2351.440376][T17793] Node 1 DMA32 free:193780kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18944kB inactive_anon:4108kB active_file:5580kB inactive_file:42672kB unevictable:3624kB writepending:912kB present:1048432kB managed:948220kB mlocked:76kB bounce:0kB free_pcp:4356kB local_pcp:352kB free_cma:0kB [ 2351.450407][T17793] lowmem_reserve[]: 0 0 0 0 0 [ 2351.452002][T17793] Node 0 DMA: 45*4kB (U) 20*8kB (U) 4*16kB (U) 8*32kB (U) 2*64kB (U) 3*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2452kB [ 2351.456686][T17793] Node 0 DMA32: 800*4kB (UME) 410*8kB (UME) 247*16kB (UME) 292*32kB (UME) 76*64kB (UME) 14*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26688kB [ 2351.461922][T17793] Node 1 DMA32: 2362*4kB (UE) 752*8kB (UE) 580*16kB (UME) 523*32kB (UME) 325*64kB (UME) 319*128kB (UME) 154*256kB (UME) 66*512kB (UME) 17*1024kB (UE) 0*2048kB 0*4096kB = 193736kB [ 2351.467817][T17793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2351.470974][T17793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2351.473892][T17793] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2351.477906][T17793] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2351.481323][T17793] 18080 total pagecache pages [ 2351.482861][T17793] 1243 pages in swap cache [ 2351.484285][T17793] Free swap = 16288kB [ 2351.485610][T17793] Total swap = 124996kB [ 2351.486981][T17793] 524155 pages RAM [ 2351.488494][T17793] 0 pages HighMem/MovableOnly [ 2351.490055][T17793] 209473 pages reserved [ 2351.491463][T17793] 0 pages cma reserved [ 2352.027890][ T3144] vhci_hcd: vhci_device speed not set [ 2352.118128][T17819] binder: BINDER_SET_CONTEXT_MGR already set [ 2352.120258][T17819] binder: 17818:17819 ioctl 4018620d 80000040 returned -16 [ 2352.279290][T17837] binder: BINDER_SET_CONTEXT_MGR already set [ 2352.281212][T17837] binder: 17835:17837 ioctl 4018620d 80000040 returned -16 [ 2352.729010][T17896] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2353.640229][T17921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11135'. [ 2353.644407][T17921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11135'. [ 2354.491095][T17938] bond1: (slave macvlan3): Releasing backup interface [ 2355.017850][T21445] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 2355.207727][T21445] usb 7-1: Using ep0 maxpacket: 32 [ 2355.210973][T21445] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2355.213488][T21445] usb 7-1: config 0 has no interface number 0 [ 2355.216962][T21445] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2355.220160][T21445] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.222794][T21445] usb 7-1: Product: syz [ 2355.224227][T21445] usb 7-1: Manufacturer: syz [ 2355.225771][T21445] usb 7-1: SerialNumber: syz [ 2355.228235][T21445] usb 7-1: config 0 descriptor?? [ 2355.231223][T21445] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2355.234018][T21445] usb 7-1: selecting invalid altsetting 1 [ 2355.235813][T21445] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2355.239545][T21445] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2355.242900][T21445] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2355.245458][T21445] usb 7-1: media controller created [ 2355.251712][T21445] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2355.434129][T21445] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2355.439572][T21445] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2355.444522][T21445] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2355.462918][T21445] usb 7-1: USB disconnect, device number 95 [ 2356.423937][T18004] binder: BINDER_SET_CONTEXT_MGR already set [ 2356.426500][T18004] binder: 18003:18004 ioctl 4018620d 80000140 returned -16 [ 2356.431979][T18004] binder: BINDER_SET_CONTEXT_MGR already set [ 2356.433823][T18004] binder: 18003:18004 ioctl 4018620d 80000040 returned -16 [ 2356.517901][ T7048] Bluetooth: hci2: command 0x0406 tx timeout [ 2357.086310][T18031] syzkaller1: entered promiscuous mode [ 2357.088321][T18031] syzkaller1: entered allmulticast mode [ 2357.270565][T18034] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 2357.272715][T18034] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2357.275306][T18034] vhci_hcd vhci_hcd.0: Device attached [ 2357.468911][ C3] sd 0:0:0:0: [sda] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2357.472455][ C3] sd 0:0:0:0: [sda] tag#22 CDB: Test Unit Ready [ 2357.558050][T20335] usb 47-1: new high-speed USB device number 6 using vhci_hcd [ 2357.935475][T18055] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´' [ 2358.035402][T18035] vhci_hcd: connection reset by peer [ 2358.038073][ T2812] vhci_hcd: stop threads [ 2358.039595][ T2812] vhci_hcd: release socket [ 2358.041232][ T2812] vhci_hcd: disconnect device [ 2358.041735][T11922] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2358.786829][T18080] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´' [ 2359.111978][T18095] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 2359.114307][T18095] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2359.117089][T18095] vhci_hcd vhci_hcd.0: Device attached [ 2359.548204][ T841] usb 43-1: new high-speed USB device number 22 using vhci_hcd [ 2359.892143][T18096] vhci_hcd: connection reset by peer [ 2359.897899][ T60] vhci_hcd: stop threads [ 2359.899308][ T60] vhci_hcd: release socket [ 2359.908087][ T60] vhci_hcd: disconnect device [ 2359.998843][T18101] nbd0: detected capacity change from 0 to 127 [ 2360.014495][T11922] block nbd0: Receive control failed (result -104) [ 2360.017356][ T7048] block nbd0: Receive control failed (result -32) [ 2360.049389][T18103] bridge0: mtu greater than device maximum [ 2360.182756][T18110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2361.518129][T18148] sock: sock_set_timeout: `syz.2.11214' (pid 18148) tries to set negative timeout [ 2361.551779][T18150] binder_alloc: 18149: binder_alloc_buf, no vma [ 2361.585557][T18154] binder: 18152:18154 ioctl 4018620d 0 returned -22 [ 2361.593258][T18154] binder: BINDER_SET_CONTEXT_MGR already set [ 2361.595849][T18154] binder: 18152:18154 ioctl 4018620d 80000040 returned -16 [ 2362.100878][T18166] binder: BINDER_SET_CONTEXT_MGR already set [ 2362.103382][T18166] binder: 18165:18166 ioctl 4018620d 80000180 returned -16 [ 2362.110577][T18166] binder: BINDER_SET_CONTEXT_MGR already set [ 2362.112549][T18166] binder: 18165:18166 ioctl 4018620d 80000040 returned -16 [ 2362.434390][T18176] binder_alloc: 18175: binder_alloc_buf, no vma [ 2362.667857][T20335] vhci_hcd: vhci_device speed not set [ 2363.834024][T18201] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 2363.837607][T18201] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2363.841808][T18201] vhci_hcd vhci_hcd.0: Device attached [ 2363.955299][T11922] Bluetooth: hci2: Malformed Event: 0x02 [ 2364.006959][T18207] binder: BINDER_SET_CONTEXT_MGR already set [ 2364.010103][T18207] binder: 18206:18207 ioctl 4018620d 80000140 returned -16 [ 2364.155541][T18212] tipc: Enabling of bearer rejected, failed to enable media [ 2364.283402][T18220] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2364.322345][ T40] audit: type=1326 audit(1755643507.709:20861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.6.11237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 2364.328886][T18224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11242'. [ 2364.334507][ T40] audit: type=1326 audit(1755643507.709:20862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.6.11237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 2364.349043][ T40] audit: type=1326 audit(1755643507.729:20863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.6.11237" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 2364.361309][ T40] audit: type=1326 audit(1755643507.729:20864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.6.11237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 2364.369454][ T40] audit: type=1326 audit(1755643507.729:20865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.6.11237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 2364.378454][ T40] audit: type=1326 audit(1755643507.729:20866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.6.11237" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 2364.386773][ T40] audit: type=1326 audit(1755643507.729:20867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.6.11237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 2364.394925][ T40] audit: type=1326 audit(1755643507.729:20868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.6.11237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 2364.609810][T18202] vhci_hcd: connection reset by peer [ 2364.612318][ T60] vhci_hcd: stop threads [ 2364.613942][ T60] vhci_hcd: release socket [ 2364.615745][ T60] vhci_hcd: disconnect device [ 2364.678534][ T841] vhci_hcd: vhci_device speed not set [ 2364.955078][T18208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2365.306506][T18235] can: request_module (can-proto-5) failed. [ 2365.312926][T18235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11246'. [ 2365.797876][ T3144] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 2365.951439][ T3144] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2365.956139][ T3144] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2365.959183][ T3144] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.961825][ T3144] usb 10-1: Product: syz [ 2365.963287][ T3144] usb 10-1: Manufacturer: syz [ 2365.964900][ T3144] usb 10-1: SerialNumber: syz [ 2366.419315][T18255] Set syz1 is full, maxelem 65536 reached [ 2366.480316][T18271] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2366.574967][ T3144] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2366.801334][T18282] misc userio: Invalid payload size [ 2367.062561][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11265'. [ 2367.211521][T18298] tipc: Enabling of bearer rejected, failed to enable media [ 2367.299826][T18301] syz.2.11269: attempt to access beyond end of device [ 2367.299826][T18301] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2367.398005][ T3060] usb 11-1: new high-speed USB device number 81 using dummy_hcd [ 2367.536091][T18302] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2367.559248][ T3060] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2367.565827][ T3060] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2367.573950][ T3060] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2367.578704][ T3060] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2367.585407][ T3060] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2367.590976][ T3060] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2367.595595][ T3060] usb 11-1: config 0 descriptor?? [ 2368.026165][ T3060] hid_parser_main: 33 callbacks suppressed [ 2368.026177][ T3060] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 2368.030543][ T3060] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 2368.033053][ T3060] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 2368.035463][ T3060] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 2368.037897][ T3060] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 2368.040241][ T3060] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 2368.042766][ T3060] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 2368.045137][ T3060] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 2368.047471][ T3060] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 2368.049906][ T3060] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 2368.054044][ T3060] plantronics 0003:047F:FFFF.0049: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2368.229986][ T841] usb 11-1: USB disconnect, device number 81 [ 2369.422873][T18343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11280'. [ 2369.650553][T18347] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11282'. [ 2370.174642][T18361] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2371.125984][T18384] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2371.396777][T18387] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 2373.489915][T21445] usb 10-1: USB disconnect, device number 43 [ 2373.497727][T21445] usblp0: removed [ 2373.875775][T18443] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 2373.875775][T18443] program syz.5.11310 not setting count and/or reply_len properly [ 2374.137361][T18448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11313'. [ 2374.297278][T18456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11317'. [ 2374.547929][ T3144] usb 8-1: new full-speed USB device number 94 using dummy_hcd [ 2374.699552][ T3144] usb 8-1: config 1 interface 0 has no altsetting 0 [ 2374.704934][ T3144] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2374.713240][ T3144] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.716916][ T3144] usb 8-1: Product: syz [ 2374.718559][ T3144] usb 8-1: Manufacturer: syz [ 2374.721080][ T3144] usb 8-1: SerialNumber: syz [ 2375.174764][T18475] @: renamed from vlan0 [ 2375.332921][ T3144] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 94 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2376.486408][T18512] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2376.821794][T18532] tipc: Enabling of bearer rejected, failed to enable media [ 2377.785260][T18553] binder: BINDER_SET_CONTEXT_MGR already set [ 2377.787150][T18553] binder: 18551:18553 ioctl 4018620d 80000140 returned -16 [ 2377.792160][T18553] binder: BINDER_SET_CONTEXT_MGR already set [ 2377.794203][T18553] binder: 18551:18553 ioctl 4018620d 80000040 returned -16 [ 2377.796687][T18553] binder: 18551:18553 ioctl c0306201 0 returned -14 [ 2377.845100][T18563] tipc: Enabling of bearer rejected, failed to enable media [ 2377.927685][T18571] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2378.850591][T18594] tipc: Started in network mode [ 2378.852250][T18594] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 2378.855328][T18594] tipc: Enabling of bearer rejected, failed to enable media [ 2379.557884][T25638] usb 11-1: new high-speed USB device number 82 using dummy_hcd [ 2379.717970][T25638] usb 11-1: Using ep0 maxpacket: 8 [ 2379.720770][T25638] usb 11-1: config 0 has no interfaces? [ 2379.723981][T25638] usb 11-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 2379.726943][T25638] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2379.729717][T25638] usb 11-1: Product: syz [ 2379.731159][T25638] usb 11-1: Manufacturer: syz [ 2379.732797][T25638] usb 11-1: SerialNumber: syz [ 2379.735857][T25638] usb 11-1: config 0 descriptor?? [ 2380.324093][T18622] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11373'. [ 2381.938292][ T3144] usb 11-1: USB disconnect, device number 82 [ 2382.118027][ T7048] Bluetooth: hci4: command 0x0406 tx timeout [ 2382.289594][ T3144] usb 8-1: USB disconnect, device number 94 [ 2382.293458][ T3144] usblp0: removed [ 2382.363710][T18639] fuse: root generation should be zero [ 2382.382739][T18649] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2382.827890][ T841] usb 10-1: new full-speed USB device number 44 using dummy_hcd [ 2382.928228][T18686] @: renamed from vlan0 (while UP) [ 2382.999389][ T841] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2383.003122][ T841] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2383.005992][ T841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2383.009361][ T841] usb 10-1: Product: syz [ 2383.010720][ T841] usb 10-1: Manufacturer: syz [ 2383.012275][ T841] usb 10-1: SerialNumber: syz [ 2383.284964][T18706] binder: 18704:18706 ioctl 4018620d 0 returned -22 [ 2383.339107][T18714] binder: BINDER_SET_CONTEXT_MGR already set [ 2383.341125][T18714] binder: 18713:18714 ioctl 4018620d 80000140 returned -16 [ 2383.345697][T18714] binder: BINDER_SET_CONTEXT_MGR already set [ 2383.348469][T18714] binder: 18713:18714 ioctl 4018620d 80000040 returned -16 [ 2383.626520][ T841] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2383.627989][ T3060] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 2383.779892][ T3060] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 2383.783242][ T3060] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2383.789240][ T3060] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2383.793090][ T3060] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2383.795753][ T3060] usb 8-1: Manufacturer: syz [ 2383.800286][ T3060] usb 8-1: config 0 descriptor?? [ 2383.838551][ T3060] rc_core: IR keymap rc-hauppauge not found [ 2383.841076][ T3060] Registered IR keymap rc-empty [ 2383.844072][ T3060] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 2383.848377][ T3060] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input82 [ 2384.008523][ C2] igorplugusb 8-1:0.0: Error: urb status = -32 [ 2384.012256][ T3144] usb 8-1: USB disconnect, device number 95 [ 2384.163526][T18730] input: syz1 as /devices/virtual/input/input83 [ 2384.590339][T18741] binder: BINDER_SET_CONTEXT_MGR already set [ 2384.592376][T18741] binder: 18740:18741 ioctl 4018620d 80000180 returned -16 [ 2384.597249][T18741] binder: BINDER_SET_CONTEXT_MGR already set [ 2384.599933][T18741] binder: 18740:18741 ioctl 4018620d 80000040 returned -16 [ 2384.625738][T18744] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11414'. [ 2384.654330][T18746] binder: BINDER_SET_CONTEXT_MGR already set [ 2384.656691][T18746] binder: 18745:18746 ioctl 4018620d 80000140 returned -16 [ 2384.661771][T18746] binder: BINDER_SET_CONTEXT_MGR already set [ 2384.664315][T18746] binder: 18745:18746 ioctl 4018620d 80000040 returned -16 [ 2384.668560][T18746] binder: 18745:18746 ioctl c0306201 0 returned -14 [ 2384.802285][T18752] netlink: 'syz.3.11416': attribute type 16 has an invalid length. [ 2384.804957][T18752] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.11416'. [ 2385.440770][T18760] @: renamed from vlan0 [ 2385.552940][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11420'. [ 2385.559223][T18762] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11420'. [ 2385.977915][ T7498] usb 11-1: new high-speed USB device number 83 using dummy_hcd [ 2386.107883][ T7498] usb 11-1: device descriptor read/64, error -71 [ 2386.368018][ T7498] usb 11-1: new high-speed USB device number 84 using dummy_hcd [ 2386.497881][ T7498] usb 11-1: device descriptor read/64, error -71 [ 2386.609891][ T7498] usb usb11-port1: attempt power cycle [ 2386.947899][ T7498] usb 11-1: new high-speed USB device number 85 using dummy_hcd [ 2386.968385][ T7498] usb 11-1: device descriptor read/8, error -71 [ 2387.217971][ T7498] usb 11-1: new high-speed USB device number 86 using dummy_hcd [ 2387.238322][ T7498] usb 11-1: device descriptor read/8, error -71 [ 2387.350564][ T7498] usb usb11-port1: unable to enumerate USB device [ 2387.718919][T18772] binder: BINDER_SET_CONTEXT_MGR already set [ 2387.721938][T18772] binder: 18771:18772 ioctl 4018620d 80000180 returned -16 [ 2387.727091][T18772] binder: BINDER_SET_CONTEXT_MGR already set [ 2387.729130][T18772] binder: 18771:18772 ioctl 4018620d 80000040 returned -16 [ 2387.978939][T18784] bridge0: port 3(syz_tun) entered disabled state [ 2387.983073][T18784] bridge0: port 2(bridge_slave_1) entered disabled state [ 2387.985466][T18784] bridge0: port 1(bridge_slave_0) entered disabled state [ 2387.992430][T18784] bond_slave_0: left promiscuous mode [ 2387.994739][T18784] bond_slave_1: left promiscuous mode [ 2388.019697][T18784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2388.030683][T18784] veth1_vlan: left allmulticast mode [ 2388.035991][T18784] veth0_macvtap: left allmulticast mode [ 2388.049006][ T3144] syz1: Port: 1 Link DOWN [ 2388.049190][ T46] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2388.053429][ T46] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2388.056429][ T46] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2388.063271][ T46] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2388.800267][T18797] binder: BINDER_SET_CONTEXT_MGR already set [ 2388.802336][T18797] binder: 18796:18797 ioctl 4018620d 80000180 returned -16 [ 2388.807870][T18797] binder: BINDER_SET_CONTEXT_MGR already set [ 2388.810272][T18797] binder: 18796:18797 ioctl 4018620d 80000040 returned -16 [ 2389.516381][T18795] Set syz1 is full, maxelem 65536 reached [ 2389.861838][T18826] binder: BINDER_SET_CONTEXT_MGR already set [ 2389.863832][T18826] binder: 18825:18826 ioctl 4018620d 80000180 returned -16 [ 2389.998096][T18008] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 2390.140222][T18008] usb 7-1: device descriptor read/64, error -71 [ 2390.278015][T14081] block nbd0: Connection timed out, retrying (0/2 alive) [ 2390.280459][T14081] block nbd0: Connection timed out, retrying (0/2 alive) [ 2390.283026][T14081] block nbd0: Connection timed out, retrying (0/2 alive) [ 2390.285271][T14081] block nbd0: Connection timed out, retrying (0/2 alive) [ 2390.287535][T14081] block nbd0: Dead connection, failed to find a fallback [ 2390.289911][T14081] block nbd0: shutting down sockets [ 2390.291605][T14081] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.294762][T14081] Buffer I/O error on dev nbd0, logical block 3, async page read [ 2390.297249][T14081] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.300227][T14081] Buffer I/O error on dev nbd0, logical block 2, async page read [ 2390.302593][T14081] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.305432][T14081] Buffer I/O error on dev nbd0, logical block 1, async page read [ 2390.307950][T14081] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.310759][T14081] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2390.313427][T17845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.316266][T17845] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2390.318983][T17845] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.321759][T17845] Buffer I/O error on dev nbd0, logical block 1, async page read [ 2390.324209][T17845] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.327038][T17845] Buffer I/O error on dev nbd0, logical block 2, async page read [ 2390.329861][T17845] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.332531][T17845] Buffer I/O error on dev nbd0, logical block 3, async page read [ 2390.335104][T17845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.338040][T17845] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2390.340817][T17845] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2390.343782][T17845] Buffer I/O error on dev nbd0, logical block 1, async page read [ 2390.347206][T17845] ldm_validate_partition_table(): Disk read failed. [ 2390.349817][T17845] Dev nbd0: unable to read RDB block 0 [ 2390.352835][T17845] nbd0: unable to read partition table [ 2390.364037][T17845] ldm_validate_partition_table(): Disk read failed. [ 2390.367583][T17845] Dev nbd0: unable to read RDB block 0 [ 2390.371066][T17845] nbd0: unable to read partition table [ 2390.377950][T18008] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 2390.508508][T18008] usb 7-1: device descriptor read/64, error -71 [ 2390.546761][ T841] usb 10-1: USB disconnect, device number 44 [ 2390.554359][ T841] usblp0: removed [ 2390.618052][T18008] usb usb7-port1: attempt power cycle [ 2390.933728][T18845] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 2390.935936][T18845] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2390.938461][T18845] vhci_hcd vhci_hcd.0: Device attached [ 2390.967924][T18008] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 2390.988313][T18008] usb 7-1: device descriptor read/8, error -71 [ 2391.017909][T25638] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 2391.177917][T25638] usb 8-1: Using ep0 maxpacket: 8 [ 2391.179658][ T7330] usb 49-1: new high-speed USB device number 4 using vhci_hcd [ 2391.183450][T25638] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2391.187070][T25638] usb 8-1: config 4 has an invalid interface number: 30 but max is 0 [ 2391.189877][T25638] usb 8-1: config 4 has no interface number 0 [ 2391.191945][T25638] usb 8-1: config 4 interface 30 has no altsetting 0 [ 2391.196440][T25638] usb 8-1: string descriptor 0 read error: -22 [ 2391.198508][T25638] usb 8-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 2391.201624][T25638] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2391.214513][T25638] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 2391.217659][T25638] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2391.220140][T25638] dvb-usb: bulk message failed: -22 (2/0) [ 2391.223067][T25638] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2391.227013][T25638] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 2391.229822][T18008] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 2391.232295][T25638] usb 8-1: media controller created [ 2391.234017][T25638] dvb-usb: bulk message failed: -22 (6/0) [ 2391.235952][T25638] dw2102: i2c transfer failed. [ 2391.237611][T25638] dvb-usb: bulk message failed: -22 (6/0) [ 2391.239676][T25638] dw2102: i2c transfer failed. [ 2391.241283][T25638] dvb-usb: bulk message failed: -22 (6/0) [ 2391.243050][T25638] dw2102: i2c transfer failed. [ 2391.244586][T25638] dvb-usb: bulk message failed: -22 (6/0) [ 2391.246414][T25638] dw2102: i2c transfer failed. [ 2391.248177][T25638] dvb-usb: bulk message failed: -22 (6/0) [ 2391.250154][T25638] dw2102: i2c transfer failed. [ 2391.251894][T18008] usb 7-1: device descriptor read/8, error -71 [ 2391.253970][T25638] dvb-usb: bulk message failed: -22 (6/0) [ 2391.255852][T25638] dw2102: i2c transfer failed. [ 2391.257427][T25638] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2391.263866][T25638] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2391.270616][T25638] dvb-usb: bulk message failed: -22 (3/0) [ 2391.272513][T25638] dw2102: command 0x0e transfer failed. [ 2391.274284][T25638] dvb-usb: bulk message failed: -22 (3/0) [ 2391.276008][T25638] dw2102: command 0x0e transfer failed. [ 2391.371216][T18008] usb usb7-port1: unable to enumerate USB device [ 2391.587997][T25638] dvb-usb: bulk message failed: -22 (3/0) [ 2391.657931][T25638] dw2102: command 0x0e transfer failed. [ 2391.659896][T25638] dvb-usb: bulk message failed: -22 (3/0) [ 2391.661856][T25638] dw2102: command 0x0e transfer failed. [ 2391.663867][T25638] dvb-usb: bulk message failed: -22 (1/0) [ 2391.666178][T25638] dw2102: command 0x51 transfer failed. [ 2391.668660][T25638] dvb-usb: bulk message failed: -22 (5/0) [ 2391.670976][T25638] dw2102: i2c probe for address 0x68 failed. [ 2391.673204][T25638] dvb-usb: bulk message failed: -22 (5/0) [ 2391.675432][T25638] dw2102: i2c probe for address 0x69 failed. [ 2391.677719][T25638] dvb-usb: bulk message failed: -22 (5/0) [ 2391.679921][T25638] dw2102: i2c probe for address 0x6a failed. [ 2391.682052][T25638] dw2102: probing for demodulator failed. Is the external power switched on? [ 2391.685199][T25638] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 2391.727850][T25638] rc_core: IR keymap rc-tt-1500 not found [ 2391.730228][T25638] Registered IR keymap rc-empty [ 2391.733438][T25638] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 2391.736335][T18847] vhci_hcd: connection reset by peer [ 2391.739666][T25638] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input84 [ 2391.740543][T15527] vhci_hcd: stop threads [ 2391.744826][T15527] vhci_hcd: release socket [ 2391.747227][T15527] vhci_hcd: disconnect device [ 2391.747869][T25638] dvb-usb: schedule remote query interval to 250 msecs. [ 2391.754797][T25638] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2391.756722][T25638] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 2392.017878][T25638] dvb-usb: bulk message failed: -22 (1/0) [ 2392.020250][T25638] dw2102: i2c transfer failed. [ 2392.288179][T25638] dvb-usb: bulk message failed: -22 (1/0) [ 2392.290842][T25638] dw2102: i2c transfer failed. [ 2392.331029][T18861] binder: BINDER_SET_CONTEXT_MGR already set [ 2392.333231][T18861] binder: 18860:18861 ioctl 4018620d 80000180 returned -16 [ 2392.548074][T25638] dvb-usb: bulk message failed: -22 (1/0) [ 2392.550065][T25638] dw2102: i2c transfer failed. [ 2392.554059][T18869] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2392.572921][T18869] netlink: 456 bytes leftover after parsing attributes in process `syz.5.11455'. [ 2392.617889][ T841] usb 11-1: new full-speed USB device number 87 using dummy_hcd [ 2392.768916][ T841] usb 11-1: config 1 interface 0 has no altsetting 0 [ 2392.772504][ T841] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2392.786835][ T841] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.790615][ T841] usb 11-1: Product: syz [ 2392.792158][ T841] usb 11-1: Manufacturer: syz [ 2392.793797][ T841] usb 11-1: SerialNumber: syz [ 2392.807935][T25638] dvb-usb: bulk message failed: -22 (1/0) [ 2392.809900][T25638] dw2102: i2c transfer failed. [ 2393.067899][T25638] dvb-usb: bulk message failed: -22 (1/0) [ 2393.070159][T25638] dw2102: i2c transfer failed. [ 2393.327840][T25638] dvb-usb: bulk message failed: -22 (1/0) [ 2393.330181][T25638] dw2102: i2c transfer failed. [ 2393.421993][ T841] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2393.574656][T20335] usb 8-1: USB disconnect, device number 96 [ 2393.593545][T20335] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 2393.763221][T18895] tipc: Enabling of bearer rejected, failed to enable media [ 2394.017931][ T841] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 2394.147893][ T841] usb 7-1: device descriptor read/64, error -71 [ 2394.388017][ T841] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 2394.517993][ T841] usb 7-1: device descriptor read/64, error -71 [ 2394.627963][ T841] usb usb7-port1: attempt power cycle [ 2394.968047][ T841] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 2394.989216][ T841] usb 7-1: device descriptor read/8, error -71 [ 2395.227854][ T841] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 2395.248515][ T841] usb 7-1: device descriptor read/8, error -71 [ 2395.358097][ T841] usb usb7-port1: unable to enumerate USB device [ 2395.517023][T18911] binder: BINDER_SET_CONTEXT_MGR already set [ 2395.519393][T18911] binder: 18910:18911 ioctl 4018620d 80000140 returned -16 [ 2395.524556][T18911] binder: BINDER_SET_CONTEXT_MGR already set [ 2395.526917][T18911] binder: 18910:18911 ioctl 4018620d 80000040 returned -16 [ 2396.267953][ T7330] vhci_hcd: vhci_device speed not set [ 2397.028024][T18956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11484'. [ 2397.033782][T18956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11484'. [ 2398.074645][T18964] netdevsim netdevsim3 : renamed from netdevsim0 [ 2399.262071][T18990] input: syz1 as /devices/virtual/input/input85 [ 2399.275118][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11494'. [ 2399.279371][T18993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11494'. [ 2399.488858][T18998] program syz.3.11495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2400.000510][T19000] netdevsim netdevsim2 : renamed from netdevsim0 [ 2400.377046][ T3060] usb 11-1: USB disconnect, device number 87 [ 2400.380958][ T3060] usblp0: removed [ 2400.437578][T19020] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 2400.440422][T19020] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2400.446250][T19020] vhci_hcd vhci_hcd.0: Device attached [ 2400.697981][ T7330] usb 49-1: new high-speed USB device number 5 using vhci_hcd [ 2400.923592][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11504'. [ 2400.984715][T19029] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2401.053691][T19034] binder: BINDER_SET_CONTEXT_MGR already set [ 2401.056573][T19034] binder: 19032:19034 ioctl 4018620d 80000100 returned -16 [ 2401.061171][T19034] binder: 19032:19034 ioctl 4018620d 0 returned -22 [ 2401.329628][T19021] vhci_hcd: connection reset by peer [ 2401.339254][ T2812] vhci_hcd: stop threads [ 2401.341616][ T2812] vhci_hcd: release socket [ 2401.344220][ T2812] vhci_hcd: disconnect device [ 2402.736134][T19047] syzkaller1: entered promiscuous mode [ 2402.738681][T19047] syzkaller1: entered allmulticast mode [ 2402.886904][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11515'. [ 2403.034517][T19065] binder: BINDER_SET_CONTEXT_MGR already set [ 2403.037337][T19065] binder: 19064:19065 ioctl 4018620d 800000c0 returned -16 [ 2403.043317][T19065] binder: 19064:19065 unknown command 0 [ 2403.045770][T19065] binder: 19064:19065 ioctl c0306201 80000080 returned -22 [ 2403.050199][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11518'. [ 2403.055842][T19065] binder: BINDER_SET_CONTEXT_MGR already set [ 2403.058937][T19065] binder: 19064:19065 ioctl 4018620d 80000040 returned -16 [ 2403.154813][T19071] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2404.121170][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11526'. [ 2404.434267][T19101] bond1: (slave ip6gretap1): Removing an active aggregator [ 2404.437084][T19101] bond1: (slave ip6gretap1): Releasing backup interface [ 2404.440392][T19101] bond1: (slave ip6gretap1): the permanent HWaddr of slave - c6:91:55:e3:6b:78 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2404.462815][T19101] bond1: (slave macvlan2): Releasing backup interface [ 2405.639287][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.731463][T19124] syzkaller0: entered promiscuous mode [ 2405.733423][T19124] syzkaller0: entered allmulticast mode [ 2405.798503][ T7330] vhci_hcd: vhci_device speed not set [ 2406.841937][T19139] syzkaller1: entered promiscuous mode [ 2406.843686][T19139] syzkaller1: entered allmulticast mode [ 2407.178781][T19153] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 2408.422893][T19188] binder: BINDER_SET_CONTEXT_MGR already set [ 2408.437299][T19188] binder: 19187:19188 ioctl 4018620d 80000040 returned -16 [ 2408.483232][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11557'. [ 2408.486729][T19191] netlink: 173 bytes leftover after parsing attributes in process `syz.6.11557'. [ 2408.490378][T19191] netlink: 173 bytes leftover after parsing attributes in process `syz.6.11557'. [ 2408.773623][T19196] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 2411.613325][T19244] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 2413.797910][T25638] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 2413.950313][T25638] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 2413.953403][T25638] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2413.958018][T25638] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2413.962570][T25638] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2413.966233][T25638] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2413.971565][T25638] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2413.975343][T25638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2413.981111][T25638] usb 7-1: config 0 descriptor?? [ 2413.987347][T19279] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2414.401605][T25638] plantronics 0003:047F:FFFF.004A: reserved main item tag 0xd [ 2414.406127][T25638] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2414.660751][ T841] usb 7-1: USB disconnect, device number 104 [ 2414.843679][T19295] binder: BINDER_SET_CONTEXT_MGR already set [ 2414.846195][T19295] binder: 19294:19295 ioctl 4018620d 80000100 returned -16 [ 2414.852152][T19295] binder: BINDER_SET_CONTEXT_MGR already set [ 2414.854676][T19295] binder: 19294:19295 ioctl 4018620d 80004a80 returned -16 [ 2414.858984][T19295] binder: 19294:19295 ioctl c0306201 0 returned -14 [ 2415.240120][T19307] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2415.806715][T19326] binder: BINDER_SET_CONTEXT_MGR already set [ 2415.808817][T19326] binder: 19325:19326 ioctl 4018620d 80000100 returned -16 [ 2415.813053][T19326] binder: BINDER_SET_CONTEXT_MGR already set [ 2415.815066][T19326] binder: 19325:19326 ioctl 4018620d 80004a80 returned -16 [ 2415.841736][T19328] syzkaller0: entered promiscuous mode [ 2415.843567][T19328] syzkaller0: entered allmulticast mode [ 2416.830230][T19329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2416.967199][T19350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11605'. [ 2416.971859][T19350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11605'. [ 2417.399294][T19364] binder: 19363:19364 ioctl 4018620d 0 returned -22 [ 2417.404563][T19364] binder: BINDER_SET_CONTEXT_MGR already set [ 2417.406598][T19364] binder: 19363:19364 ioctl 4018620d 80000040 returned -16 [ 2418.437021][T19391] binder: 19390:19391 ioctl 4018620d 0 returned -22 [ 2418.442163][T19391] binder: BINDER_SET_CONTEXT_MGR already set [ 2418.444170][T19391] binder: 19390:19391 ioctl 4018620d 80000040 returned -16 [ 2419.523501][T19417] binder: 19416:19417 unknown command 0 [ 2419.525983][T19417] binder: 19416:19417 ioctl c0306201 80000080 returned -22 [ 2419.530341][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11627'. [ 2419.566909][T19409] Set syz1 is full, maxelem 65536 reached [ 2419.568878][T19419] binder: 19418:19419 ioctl 4018620d 0 returned -22 [ 2419.877839][ T3060] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 2420.038148][ T3060] usb 10-1: Using ep0 maxpacket: 16 [ 2420.041463][ T3060] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2420.046023][ T3060] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2420.050115][ T3060] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2420.055811][ T3060] usb 10-1: config 0 descriptor?? [ 2420.468989][ T3060] mcp2221 0003:04D8:00DD.004B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 2420.668692][ T3060] usb 10-1: USB disconnect, device number 45 [ 2420.957898][ T841] usb 11-1: new high-speed USB device number 88 using dummy_hcd [ 2421.108170][ T841] usb 11-1: Using ep0 maxpacket: 16 [ 2421.136594][ T841] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2421.139817][T19448] Set syz1 is full, maxelem 65536 reached [ 2421.142374][ T841] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2421.148779][ T841] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2421.152971][ T841] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2421.156593][ T841] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2421.164082][ T841] usb 11-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2421.167914][ T841] usb 11-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2421.170930][ T841] usb 11-1: Manufacturer: syz [ 2421.173720][ T841] usb 11-1: config 0 descriptor?? [ 2421.185401][T19450] binder: BINDER_SET_CONTEXT_MGR already set [ 2421.187555][T19450] binder: 19449:19450 ioctl 4018620d 800000c0 returned -16 [ 2421.191187][T19450] binder: 19449:19450 unknown command 0 [ 2421.193075][T19450] binder: 19449:19450 ioctl c0306201 80000080 returned -22 [ 2421.196849][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11638'. [ 2421.205599][T19450] binder: BINDER_SET_CONTEXT_MGR already set [ 2421.208408][T19450] binder: 19449:19450 ioctl 4018620d 80000040 returned -16 [ 2421.379158][T19458] syz_tun: left allmulticast mode [ 2421.380904][T19458] syz_tun: left promiscuous mode [ 2421.382933][T19458] bridge0: port 3(syz_tun) entered disabled state [ 2421.391585][T19458] bridge_slave_0: left allmulticast mode [ 2421.393791][T19458] bridge_slave_0: left promiscuous mode [ 2421.396919][T19458] bridge0: port 1(bridge_slave_0) entered disabled state [ 2421.408426][T19458] bridge_slave_1: left allmulticast mode [ 2421.411630][T19458] bridge_slave_1: left promiscuous mode [ 2421.414792][T19458] bridge0: port 2(bridge_slave_1) entered disabled state [ 2421.449672][T19458] bond0: (slave bond_slave_0): Releasing backup interface [ 2421.455832][T19458] bond0: (slave bond_slave_1): Releasing backup interface [ 2421.460146][T19458] team0: Port device team_slave_0 removed [ 2421.463314][T19458] team0: Port device team_slave_1 removed [ 2421.469623][T19458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2421.487936][ T841] rc_core: IR keymap rc-hauppauge not found [ 2421.490892][ T841] Registered IR keymap rc-empty [ 2421.498636][ T841] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 2421.498989][T19458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2421.509121][T19458] batman_adv: batadv0: Removing interface: vlan2 [ 2421.517930][ T841] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 2421.521160][T19458] bond1: (slave macvlan2): Removing an active aggregator [ 2421.526476][T19458] bond1: (slave macvlan2): Releasing backup interface [ 2421.541752][ T841] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 2421.550554][ T841] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input87 [ 2421.557451][ T841] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 2421.578220][ T841] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 2421.597948][ T841] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 2421.617867][ T841] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 2421.640910][ T841] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 2421.658515][ T841] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 2421.677945][ T841] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 2421.697887][ T841] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 2421.718062][ T841] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 2421.737859][ T841] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 2421.759107][ T841] mceusb 11-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2421.762875][ T841] mceusb 11-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2421.777836][ T3144] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 2421.877606][ T841] usb 11-1: USB disconnect, device number 88 [ 2421.947824][ T3144] usb 10-1: Using ep0 maxpacket: 8 [ 2421.954290][ T3144] usb 10-1: config 0 has an invalid interface number: 56 but max is 0 [ 2421.961155][ T3144] usb 10-1: config 0 has no interface number 0 [ 2421.970076][ T3144] usb 10-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 2421.973828][ T3144] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2421.977105][ T3144] usb 10-1: Product: syz [ 2421.984948][ T3144] usb 10-1: Manufacturer: syz [ 2421.988959][ T3144] usb 10-1: SerialNumber: syz [ 2421.993988][ T3144] usb 10-1: config 0 descriptor?? [ 2422.243814][ T3144] peak_usb 10-1:0.56 can0: unable to request usb[type=0 value=1] err=-32 [ 2422.247104][ T3144] peak_usb 10-1:0.56: unable to read PCAN-USB X6 firmware info (err -32) [ 2422.298715][ T3144] peak_usb 10-1:0.56: probe with driver peak_usb failed with error -32 [ 2422.321005][T19455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2422.323901][T19455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2424.192154][T19496] binder: BINDER_SET_CONTEXT_MGR already set [ 2424.194235][T19496] binder: 19495:19496 ioctl 4018620d 80000140 returned -16 [ 2424.200529][T19496] binder: BINDER_SET_CONTEXT_MGR already set [ 2424.202841][T19496] binder: 19495:19496 ioctl 4018620d 80000040 returned -16 [ 2424.260106][ T3060] usb 10-1: USB disconnect, device number 46 [ 2424.389001][T19506] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 2424.391128][T19506] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2424.393662][T19506] vhci_hcd vhci_hcd.0: Device attached [ 2424.648601][ T7116] usb 47-1: new high-speed USB device number 7 using vhci_hcd [ 2425.307110][T19508] vhci_hcd: connection reset by peer [ 2425.311431][ T46] vhci_hcd: stop threads [ 2425.313215][ T46] vhci_hcd: release socket [ 2425.315027][ T46] vhci_hcd: disconnect device [ 2425.510780][T19528] binder: BINDER_SET_CONTEXT_MGR already set [ 2425.513584][T19528] binder: 19527:19528 ioctl 4018620d 80000140 returned -16 [ 2425.518409][T19528] binder: BINDER_SET_CONTEXT_MGR already set [ 2425.520440][T19528] binder: 19527:19528 ioctl 4018620d 80000040 returned -16 [ 2425.523311][T19528] binder: 19527:19528 ioctl c0306201 0 returned -14 [ 2426.113715][T19550] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2426.479532][T19556] binder: BINDER_SET_CONTEXT_MGR already set [ 2426.482072][T19556] binder: 19555:19556 ioctl 4018620d 80000140 returned -16 [ 2426.487530][T19556] binder: BINDER_SET_CONTEXT_MGR already set [ 2426.490485][T19556] binder: 19555:19556 ioctl 4018620d 80000040 returned -16 [ 2426.494394][T19556] binder: 19555:19556 ioctl c0306201 0 returned -14 [ 2426.497548][T19558] syzkaller0: entered promiscuous mode [ 2426.497565][T19558] syzkaller0: entered allmulticast mode [ 2426.907860][T19566] binder: BINDER_SET_CONTEXT_MGR already set [ 2426.910083][T19566] binder: 19565:19566 ioctl 4018620d 80000180 returned -16 [ 2426.913382][T19566] binder: 19565:19566 ioctl c0306201 0 returned -14 [ 2426.917685][T19566] binder: BINDER_SET_CONTEXT_MGR already set [ 2426.920299][T19566] binder: 19565:19566 ioctl 4018620d 80000040 returned -16 [ 2427.930308][T19584] binder: BINDER_SET_CONTEXT_MGR already set [ 2427.932985][T19584] binder: 19583:19584 ioctl 4018620d 80000140 returned -16 [ 2427.939176][T19584] binder: BINDER_SET_CONTEXT_MGR already set [ 2427.941173][T19584] binder: 19583:19584 ioctl 4018620d 80000040 returned -16 [ 2427.943982][T19584] binder: 19583:19584 ioctl c0306201 0 returned -14 [ 2428.811462][T19591] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2429.148355][ T40] audit: type=1326 audit(1755643572.539:20869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19600 comm="syz.6.11683" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 2429.798049][ T7116] vhci_hcd: vhci_device speed not set [ 2429.838462][T19624] netlink: 'syz.3.11690': attribute type 1 has an invalid length. [ 2429.842502][T19624] netlink: 'syz.3.11690': attribute type 2 has an invalid length. [ 2430.816600][T19644] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2431.798519][ T7116] usb 8-1: new full-speed USB device number 97 using dummy_hcd [ 2431.950113][ T7116] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 2431.952930][ T7116] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2431.956582][ T7116] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 2431.960140][ T7116] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 2431.963739][ T7116] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2431.968123][ T7116] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2431.971730][ T7116] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2431.974730][ T7116] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2431.977622][ T7116] usb 8-1: Product: syz [ 2431.979885][ T7116] usb 8-1: Manufacturer: syz [ 2431.982490][ T7116] usb 8-1: SerialNumber: syz [ 2431.985128][ T7116] usb 8-1: config 0 descriptor?? [ 2431.987373][T19651] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2431.991254][ T7116] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2431.995509][ T7116] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2432.196145][ T7116] usb 8-1: USB disconnect, device number 97 [ 2432.199187][ T7116] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 2432.831225][T19659] Set syz1 is full, maxelem 65536 reached [ 2432.904139][T19679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11703'. [ 2432.911737][T19679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11703'. [ 2434.184642][T19703] netlink: 51 bytes leftover after parsing attributes in process `syz.6.11712'. [ 2436.089673][T19753] ptrace attach of "/syz-executor exec"[14690] was attempted by "/syz-executor exec"[19753] [ 2436.109855][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11731'. [ 2436.113576][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11731'. [ 2436.116846][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11731'. [ 2436.121288][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11731'. [ 2436.313573][T19763] Set syz1 is full, maxelem 65536 reached [ 2436.315861][T19763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11735'. [ 2436.380678][T19769] syzkaller1: entered promiscuous mode [ 2436.382283][T19769] syzkaller1: entered allmulticast mode [ 2437.067912][T20335] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 2437.237922][T20335] usb 10-1: Using ep0 maxpacket: 8 [ 2437.242492][T20335] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2437.247948][T20335] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2437.252353][T20335] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2437.256976][T20335] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2437.267870][T20335] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2437.278360][T20335] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2437.499499][T20335] usb 10-1: GET_CAPABILITIES returned 0 [ 2437.501749][T20335] usbtmc 10-1:16.0: can't read capabilities [ 2437.588406][T19816] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2437.702081][ T7330] usb 10-1: USB disconnect, device number 47 [ 2437.765432][T19822] binder: BINDER_SET_CONTEXT_MGR already set [ 2437.767517][T19822] binder: 19821:19822 ioctl 4018620d 800000c0 returned -16 [ 2437.771224][T19822] binder: 19821:19822 unknown command 0 [ 2437.773014][T19822] binder: 19821:19822 ioctl c0306201 80000080 returned -22 [ 2437.775913][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11760'. [ 2437.779964][T19822] binder: BINDER_SET_CONTEXT_MGR already set [ 2437.781903][T19822] binder: 19821:19822 ioctl 4018620d 80000040 returned -16 [ 2437.927901][T20335] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 2438.038067][ T3060] usb 11-1: new high-speed USB device number 89 using dummy_hcd [ 2438.087851][T20335] usb 7-1: Using ep0 maxpacket: 8 [ 2438.094239][T20335] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 2438.098192][T20335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2438.101434][T20335] usb 7-1: Product: syz [ 2438.103098][T20335] usb 7-1: Manufacturer: syz [ 2438.105034][T20335] usb 7-1: SerialNumber: syz [ 2438.108690][T20335] usb 7-1: config 0 descriptor?? [ 2438.189131][ T3060] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 2438.191770][ T3060] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2438.195543][ T3060] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2438.199173][ T3060] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2438.202732][ T3060] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2438.207061][ T3060] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2438.210930][ T3060] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2438.215304][ T3060] usb 11-1: config 0 descriptor?? [ 2438.218625][T19824] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2438.318015][T20335] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 2438.320644][T20335] gspca_sunplus: reg_w_riv err -71 [ 2438.322517][T20335] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 2438.328688][T20335] usb 7-1: USB disconnect, device number 105 [ 2438.630138][ T3060] usbhid 11-1:0.0: can't add hid device: -71 [ 2438.632095][ T3060] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 2438.636196][ T3060] usb 11-1: USB disconnect, device number 89 [ 2439.422824][T19868] bridge0: port 1() entered blocking state [ 2439.425787][T19868] bridge0: port 1() entered disabled state [ 2439.428741][T19868] netdevsim netdevsim3 : entered allmulticast mode [ 2439.432522][T19868] netdevsim netdevsim3 : entered promiscuous mode [ 2440.195619][T19880] binder: BINDER_SET_CONTEXT_MGR already set [ 2440.197631][T19880] binder: 19878:19880 ioctl 4018620d 800000c0 returned -16 [ 2440.201436][T19880] binder: 19878:19880 unknown command 0 [ 2440.203220][T19880] binder: 19878:19880 ioctl c0306201 80000080 returned -22 [ 2440.206354][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11780'. [ 2440.211657][T19880] binder: BINDER_SET_CONTEXT_MGR already set [ 2440.214490][T19880] binder: 19878:19880 ioctl 4018620d 80000040 returned -16 [ 2440.477854][ T7330] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 2440.629377][ T7330] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 2440.632428][ T7330] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2440.637543][ T7330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2440.642697][ T7330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2440.647283][ T7330] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2440.653151][ T7330] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2440.657555][ T7330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2440.662993][ T7330] usb 10-1: config 0 descriptor?? [ 2440.665787][T19883] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2441.073750][ T7330] usbhid 10-1:0.0: can't add hid device: -71 [ 2441.076760][ T7330] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2441.081818][ T7330] usb 10-1: USB disconnect, device number 48 [ 2441.306222][T19897] bridge0: port 2(macsec1) entered blocking state [ 2441.311245][T19897] bridge0: port 2(macsec1) entered disabled state [ 2441.316093][T19897] macsec1: entered allmulticast mode [ 2441.319960][T19897] macsec1: left allmulticast mode [ 2441.592561][T19900] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11786'. [ 2441.633324][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11788'. [ 2441.640381][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11788'. [ 2441.727009][T19907] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 2441.729322][T19907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2441.731898][T19907] vhci_hcd vhci_hcd.0: Device attached [ 2441.987961][T21445] usb 47-1: new high-speed USB device number 8 using vhci_hcd [ 2442.419464][ T7330] hid_parser_main: 5 callbacks suppressed [ 2442.419484][ T7330] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 2442.426545][ T7330] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2442.520339][T19908] vhci_hcd: connection reset by peer [ 2442.522133][ T46] vhci_hcd: stop threads [ 2442.523915][ T46] vhci_hcd: release socket [ 2442.525823][ T46] vhci_hcd: disconnect device [ 2442.872933][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11795'. [ 2442.877548][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11795'. [ 2443.287932][ T7330] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 2443.450124][ T7330] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 2443.453066][ T7330] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2443.468254][ T7330] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2443.471826][ T7330] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2443.475709][ T7330] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2443.487197][ T7330] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2443.490837][ T7330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2443.494049][ T7330] usb 8-1: config 0 descriptor?? [ 2443.496093][T19934] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2443.903678][ T7330] usbhid 8-1:0.0: can't add hid device: -71 [ 2443.905842][ T7330] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2443.909867][ T7330] usb 8-1: USB disconnect, device number 98 [ 2444.668341][T19971] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 2444.670466][T19971] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2444.673182][T19971] vhci_hcd vhci_hcd.0: Device attached [ 2444.907909][ T7330] usb 49-1: new high-speed USB device number 6 using vhci_hcd [ 2445.428552][T19996] binder: BINDER_SET_CONTEXT_MGR already set [ 2445.430691][T19996] binder: 19995:19996 ioctl 4018620d 800000c0 returned -16 [ 2445.447822][T19996] binder: 19995:19996 unknown command 0 [ 2445.450371][T19996] binder: 19995:19996 ioctl c0306201 80000080 returned -22 [ 2445.454553][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11814'. [ 2445.462045][T19996] binder: BINDER_SET_CONTEXT_MGR already set [ 2445.465395][T19996] binder: 19995:19996 ioctl 4018620d 80000040 returned -16 [ 2445.472104][T19972] vhci_hcd: connection reset by peer [ 2445.481480][ T46] vhci_hcd: stop threads [ 2445.484061][ T46] vhci_hcd: release socket [ 2445.492529][ T46] vhci_hcd: disconnect device [ 2446.002124][T20009] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11818'. [ 2446.703803][T20029] binder: BINDER_SET_CONTEXT_MGR already set [ 2446.705784][T20029] binder: 20028:20029 ioctl 4018620d 80000180 returned -16 [ 2446.711865][T20029] binder: BINDER_SET_CONTEXT_MGR already set [ 2446.713870][T20029] binder: 20028:20029 ioctl 4018620d 80000040 returned -16 [ 2446.716585][T20029] binder: 20028:20029 ioctl c0306201 0 returned -14 [ 2447.068389][T21445] vhci_hcd: vhci_device speed not set [ 2447.667968][T20335] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 2447.693752][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11838'. [ 2447.704381][T20071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11838'. [ 2447.837984][T20335] usb 8-1: Using ep0 maxpacket: 16 [ 2447.841406][T20335] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2447.844855][T20335] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2447.848281][T20335] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2447.851101][T20335] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2447.857363][T20335] usb 8-1: config 0 descriptor?? [ 2448.207892][T25638] usb 11-1: new high-speed USB device number 90 using dummy_hcd [ 2448.277827][T20335] usbhid 8-1:0.0: can't add hid device: -71 [ 2448.286555][T20335] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2448.293500][T20335] usb 8-1: USB disconnect, device number 99 [ 2448.375523][T25638] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2448.383233][T25638] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2448.387061][T25638] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2448.390538][T25638] usb 11-1: Product: syz [ 2448.392324][T25638] usb 11-1: Manufacturer: syz [ 2448.394313][T25638] usb 11-1: SerialNumber: syz [ 2448.607891][T25638] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2448.920409][T25638] usb 11-1: USB disconnect, device number 90 [ 2448.926064][T25638] usblp0: removed [ 2449.238037][T21445] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 2449.387900][T21445] usb 7-1: Using ep0 maxpacket: 16 [ 2449.391184][T21445] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2449.395886][T21445] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2449.398813][T21445] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.401311][T21445] usb 7-1: Product: syz [ 2449.402717][T21445] usb 7-1: Manufacturer: syz [ 2449.404234][T21445] usb 7-1: SerialNumber: syz [ 2449.406867][T21445] usb 7-1: config 0 descriptor?? [ 2449.410271][T21445] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2449.413287][T21445] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 2450.017140][T21445] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 2450.029851][ T7330] vhci_hcd: vhci_device speed not set [ 2450.077448][T20111] binder: BINDER_SET_CONTEXT_MGR already set [ 2450.080100][T20111] binder: 20110:20111 ioctl 4018620d 800000c0 returned -16 [ 2450.083324][T20111] binder: 20110:20111 unknown command 0 [ 2450.085243][T20111] binder: 20110:20111 ioctl c0306201 80000080 returned -22 [ 2450.088488][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11855'. [ 2450.430513][T21445] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2450.436769][T21445] em28xx 7-1:0.0: board has no eeprom [ 2450.598113][T25638] usb 11-1: new high-speed USB device number 91 using dummy_hcd [ 2450.655500][T20120] Set syz1 is full, maxelem 65536 reached [ 2450.717876][T21445] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2450.720460][T21445] em28xx 7-1:0.0: dvb set to bulk mode. [ 2450.722521][ T3060] em28xx 7-1:0.0: Binding DVB extension [ 2450.726923][T21445] usb 7-1: USB disconnect, device number 106 [ 2450.730009][T21445] em28xx 7-1:0.0: Disconnecting em28xx [ 2450.745542][ T3060] em28xx 7-1:0.0: Registering input extension [ 2450.747590][T21445] em28xx 7-1:0.0: Closing input extension [ 2450.752138][T21445] em28xx 7-1:0.0: Freeing device [ 2450.757907][T25638] usb 11-1: Using ep0 maxpacket: 16 [ 2450.765895][T25638] usb 11-1: config 0 has no interfaces? [ 2450.770090][T25638] usb 11-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 2450.773443][T25638] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2450.777029][T25638] usb 11-1: Product: syz [ 2450.780454][T25638] usb 11-1: Manufacturer: syz [ 2450.782409][T25638] usb 11-1: SerialNumber: syz [ 2450.785537][T25638] usb 11-1: config 0 descriptor?? [ 2451.046651][T20116] tipc: New replicast peer: 0.0.0.0 [ 2451.049156][T20116] tipc: Enabled bearer , priority 10 [ 2451.054600][T20116] ptrace attach of "/syz-executor exec"[14690] was attempted by "/syz-executor exec"[20116] [ 2451.434878][T20134] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2451.436925][T20134] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2451.439743][T20134] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2451.441855][T20134] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2451.444248][T20134] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2451.447929][T20134] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2451.450031][T20134] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2451.816656][T20145] fuse: Unknown parameter 'r' [ 2452.169269][ T3060] tipc: Node number set to 1 [ 2453.200414][T21445] usb 11-1: USB disconnect, device number 91 [ 2453.397964][T11922] Bluetooth: hci0: command 0x0406 tx timeout [ 2453.477898][T11922] Bluetooth: hci4: command 0x0406 tx timeout [ 2453.477935][ T7048] Bluetooth: hci2: command 0x0406 tx timeout [ 2454.504711][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11877'. [ 2454.509382][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11877'. [ 2455.485962][T20219] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11895'. [ 2455.488065][ T7048] Bluetooth: hci0: command 0x0406 tx timeout [ 2455.567990][ T7048] Bluetooth: hci4: command 0x0406 tx timeout [ 2455.568014][T11922] Bluetooth: hci2: command 0x0406 tx timeout [ 2455.632278][T20224] netlink: 91 bytes leftover after parsing attributes in process `syz.3.11897'. [ 2455.678719][ T7330] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 2455.847854][ T7330] usb 10-1: Using ep0 maxpacket: 16 [ 2455.861688][ T7330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2455.870021][ T7330] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2455.872876][ T7330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2455.876322][ T7330] usb 10-1: Product: syz [ 2455.879162][ T7330] usb 10-1: Manufacturer: syz [ 2455.886570][ T7330] usb 10-1: SerialNumber: syz [ 2455.890964][ T7330] usb 10-1: config 0 descriptor?? [ 2455.894689][ T7330] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2455.897955][ T841] usb 8-1: new full-speed USB device number 100 using dummy_hcd [ 2455.898853][ T7330] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 2455.938608][T20229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11898'. [ 2456.049530][ T841] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 2456.053159][ T841] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2456.059110][ T841] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 2456.063461][ T841] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 2456.067421][ T841] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2456.075074][ T841] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2456.082025][ T841] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2456.085708][ T841] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2456.088903][ T841] usb 8-1: Product: syz [ 2456.090411][ T841] usb 8-1: Manufacturer: syz [ 2456.091902][ T841] usb 8-1: SerialNumber: syz [ 2456.094378][ T841] usb 8-1: config 0 descriptor?? [ 2456.098003][T20228] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2456.104185][ T841] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2456.110079][ T841] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2456.269412][T20244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11905'. [ 2456.287493][T20244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11905'. [ 2456.304676][T25638] usb 8-1: USB disconnect, device number 100 [ 2456.307269][T25638] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 2456.318131][T20244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11905'. [ 2456.497083][ T7330] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 2456.903170][ T7330] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2456.905904][ T7330] em28xx 10-1:0.0: board has no eeprom [ 2457.067873][ T841] usb 8-1: new full-speed USB device number 101 using dummy_hcd [ 2457.167940][ T7330] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2457.170570][ T7330] em28xx 10-1:0.0: dvb set to bulk mode. [ 2457.172755][T25638] em28xx 10-1:0.0: Binding DVB extension [ 2457.176531][ T7330] usb 10-1: USB disconnect, device number 49 [ 2457.180860][ T7330] em28xx 10-1:0.0: Disconnecting em28xx [ 2457.193515][T25638] em28xx 10-1:0.0: Registering input extension [ 2457.195614][ T7330] em28xx 10-1:0.0: Closing input extension [ 2457.199966][ T7330] em28xx 10-1:0.0: Freeing device [ 2457.220606][ T841] usb 8-1: config 1 interface 0 has no altsetting 0 [ 2457.224881][ T841] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2457.229345][ T841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2457.232069][ T841] usb 8-1: Product: syz [ 2457.233739][ T841] usb 8-1: Manufacturer: syz [ 2457.235329][ T841] usb 8-1: SerialNumber: syz [ 2457.557977][T11922] Bluetooth: hci0: command 0x0406 tx timeout [ 2457.847132][T20270] input: syz0 as /devices/virtual/input/input90 [ 2457.886192][T20272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11915'. [ 2457.904874][T20272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11915'. [ 2459.067848][ T7498] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 2459.237881][ T7498] usb 7-1: Using ep0 maxpacket: 16 [ 2459.240870][ T7498] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2459.245661][ T7498] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2459.248817][ T7498] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2459.251323][ T7498] usb 7-1: Product: syz [ 2459.252755][ T7498] usb 7-1: Manufacturer: syz [ 2459.254279][ T7498] usb 7-1: SerialNumber: syz [ 2459.256800][ T7498] usb 7-1: config 0 descriptor?? [ 2459.261812][ T7498] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2459.265210][ T7498] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 2459.567922][T20302] __nla_validate_parse: 1 callbacks suppressed [ 2459.567940][T20302] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11924'. [ 2459.603264][T20302] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11924'. [ 2459.637741][T20302] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11924'. [ 2459.838738][ T841] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 101 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2459.844170][ T841] usb 8-1: USB disconnect, device number 101 [ 2459.847639][ T841] usblp0: removed [ 2459.865368][ T7498] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 2460.000395][T20319] binder: BINDER_SET_CONTEXT_MGR already set [ 2460.002834][T20319] binder: 20318:20319 ioctl 4018620d 80000180 returned -16 [ 2460.010755][T20319] binder: BINDER_SET_CONTEXT_MGR already set [ 2460.013052][T20319] binder: 20318:20319 ioctl 4018620d 80000040 returned -16 [ 2460.016805][T20319] binder: 20318:20319 ioctl c0306201 0 returned -14 [ 2460.177834][ T841] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 2460.270430][ T7498] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2460.273062][ T7498] em28xx 7-1:0.0: board has no eeprom [ 2460.338479][ T841] usb 8-1: Using ep0 maxpacket: 8 [ 2460.343189][ T841] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2460.346843][ T841] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2460.350152][ T841] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2460.353927][ T841] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2460.358236][ T841] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2460.363825][ T841] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2460.367207][ T841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2460.528543][ T7498] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2460.531108][ T7498] em28xx 7-1:0.0: dvb set to bulk mode. [ 2460.536281][ T7498] usb 7-1: USB disconnect, device number 107 [ 2460.539961][ T7498] em28xx 7-1:0.0: Disconnecting em28xx [ 2460.542445][T18971] em28xx 7-1:0.0: Binding DVB extension [ 2460.558931][T18971] em28xx 7-1:0.0: Registering input extension [ 2460.561080][ T7498] em28xx 7-1:0.0: Closing input extension [ 2460.565456][ T7498] em28xx 7-1:0.0: Freeing device [ 2460.574149][ T841] usb 8-1: usb_control_msg returned -32 [ 2460.577884][ T841] usbtmc 8-1:16.0: can't read capabilities [ 2460.926542][T20342] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 2460.929554][T20335] usb 8-1: USB disconnect, device number 102 [ 2461.024349][T20346] binder: 20345:20346 unknown command 0 [ 2461.026387][T20346] binder: 20345:20346 ioctl c0306201 80000080 returned -22 [ 2461.055533][T20348] binder: 20347:20348 ioctl c0306201 0 returned -14 [ 2461.058446][ T7498] usb 11-1: new full-speed USB device number 92 using dummy_hcd [ 2461.219124][ T7498] usb 11-1: config 1 interface 0 has no altsetting 0 [ 2461.225372][ T7498] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2461.231728][ T7498] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2461.237506][ T7498] usb 11-1: Product: syz [ 2461.241733][ T7498] usb 11-1: Manufacturer: syz [ 2461.243373][ T7498] usb 11-1: SerialNumber: syz [ 2462.247969][ T7330] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 2462.397936][ T7330] usb 8-1: Using ep0 maxpacket: 16 [ 2462.401553][ T7330] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2462.406957][ T7330] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2462.409903][ T7330] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2462.412488][ T7330] usb 8-1: Product: syz [ 2462.413867][ T7330] usb 8-1: Manufacturer: syz [ 2462.415630][ T7330] usb 8-1: SerialNumber: syz [ 2462.419134][ T7330] usb 8-1: config 0 descriptor?? [ 2462.423464][ T7330] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2462.427228][ T7330] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 2462.746609][T20374] netlink: 'syz.5.11947': attribute type 2 has an invalid length. [ 2463.026468][ T7330] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 2463.438050][ T7330] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2463.440848][ T7330] em28xx 8-1:0.0: board has no eeprom [ 2463.459757][T20376] binder: BINDER_SET_CONTEXT_MGR already set [ 2463.461774][T20376] binder: 20375:20376 ioctl 4018620d 800000c0 returned -16 [ 2463.464786][T20376] binder: 20375:20376 unknown command 0 [ 2463.466603][T20376] binder: 20375:20376 ioctl c0306201 80000080 returned -22 [ 2463.471824][T20376] binder: BINDER_SET_CONTEXT_MGR already set [ 2463.474044][T20376] binder: 20375:20376 ioctl 4018620d 80000040 returned -16 [ 2463.504232][T20378] binder: BINDER_SET_CONTEXT_MGR already set [ 2463.506338][T20378] binder: 20377:20378 ioctl 4018620d 80000180 returned -16 [ 2463.511075][T20378] binder: BINDER_SET_CONTEXT_MGR already set [ 2463.513080][T20378] binder: 20377:20378 ioctl 4018620d 80000040 returned -16 [ 2463.596716][T20382] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2463.697847][ T7330] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2463.701201][ T7330] em28xx 8-1:0.0: dvb set to bulk mode. [ 2463.703956][ T7332] em28xx 8-1:0.0: Binding DVB extension [ 2463.707691][ T7330] usb 8-1: USB disconnect, device number 103 [ 2463.710300][ T7330] em28xx 8-1:0.0: Disconnecting em28xx [ 2463.765515][ T7332] em28xx 8-1:0.0: Registering input extension [ 2463.768573][ T7330] em28xx 8-1:0.0: Closing input extension [ 2463.773340][ T7330] em28xx 8-1:0.0: Freeing device [ 2463.815467][ T7498] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2463.820476][ T7498] usb 11-1: USB disconnect, device number 92 [ 2463.824058][ T7498] usblp0: removed [ 2464.297062][ T7048] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2464.300119][ T7048] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2464.305854][ T7048] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2464.309395][ T7048] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2464.309899][T30292] smc: removing ib device syz1 [ 2464.312763][ T7048] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2464.413954][T20406] binder: BINDER_SET_CONTEXT_MGR already set [ 2464.415939][T20406] binder: 20405:20406 ioctl 4018620d 800000c0 returned -16 [ 2464.419220][T20406] binder: 20405:20406 unknown command 0 [ 2464.421111][T20406] binder: 20405:20406 ioctl c0306201 80000080 returned -22 [ 2464.428624][T20406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11958'. [ 2464.433952][T20406] binder: BINDER_SET_CONTEXT_MGR already set [ 2464.435907][T20406] binder: 20405:20406 ioctl 4018620d 80000040 returned -16 [ 2464.494892][T20399] chnl_net:caif_netlink_parms(): no params data found [ 2464.627523][T20399] bridge0: port 1(bridge_slave_0) entered blocking state [ 2464.629931][T20399] bridge0: port 1(bridge_slave_0) entered disabled state [ 2464.632190][T20399] bridge_slave_0: entered allmulticast mode [ 2464.634430][T20399] bridge_slave_0: entered promiscuous mode [ 2464.637009][T20399] bridge0: port 2(bridge_slave_1) entered blocking state [ 2464.640294][T20399] bridge0: port 2(bridge_slave_1) entered disabled state [ 2464.642571][T20399] bridge_slave_1: entered allmulticast mode [ 2464.649167][T20399] bridge_slave_1: entered promiscuous mode [ 2464.717948][T20335] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 2464.742278][T20399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2464.758584][T20399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2464.803789][T20399] team0: Port device team_slave_0 added [ 2464.806749][T20399] team0: Port device team_slave_1 added [ 2464.824577][T20399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2464.826828][T20399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2464.836102][T20399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2464.842206][T20399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2464.844431][T20399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2464.852697][T20399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2464.856987][T22340] netdevsim netdevsim3  (unregistering): left allmulticast mode [ 2464.860190][T22340] netdevsim netdevsim3  (unregistering): left promiscuous mode [ 2464.862430][T22340] bridge0: port 1() entered disabled state [ 2464.879192][T20335] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2464.891176][T20335] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2464.892406][T20399] hsr_slave_0: entered promiscuous mode [ 2464.894869][T20335] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2464.896889][T20399] hsr_slave_1: entered promiscuous mode [ 2464.902441][T20399] debugfs: 'hsr0' already exists in 'hsr' [ 2464.904844][T20399] Cannot create hsr debugfs directory [ 2464.907949][T20335] usb 10-1: Product: syz [ 2464.909330][T20335] usb 10-1: Manufacturer: syz [ 2464.910829][T20335] usb 10-1: SerialNumber: syz [ 2465.174572][T22340] bond0 (unregistering): Released all slaves [ 2465.181083][T22340] bond1 (unregistering): Released all slaves [ 2465.185759][T22340] bond2 (unregistering): Released all slaves [ 2465.190528][T22340] bond3 (unregistering): Released all slaves [ 2465.195643][T22340] bond4 (unregistering): Released all slaves [ 2465.199602][T22340] bond5 (unregistering): Released all slaves [ 2465.266131][T22340] tipc: Left network mode [ 2465.652300][T22340] hsr_slave_0: left promiscuous mode [ 2465.655067][T22340] pim6reg (unregistering): left allmulticast mode [ 2465.672362][T22340] macvlan0 (unregistering): left allmulticast mode [ 2466.266644][T20459] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2466.357919][ T7048] Bluetooth: hci3: command tx timeout [ 2466.930739][T20399] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2466.935131][T20399] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2466.938512][T20399] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2466.942325][T20399] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2466.984648][T20399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2466.995535][T20399] 8021q: adding VLAN 0 to HW filter on device team0 [ 2467.002394][T22340] bridge0: port 1(bridge_slave_0) entered blocking state [ 2467.004732][T22340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2467.015654][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 2467.018306][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2467.089448][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.120060][T20399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2467.144520][T20399] veth0_vlan: entered promiscuous mode [ 2467.152959][T20399] veth1_vlan: entered promiscuous mode [ 2467.162906][T20399] veth0_macvtap: entered promiscuous mode [ 2467.167124][T20399] veth1_macvtap: entered promiscuous mode [ 2467.176557][T20399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2467.189679][T20399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2467.200650][T22336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2467.204825][T22336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2467.210499][T22336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2467.214081][T22336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2467.246180][T22340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2467.249642][T22340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2467.263322][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2467.266037][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2467.437981][ T3144] usb 11-1: new full-speed USB device number 93 using dummy_hcd [ 2467.465837][T20335] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2467.473530][T20335] usb 10-1: USB disconnect, device number 50 [ 2467.476638][T20335] usblp0: removed [ 2467.589957][ T3144] usb 11-1: config 0 has an invalid interface number: 113 but max is 0 [ 2467.593438][ T3144] usb 11-1: config 0 has no interface number 0 [ 2467.595984][ T3144] usb 11-1: config 0 interface 113 has no altsetting 0 [ 2467.601006][ T3144] usb 11-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2467.604189][ T3144] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2467.606845][ T3144] usb 11-1: Product: syz [ 2467.608289][ T3144] usb 11-1: Manufacturer: syz [ 2467.609786][ T3144] usb 11-1: SerialNumber: syz [ 2467.612334][ T3144] usb 11-1: config 0 descriptor?? [ 2467.615465][ T3144] pn533_usb 11-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 2468.437980][ T7048] Bluetooth: hci3: command tx timeout [ 2468.657839][ T7498] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 2468.787903][ T7498] usb 10-1: device descriptor read/64, error -71 [ 2469.008048][T20335] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 2469.027917][ T7498] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 2469.158016][ T7498] usb 10-1: device descriptor read/64, error -71 [ 2469.177874][T20335] usb 7-1: Using ep0 maxpacket: 16 [ 2469.185473][T20335] usb 7-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2469.192127][T20335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2469.195396][T20335] usb 7-1: Product: syz [ 2469.197522][T20335] usb 7-1: Manufacturer: syz [ 2469.199525][T20335] usb 7-1: SerialNumber: syz [ 2469.268204][ T7498] usb usb10-port1: attempt power cycle [ 2469.637973][ T7498] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 2469.658372][ T7498] usb 10-1: device descriptor read/8, error -71 [ 2469.908008][ T7498] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 2469.928356][ T7498] usb 10-1: device descriptor read/8, error -71 [ 2470.034373][T18971] usb 11-1: USB disconnect, device number 93 [ 2470.038770][ T7498] usb usb10-port1: unable to enumerate USB device [ 2470.527940][ T7048] Bluetooth: hci3: command tx timeout [ 2470.721095][T20527] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 2471.572327][T20335] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2471.590388][T20335] snd-usb-audio 7-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 2471.596430][T20335] usb 7-1: USB disconnect, device number 108 [ 2471.611872][T19225] udevd[19225]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2472.598353][ T7048] Bluetooth: hci3: command tx timeout [ 2473.287906][T20335] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 2473.427879][T20335] usb 7-1: device descriptor read/64, error -71 [ 2473.677957][T20335] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 2473.808937][T20335] usb 7-1: device descriptor read/64, error -71 [ 2473.918066][T20335] usb usb7-port1: attempt power cycle [ 2474.035519][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12001'. [ 2474.041135][T20583] binder: BINDER_SET_CONTEXT_MGR already set [ 2474.043731][T20583] binder: 20582:20583 ioctl 4018620d 80000040 returned -16 [ 2474.277927][T20335] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 2474.298405][T20335] usb 7-1: device descriptor read/8, error -71 [ 2474.308200][ T3144] usb 8-1: new full-speed USB device number 104 using dummy_hcd [ 2474.465625][ T3144] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 2474.468484][ T3144] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2474.474308][ T3144] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 2474.479218][ T3144] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 2474.482907][ T3144] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2474.486962][ T3144] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2474.492097][ T3144] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2474.496367][ T3144] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2474.499899][ T3144] usb 8-1: Product: syz [ 2474.501532][ T3144] usb 8-1: Manufacturer: syz [ 2474.503044][ T3144] usb 8-1: SerialNumber: syz [ 2474.505201][ T3144] usb 8-1: config 0 descriptor?? [ 2474.508108][T20585] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2474.512273][ T3144] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2474.516725][ T3144] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2474.548039][T20335] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 2474.568523][T20335] usb 7-1: device descriptor read/8, error -71 [ 2474.678202][T20335] usb usb7-port1: unable to enumerate USB device [ 2474.713840][T18971] usb 8-1: USB disconnect, device number 104 [ 2474.717094][T18971] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 2475.997914][ T3060] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 2476.158063][ T3060] usb 10-1: Using ep0 maxpacket: 8 [ 2476.162024][ T3060] usb 10-1: config 0 has an invalid interface number: 56 but max is 0 [ 2476.165496][ T3060] usb 10-1: config 0 has no interface number 0 [ 2476.170160][ T3060] usb 10-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 2476.174068][ T3060] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2476.177345][ T3060] usb 10-1: Product: syz [ 2476.178810][ T3060] usb 10-1: Manufacturer: syz [ 2476.180373][ T3060] usb 10-1: SerialNumber: syz [ 2476.185992][ T3060] usb 10-1: config 0 descriptor?? [ 2476.364318][T20619] vxcan1: tx drop: invalid sa for name 0x0000002000000000 [ 2476.417138][T20623] netlink: 59 bytes leftover after parsing attributes in process `syz.6.12017'. [ 2476.432288][ T3060] peak_usb 10-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 2476.633916][ T3060] peak_usb 10-1:0.56 can0: sending command failure: -22 [ 2476.636126][ T3060] peak_usb 10-1:0.56 can0: sending command failure: -22 [ 2476.638593][ T3060] peak_usb 10-1:0.56 can0: sending command failure: -22 [ 2476.665889][T20628] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 2476.667946][T20628] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2476.670823][T20628] vhci_hcd vhci_hcd.0: Device attached [ 2476.698088][ T3060] peak_usb 10-1:0.56: probe with driver peak_usb failed with error -22 [ 2476.890152][T20607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2476.893857][T20607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2476.907880][T18971] usb 41-1: new high-speed USB device number 23 using vhci_hcd [ 2477.941102][T20630] vhci_hcd: connection reset by peer [ 2477.943094][ T223] vhci_hcd: stop threads [ 2477.944480][ T223] vhci_hcd: release socket [ 2477.946031][ T223] vhci_hcd: disconnect device [ 2478.650560][ T7498] usb 10-1: USB disconnect, device number 55 [ 2479.848000][T20335] usb 11-1: new high-speed USB device number 94 using dummy_hcd [ 2480.019052][T20335] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 2480.021838][T20335] usb 11-1: config 0 has no interface number 0 [ 2480.025765][T20335] usb 11-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2480.029627][T20335] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.032570][T20335] usb 11-1: Product: syz [ 2480.034318][T20335] usb 11-1: Manufacturer: syz [ 2480.036113][T20335] usb 11-1: SerialNumber: syz [ 2480.038591][T20335] usb 11-1: config 0 descriptor?? [ 2480.247256][T20335] usb 11-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2480.250964][T20335] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2480.255080][T20335] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2480.257713][T20335] usb 11-1: media controller created [ 2480.267195][T20335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2480.451142][T20335] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 2480.461531][T20335] usb 11-1: USB disconnect, device number 94 [ 2481.926793][T20717] binder: BINDER_SET_CONTEXT_MGR already set [ 2481.929616][T20717] binder: 20716:20717 ioctl 4018620d 80000180 returned -16 [ 2481.934407][T20717] binder: BINDER_SET_CONTEXT_MGR already set [ 2481.936742][T20717] binder: 20716:20717 ioctl 4018620d 80000040 returned -16 [ 2482.028433][T18971] vhci_hcd: vhci_device speed not set [ 2482.443265][T20735] binder: BINDER_SET_CONTEXT_MGR already set [ 2482.445637][T20735] binder: 20734:20735 ioctl 4018620d 80000180 returned -16 [ 2482.452091][T20735] binder: BINDER_SET_CONTEXT_MGR already set [ 2482.454569][T20735] binder: 20734:20735 ioctl 4018620d 80000040 returned -16 [ 2483.464464][T11922] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2483.467312][T11922] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2483.470289][T11922] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2483.473290][T11922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2483.475890][T11922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2483.575569][T20765] chnl_net:caif_netlink_parms(): no params data found [ 2483.612532][T20765] bridge0: port 1(bridge_slave_0) entered blocking state [ 2483.614900][T20765] bridge0: port 1(bridge_slave_0) entered disabled state [ 2483.617397][T20765] bridge_slave_0: entered allmulticast mode [ 2483.620396][T20765] bridge_slave_0: entered promiscuous mode [ 2483.623579][T20765] bridge0: port 2(bridge_slave_1) entered blocking state [ 2483.626009][T20765] bridge0: port 2(bridge_slave_1) entered disabled state [ 2483.628838][T20765] bridge_slave_1: entered allmulticast mode [ 2483.631315][T20765] bridge_slave_1: entered promiscuous mode [ 2483.653913][T20765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2483.658977][T20765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2483.691045][T20765] team0: Port device team_slave_0 added [ 2483.695325][T20765] team0: Port device team_slave_1 added [ 2483.724484][T20765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2483.726772][T20765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2483.735908][T20765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2483.741635][T20765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2483.743900][T20765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2483.752179][T20765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2483.778565][T20765] hsr_slave_0: entered promiscuous mode [ 2483.780764][T20765] hsr_slave_1: entered promiscuous mode [ 2483.782999][T20765] debugfs: 'hsr0' already exists in 'hsr' [ 2483.784833][T20765] Cannot create hsr debugfs directory [ 2483.848992][T20765] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2483.954538][T20765] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2484.023445][T20765] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2484.160693][T20765] netdevsim netdevsim5  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2484.225870][T20765] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2484.229729][T20765] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2484.233396][T20765] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2484.237318][T20765] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2484.253858][T20765] bridge0: port 2(bridge_slave_1) entered blocking state [ 2484.257103][T20765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2484.260337][T20765] bridge0: port 1(bridge_slave_0) entered blocking state [ 2484.263320][T20765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2484.288804][T20765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2484.297145][T15527] bridge0: port 1(bridge_slave_0) entered disabled state [ 2484.299899][T15527] bridge0: port 2(bridge_slave_1) entered disabled state [ 2484.306033][T20765] 8021q: adding VLAN 0 to HW filter on device team0 [ 2484.313121][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 2484.315501][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2484.321121][T15527] bridge0: port 2(bridge_slave_1) entered blocking state [ 2484.323356][T15527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2484.419686][T20765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2484.516270][T20765] veth0_vlan: entered promiscuous mode [ 2484.521133][T20765] veth1_vlan: entered promiscuous mode [ 2484.533234][T20765] veth0_macvtap: entered promiscuous mode [ 2484.536509][T20765] veth1_macvtap: entered promiscuous mode [ 2484.542616][T20765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2484.548051][T20765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2484.553649][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2484.556620][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2484.561000][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2484.565657][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2484.583624][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2484.586951][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2484.598918][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2484.602095][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2484.897890][T25638] usb 10-1: new full-speed USB device number 56 using dummy_hcd [ 2484.967910][ T841] usb 7-1: new full-speed USB device number 113 using dummy_hcd [ 2485.060522][T25638] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2485.064333][T25638] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2485.067142][T25638] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2485.069929][T25638] usb 10-1: Product: syz [ 2485.071355][T25638] usb 10-1: Manufacturer: syz [ 2485.072838][T25638] usb 10-1: SerialNumber: syz [ 2485.121020][ T841] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2485.124131][ T841] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2485.127224][ T841] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2485.130515][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2485.138561][ T841] usb 7-1: config 0 descriptor?? [ 2485.235899][ T5953] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 2485.238772][ T5953] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5953, name: sshd-session [ 2485.244545][ T5953] preempt_count: 1, expected: 0 [ 2485.246222][ T5953] RCU nest depth: 0, expected: 0 [ 2485.247843][ T5953] INFO: lockdep is turned off. [ 2485.249514][ T5953] Preemption disabled at: [ 2485.249521][ T5953] [] schedule+0xe0/0x3a0 [ 2485.252883][ T5953] CPU: 2 UID: 0 PID: 5953 Comm: sshd-session Not tainted syzkaller #0 PREEMPT(full) [ 2485.252898][ T5953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2485.252929][ T5953] Call Trace: [ 2485.252933][ T5953] [ 2485.252938][ T5953] dump_stack_lvl+0x16c/0x1f0 [ 2485.252955][ T5953] __might_resched+0x3c0/0x5e0 [ 2485.252966][ T5953] ? __pfx___might_resched+0x10/0x10 [ 2485.252977][ T5953] ? pcpu_block_update+0x562/0x660 [ 2485.252993][ T5953] ? pcpu_chunk_relocate+0x126/0x190 [ 2485.253005][ T5953] vfree+0x75/0xb50 [ 2485.253021][ T5953] ? rcu_is_watching+0x12/0xc0 [ 2485.253032][ T5953] ? kfree+0x24f/0x4d0 [ 2485.253041][ T5953] ? free_percpu+0x6db/0x13c0 [ 2485.253053][ T5953] futex_hash_free+0x98/0xc0 [ 2485.253066][ T5953] __mmdrop+0x33f/0x580 [ 2485.253078][ T5953] ? rcu_is_watching+0x12/0xc0 [ 2485.253088][ T5953] finish_task_switch.isra.0+0x7a4/0xc10 [ 2485.253098][ T5953] ? __switch_to+0x7a5/0x11a0 [ 2485.253113][ T5953] __schedule+0x1198/0x5de0 [ 2485.253128][ T5953] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2485.253140][ T5953] ? debug_object_activate+0x2ec/0x4c0 [ 2485.253153][ T5953] ? __pfx_debug_object_activate+0x10/0x10 [ 2485.253166][ T5953] ? __pfx___schedule+0x10/0x10 [ 2485.253179][ T5953] ? schedule+0x2d7/0x3a0 [ 2485.253189][ T5953] ? rcu_is_watching+0x12/0xc0 [ 2485.253198][ T5953] ? lock_release+0x201/0x2f0 [ 2485.253212][ T5953] schedule+0xe7/0x3a0 [ 2485.253223][ T5953] schedule_hrtimeout_range_clock+0x217/0x320 [ 2485.253234][ T5953] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 2485.253245][ T5953] ? tcp_stream_memory_free+0x157/0x1a0 [ 2485.253261][ T5953] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 2485.253277][ T5953] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2485.253288][ T5953] ? __pollwait+0x271/0x490 [ 2485.253300][ T5953] poll_schedule_timeout.constprop.0+0xc4/0x1c0 [ 2485.253311][ T5953] do_sys_poll+0xae8/0xdf0 [ 2485.253323][ T5953] ? __pfx_do_sys_poll+0x10/0x10 [ 2485.253339][ T5953] ? tcp_release_cb+0x272/0x4f0 [ 2485.253350][ T5953] ? __pfx_tcp_release_cb+0x10/0x10 [ 2485.253363][ T5953] ? __pfx_pollwake+0x10/0x10 [ 2485.253374][ T5953] ? __pfx_pollwake+0x10/0x10 [ 2485.253385][ T5953] ? __pfx_pollwake+0x10/0x10 [ 2485.253394][ T5953] ? __pfx_pollwake+0x10/0x10 [ 2485.253404][ T5953] ? __pfx_pollwake+0x10/0x10 [ 2485.253414][ T5953] ? __pfx_pollwake+0x10/0x10 [ 2485.253424][ T5953] ? __pfx_pollwake+0x10/0x10 [ 2485.253435][ T5953] ? rcu_is_watching+0x12/0xc0 [ 2485.253445][ T5953] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 2485.253462][ T5953] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2485.253473][ T5953] ? set_user_sigmask+0x21b/0x2b0 [ 2485.253483][ T5953] ? __pfx_set_user_sigmask+0x10/0x10 [ 2485.253495][ T5953] __x64_sys_ppoll+0x254/0x2d0 [ 2485.253517][ T5953] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 2485.253530][ T5953] ? ksys_write+0x1ac/0x250 [ 2485.253542][ T5953] ? __pfx_ksys_write+0x10/0x10 [ 2485.253555][ T5953] do_syscall_64+0xcd/0x490 [ 2485.253569][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2485.253580][ T5953] RIP: 0033:0x7fe3f88a7407 [ 2485.253589][ T5953] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2485.253600][ T5953] RSP: 002b:00007ffec2b9d520 EFLAGS: 00000202 ORIG_RAX: 000000000000010f [ 2485.253611][ T5953] RAX: ffffffffffffffda RBX: 00007fe3f8f8d300 RCX: 00007fe3f88a7407 [ 2485.253618][ T5953] RDX: 00007ffec2b9d560 RSI: 0000000000000007 RDI: 0000564889dc11e0 [ 2485.253624][ T5953] RBP: 00007ffec2b9d5d0 R08: 0000000000000008 R09: 0000000000000000 [ 2485.253630][ T5953] R10: 00007ffec2b9d660 R11: 0000000000000202 R12: 0000000000000001 [ 2485.253637][ T5953] R13: 00007ffec2b9d660 R14: 00000000000009b5 R15: 0000000000000004 [ 2485.253646][ T5953] [ 2485.395044][ C2] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2485.474467][T14035] usb 7-1: USB disconnect, device number 113 [ 2485.558197][T11922] Bluetooth: hci0: command tx timeout [ 2487.412391][T25638] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2487.416823][T15527] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2487.418041][T25638] usb 10-1: USB disconnect, device number 56 [ 2487.423109][T25638] usblp0: removed [ 2488.650307][T15527] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2488.691384][T15527] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2488.770897][T15527] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2488.868284][T15527] bridge_slave_1: left allmulticast mode [ 2488.870086][T15527] bridge_slave_1: left promiscuous mode [ 2488.871922][T15527] bridge0: port 2(bridge_slave_1) entered disabled state [ 2488.876144][T15527] bridge_slave_0: left allmulticast mode [ 2488.878073][T15527] bridge_slave_0: left promiscuous mode [ 2488.879979][T15527] bridge0: port 1(bridge_slave_0) entered disabled state [ 2488.981475][T15527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2488.985123][T15527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2488.988538][T15527] bond0 (unregistering): Released all slaves [ 2489.223129][T15527] hsr_slave_0: left promiscuous mode [ 2489.225995][T15527] hsr_slave_1: left promiscuous mode [ 2489.232012][T15527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2489.235095][T15527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2489.238620][T15527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2489.241138][T15527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2489.245931][T15527] veth1_macvtap: left promiscuous mode [ 2489.247687][T15527] veth0_macvtap: left promiscuous mode [ 2489.249597][T15527] veth1_vlan: left promiscuous mode [ 2489.251265][T15527] veth0_vlan: left promiscuous mode [ 2489.332963][T15527] team0 (unregistering): Port device team_slave_1 removed [ 2489.340061][T15527] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 22:47:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b43ffc0 RCX=ffffffff81af11d1 RDX=ffff8880431e0000 RSI=ffffffff81af11ab RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90002196f28 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed1005687ff9 R14=0000000000000001 R15=0000000000000002 RIP=ffffffff81af11ad RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057bfa4c0 CR3=000000005370e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000005dc5fdc RBX=0000000000000001 RCX=ffffffff8b908bf9 RDX=ffffed1005666656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=ffffed1003bdf488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801defa440 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057bfa4c0 CR3=000000005370e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616b45 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc9000309ef68 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=696d6f74615f6e69 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b0f8640 R15=ffffffff85616ae0 RIP=ffffffff85616b6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe3f8f8d300 ffffffff 00c00000 GS =0000 ffff8880976c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000559448446a68 CR3=000000004cc3a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff82083197 RDX=ffff88805f370000 RSI=ffffffff820831a5 RDI=0000000000000007 RBP=0000000000001254 RSP=ffffc90003e17e48 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000012 R12=0000000000000100 R13=0000000000000000 R14=ffff8880510abb90 R15=ffff8880510abba0 RIP=ffffffff81bb0e21 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c230000 CR3=0000000061fea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000