last executing test programs: 4m11.166440162s ago: executing program 0 (id=378): r0 = socket(0x2, 0x3, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@remote, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f0000000140)=@newchain={0x15a0, 0x64, 0x20, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff3, 0xf}, {0x8, 0x2}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xf, 0x6}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x152c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x85}, @TCA_U32_MARK={0x10, 0xa, {0x10000, 0xff}}, @TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3ff, 0x7fffffff, 0xe1, 0x63e5, 0xef5, 0x4, 0x7fffffff, 0x10, 0x5, 0x5, 0xa0ae, 0x7, 0x4, 0x8, 0x6, 0x0, 0x800, 0xff, 0xa54, 0x9, 0xf, 0x2, 0x2a, 0x4, 0x5, 0x0, 0x6, 0x8001, 0x0, 0x0, 0xfffffffc, 0x7, 0x4, 0x6, 0x7, 0x7, 0x80, 0x2, 0x6, 0x9, 0x5, 0xe2, 0xfffffff9, 0x101, 0x40, 0x0, 0xa27d, 0xb29d, 0x7, 0x4, 0x0, 0x3, 0x80000000, 0x2, 0x9fd, 0x0, 0xfffffffe, 0x0, 0x0, 0xffff, 0x80, 0x19d, 0x8001, 0x8da, 0x8, 0x3, 0x4, 0x9, 0x56fb, 0x4, 0x8af, 0x2, 0x80000000, 0xffffffff, 0x5, 0x2, 0x1, 0x1651, 0x40, 0x9, 0x9, 0x80, 0xfff, 0x8b70, 0x8, 0x6, 0x5, 0xffffff23, 0x7, 0x4, 0x7f, 0x1be, 0x100, 0x2d, 0xc1, 0x6, 0x3, 0x4, 0x5, 0x2de001d2, 0x6, 0x9, 0xfffffbff, 0xfffffff8, 0xfffffff9, 0x7, 0xfffffffd, 0x6, 0xb, 0x5e79, 0x6, 0x1ff, 0x401, 0x1, 0x6, 0x8000, 0xb0e7526f, 0x4, 0x2, 0x80, 0x3, 0x40, 0xfffffff9, 0xe5, 0x80000000, 0x58, 0x0, 0x7, 0x9, 0x800, 0x5, 0x3, 0x0, 0x1, 0x5, 0x7d, 0x6, 0x401, 0x7, 0x0, 0x1, 0x226, 0x4, 0x4, 0x3, 0x3, 0x1, 0x8, 0x7ff, 0x45d, 0xf, 0x3, 0xf, 0x8000, 0x83, 0x6, 0x5, 0x6, 0xf4, 0x135a, 0x31, 0x133f, 0x200, 0xfdb, 0x1, 0x9, 0x7, 0x7f, 0x5, 0x0, 0x9, 0x1ff, 0x7, 0x52f6dbf7, 0xfff, 0x4, 0x5, 0x0, 0xb, 0x771a4ad2, 0x1, 0x401, 0x8, 0x200, 0x7, 0x0, 0xff, 0x0, 0xfffffff7, 0x8, 0x4, 0x1, 0x9, 0xb6, 0x6, 0x200, 0xf86e, 0x2, 0x8, 0x5, 0x6, 0x9, 0x7, 0x7, 0x8554, 0x3733, 0x7f, 0xd69, 0x7, 0x1, 0x80, 0x6, 0x8, 0xe86, 0x8, 0x3, 0x5, 0x0, 0x6, 0x3, 0xa2a23ca3, 0x2, 0x6, 0x6, 0x4, 0x2, 0x8, 0x9, 0x6, 0x80000001, 0x9, 0xc955, 0x1, 0x1, 0x5, 0xfffffffe, 0xfffffff7, 0xfd, 0xe, 0x300000, 0x10001, 0x6, 0x3, 0x6c5c, 0x7, 0x940f, 0x1, 0xfffffffb, 0x2, 0x8, 0x5, 0x1, 0x2, 0x0, 0x7fff]}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x10}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_POLICE={0xc64, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3534}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xe6b5, 0x841f, 0xfffffff7, 0x2, 0x3, 0x895, 0x3, 0x6cf1, 0x9, 0x9, 0x4, 0x5, 0x0, 0x5, 0x4, 0x0, 0x3, 0x1, 0xfffffc01, 0x7b, 0x0, 0x8, 0x3, 0x8, 0x3, 0x4, 0x5, 0x6, 0x9, 0x1, 0x9, 0x0, 0x1, 0x3, 0x6, 0x3, 0x101, 0x3, 0x1, 0x7, 0x7fffffff, 0x2, 0x6, 0xc2, 0x1, 0x7, 0x7, 0x4, 0xb, 0x6, 0x6, 0x4, 0x0, 0x7, 0xf559000, 0x9, 0x1, 0x3, 0x5, 0x0, 0x4, 0x7ff, 0x7a8, 0x3, 0xcf1, 0x4, 0x84b, 0x2, 0xffffcaa5, 0x4, 0x368e, 0x7, 0x0, 0x400, 0x1, 0x0, 0x1, 0x4, 0x3, 0x2, 0x200, 0x8001, 0x0, 0xfffffffe, 0x0, 0x0, 0x5, 0xfffffff8, 0x81, 0x80000001, 0x5, 0x19, 0x6, 0x5, 0x3, 0x2, 0x6, 0x10000, 0x6, 0x800, 0x3, 0xe0000, 0x252f, 0x1ff, 0x4ad, 0x1, 0x0, 0xfffffffc, 0xffff3c7a, 0x80000000, 0x101, 0x4, 0x7, 0x3, 0x700bf1b7, 0x4670, 0x7, 0x5, 0x2, 0xc55, 0x5, 0xd, 0xffff, 0x8, 0x5, 0x9, 0x2, 0x10001, 0x2, 0x3, 0x5, 0x2a, 0x6, 0x9, 0xfffffe00, 0x8, 0x0, 0x173, 0x10000, 0x2, 0x4, 0xffff, 0x5, 0x5, 0x7fff, 0x3, 0x9, 0x3ff, 0x40, 0x4, 0x10, 0x1, 0x7, 0x8, 0xa, 0x1, 0xf2a0, 0x6, 0x10001, 0x2, 0xcaa4f2c, 0x1ff, 0x8f, 0x56000000, 0x1ff, 0x3, 0xfffffffa, 0xfffffff1, 0x101, 0x9, 0x3, 0x8, 0xf83, 0x6, 0x800, 0x0, 0xffffff78, 0x7, 0x1c, 0x80000001, 0x7, 0x6, 0x1, 0x6, 0x1, 0x3, 0x5c4, 0x7, 0x3, 0x9, 0x7ff, 0xffffffff, 0xf8, 0x7, 0x8, 0xb4, 0x1ff, 0x584, 0x6, 0x2, 0xffffe000, 0x0, 0x9, 0xff, 0x1, 0x5, 0x711, 0x5, 0x2, 0xfffffff7, 0x6, 0xffffff00, 0x1ff, 0x1, 0xffffffff, 0x3, 0x8, 0xac4, 0x5, 0xff, 0x7, 0x6d53, 0x3, 0x2, 0x8, 0xffffcea2, 0x5, 0xc64, 0x3, 0x6, 0x1, 0x6, 0x6, 0x6, 0x3, 0x0, 0xf7ee, 0x3c8, 0xf72, 0x1000, 0x5, 0xf2, 0x1da0, 0x0, 0x2, 0x6, 0x40000000, 0x4, 0x87, 0x5, 0xe, 0x4, 0x1, 0x101]}, @TCA_POLICE_RATE={0x404, 0x2, [0xbb, 0x80000001, 0x3, 0x1, 0xffffffff, 0x1, 0x9c7d, 0x7, 0x3, 0x5, 0xb, 0x39, 0x7, 0x3, 0x7, 0x8001, 0x4, 0x4, 0x5, 0x400, 0x453, 0xfff, 0x1, 0x1, 0x80000001, 0x80, 0x0, 0x3e6, 0xc, 0x2, 0x1, 0x3, 0x8000, 0x3f8, 0x4, 0xfffffffa, 0x37, 0x80000001, 0xfffffff8, 0x8, 0x40, 0x9, 0x1000, 0x800, 0x5, 0xfffffff7, 0x669, 0xfffffff7, 0xb8a, 0x7, 0x6, 0x2bf, 0x80000000, 0x2, 0x7, 0x10, 0x0, 0x0, 0x7, 0x2, 0x6, 0x2, 0x4, 0x1800, 0x4, 0xfffffffd, 0x2, 0x1, 0x1, 0x7ce, 0x0, 0x3, 0xb, 0x1ff, 0xb9, 0x3, 0xffffffff, 0xb, 0xb23, 0xa0000, 0x3ff, 0xff, 0x8, 0x10, 0x2, 0x9, 0xfffffff9, 0x1, 0x9, 0xa, 0x4, 0x10, 0xf, 0x8, 0xffffffff, 0x89, 0x7ff, 0x5, 0xbd8a, 0x3, 0x100, 0x6, 0x5b, 0xfffffffe, 0x8, 0x4de1, 0x8, 0x6, 0x6, 0x5, 0x69a, 0x7, 0x7f, 0x2, 0x66b, 0x40, 0x62d3b81f, 0x9, 0xf, 0x2, 0x8, 0x9, 0x5, 0x7c, 0x8, 0x5, 0x5, 0x2, 0xfffffc00, 0x7, 0x7, 0x2, 0x7, 0x1, 0x6, 0xffffff18, 0xfffffff8, 0x1b99, 0x6, 0x8, 0xfffffbff, 0xfe1f, 0x7, 0xfffffff9, 0x2, 0x9, 0x7, 0xd, 0x200, 0x1, 0x10001, 0x7fff, 0x5, 0x7fc00000, 0x3, 0xff, 0x40, 0x1, 0x1cd, 0x2882, 0x10, 0xa711, 0x2, 0x6, 0x8001, 0x4, 0x7, 0x2b22, 0x80000000, 0x5, 0x7ff, 0x4, 0x7, 0xfffffff7, 0x932, 0x4, 0x114, 0x4d8582e3, 0x2, 0x5, 0xb, 0x0, 0x3, 0xffff1a11, 0x3b21, 0xd7d8, 0x81, 0x3, 0x5, 0x4, 0x6, 0x6, 0x6, 0xff, 0x0, 0x7, 0xd7a, 0xffff, 0xf, 0x2, 0x9ba, 0x0, 0xfffffffe, 0x0, 0x1, 0x5, 0x80000000, 0x0, 0x2, 0xfffffff2, 0x2, 0xfffffff7, 0x41, 0x18, 0x9, 0x29f, 0x8, 0x81, 0xc, 0xfffffff7, 0x7fffffff, 0x5, 0xfffffff9, 0x6, 0x2, 0x81, 0x4, 0x9, 0x4, 0x3, 0x2, 0xa, 0x7, 0x1, 0x8, 0x0, 0x1, 0x7, 0xd, 0x5000, 0xffffca35, 0x8fd, 0x85, 0x5, 0x5, 0x57, 0x10000, 0x7, 0x7fffffff, 0xf, 0x9, 0x6, 0xfffff90a, 0x9, 0xd5, 0x800]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x6, 0x7, 0x9, {0x8, 0x2, 0x380, 0x8, 0x1, 0x7}, {0x6, 0x2, 0x1ff, 0x8, 0x5, 0xfffffff8}, 0x3, 0x9, 0x984a}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffffffff, 0x0, 0x2, 0x8, 0x5, 0x3, 0x50, 0x0, 0x80000001, 0x74ad, 0x100, 0x8, 0xffffffc5, 0x31b2bc0d, 0x0, 0xc, 0xfd72, 0x40, 0xffff, 0x6f0, 0x100, 0x5, 0x0, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x0, 0x4, 0x80, 0x400, 0x2, 0x2d, 0x3, 0x800fd3b, 0x10, 0x131, 0x400, 0x3, 0x5, 0x3, 0x0, 0x81, 0x6, 0x8, 0x1ff, 0x5, 0x5, 0x100, 0x4, 0x7, 0x6, 0x2, 0x7, 0xa1, 0x88, 0x800, 0x3, 0x5, 0x3, 0x1, 0x40, 0x5d1b, 0x10, 0x4, 0x60, 0x7f8, 0x4, 0x0, 0x8, 0x81, 0x4, 0x8001, 0x3, 0x0, 0x6, 0x2, 0x7, 0x6, 0x40, 0x1, 0x2, 0x8, 0x3, 0xa83a, 0xfffffffe, 0x5, 0x8, 0x7, 0xd86, 0x4, 0x16f0e683, 0x401, 0x3, 0x6, 0x2, 0x1, 0x6, 0x8, 0x936, 0x8, 0x0, 0x0, 0x7, 0x26cd, 0x30, 0x63, 0x3, 0x8, 0x7ff, 0x9, 0x8, 0x0, 0x3, 0x2, 0x5000, 0x9, 0xfff, 0x7fffffff, 0x0, 0x8, 0x2, 0xffffffff, 0x3, 0x5, 0x3, 0x6208, 0x0, 0x16, 0x5, 0x8000, 0x81, 0x8000, 0x81, 0x6, 0x4, 0x12fa70f5, 0xffffffff, 0xffffffff, 0x1, 0x2, 0xfffffe01, 0xc64, 0xe, 0xba05, 0x6, 0xbdb, 0x3, 0x3fc7, 0x0, 0x401, 0x6, 0x0, 0x2, 0xb546, 0x400, 0x0, 0x19c0, 0x8, 0x5, 0x0, 0x55, 0x8, 0x100000, 0x67, 0x81, 0x8, 0xfcf, 0x4, 0x4, 0xfff, 0xd468, 0x10001, 0x0, 0x66, 0x10000, 0x2, 0xfffffffb, 0x7f, 0x6, 0x8, 0x0, 0x4, 0x5, 0x7f, 0x51b, 0x800, 0x1ff, 0x3, 0xfffffffb, 0x9, 0x10001, 0x7fffffff, 0x16ef, 0xd2, 0x0, 0xfde9, 0x7, 0x3, 0x0, 0xe5, 0x6, 0x2, 0x5, 0xfffffffd, 0x1, 0xe, 0xf23, 0x3ff, 0xc0, 0x7, 0xe920, 0x400, 0x1, 0x2, 0x4, 0xff, 0x5, 0xb0, 0x7, 0xe, 0x1, 0x5d42, 0x81, 0xc, 0x4, 0x9, 0x2, 0x7, 0x8, 0x0, 0x1, 0x8, 0x1, 0x9, 0x7, 0x8, 0x5a161e2f, 0x3, 0x7, 0x0, 0x3ff, 0xfb4, 0x2, 0x276c063f, 0x22, 0xe, 0x7fffffff, 0x8, 0x7, 0x10001, 0x4, 0xc, 0x9]}]}, @TCA_U32_POLICE={0x46c, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x5, 0x6, 0x4, 0x0, {0x4, 0x0, 0x5, 0xa, 0x5, 0x8}, {0x1, 0x0, 0x71, 0xfff, 0x3, 0x7}, 0x200, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfad1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xffffff69, 0x5, 0x4, 0x7b, 0x9, 0x5, 0x4, 0x916e, 0x1, 0x5, 0x6, 0x8001, 0x101, 0x62, 0xfffff905, 0x100, 0xd65f776c, 0x2, 0x4, 0x0, 0x5, 0x9, 0x7ff, 0x4, 0x3e6, 0x4, 0x6, 0x8, 0x1ff, 0x4, 0x3, 0xb8b9, 0xc, 0xf, 0x6, 0x9, 0x80000000, 0x6, 0x1, 0x10, 0x137, 0x4, 0x1, 0x7, 0x37a5, 0x80000001, 0xf8a, 0x0, 0x8, 0x4, 0x463, 0xfffffffe, 0x2, 0x35b, 0x1bb0, 0x5, 0x1, 0xff, 0x6, 0xfffffffe, 0x474, 0x5, 0x82, 0xb7, 0x8b, 0xea, 0x7, 0x100, 0x8, 0x2, 0x967, 0x7, 0x7fff, 0xe432, 0xb705, 0x4, 0x1, 0x3, 0x80000001, 0x1, 0x3, 0x1, 0x6, 0xff, 0x2, 0xa, 0x8000, 0x6, 0x800, 0x5, 0x0, 0x400, 0x1, 0x2e, 0x8001, 0x6, 0x0, 0x7, 0x6, 0xc97, 0x4, 0xff5d, 0x6, 0x5, 0xffffa6ba, 0x7, 0x2, 0x0, 0x4, 0x80000001, 0x0, 0x5, 0x1ff, 0xfffffffc, 0x1, 0xfffffff9, 0x3, 0x1, 0x0, 0x9, 0x1ff, 0x7, 0xfffffbaa, 0x9, 0xec7c, 0xa047, 0x8, 0x9, 0xc86a, 0x2, 0xffffffd6, 0x4, 0x5, 0x80000000, 0xf, 0x9, 0x80, 0x9, 0x3ed6, 0xf, 0x3, 0x8, 0x3, 0x8, 0x8, 0x3, 0x3, 0xf009, 0x6, 0x9, 0xd5, 0x7, 0x9, 0x5, 0x5, 0x2, 0x8001, 0x30, 0x3, 0x59, 0x4, 0x8f, 0x0, 0x8, 0x7, 0x1, 0x6, 0x6, 0x8, 0x8b73, 0xdc9a, 0x0, 0xd2, 0x6, 0x8, 0x400, 0x1000, 0x3648, 0x85b, 0x7, 0x8, 0xc39, 0x8, 0x0, 0x4, 0x80000000, 0xe56d, 0x9, 0x2, 0x8001, 0x5, 0x4, 0x7fff, 0x200, 0x2, 0x194, 0x9, 0x4, 0x101, 0xfffffffd, 0x7f, 0xb, 0x9, 0x4, 0x8000, 0x9, 0x5, 0xbe3, 0x7, 0x5, 0x50a, 0x5, 0x81, 0x1880, 0xfffffff2, 0x5, 0xfffffffd, 0x9, 0x7ff, 0x2, 0x9, 0x81, 0x7, 0x8, 0x101, 0xfffffc01, 0xfff, 0x9, 0x200, 0xfffffff7, 0x4, 0x3, 0x8, 0x93e6, 0xbe6ad8f0, 0x0, 0x0, 0x1, 0x5, 0x5, 0x6, 0xaa, 0x5, 0x200, 0x9, 0x4, 0x7, 0x2, 0x9, 0x100, 0x1ff, 0x400, 0xb, 0x2, 0x40]}]}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0x5}}, @TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_CLASSID={0x8, 0x3, {0xa, 0xe}}]}}, @TCA_CHAIN={0x8, 0xb, 0xf5}, @TCA_CHAIN={0x8, 0xb, 0x1ce}]}, 0x15a0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 4m11.09638412s ago: executing program 0 (id=380): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x7, [@enum={0xa, 0xa, 0x0, 0x6, 0x4, [{0x1, 0x7fffffff}, {0x5}, {0x9, 0x64a}, {0xe, 0xced0}, {0xa, 0x7fffffff}, {0x3, 0xe}, {0x6, 0xa}, {0xc, 0xdb}, {0x2}, {0xe, 0xd}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x0, 0x0]}}, &(0x7f00000005c0)=""/4096, 0x7b, 0x1000, 0x0, 0x8092}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000900)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040, 0x2}) 4m9.996637967s ago: executing program 0 (id=386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/141, 0x8d, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000a80)=""/255, 0xff, 0x0, 0x3, 0x3}}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 4m9.907025081s ago: executing program 0 (id=388): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc4b, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0b4000020100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000400000000000000000000000748defa4a96651482264f4d653284ee0c0354ec7aff6be5f98a1dcfcd925ee400aac97a25e2f9ff2714e95149af420e0f3b8552cf965205909a2d6ecd2d260afb6dfc41b70d940d7d92399277b89ef7216e3b142fc381f1b5a7900000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x4) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0xfffffd1a, 0x555b40) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000008c0)=ANY=[@ANYRES8=r3, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67626f5b705f69643dd989710de60588fa59bd014401800000000000006a71831e8888412e8305", @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, {0x8000000002, 0x0, 0x413, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x3ff, 0x6000, 0x0, r6, r7, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000640)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, 0x50) r8 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x448180, 0x0) ioctl$FIBMAP(r8, 0x401070cd, &(0x7f0000000040)=0x3) syz_io_uring_setup(0x7ce8, &(0x7f0000000500)={0x0, 0x607f, 0x1000, 0x8000003, 0xe2}, &(0x7f0000000080)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x45, 0x0, r1, 0x80, &(0x7f0000000780)=@sco, 0x0, 0x0, 0x1}) 4m9.807158043s ago: executing program 0 (id=389): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa7f084dd5657bbbf, 0x14}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4m9.478535166s ago: executing program 0 (id=393): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fc}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) 4m9.355664636s ago: executing program 32 (id=393): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fc}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) 4m3.01720913s ago: executing program 4 (id=445): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000580), 0x0, 0x0) 4m2.904454261s ago: executing program 4 (id=447): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) dup(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000300)) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x200, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0x9, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x386d, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x80001, 0x4, 0x8, 0xe, 0x6, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0xe, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) write(r4, &(0x7f0000000000)="1ea28c31e3f6c8712c9f19a0fa5e42a29b4adda08c54bbb6198cb239d121d95b7f2b7fccaf13a73a333693cda927354b0906f6c0218e18ba747f3450a2673976990522d5212fbd2892a089c59d0d8ac3", 0x50) 4m2.861369726s ago: executing program 4 (id=448): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(0x0, 0x0, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa7f084dd5657bbbf, 0x14}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4m2.756856007s ago: executing program 4 (id=449): r0 = socket$inet_sctp(0x2, 0x1, 0x84) msgsnd(0x0, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x8000006) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0/file1\x00'}) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2fe665aa080fdfd7) 4m2.305034361s ago: executing program 4 (id=456): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x20000805) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200000) socket$netlink(0x10, 0x3, 0xa) dup(r2) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 4m1.090204054s ago: executing program 4 (id=470): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x23011, r1, 0x6a855000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xfffffb27, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3aa}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x19, 0x0, 0x0, &(0x7f0000001f40)=[@pktinfo={{0x20, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x20}}], 0x2, 0x1000) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) 4m1.007181461s ago: executing program 33 (id=470): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x23011, r1, 0x6a855000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xfffffb27, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3aa}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x19, 0x0, 0x0, &(0x7f0000001f40)=[@pktinfo={{0x20, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x20}}], 0x2, 0x1000) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) 9.152132408s ago: executing program 3 (id=1998): r0 = syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0xaf3e, "1404632f781d094635418f1a057dee16"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x44080) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000090601020000000800000000000000000900020073797a31000000000500010007000000100007800c00018008000140ffffffff78340ca980761ffad1935b2959ad98cc87a0cb706b1373"], 0x38}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) getpeername$l2tp(r6, &(0x7f0000000340)={0x2, 0x0, @empty}, &(0x7f0000000440)=0x10) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x8845}, 0x4000) openat$sr(0xffffff9c, 0x0, 0x8f000, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 6.219107899s ago: executing program 5 (id=2003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) 5.786311346s ago: executing program 5 (id=2004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x4c}}, 0x0) (async, rerun: 64) r1 = socket$inet(0x2, 0x3, 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async, rerun: 32) ptrace$cont(0x18, r7, 0x2, 0xfffffffffffffffa) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$bt_hci(r8, 0x0, 0x1, 0x0, &(0x7f0000000180)) (async) connect$inet(r8, 0x0, 0x0) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) (async) r10 = syz_open_pts(r9, 0x0) ioctl$TCSETS2(r10, 0x402c542b, &(0x7f0000000000)={0x49, 0x10, 0xfffff000, 0x1, 0x1, "e2076db91f5fa71a758077b8bf00e8e4958658", 0x0, 0x5}) r11 = dup(r10) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0x3) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r8, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) (async, rerun: 32) io_uring_enter(r4, 0x3516, 0xf400, 0x0, 0x0, 0x0) (rerun: 32) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 5.730474737s ago: executing program 5 (id=2005): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="010026bd7000fc"], 0x14}, 0x1, 0x0, 0x0, 0x40004801}, 0x24004880) socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x84}, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) 5.498524998s ago: executing program 2 (id=1990): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3c, @remote, 0x4e20, 0x2, 'fo\x00', 0x38, 0x0, 0x1}, {@multicast2, 0x4e23, 0x4, 0x0, 0xb, 0x4f}}, 0x44) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfb}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x38414761, 0x4, 0x2, 0x7, 0x0, 0x2, 0x1, 0x4, 0x1, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000240)) 5.229386083s ago: executing program 3 (id=2006): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r5, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x54}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(0xffffffffffffffff, r6, 0x0, 0x40008) shmget(0x3, 0x1000, 0x400, &(0x7f000022b000/0x1000)=nil) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b000003ff01a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 5.109573852s ago: executing program 1 (id=2008): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) r4 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f0000000180)={{}, 0x57}) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="db122930028354dce18f3800"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6}, 0x38) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) write(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) 4.849368122s ago: executing program 5 (id=2009): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0186404, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) request_key(0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6}, 0x18) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_XSAVE2(r8, 0x9000aecf, &(0x7f0000ffc000/0x4000)=nil) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r5, @ANYRES64, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYRESDEC=r7]) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000440)=@arm64) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e24, 0x1, @empty, 0x8}, 0x1c) 3.956855066s ago: executing program 2 (id=2010): request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='syz', 0xfffffffffffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0xa, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x80000002, 0x1b9}, &(0x7f00000001c0), &(0x7f0000000280)) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r4, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x44, r9, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, 'b+'}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000100), &(0x7f0000000480)={[&(0x7f0000000180)='{\x00']}, 0x0) openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) 3.952856681s ago: executing program 1 (id=2018): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000640)={0x40, 0xb, 0x2, "ecbb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 3.855249905s ago: executing program 2 (id=2011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r0}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x3, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000005c0)) 3.540923165s ago: executing program 2 (id=2012): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) rename(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00') write$char_usb(r1, &(0x7f0000000180)='0', 0xfe64) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x23, 0x28, {0x28, 0x7, "59ffed9ad0560b6ac94c292793e2820a378fca3f4695ffb034f72e7e4a1d8b4d3b0d9d083312"}}, &(0x7f00000001c0)={0x0, 0x3, 0xfb, @string={0xfb, 0x3, "7922f7c9de94898ea1da32be96c80748ee16df3a0f3dfb0a80362aa822c222aca47ec0d0d943d647e37c6f3f0adb1e116b4399caad57cf60de1e4ad5a6a1a7933a43f25e37cd0ee04b92b2f63a06515786009f2c91d7ad6c03ece99cfafccb4e95dea412038c9832129a626fbdb5407e71f60d24f178628081ee0a7206240e197c2e8cf61743c7369c3e8e51504a6522c7a97d0b4b6650b28a9dbe4ef8c2d9eab00d962d9b4e37bf905f39c8a046935becbb967c4c3549ec8a2dea042f39f8ad9b96941f8ccb36ccde285857b6ba8650d542f0ac0a6a2d8386deacf866351c1da2fcdc1b44175e8f37c78cd096751abdc8eabe0e0049e3d0b3"}}, &(0x7f0000000040)={0x0, 0x22, 0xe, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x1, "05c39a96"}, @local=@item_012={0x2, 0x2, 0x9, "0fec"}, @local=@item_4={0x3, 0x2, 0x9, "e3d9f1b4"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8e, 0x0, 0x1, {0x22, 0x65f}}}}, &(0x7f0000000500)={0x18, &(0x7f0000000140)={0x20, 0x9, 0x9, "0f541ec8c59e6ec68d"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0x20, 0x1, 0xc3, "0809a1ec6acae0b9409d83829e8420469777a17f1e6dcf80127d8ad4eb06e35ceece660122c4798513da16f53cc622490197e2deccf80aad757fc3cb7d6be2cfa6132be00803a8a44da3f41ba82681abcef1d6b218189f67b1ce577609cc6ca8cde1e3d47760409605b28e16343fecf10954fe412da3cbad3c8ad75f7990c9ec16515522dee51163e1abd5734bf7ef972fae362c004809cfb80db796e74104aeba55f68813b602762ac5e47a4c8698a01ecc1b00e36352ddc64ed873ba683ef95958f7"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x40}}) 3.487015909s ago: executing program 5 (id=2013): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r5, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x54}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r6, 0xffffffffffffffff, 0x0, 0x40008) shmget(0x3, 0x1000, 0x400, &(0x7f000022b000/0x1000)=nil) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b000003ff01a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 3.161344132s ago: executing program 1 (id=2014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r4, &(0x7f0000000180)={0x38, 0x0, 0x10000000, 0x8003, 0x5, 0xb86, 0x800000000, 0x0, 0xfff, 0x2}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x14) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) io_setup(0x4, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000a4d000/0x1000)=nil, 0x20a4d000}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x0, r0}, 0x38) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r6) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041606aaaa2aaaaa10"], 0x9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000340)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.095270525s ago: executing program 3 (id=2015): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x20000855) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 2.630033493s ago: executing program 3 (id=2016): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xd4a, &(0x7f0000000740)={0x0, 0x1c2a, 0x1000, 0x0, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000001c0)=0x304008000) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0xcc3, 0x1c1, 0x49, 0x0, 0x2f) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000240)=""/65, 0x58}, {&(0x7f00000000c0)=""/24, 0x18}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x97}}]}}]}, 0x48}}, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket(0x2a, 0x806, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x944, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x914, 0x2, [@TCA_CGROUP_POLICE={0x85c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf741}, @TCA_POLICE_RATE={0x404, 0x2, [0x485cb3c4, 0x10000d83, 0x3, 0x3, 0x4, 0x5, 0x0, 0x3, 0x400, 0x968, 0x3, 0x0, 0x1, 0x9, 0xa4e, 0xc9, 0x4, 0xfffffffe, 0x2, 0xffff0001, 0x7, 0x3e, 0x7, 0x2c7, 0x7f, 0xf7, 0x0, 0x7, 0x401, 0x1, 0x1000, 0x5, 0x9, 0x10001, 0x6, 0x774ac5d2, 0xcc, 0x9, 0x7fff, 0x1000, 0x10001, 0x0, 0x2, 0x9, 0x2, 0x52a3, 0x1, 0x2, 0x989, 0x1, 0x7, 0x9, 0x0, 0x9, 0x9, 0x3, 0x0, 0x6, 0x775, 0x10000, 0xa, 0x4, 0x9, 0x10000, 0x1000, 0x9, 0x9d93, 0x4, 0x9, 0x80, 0x3, 0x5, 0x7, 0xf, 0x9, 0x7f, 0x2292, 0x7, 0x7e7, 0xaf, 0x63e, 0x4, 0x9, 0x3, 0x80, 0x8000, 0x2, 0x6, 0xa, 0x6, 0x8, 0x1, 0x1, 0x4, 0x94, 0x2, 0x200, 0xe26, 0x1f6a, 0x2, 0xc2, 0x10, 0x2, 0x0, 0x53e3, 0x2, 0x6, 0xffffff7f, 0x7, 0x7fffffff, 0xa4, 0xf, 0x4, 0xfffffffb, 0x8, 0xfa, 0x4, 0x9, 0x1, 0x1, 0x8, 0x80000000, 0x0, 0x80, 0xd4b3, 0xffff115b, 0x21, 0xb011, 0xc, 0x1, 0x0, 0x1, 0xc, 0x1, 0x80000001, 0xfffffffc, 0x6, 0x8c35808, 0x100000, 0x7b, 0x6, 0x81, 0x5, 0x5, 0xcb, 0x1, 0x10, 0x4, 0x5, 0x5, 0x0, 0x1, 0x413, 0x4, 0x0, 0x2, 0x2, 0x5, 0x8, 0x10001, 0x3, 0x7, 0x1000, 0xc5c, 0xff, 0x8, 0x3, 0x7, 0x5, 0xb, 0xcfbc, 0x8001, 0x7, 0x3ffbdb2b, 0x6, 0xc7, 0x10, 0x3, 0x4, 0x3, 0xfff00000, 0x6, 0x7, 0x5, 0x1, 0x7, 0x4, 0xfffffffb, 0x7, 0x2, 0x3, 0x10001, 0x2, 0x800, 0x5f3e, 0x310e, 0xa, 0x3, 0x84, 0x350, 0x100, 0x7e, 0x5, 0xffffffff, 0x10000, 0x3, 0xb, 0x400, 0x6, 0x8000000, 0x7593, 0x574e, 0xffff27ed, 0x3, 0x0, 0x81, 0x10000, 0x9, 0x100, 0x1, 0x40, 0x8, 0x4, 0x6, 0x4, 0x2, 0x2, 0x2, 0x1, 0x7f, 0x1, 0x0, 0x400, 0x9, 0x3ff, 0x9, 0x5, 0x7, 0x7, 0x8000, 0x5, 0x80000000, 0x3, 0x3, 0x8, 0x80, 0x4, 0xc, 0x1, 0x1, 0x3, 0x9, 0x0, 0x1, 0x2, 0x7fffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0x6, 0x83c5, 0xf91, 0x7, 0x180002, 0x401, 0x7f, 0x9, 0xfff, 0x9, 0x37dc6672, 0x1666, 0x5, 0x591a, 0xed3, 0x6, 0x4, 0x2, 0xf, 0x0, 0x597a2420, 0x2, 0x1, 0x8, 0xeb, 0xfff, 0x9, 0x4eb1, 0x5, 0x7fffffff, 0x2, 0xfffffff8, 0x4, 0x1, 0x5, 0x0, 0x2b8, 0x7fff, 0xffff0001, 0x2, 0x21912676, 0x7, 0x40000000, 0x7fff, 0x2, 0x6, 0x5, 0x7, 0x9000000, 0x8, 0xfffffff9, 0x1, 0x9, 0x7fffffff, 0x7, 0xfff, 0xfdc1, 0xe, 0x0, 0x101, 0xd7, 0x8001, 0x1, 0x4, 0x101, 0xfffffffb, 0x0, 0x4, 0x5, 0x1, 0x2, 0x9, 0x0, 0x0, 0x8, 0x0, 0x3, 0x2, 0x4, 0x1, 0x8, 0x10001, 0x0, 0x5, 0x1, 0x4, 0x3, 0x200, 0xc, 0xfdf, 0x0, 0x5, 0x5, 0x7, 0x0, 0x8, 0x8, 0xff, 0x90, 0x10001, 0x1800000, 0x8, 0xabb7, 0x8, 0x7fff, 0x2, 0x8, 0x4, 0x8, 0x5, 0x2, 0x0, 0x9, 0xff, 0x4, 0x5, 0x9, 0x80000000, 0x0, 0x7, 0x1, 0xfffffff8, 0x9, 0x8, 0x8, 0x5, 0x2, 0x6a, 0x200, 0x5, 0x7, 0x5, 0x7, 0x3fcd, 0x9, 0x1, 0x9, 0x3cd00000, 0x44c, 0x8, 0xfffffbff, 0x80000001, 0x6, 0xa, 0x9, 0x2, 0x8000, 0x7, 0xfffffe00, 0x1, 0x9, 0x6, 0x8, 0x7f, 0xfad8, 0x4, 0x9, 0x0, 0x1, 0x36, 0x6, 0x7, 0x5, 0xfff, 0x4, 0x7, 0x0, 0x6, 0x3, 0xea, 0x4d2, 0x10, 0x1, 0xf0e, 0xfff, 0x401, 0x22, 0x400, 0xf, 0x8, 0x4, 0x8, 0xffff, 0x6, 0x5, 0x1, 0x8, 0xc, 0x3ff, 0x7, 0xc, 0x47, 0x10000, 0x1fc5, 0x0, 0x3, 0xffff, 0x7, 0xd105, 0x8, 0xebd, 0x8, 0x5, 0xfffffffe, 0x7, 0x8000, 0x401, 0x4, 0x1, 0x5, 0x2, 0x2, 0x1, 0x9, 0x1, 0x5, 0xe, 0x4, 0x4, 0x5, 0x2, 0x40, 0x80, 0x8, 0x7, 0x2, 0x9, 0x9, 0x2, 0x800, 0x4, 0x1, 0xa69, 0x1, 0x8, 0x9, 0x421, 0x10000, 0x10, 0x4, 0x2, 0x3, 0x6, 0x3, 0xb10, 0x0, 0x76, 0x6b1, 0x1, 0x0, 0xffff, 0x0, 0x200, 0x3a3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff22c3, 0x4, 0xa, 0x0, 0x7, {0xfe, 0x2, 0x9, 0x101, 0xfff7, 0xff}, {0x6, 0x2, 0x8, 0x1, 0x8}, 0xfffffff7, 0xc0, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_CGROUP_EMATCHES={0x74, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{}, {{0x2, 0x1}, {0x2}}}}, @TCF_EM_CMP={0x18, 0x5, 0x0, 0x0, {{0x3, 0x1, 0xff}, {0x5, 0x400, 0x5, 0x5, 0xc, 0x2}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xfff9, 0x9, 0x7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3ff, 0x7, 0xfffa}, {{0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x6a5}, {0x2, 0x2}}}]}]}, @TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x881, 0x1, 0x400}, {0x7fff, 0x8, 0x7fff, 0x6, 0x9, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xffff, 0x1, 0x3ff}, {0x100, 0x80, 0x2, 0x6, 0x5, 0x0, 0x1}}}]}]}]}}]}, 0x944}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r15) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r16, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) times(&(0x7f0000000080)) 2.282984499s ago: executing program 1 (id=2017): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3e, 0x684401) r2 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100102000040"], 0x0) syz_usb_disconnect(r2) syz_usb_disconnect(r1) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) syz_usb_disconnect(r2) 2.021187991s ago: executing program 5 (id=2019): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x4, 0x120, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x6, 0x6}, {0x6, 0x24, 0x1a, 0xed05, 0xd}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x58, 0x5, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x38, 0x7f, 0x1, 0x17}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf, 0x3, 0x80}}}}}}}]}}, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$rtl8150(0x5, 0x0, 0x0, 0x0) 2.020853453s ago: executing program 2 (id=2020): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000880)={0x74f, "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"}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.711040943s ago: executing program 3 (id=2021): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x3e, 0xbb, 0xaf, 0x10, 0x5ac, 0x12a8, 0xd4d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x5, 0x80, 0x73, [{{0x9, 0x4, 0x4, 0x1, 0x0, 0x6e, 0xf4, 0x1b, 0x10}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 730.535825ms ago: executing program 1 (id=2022): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000040)="89", 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 520.351792ms ago: executing program 3 (id=2023): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8d, 0x1e, 0x50, 0x20, 0x1039, 0x2120, 0x2a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xff, 0xc0, 0x0, [{{0x9, 0x4, 0x7d, 0xf6, 0x0, 0xe4, 0x40, 0x98, 0x2}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 69.461465ms ago: executing program 2 (id=2024): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b3e1b00000000000109022400040000000000000000010300000009210000000122050009"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003000000082505a8a440000102030109021b000101020800030800"], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r3, 0x80004507, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x14, {0x14, 0x22, "59a1b95388e86f7ce9d75a2b3f35625d0250"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x40, 0x11}, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000004e40)={0xe, 0x1, 0x1, 0x1, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000005c0)=""/70) syz_usb_connect(0x5, 0x4f, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x95, @string={0x95, 0x3, "53b608658516f0d381d96b5394a29ef8c9f9ab9a1d6ec963dd8d9484926f85d5ac051f19b3b42da167dfed39d43b049b25b04fc173350b40e4088de1f9c7bbd754a89865d27845ec48d5ca35cde3d3b4a113ba386f1580dd9cffcf8f56ebf0b29a20c8ad657211702cdc393c19f55bf6e49a52790200a49641f6a0f406fcf853c6ddf9394aceed9c200cf52e432690e03b959d"}}}, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x0, 0xb, 0x22, "80ab60a342937c782b11d38d540c18d050535b5f4b1146429d0f3da338b08a90fe2f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x20}, &(0x7f00000003c0)={0x20, 0x81, 0x1, 'a'}, &(0x7f0000000400)={0x20, 0x82, 0x2, 'gx'}, &(0x7f0000000440)={0x20, 0x83, 0x1, "c6"}, &(0x7f0000000480)={0x20, 0x84, 0x1, "ec"}, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=2025): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="0012ad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x0, 0x13, 0x2, "a260"}, 0x0, 0x0}) kernel console output (not intermixed with test programs): oint 0x8D has an invalid bInterval 0, changing to 7 [ 255.903048][ T6074] usb 8-1: config 0 interface 0 has no altsetting 0 [ 255.906493][ T6074] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.909383][ T6074] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.915729][ T6074] usb 8-1: config 0 interface 0 has no altsetting 0 [ 255.920094][ T6074] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.925888][ T6074] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.930579][ T6074] usb 8-1: config 0 interface 0 has no altsetting 0 [ 255.933829][ T6074] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.936743][ T6074] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.941837][ T6074] usb 8-1: config 0 interface 0 has no altsetting 0 [ 255.945786][ T6074] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 255.948771][ T6074] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 255.951349][ T6074] usb 8-1: Product: syz [ 255.954667][ T6074] usb 8-1: Manufacturer: syz [ 255.956442][ T6074] usb 8-1: SerialNumber: syz [ 255.969079][ T6074] usb 8-1: config 0 descriptor?? [ 255.982233][ T6074] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 255.991992][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.996025][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.188831][ T54] usb 8-1: USB disconnect, device number 22 [ 256.197608][ T54] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 256.611988][T12029] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1324'. [ 256.872219][T12037] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 256.875525][T12037] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 256.879197][T12037] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 256.882233][T12037] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 256.942225][T12038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1325'. [ 256.962922][T12041] overlayfs: missing 'lowerdir' [ 257.091824][T12044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.154098][T12045] random: crng reseeded on system resumption [ 257.916639][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.178215][T12064] Cannot find del_set index 65533 as target [ 258.189313][T12064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1330'. [ 258.193050][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1330'. [ 258.564262][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.704587][T12070] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 258.800274][T12070] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 258.813066][T12070] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 259.197158][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.516933][T12083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.590815][T12085] random: crng reseeded on system resumption [ 260.536241][T12101] random: crng reseeded on system resumption [ 261.125840][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.190090][T12098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1333'. [ 261.620777][T12126] netlink: 'syz.2.1341': attribute type 1 has an invalid length. [ 261.637036][T12126] 8021q: adding VLAN 0 to HW filter on device bond13 [ 261.766756][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.769383][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.473880][T12181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.607439][T12192] random: crng reseeded on system resumption [ 263.680244][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.033684][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 264.248055][T12209] netlink: 'syz.2.1348': attribute type 10 has an invalid length. [ 264.252340][T12209] batman_adv: batadv0: Adding interface: team0 [ 264.262150][T12209] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.271984][T12209] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 264.307796][T12209] netlink: 'syz.2.1348': attribute type 10 has an invalid length. [ 264.316979][T12209] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1348'. [ 264.328986][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.333539][T12209] team0: entered promiscuous mode [ 264.335650][T12209] team_slave_1: entered promiscuous mode [ 264.349080][T12209] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.370950][T12209] batman_adv: batadv0: Interface activated: team0 [ 264.374313][T12209] batman_adv: batadv0: Interface deactivated: team0 [ 264.377477][T12209] batman_adv: batadv0: Removing interface: team0 [ 264.415213][T12215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.869496][T12240] random: crng reseeded on system resumption [ 264.987376][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.448933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.479650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.880299][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.967844][T12302] netlink: 'syz.1.1364': attribute type 10 has an invalid length. [ 266.971827][T12302] batman_adv: batadv0: Adding interface: team0 [ 266.974183][T12302] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.982847][T12302] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 266.988266][T12302] netlink: 'syz.1.1364': attribute type 10 has an invalid length. [ 266.991164][T12302] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1364'. [ 266.994691][T12302] team0: entered promiscuous mode [ 266.997078][T12302] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.999258][T12302] batman_adv: batadv0: Interface activated: team0 [ 267.001455][T12302] batman_adv: batadv0: Interface deactivated: team0 [ 267.003534][T12302] batman_adv: batadv0: Removing interface: team0 [ 267.520829][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.524147][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.656775][T12308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1366'. [ 267.748568][ T53] IPVS: starting estimator thread 0... [ 267.841146][T12312] IPVS: using max 43 ests per chain, 103200 per kthread [ 267.956562][T12327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.991041][ T5935] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 268.026066][T12330] random: crng reseeded on system resumption [ 268.141481][ T5935] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 268.717850][T12335] netlink: 'syz.1.1385': attribute type 1 has an invalid length. [ 268.736116][T12335] 8021q: adding VLAN 0 to HW filter on device bond10 [ 268.771087][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.774477][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.777831][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 268.784233][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.787497][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.791688][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 268.794837][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.797732][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.801224][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 268.805517][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.808541][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.811407][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.814993][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 268.818342][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.821265][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.824775][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 268.827998][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.830886][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.834551][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 268.837544][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.840403][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.843846][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 268.846747][ T5935] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.849682][ T5935] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.853176][ T5935] usb 10-1: config 0 interface 0 has no altsetting 0 [ 268.858465][ T5935] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 268.861667][ T5935] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 268.864356][ T5935] usb 10-1: Product: syz [ 268.865695][ T5935] usb 10-1: Manufacturer: syz [ 268.867280][ T5935] usb 10-1: SerialNumber: syz [ 268.870743][ T5935] usb 10-1: config 0 descriptor?? [ 268.877957][ T5935] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 268.900851][T12340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.956910][T12342] random: crng reseeded on system resumption [ 269.081302][ T5935] usb 10-1: USB disconnect, device number 15 [ 269.086970][ T5935] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 269.362051][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.632229][T12352] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1381'. [ 269.764499][T12362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1384'. [ 269.789185][ T840] IPVS: starting estimator thread 0... [ 269.882245][T12364] IPVS: using max 43 ests per chain, 103200 per kthread [ 270.006831][T12370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.042980][ T53] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 270.072008][T12371] random: crng reseeded on system resumption [ 270.737335][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.993555][ T53] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 270.998618][ T53] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.001465][ T53] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.005561][ T53] usb 10-1: config 0 interface 0 has no altsetting 0 [ 271.009482][ T53] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.015355][ T53] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.022128][ T53] usb 10-1: config 0 interface 0 has no altsetting 0 [ 271.030457][ T53] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.032652][T12407] random: crng reseeded on system resumption [ 271.037709][ T53] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.044824][ T53] usb 10-1: config 0 interface 0 has no altsetting 0 [ 271.057018][ T53] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.062178][ T53] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.066147][ T53] usb 10-1: config 0 interface 0 has no altsetting 0 [ 271.071805][ T53] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.080134][ T53] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.084403][ T53] usb 10-1: config 0 interface 0 has no altsetting 0 [ 271.087612][ T53] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.091463][ T53] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.095490][ T53] usb 10-1: config 0 interface 0 has no altsetting 0 [ 271.098829][ T53] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.101732][ T53] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.105409][ T53] usb 10-1: config 0 interface 0 has no altsetting 0 [ 271.108387][ T53] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 271.111253][ T53] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 271.116050][ T53] usb 10-1: config 0 interface 0 has no altsetting 0 [ 271.120055][ T53] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 271.122927][ T53] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 271.125915][ T53] usb 10-1: Product: syz [ 271.127348][ T53] usb 10-1: Manufacturer: syz [ 271.128900][ T53] usb 10-1: SerialNumber: syz [ 271.148169][ T53] usb 10-1: config 0 descriptor?? [ 271.157586][ T53] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 271.363494][ T53] usb 10-1: USB disconnect, device number 16 [ 271.370996][ T53] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 271.806526][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 271.819686][ T40] audit: type=1804 audit(1762202388.040:1087): pid=12425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1398" name="file0" dev="hugetlbfs" ino=37983 res=1 errno=0 [ 271.975326][T12428] net_ratelimit: 1 callbacks suppressed [ 271.975337][T12428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.004211][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.031710][T12431] random: crng reseeded on system resumption [ 272.655095][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.693800][T12451] netlink: 'syz.5.1404': attribute type 1 has an invalid length. [ 272.729975][T12451] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.784902][T12454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1405'. [ 273.005020][ T6074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.045358][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.236630][T12473] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1412'. [ 273.247154][T12473] netlink: 'syz.1.1412': attribute type 1 has an invalid length. [ 273.285541][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.344881][ T6074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.463306][T12487] netlink: 'syz.1.1418': attribute type 1 has an invalid length. [ 273.477231][T12487] 8021q: adding VLAN 0 to HW filter on device bond11 [ 273.780146][T12504] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1421'. [ 273.785356][T12504] netlink: 'syz.5.1421': attribute type 1 has an invalid length. [ 273.925557][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.005811][T12517] random: crng reseeded on system resumption [ 274.648272][T12533] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1432'. [ 274.661231][T12533] netlink: 'syz.3.1432': attribute type 1 has an invalid length. [ 274.889365][T12543] netlink: 'syz.3.1437': attribute type 1 has an invalid length. [ 274.971027][T12548] netlink: 'syz.5.1438': attribute type 10 has an invalid length. [ 274.974362][T12548] macvlan1: entered allmulticast mode [ 275.206891][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.498196][T12577] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1443'. [ 275.502333][T12577] netlink: 'syz.3.1443': attribute type 1 has an invalid length. [ 275.847493][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.076948][ T840] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 276.265233][ T840] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 276.269783][ T840] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 276.273429][ T840] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 276.278330][ T840] usb 10-1: config 0 interface 0 has no altsetting 0 [ 276.282681][ T840] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 276.286486][ T840] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 276.297107][ T840] usb 10-1: config 0 interface 0 has no altsetting 0 [ 276.318340][ T840] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 276.321945][ T840] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 276.326279][ T840] usb 10-1: config 0 interface 0 has no altsetting 0 [ 276.353827][ T840] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 276.358049][ T840] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 276.362586][ T840] usb 10-1: config 0 interface 0 has no altsetting 0 [ 276.376490][ T840] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 276.384367][ T840] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 276.393891][ T840] usb 10-1: config 0 interface 0 has no altsetting 0 [ 276.402762][ T840] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 276.407294][ T840] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 276.410786][ T840] usb 10-1: config 0 interface 0 has no altsetting 0 [ 276.415554][ T840] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 276.418867][ T840] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 276.422817][ T840] usb 10-1: config 0 interface 0 has no altsetting 0 [ 276.427058][ T840] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 276.436996][ T840] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 276.440464][ T840] usb 10-1: config 0 interface 0 has no altsetting 0 [ 276.444531][ T840] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 276.447633][ T840] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 276.450219][ T840] usb 10-1: Product: syz [ 276.451745][ T840] usb 10-1: Manufacturer: syz [ 276.453325][ T840] usb 10-1: SerialNumber: syz [ 276.461247][ T840] usb 10-1: config 0 descriptor?? [ 276.466579][ T840] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 276.528125][T12615] netlink: 'syz.1.1451': attribute type 1 has an invalid length. [ 276.670038][ T841] usb 10-1: USB disconnect, device number 17 [ 276.674277][ T841] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 276.950878][ T40] audit: type=1800 audit(1762202393.166:1088): pid=12621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1452" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 277.145644][ T1144] net_ratelimit: 1 callbacks suppressed [ 277.145660][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.636136][T12646] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 277.690754][T12646] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 277.708651][T12646] netlink: 'syz.5.1456': attribute type 10 has an invalid length. [ 277.711156][T12646] mac80211_hwsim hwsim33 wlan1: left allmulticast mode [ 277.944023][T12652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.007666][T12655] random: crng reseeded on system resumption [ 278.408877][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.413912][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.600323][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 278.634851][T12677] 8021q: adding VLAN 0 to HW filter on device bond12 [ 278.685152][T12683] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1464'. [ 278.725608][T12683] batman_adv: batadv0: Interface deactivated: gretap1 [ 278.729266][T12683] batman_adv: batadv0: Removing interface: gretap1 [ 278.848633][T12688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.918293][T12691] random: crng reseeded on system resumption [ 279.695267][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.971976][T12694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1466'. [ 280.200704][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.260268][T12731] random: crng reseeded on system resumption [ 280.618837][T12742] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1476'. [ 280.635392][T12742] netlink: 'syz.2.1476': attribute type 1 has an invalid length. [ 280.639015][T12742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.644124][T12742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.870433][ T54] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 280.984399][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.031062][ T54] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 281.034599][ T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.037550][ T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.050330][ T54] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.059251][ T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.064201][ T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.078910][ T54] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.083053][ T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.086860][ T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.098700][ T54] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.108825][T12764] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1480'. [ 281.113007][ T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.136276][ T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.145676][ T54] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.161624][ T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.165460][ T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.175970][ T54] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.183933][ T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.188255][ T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.200883][ T54] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.213038][ T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.217498][ T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.232629][ T54] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.244228][ T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.250893][ T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.270315][ T54] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.277673][ T54] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 281.281688][ T54] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 281.289000][ T54] usb 10-1: Product: syz [ 281.292959][ T54] usb 10-1: Manufacturer: syz [ 281.297338][ T54] usb 10-1: SerialNumber: syz [ 281.312168][ T54] usb 10-1: config 0 descriptor?? [ 281.324224][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 281.326097][ T54] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 281.526399][ T5935] usb 10-1: USB disconnect, device number 18 [ 281.529403][ T5935] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 281.621144][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.918270][T12805] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1486'. [ 281.926561][T12805] netlink: 'syz.1.1486': attribute type 1 has an invalid length. [ 282.892070][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.534482][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.549533][T12851] random: crng reseeded on system resumption [ 283.986407][T12835] syz.2.1495 (12835) used greatest stack depth: 18424 bytes left [ 284.178675][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.562930][ T5935] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 284.592954][ T6010] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 284.724915][ T5935] usb 10-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 284.728837][ T5935] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.734638][ T5935] usb 10-1: config 0 descriptor?? [ 284.741694][ T5935] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input18 [ 284.753805][ T6010] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 284.757722][ T6010] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.760386][ T6010] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.764074][ T6010] usb 8-1: config 0 interface 0 has no altsetting 0 [ 284.766809][ T6010] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.769729][ T6010] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.773531][ T6010] usb 8-1: config 0 interface 0 has no altsetting 0 [ 284.776430][ T6010] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.779075][ T6010] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.782250][ T6010] usb 8-1: config 0 interface 0 has no altsetting 0 [ 284.785384][ T6010] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.787943][ T6010] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.791087][ T6010] usb 8-1: config 0 interface 0 has no altsetting 0 [ 284.794276][ T6010] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.797419][ T6010] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.801048][ T6010] usb 8-1: config 0 interface 0 has no altsetting 0 [ 284.804352][ T6010] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.807100][ T6010] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.810488][ T6010] usb 8-1: config 0 interface 0 has no altsetting 0 [ 284.813365][ T6010] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.816101][ T6010] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.819341][ T6010] usb 8-1: config 0 interface 0 has no altsetting 0 [ 284.822290][ T6010] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.825277][ T6010] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.828580][ T6010] usb 8-1: config 0 interface 0 has no altsetting 0 [ 284.832381][ T6010] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 284.835330][ T6010] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 284.837820][ T6010] usb 8-1: Product: syz [ 284.839097][ T6010] usb 8-1: Manufacturer: syz [ 284.840556][ T6010] usb 8-1: SerialNumber: syz [ 284.843314][ T6010] usb 8-1: config 0 descriptor?? [ 284.847774][ T6010] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 284.968315][ T840] usb 10-1: USB disconnect, device number 19 [ 285.048997][ T6010] usb 8-1: USB disconnect, device number 23 [ 285.054540][ T6010] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 285.459447][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.711561][T12894] netlink: 'syz.1.1503': attribute type 21 has an invalid length. [ 285.714497][T12894] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1503'. [ 285.827668][T12905] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 285.827668][T12905] program syz.5.1505 not setting count and/or reply_len properly [ 286.097204][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.735043][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.854247][T12935] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1512'. [ 286.963453][T12940] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1514'. [ 288.111808][T12974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.183060][T12971] random: crng reseeded on system resumption [ 288.291384][T12975] fuse: Bad value for 'group_id' [ 288.293062][T12975] fuse: Bad value for 'group_id' [ 288.674180][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.687776][T12967] netlink: 'syz.2.1520': attribute type 21 has an invalid length. [ 288.690292][T12967] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1520'. [ 288.706795][T12983] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1523'. [ 289.214292][T12975] Process accounting resumed [ 289.448549][T13011] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1528'. [ 289.538449][T13012] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 289.538475][T13012] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 289.539943][T13012] vhci_hcd vhci_hcd.0: Device attached [ 289.556772][T13012] smc: net device ip6_vti0 applied user defined pnetid SYZ1 [ 289.870144][T13027] 9pnet_fd: Insufficient options for proto=fd [ 289.875038][ T40] audit: type=1326 audit(1762202406.077:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.5.1531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 289.883440][ T40] audit: type=1326 audit(1762202406.077:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.5.1531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 289.886846][ T54] usb 44-1: SetAddress Request (6) to port 0 [ 289.892130][ T54] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 289.894608][ T40] audit: type=1326 audit(1762202406.077:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.5.1531" exe="/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 289.904955][ T40] audit: type=1326 audit(1762202406.087:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.5.1531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 289.915058][ T40] audit: type=1326 audit(1762202406.087:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.5.1531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 289.922577][ T40] audit: type=1326 audit(1762202406.087:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.5.1531" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 289.932369][ T40] audit: type=1326 audit(1762202406.087:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.5.1531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 289.940113][ T40] audit: type=1326 audit(1762202406.087:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.5.1531" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 289.940258][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.947910][ T40] audit: type=1326 audit(1762202406.137:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.5.1531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 289.958883][ T40] audit: type=1326 audit(1762202406.137:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13020 comm="syz.5.1531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 290.052802][T13013] vhci_hcd: connection reset by peer [ 290.055283][ T471] vhci_hcd: stop threads [ 290.057226][ T471] vhci_hcd: release socket [ 290.059404][ T471] vhci_hcd: disconnect device [ 290.497833][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.577545][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.820080][T13046] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 290.887647][T13046] CIFS mount error: No usable UNC path provided in device string! [ 290.887647][T13046] [ 290.891516][T13046] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 290.911767][T13046] CIFS mount error: No usable UNC path provided in device string! [ 290.911767][T13046] [ 290.915193][T13046] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 291.872695][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.991478][T13086] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1547'. [ 292.512812][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.040483][T13117] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 293.042673][T13117] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.045762][T13117] vhci_hcd vhci_hcd.0: Device attached [ 293.460293][T13118] vhci_hcd: connection closed [ 293.460475][ T1199] vhci_hcd: stop threads [ 293.464462][ T1199] vhci_hcd: release socket [ 293.466049][ T1199] vhci_hcd: disconnect device [ 293.466111][T13128] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 293.470620][T13128] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.479717][T13128] vhci_hcd vhci_hcd.0: Device attached [ 293.496839][T13128] FAULT_INJECTION: forcing a failure. [ 293.496839][T13128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.502492][T13128] CPU: 1 UID: 0 PID: 13128 Comm: syz.3.1555 Not tainted syzkaller #0 PREEMPT(full) [ 293.502506][T13128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.502514][T13128] Call Trace: [ 293.502517][T13128] [ 293.502522][T13128] dump_stack_lvl+0x16c/0x1f0 [ 293.502548][T13128] should_fail_ex+0x512/0x640 [ 293.502569][T13128] _copy_to_user+0x32/0xd0 [ 293.502587][T13128] simple_read_from_buffer+0xcb/0x170 [ 293.502605][T13128] proc_fail_nth_read+0x197/0x240 [ 293.502617][T13128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.502629][T13128] ? rw_verify_area+0xcf/0x6c0 [ 293.502639][T13128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.502650][T13128] vfs_read+0x1e4/0xcf0 [ 293.502663][T13128] ? __pfx_vfs_read+0x10/0x10 [ 293.502673][T13128] ? find_held_lock+0x2b/0x80 [ 293.502688][T13128] ? __fget_files+0x20e/0x3c0 [ 293.502703][T13128] ksys_read+0x12a/0x250 [ 293.502713][T13128] ? __pfx_ksys_read+0x10/0x10 [ 293.502725][T13128] ? rcu_is_watching+0x12/0xc0 [ 293.502738][T13128] __do_fast_syscall_32+0x7c/0x300 [ 293.502752][T13128] do_fast_syscall_32+0x32/0x80 [ 293.502765][T13128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.502778][T13128] RIP: 0023:0xf706d579 [ 293.502787][T13128] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 293.502797][T13128] RSP: 002b:00000000f541b590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 293.502807][T13128] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f541b620 [ 293.502813][T13128] RDX: 000000000000000f RSI: 00000000f7406ff4 RDI: 0000000000000000 [ 293.502823][T13128] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 293.502829][T13128] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 293.502834][T13128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.502848][T13128] [ 293.587326][T13129] vhci_hcd: connection closed [ 293.587581][ T12] vhci_hcd: stop threads [ 293.619493][ T12] vhci_hcd: release socket [ 293.621158][ T12] vhci_hcd: disconnect device [ 293.777561][T13148] batadv_slave_1: entered promiscuous mode [ 294.421745][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.982283][ T54] usb 44-1: device descriptor read/8, error -110 [ 295.385415][ T54] usb usb44-port1: attempt power cycle [ 295.704166][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.955102][ T54] usb usb44-port1: unable to enumerate USB device [ 296.063993][T13186] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 296.066070][T13186] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 296.068941][T13186] vhci_hcd vhci_hcd.0: Device attached [ 296.164882][T13190] 9pnet_fd: Insufficient options for proto=fd [ 296.169084][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 296.169099][ T40] audit: type=1326 audit(1762202668.370:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.3.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 296.182516][ T40] audit: type=1326 audit(1762202668.380:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.3.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 296.194604][ T40] audit: type=1326 audit(1762202668.400:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.3.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 296.206388][ T40] audit: type=1326 audit(1762202668.410:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.3.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 296.218594][ T40] audit: type=1326 audit(1762202668.420:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.3.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 296.227056][T13191] fuse: Bad value for 'group_id' [ 296.229119][ T40] audit: type=1326 audit(1762202668.430:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.3.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 296.230031][T13191] fuse: Bad value for 'group_id' [ 296.344830][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.374754][ T54] usb 48-1: SetAddress Request (7) to port 0 [ 296.377227][ T54] usb 48-1: new SuperSpeed USB device number 7 using vhci_hcd [ 296.390658][ T40] audit: type=1326 audit(1762202668.590:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.3.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 296.398048][ T40] audit: type=1326 audit(1762202668.600:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.3.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 296.646521][T13138] batadv_slave_1: left promiscuous mode [ 296.806369][T13206] ufs: You didn't specify the type of your ufs filesystem [ 296.806369][T13206] [ 296.806369][T13206] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 296.806369][T13206] [ 296.806369][T13206] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 296.819548][T13206] ufs: ufstype=old is supported read-only [ 297.068277][T13187] vhci_hcd: connection reset by peer [ 297.071209][ T1144] vhci_hcd: stop threads [ 297.075860][ T1144] vhci_hcd: release socket [ 297.078020][ T1144] vhci_hcd: disconnect device [ 297.166013][T13212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.462115][T13220] tipc: Enabling of bearer rejected, failed to enable media [ 297.625946][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.663377][T13222] tipc: Enabled bearer , priority 0 [ 297.672558][T13222] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 297.675367][T13222] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 297.966238][ T6023] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 298.118449][ T6023] usb 10-1: unable to get BOS descriptor or descriptor too short [ 298.121869][ T6023] usb 10-1: config 129 has an invalid interface number: 135 but max is 0 [ 298.124658][ T6023] usb 10-1: config 129 has an invalid interface number: 5 but max is 0 [ 298.128245][ T6023] usb 10-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 298.131129][ T6023] usb 10-1: config 129 has no interface number 0 [ 298.133601][ T6023] usb 10-1: config 129 has no interface number 1 [ 298.136111][ T6023] usb 10-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 298.140508][ T6023] usb 10-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 298.143942][ T6023] usb 10-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 298.148063][ T6023] usb 10-1: config 129 interface 135 has no altsetting 0 [ 298.150234][ T6023] usb 10-1: config 129 interface 5 has no altsetting 0 [ 298.154848][ T6023] usb 10-1: string descriptor 0 read error: -22 [ 298.157155][ T6023] usb 10-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 298.159975][ T6023] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.173194][ T6023] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.175520][ T6023] usb 10-1: MIDIStreaming interface descriptor not found [ 298.847593][ T6010] tipc: Node number set to 2119363609 [ 299.361287][T13244] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 299.363754][T13244] netlink: 'syz.1.1578': attribute type 7 has an invalid length. [ 299.368056][T13244] netlink: 'syz.1.1578': attribute type 8 has an invalid length. [ 299.371364][T13244] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1578'. [ 299.537158][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'. [ 299.885963][T13251] 9pnet_fd: Insufficient options for proto=fd [ 299.891036][ T40] audit: type=1326 audit(1762202672.085:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.2.1579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 299.898869][ T40] audit: type=1326 audit(1762202672.085:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.2.1579" exe="/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 300.102690][T13257] erofs (device nbd3): cannot find valid erofs superblock [ 300.265924][T13257] netlink: 'syz.3.1581': attribute type 10 has an invalid length. [ 300.268555][T13257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1581'. [ 300.271986][T13257] dummy0: left allmulticast mode [ 300.342160][T13261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.401021][T13262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1582'. [ 300.721373][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'. [ 300.840523][ T53] usb 10-1: USB disconnect, device number 20 [ 301.292862][T13284] netlink: 'syz.5.1588': attribute type 4 has an invalid length. [ 301.410792][T13289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.471358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.471361][ T54] usb 48-1: device descriptor read/8, error -110 [ 301.476158][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.489403][T13292] random: crng reseeded on system resumption [ 301.862383][ T54] usb usb48-port1: attempt power cycle [ 302.111941][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.179164][T13311] tipc: Enabling of bearer rejected, already enabled [ 302.225198][T13311] syzkaller0: mtu less than device minimum [ 302.312592][T13325] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 302.315357][T13325] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 302.318625][T13325] vhci_hcd vhci_hcd.0: Device attached [ 302.427169][ T54] usb usb48-port1: unable to enumerate USB device [ 302.853436][T13342] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 302.856179][T13342] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 302.860324][T13342] vhci_hcd vhci_hcd.0: Device attached [ 302.896429][T13342] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 302.902931][ T841] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 303.123332][ T54] usb 48-1: SetAddress Request (11) to port 0 [ 303.125934][ T54] usb 48-1: new SuperSpeed USB device number 11 using vhci_hcd [ 303.156461][T13326] vhci_hcd: connection reset by peer [ 303.158296][ T1199] vhci_hcd: stop threads [ 303.159716][ T1199] vhci_hcd: release socket [ 303.161497][ T1199] vhci_hcd: disconnect device [ 303.403463][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.432938][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'. [ 303.489344][T13337] netlink: 'syz.5.1599': attribute type 21 has an invalid length. [ 303.491904][T13337] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1599'. [ 303.669484][T13343] vhci_hcd: connection reset by peer [ 303.672882][ T1247] vhci_hcd: stop threads [ 303.676037][ T1247] vhci_hcd: release socket [ 303.678224][ T1247] vhci_hcd: disconnect device [ 303.703114][T13360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1604'. [ 304.758778][T13381] random: crng reseeded on system resumption [ 305.735416][T13406] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1614'. [ 305.854409][T13418] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1617'. [ 306.242500][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1621'. [ 306.472992][T13439] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1625'. [ 306.597641][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.639403][T13452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.736071][T13456] random: crng reseeded on system resumption [ 306.918773][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 306.918784][ T40] audit: type=1326 audit(1762202679.096:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 306.928675][ T40] audit: type=1326 audit(1762202679.106:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 306.936765][ T40] audit: type=1326 audit(1762202679.116:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 306.977506][ T40] audit: type=1326 audit(1762202679.136:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 307.017007][ T40] audit: type=1326 audit(1762202679.136:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 307.030965][ T40] audit: type=1326 audit(1762202679.136:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 307.037614][ T40] audit: type=1326 audit(1762202679.136:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 307.044375][ T40] audit: type=1326 audit(1762202679.136:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 307.056310][ T40] audit: type=1326 audit(1762202679.136:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 307.064456][ T40] audit: type=1326 audit(1762202679.146:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.1.1630" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 307.723028][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1634'. [ 307.880103][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.917007][T13492] tipc: Enabling of bearer rejected, failed to enable media [ 307.952012][T13495] netlink: 'syz.2.1639': attribute type 21 has an invalid length. [ 307.954955][T13495] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1639'. [ 308.029558][ T841] vhci_hcd: vhci_device speed not set [ 308.066015][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 308.280698][ T54] usb 48-1: device descriptor read/8, error -110 [ 308.961108][ T54] usb usb48-port1: attempt power cycle [ 309.171216][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.722966][ T54] usb usb48-port1: unable to enumerate USB device [ 310.995792][T13576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1660'. [ 310.999558][T13576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1660'. [ 311.383703][ T6023] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 311.399493][T13587] 8021q: adding VLAN 0 to HW filter on device bond13 [ 311.573971][ T6023] usb 8-1: Using ep0 maxpacket: 8 [ 311.577287][ T6023] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 311.580158][ T6023] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 311.583068][ T6023] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 311.586266][ T6023] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 311.645485][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.647194][ T6023] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.652009][ T6023] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 311.686090][ T6023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.689351][T13594] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 311.691910][T13594] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 311.704819][T13594] vhci_hcd vhci_hcd.0: Device attached [ 311.735328][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.921247][ T6023] usb 8-1: GET_CAPABILITIES returned 0 [ 311.922975][ T6023] usbtmc 8-1:16.0: can't read capabilities [ 311.974431][ T29] usb 48-1: SetAddress Request (15) to port 0 [ 311.976533][ T29] usb 48-1: new SuperSpeed USB device number 15 using vhci_hcd [ 312.125751][ T6023] usb 8-1: USB disconnect, device number 24 [ 312.271317][T13595] vhci_hcd: connection reset by peer [ 312.273135][ T471] vhci_hcd: stop threads [ 312.274524][ T471] vhci_hcd: release socket [ 312.276057][ T471] vhci_hcd: disconnect device [ 312.718565][T13619] 8021q: adding VLAN 0 to HW filter on device bond12 [ 313.034067][T13636] ptrace attach of "/syz-executor exec"[5940] was attempted by "/syz-executor exec"[13636] [ 313.075329][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 313.161560][T13642] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1682'. [ 313.410726][T13657] fuse: Bad value for 'fd' [ 313.651136][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.278232][T13675] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 314.280307][T13675] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 314.292680][T13675] vhci_hcd vhci_hcd.0: Device attached [ 314.488835][T13684] 8021q: adding VLAN 0 to HW filter on device bond14 [ 314.578039][ T54] usb 44-1: SetAddress Request (10) to port 0 [ 314.580011][ T54] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 314.604978][T13689] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1691'. [ 314.968689][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.017551][T13676] vhci_hcd: connection reset by peer [ 315.028932][ T471] vhci_hcd: stop threads [ 315.030766][ T471] vhci_hcd: release socket [ 315.032836][ T471] vhci_hcd: disconnect device [ 315.642659][T13714] 8021q: adding VLAN 0 to HW filter on device bond15 [ 315.662628][T13718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.685482][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1699'. [ 315.691359][T13716] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1699'. [ 315.696494][T13716] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1699'. [ 315.969809][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 315.969821][ T40] audit: type=1326 audit(1762202688.134:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 315.978554][ T40] audit: type=1326 audit(1762202688.144:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 315.985907][ T40] audit: type=1326 audit(1762202688.144:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 315.995638][ T40] audit: type=1326 audit(1762202688.144:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 316.004326][ T40] audit: type=1326 audit(1762202688.144:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 316.012740][ T40] audit: type=1326 audit(1762202688.144:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 316.021536][ T40] audit: type=1326 audit(1762202688.144:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 316.029020][ T40] audit: type=1326 audit(1762202688.144:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 316.036816][ T40] audit: type=1326 audit(1762202688.144:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 316.044733][ T40] audit: type=1326 audit(1762202688.144:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13724 comm="syz.1.1703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 316.398527][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 316.435403][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.438416][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.604044][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 316.608724][T13749] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 316.718324][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1713'. [ 316.722216][T13762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1713'. [ 316.725908][T13762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1713'. [ 316.740025][T13764] netlink: 'syz.1.1717': attribute type 24 has an invalid length. [ 316.867483][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.870142][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.011166][ T29] usb 48-1: device descriptor read/8, error -110 [ 317.426953][ T29] usb usb48-port1: attempt power cycle [ 317.438406][T13796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.493653][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.497642][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.515958][T13799] random: crng reseeded on system resumption [ 318.601191][T13871] Bluetooth: hci0: invalid len left 7, exp >= 112 [ 318.715567][ T29] usb usb48-port1: unable to enumerate USB device [ 318.746728][T13877] random: crng reseeded on system resumption [ 318.773396][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.580666][T13908] tipc: Started in network mode [ 319.582246][T13908] tipc: Node identity , cluster identity 4711 [ 319.584428][T13908] tipc: Failed to obtain node identity [ 319.586704][T13908] tipc: Enabling of bearer rejected, failed to enable media [ 319.664782][ T54] usb 44-1: device descriptor read/8, error -110 [ 320.075799][ T54] usb usb44-port1: attempt power cycle [ 320.129053][T13939] random: crng reseeded on system resumption [ 320.660425][ T54] usb usb44-port1: unable to enumerate USB device [ 321.782076][T13999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.850658][T13997] random: crng reseeded on system resumption [ 322.628509][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.815420][T14009] netlink: 'syz.2.1770': attribute type 21 has an invalid length. [ 322.819335][T14009] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1770'. [ 323.161830][T14013] netlink: 'syz.1.1771': attribute type 21 has an invalid length. [ 323.165114][T14013] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1771'. [ 323.269573][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.542143][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.544779][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.619853][T14060] netlink: 'syz.1.1782': attribute type 1 has an invalid length. [ 324.657719][T14060] 8021q: adding VLAN 0 to HW filter on device bond14 [ 324.935676][T14067] overlayfs: failed to clone lowerpath [ 325.509829][T14085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.601221][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 325.958148][T14109] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 326.530374][T14117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.605113][T14119] random: crng reseeded on system resumption [ 327.600300][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 327.800495][T14158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.201628][ T6194] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 328.353385][ T6194] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 328.357249][ T6194] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.360153][ T6194] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.363751][ T6194] usb 8-1: config 0 interface 0 has no altsetting 0 [ 328.366970][ T6194] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.369802][ T6194] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.373708][ T6194] usb 8-1: config 0 interface 0 has no altsetting 0 [ 328.376737][ T6194] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.379611][ T6194] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.383122][ T6194] usb 8-1: config 0 interface 0 has no altsetting 0 [ 328.383836][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.386165][ T6194] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.391259][ T6194] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.394834][ T6194] usb 8-1: config 0 interface 0 has no altsetting 0 [ 328.397855][ T6194] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.400676][ T6194] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.404225][ T6194] usb 8-1: config 0 interface 0 has no altsetting 0 [ 328.407251][ T6194] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.410134][ T6194] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.413747][ T6194] usb 8-1: config 0 interface 0 has no altsetting 0 [ 328.416692][ T6194] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.419512][ T6194] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.423031][ T6194] usb 8-1: config 0 interface 0 has no altsetting 0 [ 328.426160][ T6194] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.428858][ T6194] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.432486][ T6194] usb 8-1: config 0 interface 0 has no altsetting 0 [ 328.436564][ T6194] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 328.439423][ T6194] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 328.442201][ T6194] usb 8-1: Product: syz [ 328.443744][ T6194] usb 8-1: Manufacturer: syz [ 328.445243][ T6194] usb 8-1: SerialNumber: syz [ 328.448329][ T6194] usb 8-1: config 0 descriptor?? [ 328.453721][ T6194] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 328.655022][ T6194] usb 8-1: USB disconnect, device number 25 [ 328.682396][ T6194] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 328.750435][T14173] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 328.905839][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1808'. [ 329.023409][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.662631][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.763410][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1815'. [ 330.302775][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.369821][T14218] tmpfs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿtmpfs' [ 330.381345][T14218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.550878][T14226] random: crng reseeded on system resumption [ 331.374497][T14244] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1822'. [ 331.914756][T14276] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 331.917609][T14276] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 331.948430][T14276] vhci_hcd vhci_hcd.0: Device attached [ 331.989290][T14284] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1833'. [ 332.192956][ T54] usb 44-1: SetAddress Request (14) to port 0 [ 332.194939][ T54] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 332.212661][T14281] netlink: 'syz.3.1827': attribute type 21 has an invalid length. [ 332.222478][T14281] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1827'. [ 332.230994][T14305] netlink: 'syz.1.1841': attribute type 25 has an invalid length. [ 332.250759][T14307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1842'. [ 332.507134][T14277] vhci_hcd: connection reset by peer [ 332.513423][ T12] vhci_hcd: stop threads [ 332.515192][ T12] vhci_hcd: release socket [ 332.517099][ T12] vhci_hcd: disconnect device [ 332.759907][T14335] random: crng reseeded on system resumption [ 333.504648][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.532441][T14359] sg_write: data in/out 124/36 bytes for SCSI command 0x1c-- guessing data in; [ 333.532441][T14359] program syz.5.1851 not setting count and/or reply_len properly [ 333.574765][T14361] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1852'. [ 333.986704][T14388] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1862'. [ 334.018752][T14391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.063830][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.089885][T14394] random: crng reseeded on system resumption [ 334.859146][T14424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1871'. [ 335.424523][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.427949][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.430207][T14449] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 335.433644][T14449] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 335.437987][T14449] vhci_hcd vhci_hcd.0: Device attached [ 335.664491][ T5945] Bluetooth: hci1: command 0x0405 tx timeout [ 335.874971][T14443] netlink: 'syz.3.1873': attribute type 21 has an invalid length. [ 335.877535][T14443] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1873'. [ 335.942243][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'. [ 336.083001][T14450] vhci_hcd: connection closed [ 336.089196][ T13] vhci_hcd: stop threads [ 336.093098][ T13] vhci_hcd: release socket [ 336.106775][ T13] vhci_hcd: disconnect device [ 336.309569][T14473] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1880'. [ 337.715111][ T54] usb 44-1: device descriptor read/8, error -110 [ 337.759683][T14502] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 337.762403][T14502] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 337.776251][T14502] vhci_hcd vhci_hcd.0: Device attached [ 337.868670][T14514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.914365][T14502] netlink: 'syz.5.1883': attribute type 21 has an invalid length. [ 337.917391][T14502] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1883'. [ 338.054981][ T29] usb 48-1: SetAddress Request (19) to port 0 [ 338.057001][ T29] usb 48-1: new SuperSpeed USB device number 19 using vhci_hcd [ 338.075751][T14508] vhci_hcd: connection reset by peer [ 338.077685][ T1141] vhci_hcd: stop threads [ 338.079098][ T1141] vhci_hcd: release socket [ 338.080780][ T1141] vhci_hcd: disconnect device [ 338.125597][ T54] usb usb44-port1: attempt power cycle [ 338.705728][ T54] usb usb44-port1: unable to enumerate USB device [ 338.813086][T14552] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.894342][T14552] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.927113][T14556] ubi0: attaching mtd0 [ 338.934341][T14556] ubi0: scanning is finished [ 338.981772][T14552] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.107542][T14565] veth5: entered promiscuous mode [ 339.114478][T14567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1903'. [ 339.133624][T14552] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.143695][T14556] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 339.150420][T14556] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 339.154334][T14556] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 339.158643][T14556] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 339.162756][T14556] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 339.167757][T14556] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 339.170859][T14556] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3820586949 [ 339.178926][T14556] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 339.186180][T14569] ubi0: background thread "ubi_bgt0d" started, PID 14569 [ 339.188406][T14559] ubi0: detaching mtd0 [ 339.203008][T14559] ubi0: mtd0 is detached [ 339.267771][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.275999][ T1141] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.276253][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.287025][ T1141] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.308915][ T1141] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.324427][ T1141] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.413140][T14573] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1904'. [ 339.543100][T14580] FAULT_INJECTION: forcing a failure. [ 339.543100][T14580] name failslab, interval 1, probability 0, space 0, times 0 [ 339.548607][T14580] CPU: 1 UID: 0 PID: 14580 Comm: syz.3.1905 Not tainted syzkaller #0 PREEMPT(full) [ 339.548629][T14580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 339.548635][T14580] Call Trace: [ 339.548639][T14580] [ 339.548643][T14580] dump_stack_lvl+0x16c/0x1f0 [ 339.548659][T14580] should_fail_ex+0x512/0x640 [ 339.548675][T14580] ? __kmalloc_cache_noprof+0x5f/0x780 [ 339.548694][T14580] should_failslab+0xc2/0x120 [ 339.548708][T14580] __kmalloc_cache_noprof+0x72/0x780 [ 339.548724][T14580] ? __task_pid_nr_ns+0x1f5/0x500 [ 339.548739][T14580] ? autofs_wait+0x307/0x1a70 [ 339.548751][T14580] ? autofs_wait+0x307/0x1a70 [ 339.548760][T14580] autofs_wait+0x307/0x1a70 [ 339.548771][T14580] ? __pfx_path_check_mount+0x10/0x10 [ 339.548784][T14580] ? __pfx_autofs_wait+0x10/0x10 [ 339.548793][T14580] ? __pfx_path_check_mount+0x10/0x10 [ 339.548806][T14580] ? find_held_lock+0x2b/0x80 [ 339.548817][T14580] ? path_has_submounts+0xcf/0x120 [ 339.548832][T14580] ? do_raw_spin_unlock+0x172/0x230 [ 339.548848][T14580] ? find_held_lock+0x2b/0x80 [ 339.548860][T14580] autofs_mount_wait+0x132/0x380 [ 339.548877][T14580] autofs_d_automount+0x390/0x7f0 [ 339.548895][T14580] __traverse_mounts+0x1b9/0x830 [ 339.548912][T14580] step_into+0x5aa/0x21a0 [ 339.548924][T14580] ? __pfx_step_into+0x10/0x10 [ 339.548933][T14580] ? __pfx___up_read+0x10/0x10 [ 339.548948][T14580] ? walk_component+0x35e/0x5b0 [ 339.548957][T14580] ? lookup_fast+0x156/0x610 [ 339.548968][T14580] walk_component+0xfc/0x5b0 [ 339.548978][T14580] path_lookupat+0x142/0x6d0 [ 339.548989][T14580] filename_lookup+0x224/0x5f0 [ 339.549001][T14580] ? __pfx_filename_lookup+0x10/0x10 [ 339.549021][T14580] ? getname_kernel+0x52/0x370 [ 339.549035][T14580] ? __asan_memcpy+0x3c/0x60 [ 339.549047][T14580] kern_path+0x35/0x50 [ 339.549057][T14580] unix_find_other+0x3d5/0xb50 [ 339.549073][T14580] ? __pfx_unix_find_other+0x10/0x10 [ 339.549094][T14580] unix_dgram_sendmsg+0x972/0x17f0 [ 339.549111][T14580] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 339.549125][T14580] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 339.549143][T14580] ? __import_iovec+0x1dd/0x650 [ 339.549153][T14580] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 339.549170][T14580] ____sys_sendmsg+0xa98/0xc70 [ 339.549185][T14580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.549197][T14580] ? get_compat_msghdr+0x11a/0x170 [ 339.549216][T14580] ? __pfx__kstrtoull+0x10/0x10 [ 339.549231][T14580] ___sys_sendmsg+0x134/0x1d0 [ 339.549241][T14580] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.549250][T14580] ? __lock_acquire+0x622/0x1c90 [ 339.549276][T14580] ? __pfx___might_resched+0x10/0x10 [ 339.549289][T14580] __sys_sendmmsg+0x2f9/0x420 [ 339.549300][T14580] ? __pfx___sys_sendmmsg+0x10/0x10 [ 339.549315][T14580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 339.549333][T14580] ? fput+0x9b/0xd0 [ 339.549347][T14580] ? ksys_write+0x1ac/0x250 [ 339.549357][T14580] ? __pfx_ksys_write+0x10/0x10 [ 339.549371][T14580] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 339.549381][T14580] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 339.549394][T14580] __do_fast_syscall_32+0x7c/0x300 [ 339.549407][T14580] do_fast_syscall_32+0x32/0x80 [ 339.549420][T14580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.549433][T14580] RIP: 0023:0xf706d579 [ 339.549441][T14580] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 339.549452][T14580] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 339.549462][T14580] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000ec0 [ 339.549468][T14580] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.549474][T14580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.549480][T14580] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 339.549486][T14580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.549499][T14580] [ 339.687220][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1905'. [ 340.030347][T14580] veth3: entered promiscuous mode [ 340.722245][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.188321][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.293460][T14614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.356589][T14616] random: crng reseeded on system resumption [ 341.743108][T14588] netlink: 'syz.2.1907': attribute type 21 has an invalid length. [ 341.756517][T14588] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1907'. [ 341.905121][T14624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1913'. [ 342.143199][T14633] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1914'. [ 342.415073][T14645] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 342.417891][T14645] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 342.422282][T14645] vhci_hcd vhci_hcd.0: Device attached [ 342.696775][ T6023] usb 44-1: SetAddress Request (18) to port 0 [ 342.698741][ T6023] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 342.738682][T14642] netlink: 'syz.3.1915': attribute type 21 has an invalid length. [ 342.741520][T14642] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1915'. [ 343.061231][T14659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.108794][ T29] usb 48-1: device descriptor read/8, error -110 [ 343.115309][T14646] vhci_hcd: connection reset by peer [ 343.117912][ T471] vhci_hcd: stop threads [ 343.119325][ T471] vhci_hcd: release socket [ 343.120792][ T471] vhci_hcd: disconnect device [ 343.194511][T14665] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1922'. [ 343.593455][ T29] usb usb48-port1: attempt power cycle [ 343.987882][T14679] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1924'. [ 344.065064][T14681] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.071388][T14683] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1933'. [ 344.193313][T14681] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.217683][ T29] usb usb48-port1: unable to enumerate USB device [ 344.274002][T14681] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.393913][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.397963][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.408052][T14714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.437435][T14681] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.821291][ T471] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.826529][ T471] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.868649][ T471] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.874162][ T471] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.977061][T14718] infiniband syz1: set active [ 344.978775][T14718] infiniband syz1: added syz_tun [ 345.220535][T14718] RDS/IB: syz1: added [ 345.221903][T14718] smc: adding ib device syz1 with port count 1 [ 345.223863][T14718] smc: ib device syz1 port 1 has no pnetid [ 346.308239][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.795504][T14747] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 346.948429][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.428458][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.734085][T14778] netlink: 'syz.1.1944': attribute type 21 has an invalid length. [ 347.737352][T14778] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1944'. [ 347.748427][ T6023] usb 44-1: device descriptor read/8, error -110 [ 347.773430][T14777] netlink: 'syz.2.1943': attribute type 21 has an invalid length. [ 347.777952][T14777] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1943'. [ 347.809775][T14787] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1945'. [ 348.149241][ T6023] usb usb44-port1: attempt power cycle [ 348.709256][ T6023] usb usb44-port1: unable to enumerate USB device [ 349.339075][T14827] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1953'. [ 349.350931][T14829] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1954'. [ 349.433029][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.509213][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.533719][T14842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1957'. [ 350.376723][T14854] netlink: 'syz.2.1958': attribute type 21 has an invalid length. [ 350.380104][T14854] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1958'. [ 351.350367][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.411143][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 351.781253][ T34] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 351.929906][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 351.941484][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 351.944149][ T34] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 351.947757][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.953202][ T34] usb 10-1: config 0 descriptor?? [ 352.255223][T14909] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 352.257297][T14909] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 352.260511][T14909] vhci_hcd vhci_hcd.0: Device attached [ 352.369921][ T34] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 352.592118][T14908] netlink: 'syz.1.1976': attribute type 21 has an invalid length. [ 352.594657][T14908] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1976'. [ 352.637689][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1973'. [ 352.653446][ T841] usb 10-1: USB disconnect, device number 21 [ 352.690127][ T29] usb 44-1: SetAddress Request (22) to port 0 [ 352.692617][ T29] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 352.740284][ T1185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.049825][T14909] netlink: 'syz.3.1975': attribute type 21 has an invalid length. [ 353.052452][T14909] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1975'. [ 353.281621][T14921] kvm: faulting far call emulation tainted memory [ 353.284884][T14921] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 353.466620][T14910] vhci_hcd: connection reset by peer [ 353.468488][ T1185] vhci_hcd: stop threads [ 353.470727][ T1185] vhci_hcd: release socket [ 353.480651][ T1185] vhci_hcd: disconnect device [ 353.651507][T14915] netlink: 'syz.2.1977': attribute type 21 has an invalid length. [ 353.654898][T14915] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1977'. [ 353.732379][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 353.732394][ T40] audit: type=1326 audit(1762202981.888:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.5.1983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 353.743874][ T40] audit: type=1326 audit(1762202981.888:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.5.1983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 353.752520][ T40] audit: type=1326 audit(1762202981.888:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.5.1983" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 353.760979][ T40] audit: type=1326 audit(1762202981.888:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.5.1983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 353.772165][ T40] audit: type=1326 audit(1762202981.888:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.5.1983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 353.779472][ T40] audit: type=1326 audit(1762202981.888:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.5.1983" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 353.786749][ T40] audit: type=1326 audit(1762202981.888:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.5.1983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 353.793866][ T40] audit: type=1326 audit(1762202981.888:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.5.1983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 353.800889][ T40] audit: type=1326 audit(1762202981.888:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.5.1983" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 353.807375][ T40] audit: type=1326 audit(1762202981.888:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.5.1983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 354.479408][T14953] rdma_rxe: rxe_newlink: failed to add syz_tun [ 354.642329][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.699139][T14964] 9pnet_fd: Insufficient options for proto=fd [ 354.981542][ T5945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.985095][ T5945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.988119][ T5945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 354.992769][ T5945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.996396][ T5945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.273501][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.318308][T14969] chnl_net:caif_netlink_parms(): no params data found [ 355.406730][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.409535][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.412516][T14969] bridge_slave_0: entered allmulticast mode [ 355.417028][T14969] bridge_slave_0: entered promiscuous mode [ 355.421610][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.424555][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.426390][T14969] bridge_slave_1: entered allmulticast mode [ 355.429695][T14969] bridge_slave_1: entered promiscuous mode [ 355.436507][T14980] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 355.438705][T14980] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 355.441847][T14980] vhci_hcd vhci_hcd.0: Device attached [ 355.476933][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.485859][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.529801][T14969] team0: Port device team_slave_0 added [ 355.537579][T14969] team0: Port device team_slave_1 added [ 355.592865][T14969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.595708][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.606024][T14969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.613065][T14969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.615858][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.615997][T14976] netlink: 'syz.5.1991': attribute type 21 has an invalid length. [ 355.627278][T14969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.638341][T14976] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1991'. [ 355.688668][T14969] hsr_slave_0: entered promiscuous mode [ 355.691434][T14969] hsr_slave_1: entered promiscuous mode [ 355.694153][T14969] debugfs: 'hsr0' already exists in 'hsr' [ 355.696463][T14969] Cannot create hsr debugfs directory [ 355.741249][ T6023] usb 48-1: SetAddress Request (23) to port 0 [ 355.743577][ T6023] usb 48-1: new SuperSpeed USB device number 23 using vhci_hcd [ 355.816545][ T1141] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 355.907159][ T1141] geneve0 (unregistering): left promiscuous mode [ 355.989289][ T1141] bond0 (unregistering): left promiscuous mode [ 355.991431][ T1141] bond_slave_0: left promiscuous mode [ 356.003749][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.007150][ T1141] bond0 (unregistering): Released all slaves [ 356.023225][T14981] vhci_hcd: connection reset by peer [ 356.025699][ T13] vhci_hcd: stop threads [ 356.027033][ T13] vhci_hcd: release socket [ 356.028451][ T13] vhci_hcd: disconnect device [ 356.085232][ T1141] bond1 (unregistering): Released all slaves [ 356.179448][ T1141] bond2 (unregistering): (slave veth3): Releasing active interface [ 356.182463][ T1141] bond2 (unregistering): Released all slaves [ 356.255107][ T1141] bond3 (unregistering): Released all slaves [ 356.263110][ T1141] bond4 (unregistering): Released all slaves [ 356.340749][ T1141] bond5 (unregistering): Released all slaves [ 356.428510][ T1141] bond6 (unregistering): Released all slaves [ 356.515449][ T1141] bond7 (unregistering): Released all slaves [ 356.609267][ T1141] bond8 (unregistering): Released all slaves [ 356.690016][ T1141] bond9 (unregistering): Released all slaves [ 356.787185][ T1141] bond10 (unregistering): Released all slaves [ 356.868803][ T1141] bond11 (unregistering): Released all slaves [ 356.978077][ T1141] bond12 (unregistering): Released all slaves [ 357.034295][ T5298] Bluetooth: hci4: command tx timeout [ 357.065020][ T1141] bond13 (unregistering): Released all slaves [ 357.141092][ T1141] bond14 (unregistering): Released all slaves [ 357.192157][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.234941][ T1141] bond15 (unregistering): Released all slaves [ 357.326588][T14990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.384859][T14994] random: crng reseeded on system resumption [ 357.587645][T14997] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1995'. [ 357.622180][T14999] netlink: 'syz.1.1997': attribute type 30 has an invalid length. [ 357.751843][ T29] usb 44-1: device descriptor read/8, error -110 [ 357.833765][ T1185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.838815][T14999] infiniband syz0: set down [ 357.842259][T14999] infiniband syz0: added bond_slave_0 [ 357.874418][T14999] RDS/IB: syz0: added [ 357.876280][T14999] smc: adding ib device syz0 with port count 1 [ 357.878761][T14999] smc: ib device syz0 port 1 has no pnetid [ 358.112802][T15011] overlayfs: failed to resolve './file0': -2 [ 358.134226][T14969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.140579][T14969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.152413][T14969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.157738][T14969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.233246][ T29] usb usb44-port1: attempt power cycle [ 358.285935][T15022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.335585][T15029] syz1: rxe_newlink: already configured on syz_tun [ 358.532409][T14969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.603913][T14969] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.625743][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.628043][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.698719][ T1247] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.701022][ T1247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.813192][ T29] usb usb44-port1: unable to enumerate USB device [ 359.112595][ T5298] Bluetooth: hci4: command tx timeout [ 359.145164][ T1141] hsr_slave_0: left promiscuous mode [ 359.147456][ T1141] hsr_slave_1: left promiscuous mode [ 359.204034][T15037] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 359.435890][T15047] random: crng reseeded on system resumption [ 359.768026][ T1185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.474992][ T1141] team_slave_1 (unregistering): left promiscuous mode [ 360.477657][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 360.802906][ T6023] usb 48-1: device descriptor read/8, error -110 [ 361.004459][T14969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.009031][T14969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.033671][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.142017][T15057] syz.5.2003: page allocation failure: order:10, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 361.154148][T15057] CPU: 3 UID: 0 PID: 15057 Comm: syz.5.2003 Not tainted syzkaller #0 PREEMPT(full) [ 361.154165][T15057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 361.154172][T15057] Call Trace: [ 361.154189][T15057] [ 361.154194][T15057] dump_stack_lvl+0x16c/0x1f0 [ 361.154210][T15057] warn_alloc+0x248/0x3a0 [ 361.154223][T15057] ? __pfx_warn_alloc+0x10/0x10 [ 361.154233][T15057] ? psi_memstall_leave+0x1e6/0x2d0 [ 361.154247][T15057] ? __alloc_pages_direct_compact+0x466/0x580 [ 361.154259][T15057] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 361.154269][T15057] ? psi_memstall_leave+0x1e1/0x2d0 [ 361.154282][T15057] ? psi_memstall_leave+0x1e6/0x2d0 [ 361.154297][T15057] __alloc_frozen_pages_noprof+0xe9b/0x2470 [ 361.154311][T15057] ? trace_sched_exit_tp+0xd1/0x120 [ 361.154331][T15057] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 361.154345][T15057] ? __lock_acquire+0x622/0x1c90 [ 361.154360][T15057] ? __pfx___schedule+0x10/0x10 [ 361.154374][T15057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.154393][T15057] ? policy_nodemask+0xea/0x4e0 [ 361.154408][T15057] alloc_pages_mpol+0x1fb/0x550 [ 361.154423][T15057] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 361.154441][T15057] ___kmalloc_large_node+0xed/0x160 [ 361.154457][T15057] __kmalloc_large_node_noprof+0x1c/0x70 [ 361.154472][T15057] ? find_held_lock+0x2b/0x80 [ 361.154482][T15057] __kmalloc_noprof.cold+0xc/0x62 [ 361.154498][T15057] ? rds_info_getsockopt+0x377/0x4f0 [ 361.154514][T15057] ? rds_info_getsockopt+0x377/0x4f0 [ 361.154525][T15057] rds_info_getsockopt+0x377/0x4f0 [ 361.154538][T15057] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 361.154551][T15057] ? find_held_lock+0x2b/0x80 [ 361.154561][T15057] ? __might_fault+0x13b/0x190 [ 361.154576][T15057] rds_getsockopt+0x173/0x2d0 [ 361.154592][T15057] ? __pfx_rds_getsockopt+0x10/0x10 [ 361.154607][T15057] do_sock_getsockopt+0x34d/0x440 [ 361.154622][T15057] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 361.154634][T15057] ? __fget_files+0x204/0x3c0 [ 361.154651][T15057] __sys_getsockopt+0x123/0x1b0 [ 361.154671][T15057] __ia32_sys_getsockopt+0xbc/0x160 [ 361.154687][T15057] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.154698][T15057] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 361.154711][T15057] __do_fast_syscall_32+0x7c/0x300 [ 361.154725][T15057] do_fast_syscall_32+0x32/0x80 [ 361.154738][T15057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.154751][T15057] RIP: 0023:0xf7f36579 [ 361.154760][T15057] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 361.154769][T15057] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 361.154780][T15057] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000114 [ 361.154787][T15057] RDX: 000000000000271a RSI: 00000000ffffffff RDI: 0000000080000000 [ 361.154793][T15057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.154799][T15057] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 361.154805][T15057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.154818][T15057] [ 361.159057][T15057] Mem-Info: [ 361.192357][T14969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.194346][T15057] active_anon:4256 inactive_anon:11155 isolated_anon:0 [ 361.194346][T15057] active_file:6021 inactive_file:6299 isolated_file:0 [ 361.194346][T15057] unevictable:1768 dirty:99 writeback:0 [ 361.194346][T15057] slab_reclaimable:8858 slab_unreclaimable:81044 [ 361.194346][T15057] mapped:23785 shmem:12113 pagetables:1589 [ 361.194346][T15057] sec_pagetables:323 bounce:0 [ 361.194346][T15057] kernel_misc_reclaimable:0 [ 361.194346][T15057] free:56986 free_pcp:1179 free_cma:0 [ 361.199752][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2002'. [ 361.200387][ T40] kauditd_printk_skb: 210 callbacks suppressed [ 361.200396][ T40] audit: type=1326 audit(1762202989.345:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15053 comm="syz.1.2002" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 361.200423][ T40] audit: type=1326 audit(1762202989.345:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15053 comm="syz.1.2002" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 361.207444][ T6023] usb usb48-port1: attempt power cycle [ 361.208830][T15057] Node 0 active_anon:824kB inactive_anon:44kB active_file:4kB inactive_file:36kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:452kB dirty:0kB writeback:0kB shmem:3556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9128kB pagetables:1848kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB [ 361.217317][ T40] audit: type=1326 audit(1762202989.345:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15053 comm="syz.1.2002" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 361.218606][ T5298] Bluetooth: hci4: command tx timeout [ 361.220339][ T40] audit: type=1326 audit(1762202989.345:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15053 comm="syz.1.2002" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 361.222352][T15057] Node 1 active_anon:16428kB inactive_anon:44576kB active_file:24080kB inactive_file:25160kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:94688kB dirty:396kB writeback:0kB shmem:44896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6076kB pagetables:4508kB sec_pagetables:156kB all_unreclaimable? no Balloon:0kB [ 361.226181][ T40] audit: type=1326 audit(1762202989.345:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15053 comm="syz.1.2002" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 361.226856][T15057] Node 0 [ 361.228926][ T40] audit: type=1326 audit(1762202989.345:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15053 comm="syz.1.2002" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 361.230485][T15057] DMA free:2392kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:68kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.232005][ T40] audit: type=1326 audit(1762202989.345:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15053 comm="syz.1.2002" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 361.234315][T15057] lowmem_reserve[]: [ 361.235476][ T40] audit: type=1326 audit(1762202989.345:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15053 comm="syz.1.2002" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 361.241400][T15057] 0 [ 361.244223][ T40] audit: type=1326 audit(1762202989.345:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15053 comm="syz.1.2002" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 361.246599][T15057] 294 [ 361.249109][ T40] audit: type=1326 audit(1762202989.345:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15053 comm="syz.1.2002" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 361.251511][T15057] 294 [ 361.348151][T14969] veth0_vlan: entered promiscuous mode [ 361.351160][T15057] 294 [ 361.353214][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.373579][T14969] veth1_vlan: entered promiscuous mode [ 361.383258][T15057] 294 [ 361.394594][T15057] Node 0 DMA32 free:16784kB boost:0kB min:13448kB low:16808kB high:20168kB reserved_highatomic:0KB free_highatomic:0KB active_anon:748kB inactive_anon:44kB active_file:0kB inactive_file:32kB unevictable:3536kB writepending:0kB zspages:272kB present:1032196kB managed:301156kB mlocked:0kB bounce:0kB free_pcp:2908kB local_pcp:444kB free_cma:0kB [ 361.404872][T15057] lowmem_reserve[]: 0 0 0 0 0 [ 361.406410][T15057] Node 1 DMA32 free:207392kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16628kB inactive_anon:44576kB active_file:24080kB inactive_file:25160kB unevictable:3536kB writepending:396kB zspages:4832kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:4852kB local_pcp:1336kB free_cma:0kB [ 361.418646][T15057] lowmem_reserve[]: 0 0 0 0 0 [ 361.420375][T15057] Node 0 DMA: 36*4kB (UE) 27*8kB (UE) 15*16kB (UE) 6*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2392kB [ 361.425726][T15057] Node 0 DMA32: 17*4kB (UME) 42*8kB (UME) 34*16kB (UME) 18*32kB (UME) 32*64kB (ME) 17*128kB (UME) 9*256kB (ME) 7*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 0*4096kB = 16756kB [ 361.430892][T15057] Node 1 DMA32: 4707*4kB (UME) 2153*8kB (UME) 525*16kB (UME) 480*32kB (UME) 180*64kB (UME) 165*128kB (UME) 77*256kB (UME) 63*512kB (UME) 37*1024kB (UM) 12*2048kB (UM) 0*4096kB = 206884kB [ 361.437185][T15057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.440132][T15057] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 361.443653][T15057] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.446928][T15057] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 361.450161][T15057] 25234 total pagecache pages [ 361.451852][T15057] 805 pages in swap cache [ 361.453338][T15057] Free swap = 75016kB [ 361.454634][T15057] Total swap = 124996kB [ 361.456932][T15057] 524155 pages RAM [ 361.458232][T15057] 0 pages HighMem/MovableOnly [ 361.459945][T15057] 207971 pages reserved [ 361.461312][T15057] 0 pages cma reserved [ 361.467264][T14969] veth0_macvtap: entered promiscuous mode [ 361.474754][T14969] veth1_macvtap: entered promiscuous mode [ 361.502338][T14969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.517137][T14969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.528215][ T1141] IPVS: stop unused estimator thread 0... [ 361.529836][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.536927][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.540358][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.544993][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.678845][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.684740][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.729159][ T471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.733378][ T471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.734659][T15085] random: crng reseeded on system resumption [ 361.826196][ T6023] usb usb48-port1: unable to enumerate USB device [ 362.391120][T15105] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 362.393199][T15105] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 362.427503][T15105] vhci_hcd vhci_hcd.0: Device attached [ 362.713686][ T6023] usb 44-1: SetAddress Request (26) to port 0 [ 362.729822][ T6023] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 362.763708][ T6194] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 362.830774][T15105] netlink: 'syz.3.2006': attribute type 21 has an invalid length. [ 362.836236][T15105] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2006'. [ 362.944162][ T6194] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 362.951494][ T6194] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.955740][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.959169][ T6194] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.962624][ T6194] usb 10-1: config 0 interface 0 has no altsetting 0 [ 362.968069][ T6194] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.971017][ T6194] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.977077][ T6194] usb 10-1: config 0 interface 0 has no altsetting 0 [ 362.980095][ T6194] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.983001][ T6194] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.987467][ T6194] usb 10-1: config 0 interface 0 has no altsetting 0 [ 362.990413][ T6194] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.993415][ T6194] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.997149][ T6194] usb 10-1: config 0 interface 0 has no altsetting 0 [ 363.000277][ T6194] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.003939][ T6194] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.007415][ T6194] usb 10-1: config 0 interface 0 has no altsetting 0 [ 363.015913][ T6194] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.018757][ T6194] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.021858][ T6194] usb 10-1: config 0 interface 0 has no altsetting 0 [ 363.025209][ T6194] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.028086][ T6194] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.031481][ T6194] usb 10-1: config 0 interface 0 has no altsetting 0 [ 363.034617][ T6194] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.037873][ T6194] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.041326][ T6194] usb 10-1: config 0 interface 0 has no altsetting 0 [ 363.045390][ T6194] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 363.048649][ T6194] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 363.051260][ T6194] usb 10-1: Product: syz [ 363.052613][ T6194] usb 10-1: Manufacturer: syz [ 363.054255][ T6194] usb 10-1: SerialNumber: syz [ 363.062280][ T6194] usb 10-1: config 0 descriptor?? [ 363.067946][ T6194] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 363.275425][ T5298] Bluetooth: hci4: command tx timeout [ 363.282452][ T6194] usb 10-1: USB disconnect, device number 22 [ 363.287447][ T6194] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 363.377467][T15138] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 363.439401][T15106] vhci_hcd: connection reset by peer [ 363.445273][ T72] vhci_hcd: stop threads [ 363.446908][ T72] vhci_hcd: release socket [ 363.453108][ T72] vhci_hcd: disconnect device [ 363.596400][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.024626][T15150] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 364.026692][T15150] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 364.029394][T15150] vhci_hcd vhci_hcd.0: Device attached [ 364.114059][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 364.245632][T15158] netlink: 'syz.3.2015': attribute type 1 has an invalid length. [ 364.245927][T15150] netlink: 'syz.5.2013': attribute type 21 has an invalid length. [ 364.268227][T15159] gfs2: Unknown parameter 'acl'' [ 364.284089][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 364.290964][T15158] 8021q: adding VLAN 0 to HW filter on device bond15 [ 364.291051][ T29] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 364.298187][T15150] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2013'. [ 364.311586][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.317661][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 364.321574][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 364.325987][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.330613][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 364.335373][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.384470][ T5319] usb 48-1: SetAddress Request (27) to port 0 [ 364.386888][ T5319] usb 48-1: new SuperSpeed USB device number 27 using vhci_hcd [ 364.548582][ T29] usb 7-1: GET_CAPABILITIES returned 0 [ 364.552201][ T29] usbtmc 7-1:16.0: can't read capabilities [ 364.662753][T15151] vhci_hcd: connection reset by peer [ 364.665082][ T72] vhci_hcd: stop threads [ 364.666876][ T72] vhci_hcd: release socket [ 364.668896][ T72] vhci_hcd: disconnect device [ 364.751193][T15146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.757544][T15146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.760834][ T9] usb 7-1: USB disconnect, device number 3 [ 365.504589][ T841] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 365.514874][ T471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.554642][ T6194] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 365.657111][ T841] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 365.660603][ T841] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 365.663784][ T841] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 365.666632][ T841] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 365.670033][ T841] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 365.675092][ T841] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 365.677944][ T841] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 365.680572][ T841] usb 10-1: Product: syz [ 365.681911][ T841] usb 10-1: Manufacturer: syz [ 365.688098][ T841] cdc_wdm 10-1:1.0: skipping garbage [ 365.689759][ T841] cdc_wdm 10-1:1.0: skipping garbage [ 365.692477][ T841] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 365.694351][ T841] cdc_wdm 10-1:1.0: Unknown control protocol [ 365.706480][ T6194] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.709879][ T6194] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 365.712931][ T6194] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.717168][ T6194] usb 7-1: config 0 descriptor?? [ 365.814653][ T6074] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 365.974711][ T6074] usb 8-1: Using ep0 maxpacket: 16 [ 365.979722][ T6074] usb 8-1: unable to get BOS descriptor or descriptor too short [ 365.984307][ T6074] usb 8-1: config 12 has an invalid interface number: 4 but max is 0 [ 365.987395][ T6074] usb 8-1: config 12 has no interface number 0 [ 365.990031][ T6074] usb 8-1: config 12 interface 4 has no altsetting 0 [ 365.995356][ T6074] usb 8-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice=d4.d0 [ 365.998647][ T6074] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.001928][ T6074] usb 8-1: Product: syz [ 366.003786][ T6074] usb 8-1: Manufacturer: syz [ 366.005503][ T6074] usb 8-1: SerialNumber: syz [ 366.126595][ T6194] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 366.136013][ T6194] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0926:3333.0007/input/input19 [ 366.236241][ T6194] keytouch 0003:0926:3333.0007: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 366.252412][ T6074] apple-mfi-fastcharge 8-1: USB disconnect, device number 26 [ 366.660660][ T29] usb 7-1: USB disconnect, device number 4 Stopping sshd: stopped /usr/sbin/sshd (pid 5736) OK [ 366.805253][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.844972][T15177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.849269][T15177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Stopping crond: [ 367.015107][ T6074] usb 8-1: new high-speed USB device number 27 using dummy_hcd stopped /usr/sbin/crond (pid 5730) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5649) [ 367.165232][ T6074] usb 8-1: Using ep0 maxpacket: 32 [ 367.168906][ T6074] usb 8-1: config 0 has an invalid interface number: 125 but max is 0 [ 367.172352][ T6074] usb 8-1: config 0 has no interface number 0 [ 367.174930][ T6074] usb 8-1: config 0 interface 125 has no altsetting 0 [ 367.194414][ T6074] usb 8-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 367.198792][ T6074] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.202094][ T6074] usb 8-1: Product: syz [ 367.205576][ T6074] usb 8-1: Manufacturer: syz [ 367.207585][ T6074] usb 8-1: SerialNumber: syz [ 367.211715][ T6074] usb 8-1: config 0 descriptor?? Stopping network: [ 367.423206][ T6074] usb 8-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 367.445218][ T34] usb 7-1: new full-speed USB device number 5 using dummy_hcd OK Stopping iptables: OK [ 367.616805][ T34] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 367.620229][ T34] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.623313][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 367.627210][ T34] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 367.630015][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.633632][ T34] usb 7-1: config 0 descriptor?? Stopping system message bus: [ 367.755478][ T6023] usb 44-1: device descriptor read/8, error -110 done [ 368.042396][ T34] hid_parser_main: 24 callbacks suppressed [ 368.042409][ T34] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 368.046778][ T34] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 368.049547][ T34] hid-steam 0003:28DE:1102.0008: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 368.078917][ T6074] usb 8-1: reset high-speed USB device number 27 using dummy_hcd [ 368.105938][ T34] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' connected [ 368.111738][ T34] input: Steam Controller as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:28DE:1102.0008/input/input20 [ 368.124831][ T34] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 368.129070][ T34] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 368.134715][ T34] hid-steam 0003:28DE:1102.0009: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 368.145993][ T6023] usb usb44-port1: attempt power cycle Stopping klogd: [ 368.241257][T15200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.243908][T15200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.248340][T15200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.251223][T15200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.254860][T15200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.257896][T15200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 OK [ 368.261834][T15200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.263287][ T29] usb 10-1: USB disconnect, device number 23 [ 368.264650][T15200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Stopping acpid: [ 368.434221][ T6074] usb 8-1: failed to restore interface 125 altsetting 246 (error=-71) [ 368.440884][ T6074] ueagle-atm 8-1:0.125: usbatm_usb_probe: bind failed: -19! [ 368.444815][ T6074] usb 8-1: USB disconnect, device number 27 [ 368.471323][ T841] usb 7-1: USB disconnect, device number 5 [ 368.483608][ T841] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' disconnected [ 368.605743][ T29] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 368.635842][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.706109][ T6023] usb usb44-port1: unable to enumerate USB device [ 368.726255][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.755620][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 368.759289][ T29] usb 10-1: config 0 has an invalid interface number: 149 but max is 0 [ 368.761865][ T29] usb 10-1: config 0 has no interface number 0 [ 368.765487][ T29] usb 10-1: New USB device found, idVendor=086a, idProduct=0102, bcdDevice=c8.e6 [ 368.768477][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.771055][ T29] usb 10-1: Product: syz [ 368.772433][ T29] usb 10-1: Manufacturer: syz [ 368.774052][ T29] usb 10-1: SerialNumber: syz [ 368.776762][ T29] usb 10-1: config 0 descriptor?? [ 368.779746][ T29] emi26 - firmware loader 10-1:0.149: emi26_probe start [ 368.784179][ T29] usb 10-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 368.787007][ T29] usb 10-1: Falling back to sysfs fallback for: emi26/loader.fw [ 368.982063][T15267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.984933][T15267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.988424][T15267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.991142][T15267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.200564][T15314] netlink: 'syz.1.2033': attribute type 1 has an invalid length. [ 369.205794][ T6023] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 369.217520][T15314] 8021q: adding VLAN 0 to HW filter on device bond16 OK [ 369.367153][ T6023] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.369613][ T6023] usb 8-1: config 0 has no interface number 0 [ 369.376727][ T6023] usb 8-1: New USB device found, idVendor=187f, idProduct=0010, bcdDevice=ee.4d [ 369.379832][ T6023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.385874][ T6023] usb 8-1: Product: syz [ 369.387278][ T6023] usb 8-1: Manufacturer: syz [ 369.388738][ T6023] usb 8-1: SerialNumber: syz [ 369.391362][ T6023] usb 8-1: config 0 descriptor?? Stopping syslogd: stopped /sbin/syslogd (pid 5330) OK [ 369.446005][ T5319] usb 48-1: device descriptor read/8, error -110 [ 369.601455][ T6023] smsusb:smsusb_probe: board id=13, interface number 1 [ 369.604193][ T6023] smsusb:smsusb_probe: stellar device in cold state was found at usb\8-1. [ 369.607942][ T6023] usb 8-1: Direct firmware load for dvbt_bda_stellar_usb.inp failed with error -2 [ 369.610651][ T6023] usb 8-1: Falling back to sysfs fallback for: dvbt_bda_stellar_usb.inp [ 369.846762][ T5319] usb usb48-port1: attempt power cycle [ 370.156452][ T5945] Bluetooth: hci1: command 0x0405 tx timeout umount: can't remount debugfs read-only umount: can't remount tmpfs read-only [ 370.426966][ T5319] usb usb48-port1: unable to enumerate USB device umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to localhost closed by remote host. [ 370.827974][ T61] smc: removing ib device syz1 [ 370.847873][ T841] syz1: Port: 1 Link DOWN [ 370.932104][ T1199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.055137][ T1199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.181791][ T1199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.288049][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.302904][ T1199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.454105][ T1199] bridge_slave_1: left allmulticast mode [ 371.456751][ T1199] bridge_slave_1: left promiscuous mode [ 371.459297][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.464441][ T1199] bridge_slave_0: left allmulticast mode [ 371.468681][ T1199] bridge_slave_0: left promiscuous mode [ 371.470589][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 371.749303][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.753423][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.757263][ T1199] bond0 (unregistering): Released all slaves [ 372.265617][ T1199] hsr_slave_0: left promiscuous mode [ 372.267971][ T1199] hsr_slave_1: left promiscuous mode [ 372.269975][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.272339][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.275996][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.278946][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.321241][ T1199] veth1_macvtap: left promiscuous mode [ 372.323500][ T1199] veth0_macvtap: left promiscuous mode [ 372.325774][ T1199] veth1_vlan: left promiscuous mode [ 372.328163][ T1199] veth0_vlan: left promiscuous mode [ 372.557429][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.596740][T15410] smc: removing ib device syz2 [ 372.602692][T15410] smc: removing ib device syz0 [ 372.606948][T15410] smc: removing smcd device lo [ 372.612988][ T6023] smsusb:smsusb1_load_firmware: failed to open 'dvbt_bda_stellar_usb.inp' mode 4, trying again with default firmware [ 372.620453][ T29] usb 10-1: emi26_load_firmware - request_firmware() failed [ 372.622718][ T29] usb 10-1: emi26_load_firmware - error loading firmware: error = -2 [ 372.625264][ T29] emi26 - firmware loader 10-1:0.149: probe with driver emi26 - firmware loader failed with error -5 [ 372.629390][ T6023] usb 8-1: Direct firmware load for dvbt_bda_stellar_usb.inp failed with error -2 [ 372.632253][ T6023] usb 8-1: Falling back to sysfs fallback for: dvbt_bda_stellar_usb.inp [ 372.635149][ T6023] ------------[ cut here ]------------ [ 372.636856][ T6023] WARNING: CPU: 1 PID: 6023 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x6d3/0xbe0 [ 372.640573][ T6023] Modules linked in: [ 372.642167][ T6023] CPU: 1 UID: 0 PID: 6023 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 372.646531][ T6023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 372.650098][ T6023] Workqueue: usb_hub_wq hub_event [ 372.651899][ T6023] RIP: 0010:firmware_fallback_sysfs+0x6d3/0xbe0 [ 372.654328][ T6023] Code: bb fb e9 da f9 ff ff e8 db 66 dd fb e8 d6 1f a3 fb 31 ff 89 c3 89 c6 e8 0b 62 dd fb 85 db 0f 84 17 fb ff ff e8 be 66 dd fb 90 <0f> 0b 90 48 c7 c6 c0 57 1f 8c 4c 89 e2 4c 89 f7 e8 88 14 f9 ff e9 [ 372.661519][ T6023] RSP: 0018:ffffc90004c86dc8 EFLAGS: 00010293 [ 372.663450][ T6023] RAX: 0000000000000000 RBX: 00000000fffffff5 RCX: ffffffff85df0685 [ 372.665908][ T6023] RDX: ffff8880278d8000 RSI: ffffffff85df0692 RDI: 0000000000000005 [ 372.668467][ T6023] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 372.670944][ T6023] R10: 00000000fffffff5 R11: 0000000000002b81 R12: ffffffff8c7a3e40 [ 372.673413][ T6023] R13: ffff888027ee1b40 R14: ffff8880249480b0 R15: 0000000000001770 [ 372.675896][ T6023] FS: 0000000000000000(0000) GS:ffff888097910000(0000) knlGS:0000000000000000 [ 372.679139][ T6023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.681786][ T6023] CR2: 0000561be8354ea8 CR3: 000000002904d000 CR4: 0000000000352ef0 [ 372.684961][ T6023] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 372.688165][ T6023] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 372.690833][ T6023] Call Trace: [ 372.691913][ T6023] [ 372.692851][ T6023] ? _request_firmware+0xd57/0x1470 [ 372.694501][ T6023] _request_firmware+0xfe9/0x1470 [ 372.696106][ T6023] ? __pfx__request_firmware+0x10/0x10 [ 372.697872][ T6023] request_firmware+0x35/0x50 [ 372.699371][ T6023] smsusb_probe+0xb00/0x1090 [ 372.700827][ T6023] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 372.702515][ T6023] ? __pfx_smsusb_probe+0x10/0x10 [ 372.704124][ T6023] ? mark_held_locks+0x49/0x80 [ 372.705634][ T6023] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 372.707598][ T6023] ? __pm_runtime_set_status+0x13c/0xa80 [ 372.709884][ T6023] usb_probe_interface+0x303/0xa40 [ 372.711742][ T6023] ? __pfx_usb_probe_interface+0x10/0x10 [ 372.714008][ T6023] really_probe+0x241/0xa90 [ 372.715891][ T6023] __driver_probe_device+0x1de/0x440 [ 372.718231][ T6023] driver_probe_device+0x4c/0x1b0 [ 372.720289][ T6023] __device_attach_driver+0x1df/0x310 [ 372.722098][ T6023] ? __pfx___device_attach_driver+0x10/0x10 [ 372.723947][ T6023] bus_for_each_drv+0x159/0x1e0 [ 372.725466][ T6023] ? __pfx_bus_for_each_drv+0x10/0x10 [ 372.727197][ T6023] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.728835][ T6023] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 372.730690][ T6023] __device_attach+0x1e4/0x4b0 [ 372.732227][ T6023] ? __pfx___device_attach+0x10/0x10 [ 372.733917][ T6023] ? do_raw_spin_unlock+0x172/0x230 [ 372.735772][ T6023] bus_probe_device+0x17f/0x1c0 [ 372.737861][ T6023] device_add+0x1148/0x1aa0 [ 372.739666][ T6023] ? __pfx_device_add+0x10/0x10 [ 372.741586][ T6023] ? wakeup_sysfs_add+0x51/0x60 [ 372.743168][ T6023] usb_set_configuration+0x1187/0x1e20 [ 372.745115][ T6023] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 372.747541][ T6023] usb_generic_driver_probe+0xb1/0x110 [ 372.749372][ T6023] usb_probe_device+0xef/0x3e0 [ 372.751320][ T6023] ? __pfx_usb_probe_device+0x10/0x10 [ 372.753131][ T6023] really_probe+0x241/0xa90 [ 372.754571][ T6023] __driver_probe_device+0x1de/0x440 [ 372.756247][ T6023] ? usb_driver_applicable+0x1c7/0x220 [ 372.758008][ T6023] driver_probe_device+0x4c/0x1b0 [ 372.759630][ T6023] __device_attach_driver+0x1df/0x310 [ 372.761317][ T6023] ? __pfx___device_attach_driver+0x10/0x10 [ 372.763207][ T6023] bus_for_each_drv+0x159/0x1e0 [ 372.765175][ T6023] ? __pfx_bus_for_each_drv+0x10/0x10 [ 372.767104][ T6023] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.768746][ T6023] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 372.770582][ T6023] __device_attach+0x1e4/0x4b0 [ 372.772118][ T6023] ? __pfx___device_attach+0x10/0x10 [ 372.773808][ T6023] ? do_raw_spin_unlock+0x172/0x230 [ 372.775458][ T6023] bus_probe_device+0x17f/0x1c0 [ 372.777093][ T6023] device_add+0x1148/0x1aa0 [ 372.778577][ T6023] ? __pfx_device_add+0x10/0x10 [ 372.780132][ T6023] ? add_device_randomness+0xb7/0xf0 [ 372.781790][ T6023] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 372.783646][ T6023] usb_new_device+0xd07/0x1a60 [ 372.785160][ T6023] ? do_raw_spin_lock+0x12c/0x2b0 [ 372.786745][ T6023] ? __pfx_usb_new_device+0x10/0x10 [ 372.788434][ T6023] ? mark_held_locks+0x49/0x80 [ 372.789966][ T6023] hub_event+0x2f34/0x4fe0 [ 372.791604][ T6023] ? __pfx_hub_event+0x10/0x10 [ 372.793566][ T6023] ? interval_tree_remove+0xea0/0xee0 [ 372.795380][ T6023] ? rcu_is_watching+0x12/0xc0 [ 372.796900][ T6023] process_one_work+0x9cf/0x1b70 [ 372.799294][ T6023] ? __pfx_hcd_resume_work+0x10/0x10 [ 372.801121][ T6023] ? __pfx_process_one_work+0x10/0x10 [ 372.803118][ T6023] ? assign_work+0x1a0/0x250 [ 372.805006][ T6023] worker_thread+0x6c8/0xf10 [ 372.806860][ T6023] ? __kthread_parkme+0x19e/0x250 [ 372.808974][ T6023] ? __pfx_worker_thread+0x10/0x10 [ 372.810618][ T6023] kthread+0x3c5/0x780 [ 372.811936][ T6023] ? __pfx_kthread+0x10/0x10 [ 372.813418][ T6023] ? rcu_is_watching+0x12/0xc0 [ 372.814922][ T6023] ? __pfx_kthread+0x10/0x10 [ 372.816417][ T6023] ret_from_fork+0x675/0x7d0 [ 372.817946][ T6023] ? __pfx_kthread+0x10/0x10 [ 372.819418][ T6023] ret_from_fork_asm+0x1a/0x30 [ 372.820936][ T6023] [ 372.821927][ T6023] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 372.824213][ T6023] CPU: 1 UID: 0 PID: 6023 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 372.827302][ T6023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 372.830674][ T6023] Workqueue: usb_hub_wq hub_event [ 372.832299][ T6023] Call Trace: [ 372.833365][ T6023] [ 372.834314][ T6023] dump_stack_lvl+0x3d/0x1f0 [ 372.835805][ T6023] vpanic+0x640/0x6f0 [ 372.837097][ T6023] ? firmware_fallback_sysfs+0x6d3/0xbe0 [ 372.838858][ T6023] panic+0xca/0xd0 [ 372.840085][ T6023] ? __pfx_panic+0x10/0x10 [ 372.841567][ T6023] ? check_panic_on_warn+0x1f/0xb0 [ 372.843229][ T6023] check_panic_on_warn+0xab/0xb0 [ 372.844784][ T6023] __warn+0xf6/0x3c0 [ 372.846025][ T6023] ? firmware_fallback_sysfs+0x6d3/0xbe0 [ 372.847789][ T6023] report_bug+0x3c3/0x580 [ 372.849158][ T6023] ? firmware_fallback_sysfs+0x6d3/0xbe0 [ 372.850936][ T6023] handle_bug+0x184/0x210 [ 372.852329][ T6023] exc_invalid_op+0x17/0x50 [ 372.854106][ T6023] asm_exc_invalid_op+0x1a/0x20 [ 372.856024][ T6023] RIP: 0010:firmware_fallback_sysfs+0x6d3/0xbe0 [ 372.857992][ T6023] Code: bb fb e9 da f9 ff ff e8 db 66 dd fb e8 d6 1f a3 fb 31 ff 89 c3 89 c6 e8 0b 62 dd fb 85 db 0f 84 17 fb ff ff e8 be 66 dd fb 90 <0f> 0b 90 48 c7 c6 c0 57 1f 8c 4c 89 e2 4c 89 f7 e8 88 14 f9 ff e9 [ 372.864865][ T6023] RSP: 0018:ffffc90004c86dc8 EFLAGS: 00010293 [ 372.866959][ T6023] RAX: 0000000000000000 RBX: 00000000fffffff5 RCX: ffffffff85df0685 [ 372.869437][ T6023] RDX: ffff8880278d8000 RSI: ffffffff85df0692 RDI: 0000000000000005 [ 372.872504][ T6023] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 372.874956][ T6023] R10: 00000000fffffff5 R11: 0000000000002b81 R12: ffffffff8c7a3e40 [ 372.877413][ T6023] R13: ffff888027ee1b40 R14: ffff8880249480b0 R15: 0000000000001770 [ 372.880563][ T6023] ? firmware_fallback_sysfs+0x6c5/0xbe0 [ 372.882605][ T6023] ? firmware_fallback_sysfs+0x6d2/0xbe0 [ 372.884814][ T6023] ? firmware_fallback_sysfs+0x6d2/0xbe0 [ 372.887112][ T6023] ? _request_firmware+0xd57/0x1470 [ 372.889239][ T6023] _request_firmware+0xfe9/0x1470 [ 372.891332][ T6023] ? __pfx__request_firmware+0x10/0x10 [ 372.893204][ T6023] request_firmware+0x35/0x50 [ 372.894683][ T6023] smsusb_probe+0xb00/0x1090 [ 372.896159][ T6023] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 372.897837][ T6023] ? __pfx_smsusb_probe+0x10/0x10 [ 372.899427][ T6023] ? mark_held_locks+0x49/0x80 [ 372.900935][ T6023] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 372.902768][ T6023] ? __pm_runtime_set_status+0x13c/0xa80 [ 372.904557][ T6023] usb_probe_interface+0x303/0xa40 [ 372.906169][ T6023] ? __pfx_usb_probe_interface+0x10/0x10 [ 372.907940][ T6023] really_probe+0x241/0xa90 [ 372.909380][ T6023] __driver_probe_device+0x1de/0x440 [ 372.911036][ T6023] driver_probe_device+0x4c/0x1b0 [ 372.912654][ T6023] __device_attach_driver+0x1df/0x310 [ 372.914349][ T6023] ? __pfx___device_attach_driver+0x10/0x10 [ 372.916213][ T6023] bus_for_each_drv+0x159/0x1e0 [ 372.917744][ T6023] ? __pfx_bus_for_each_drv+0x10/0x10 [ 372.919425][ T6023] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.921057][ T6023] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 372.922864][ T6023] __device_attach+0x1e4/0x4b0 [ 372.924417][ T6023] ? __pfx___device_attach+0x10/0x10 [ 372.926068][ T6023] ? do_raw_spin_unlock+0x172/0x230 [ 372.927804][ T6023] bus_probe_device+0x17f/0x1c0 [ 372.929353][ T6023] device_add+0x1148/0x1aa0 [ 372.930798][ T6023] ? __pfx_device_add+0x10/0x10 [ 372.932362][ T6023] ? wakeup_sysfs_add+0x51/0x60 [ 372.933928][ T6023] usb_set_configuration+0x1187/0x1e20 [ 372.935716][ T6023] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 372.937616][ T6023] usb_generic_driver_probe+0xb1/0x110 [ 372.939340][ T6023] usb_probe_device+0xef/0x3e0 [ 372.940848][ T6023] ? __pfx_usb_probe_device+0x10/0x10 [ 372.942537][ T6023] really_probe+0x241/0xa90 [ 372.943990][ T6023] __driver_probe_device+0x1de/0x440 [ 372.945643][ T6023] ? usb_driver_applicable+0x1c7/0x220 [ 372.947353][ T6023] driver_probe_device+0x4c/0x1b0 [ 372.948931][ T6023] __device_attach_driver+0x1df/0x310 [ 372.950580][ T6023] ? __pfx___device_attach_driver+0x10/0x10 [ 372.952457][ T6023] bus_for_each_drv+0x159/0x1e0 [ 372.953966][ T6023] ? __pfx_bus_for_each_drv+0x10/0x10 [ 372.955634][ T6023] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.957256][ T6023] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 372.959074][ T6023] __device_attach+0x1e4/0x4b0 [ 372.960608][ T6023] ? __pfx___device_attach+0x10/0x10 [ 372.962262][ T6023] ? do_raw_spin_unlock+0x172/0x230 [ 372.963904][ T6023] bus_probe_device+0x17f/0x1c0 [ 372.965426][ T6023] device_add+0x1148/0x1aa0 [ 372.966857][ T6023] ? __pfx_device_add+0x10/0x10 [ 372.968397][ T6023] ? add_device_randomness+0xb7/0xf0 [ 372.970061][ T6023] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 372.971870][ T6023] usb_new_device+0xd07/0x1a60 [ 372.973363][ T6023] ? do_raw_spin_lock+0x12c/0x2b0 [ 372.974924][ T6023] ? __pfx_usb_new_device+0x10/0x10 [ 372.976562][ T6023] ? mark_held_locks+0x49/0x80 [ 372.978075][ T6023] hub_event+0x2f34/0x4fe0 [ 372.979476][ T6023] ? __pfx_hub_event+0x10/0x10 [ 372.980957][ T6023] ? interval_tree_remove+0xea0/0xee0 [ 372.982632][ T6023] ? rcu_is_watching+0x12/0xc0 [ 372.984089][ T6023] process_one_work+0x9cf/0x1b70 [ 372.985607][ T6023] ? __pfx_hcd_resume_work+0x10/0x10 [ 372.987230][ T6023] ? __pfx_process_one_work+0x10/0x10 [ 372.988859][ T6023] ? assign_work+0x1a0/0x250 [ 372.990316][ T6023] worker_thread+0x6c8/0xf10 [ 372.991750][ T6023] ? __kthread_parkme+0x19e/0x250 [ 372.993320][ T6023] ? __pfx_worker_thread+0x10/0x10 [ 372.994914][ T6023] kthread+0x3c5/0x780 [ 372.996202][ T6023] ? __pfx_kthread+0x10/0x10 [ 372.997644][ T6023] ? rcu_is_watching+0x12/0xc0 [ 372.999143][ T6023] ? __pfx_kthread+0x10/0x10 [ 373.000608][ T6023] ret_from_fork+0x675/0x7d0 [ 373.002073][ T6023] ? __pfx_kthread+0x10/0x10 [ 373.003545][ T6023] ret_from_fork_asm+0x1a/0x30 [ 373.005066][ T6023] [ 373.006713][ T6023] Kernel Offset: disabled [ 373.008084][ T6023] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:37:13 Registers: info registers vcpu 0 CPU#0 RAX=000000000073b529 RBX=0000000000000000 RCX=ffffffff8b5d42a9 RDX=0000000000000000 RSI=ffffffff8da27d51 RDI=ffffffff8bf075c0 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff908239d0 R15=0000000000000000 RIP=ffffffff8b5d2d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097810000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005607bfb9bea8 CR3=000000002904d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000009 Opmask01=0000000000000001 Opmask02=00000000ffff1fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000007000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 62815c7d461b7b76 febe5769ed670e8c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 177a4c423639918e 14db0c360fd0a3f6 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 924b6cc9a2f8f177 a6984b370733fe20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a48d596e8b7a223b fd080e1630dc5718 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000018180 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000017e6f4d34b3 594646868aa61258 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e24a2fb877553022 000001d2e2c00309 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000319d2000000 8d000000bc000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8e000000bc000000 e2ba20d18a000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 43a9d70080839489 836b28ea2402b8d5 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 21c9ae6d4c1afaec 31e825a099f59ecb ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 454c4f534e4f4300 3120444950207361 206e757220656220 7473756d00712d00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 454c4f534e4f4300 1405444950055644 054b505705404705 5156504800540800 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73203034313d6873 657268745f676f64 68637461772e6575 6575716b726f7720 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2bdf3228df3822 282b2e2fdf37342d 280b0412bfc92435 283232282c31242f ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 24bf242d282b232c 22ee222e312feebf 222e312feebf2435 283232282c31242f ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85267d75 RDI=ffffffff9adc2de0 RBP=ffffffff9adc2da0 RSP=ffffc90004c86730 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000006f R14=ffffffff9adc2da0 R15=ffffffff85267d10 RIP=ffffffff85267d9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097910000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561be8354ea8 CR3=000000002904d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000009 Opmask01=0000000000000001 Opmask02=00000000ffff1fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000007000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 657473797320676e 6974736575716552 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 206d657473797320 676e697473657571 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec192d025 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9eb3c1a0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000010 00007fbec19c5cd0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9eb3c108 00007fff9eb3c140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec1a865f0 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe00000010 00007fff9eb3c140 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6e6e6e6e6e6e6e 6e6e6e6e6e6e6e6e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6e6e6e6e6e6e6e 645f0f0a1d41180b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 454c4f534e4f4300 3120444950207361 206e757220656220 7473756d00712d00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 454c4f534e4f4300 1405444950055644 054b505705404705 5156504800540800 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73203034313d6873 657268745f676f64 68637461772e6575 6575716b726f7720 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2bdf3228df3822 282b2e2fdf37342d 280b0412bfc92435 283232282c31242f ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 24bf242d282b232c 22ee222e312feebf 222e312feebf2435 283232282c31242f ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000006cc9c3 RBX=0000000000000002 RCX=ffffffff8b5d42a9 RDX=0000000000000000 RSI=ffffffff8da27d51 RDI=ffffffff8bf075c0 RBP=ffffed1003b5e920 RSP=ffffc9000047fde8 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801daf4900 R14=ffffffff908239d0 R15=0000000000000000 RIP=ffffffff8b5d2d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a10000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe4178eff0 CR3=000000002904d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040003003 Opmask01=0000000000000008 Opmask02=00000000bfffff7f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 841ea78d1a2ac810 4b93af78b5a0eda9 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3655f9892c1e1583 84e03ef54d0868e4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e9b74b152afabe9 770e055ed47b5799 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 55c8154e258ebdc8 a0c1c447c0e1fce9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 137c23d2042dd437 f135cf5ac03c52a4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d8b16a5625e96d0 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 26c7f08982215163 b95f4386e367d13d ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 adee0e1d00000000 1730e444fc1c6f5a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e3b44152c9427733 30f629ff486c1aec ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d57557bb8bc2c310 5f98476638fc57ac ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 730065756575715f 6c6f72746e6f6320 3a73250064697074 696177203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 560040504050545f 494a57514b4a4605 1f560000414c5551 4c4452051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c20336270616c 20326270616c2031 6270616c20306270 616c203168746520 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20306e6170737265 2030706174657267 20306c7165742030 646e6f6220346270 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0065736c61663d6e 776f645f66690065 736c61663d70755f 666900346e616c77 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20336e616c772032 6e616c7720316e61 6c7720306e616c77 20396270616c2038 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6270616c20376270 616c20366270616c 20356270616c2030 6e61707372652030 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7061746572672030 6c7165742030646e 6f6220346270616c 20336270616c2032 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000120 2033202032332020 0000203333652020 000032336d202000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000068d487 RBX=0000000000000003 RCX=ffffffff8b5d42a9 RDX=0000000000000000 RSI=ffffffff8da27d51 RDI=ffffffff8bf075c0 RBP=ffffed10037e6000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801bf30000 R14=ffffffff908239d0 R15=0000000000000000 RIP=ffffffff8b5d2d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b10000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555832f19028 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcc0c002 Opmask01=0000000000000010 Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 43810e4a074920cd afc6c1616d533fbb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8422f14c032f4e88 c25258d657004c88 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 74aeb2fceb8ae67e 9452afb4beefcaf1 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 65986a686876476f 1a84579bac7950e2 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f950beb05a19896 0a7d5241986e0563 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bb536e4c8b933496 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b1bb4bc52328ba0 84996a194c7cbc6e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 983d43ce00000000 d1166f579f832ca9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d2731bd63447b72d 5753bb723d3e9dc3 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6bcea636b57ce416 547e8980f36f9191 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000662d 0000555832f0cf60 0000555832f0cf80 6368642f6374005b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 828183873a3d0015 16170b3637303f3e 3d3c3b3a2d2a2928 2726242221200a09 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000f 00000000873d7373 6e64725f77656e01 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000