last executing test programs: 4m59.121548559s ago: executing program 2 (id=382): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000080)=""/77, &(0x7f0000000140)=0x4d) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000fee000), 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x41, 0x9, 0x70bd25, 0x0, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x1d, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x9}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0xc, 0x3}, {}, {0xfff3, 0x5}}, [@filter_kind_options=@f_route={{0x5}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0d0}, 0x800) 4m58.958687223s ago: executing program 2 (id=383): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="1000000001144101"], 0x10}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) 4m58.871489814s ago: executing program 2 (id=384): prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x400, 0x0, 0x0, r1}, &(0x7f0000000180), 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4543(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40540c5}, 0x40000) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8840000000000000000000000000010002122b472e41e24b11f34b608816e5"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x404c001) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close_range(r5, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES64, @ANYRES16=r5], 0x44}, 0x1, 0x0, 0x0, 0x4c041}, 0x48040) openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/consoles\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x240c0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES16=r8], 0xc4}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x4000800) 4m58.64113485s ago: executing program 2 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000c0000000000000000950000000000009059a89f17cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setrlimit(0x9, &(0x7f0000000580)={0x3, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xeeef0000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c6761636865040bed45d36782a72d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455cb, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xd) getdents(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000000) syz_open_dev$MSR(&(0x7f00000000c0), 0x6, 0x0) 4m58.64084905s ago: executing program 2 (id=387): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="1000000001144101"], 0x10}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) (fail_nth: 2) 4m58.481290963s ago: executing program 2 (id=388): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_genetlink_get_family_id$tipc(0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r3, 0x100, 0xfffffffa, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x1c}}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x6c) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0), 0x3800048, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c63616368653d6d6d61702c63616368653d7265616461686561642c706f73697861636c2c706f73697861636c2c69676e6f726571760f000000000000002c7063723d301e27a26b75303030303030303030303030303030303031352c00"]) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000280)={0x7fffffff, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "2063569a"}}) socket$kcm(0x10, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETSNDBUF(r6, 0x800454d3, 0xfffffffffffffffe) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0x7c, 0x181041) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) 4m43.4638249s ago: executing program 32 (id=388): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_genetlink_get_family_id$tipc(0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r3, 0x100, 0xfffffffa, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x1c}}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x6c) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0), 0x3800048, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c63616368653d6d6d61702c63616368653d7265616461686561642c706f73697861636c2c706f73697861636c2c69676e6f726571760f000000000000002c7063723d301e27a26b75303030303030303030303030303030303031352c00"]) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000280)={0x7fffffff, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "2063569a"}}) socket$kcm(0x10, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETSNDBUF(r6, 0x800454d3, 0xfffffffffffffffe) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0x7c, 0x181041) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) 4m30.371173707s ago: executing program 0 (id=568): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0xa50003d1) 4m29.44122003s ago: executing program 0 (id=575): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) syz_usbip_server_init(0x1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/67, 0x43}}], 0x1, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x286, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000100), 0x501080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x800000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffeff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local={0x3, 0x80, 0xc2, 0x18}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0xd4aa6c3a0ba5a270, 0x0, 0x0, 0x9, 0x8001, {0x5, 0x4, 0x0, 0x30, 0xfffa, 0x64, 0x5, 0xea, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x10, 0xfff, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0x8000, 0x4, 0x8}}) socket$kcm(0x10, 0x2, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) 4m27.950672312s ago: executing program 0 (id=587): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x14) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) (fail_nth: 14) 4m27.760801116s ago: executing program 0 (id=588): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) (async, rerun: 64) setpgid(0x0, r3) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x1108863, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x800) r5 = openat$vcs(0xffffff9c, &(0x7f0000000580), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x9, 0x2, 0xf, 0x0, r1, 0x0, '\x00', r4, r5, 0x5, 0x3, 0x4, 0x9, @void, @value, @void, @value}, 0x50) (async, rerun: 32) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) (async, rerun: 32) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x8000000]}, 0x45c) (async, rerun: 32) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) (rerun: 32) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0xa41, 0x20000) ioctl$I2C_SLAVE(r6, 0x703, 0x2ed) (async, rerun: 64) ioctl$UI_DEV_CREATE(r0, 0x5501) (rerun: 64) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000514010025bd7000fedbdf25080001000000000008000300010013"], 0x20}, 0x1, 0x0, 0x0, 0x2400c990}, 0x40000) (rerun: 64) 4m27.645968116s ago: executing program 0 (id=590): close(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 4m27.331327336s ago: executing program 0 (id=592): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x3) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x4}, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0x6, 0x0, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0x1}], 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) statx(r5, &(0x7f0000000000)='./file0\x00', 0x1000, 0x10, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) userfaultfd(0x80801) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) read$eventfd(r1, &(0x7f00000001c0), 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff0000000304"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) 4m27.326450688s ago: executing program 33 (id=592): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x3) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x4}, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0x6, 0x0, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0x1}], 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) statx(r5, &(0x7f0000000000)='./file0\x00', 0x1000, 0x10, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) userfaultfd(0x80801) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) read$eventfd(r1, &(0x7f00000001c0), 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff0000000304"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) 6.27789989s ago: executing program 4 (id=1957): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 5.31108125s ago: executing program 4 (id=1961): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x7f36}, {0x200, 0x70}, {0x3, 0xf}, {0xa, 0x100}, {0x6, 0x589}, {0x8, 0x7}, {0x10001, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0xb8d, 0x2, 0x3, 0x0, 0xb8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x80001ff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/132, 0x0, 0x1}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) unshare(0x44040000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB]) openat$hpet(0xffffff9c, &(0x7f0000000100), 0x341800, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000300000004000000a40000000000", @ANYRES32, @ANYBLOB="00020000"], 0x48) connect$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) lseek(r3, 0x100401, 0x4) 4.972806883s ago: executing program 4 (id=1963): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x4001, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 4.257275739s ago: executing program 5 (id=1968): ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x80000c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0x2) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}) ppoll(&(0x7f0000002240)=[{}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f000000ac40)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) 3.885972483s ago: executing program 3 (id=1970): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000c0000000000000000950000000000009059a89f17cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) setrlimit(0x9, &(0x7f0000000580)={0x3, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xeeef0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c6761636865040bed45d36782a72d667363616368652c76657273696f6e3d3970323030302e75"]) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455cb, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xd) getdents(r7, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000000) syz_open_dev$MSR(&(0x7f00000000c0), 0x6, 0x0) 3.677821757s ago: executing program 3 (id=1971): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800005, 0x100010, r0, 0xffffb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x440, 0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x65e5da80}}, 0x50) 3.504917066s ago: executing program 3 (id=1972): ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x80000c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0x2) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}) ppoll(&(0x7f0000002240)=[{}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f000000ac40)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) 3.337956574s ago: executing program 4 (id=1973): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="04230d00c9"], 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) 3.331482774s ago: executing program 5 (id=1974): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820100, 0x0) gettid() prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x4, 0x15, 0x1, 0x3}, {0xfff8, 0x67, 0x0, 0x7}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 3.32895941s ago: executing program 4 (id=1975): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x652}, 0x18) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x4001, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 3.24473707s ago: executing program 5 (id=1977): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x7f36}, {0x200, 0x70}, {0x3, 0xf}, {0xa, 0x100}, {0x6, 0x589}, {0x8, 0x7}, {0x10001, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0xb8d, 0x2, 0x3, 0x0, 0xb8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x80001ff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/132, 0x0, 0x1}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) unshare(0x44040000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB]) openat$hpet(0xffffff9c, &(0x7f0000000100), 0x341800, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000300000004000000a40000000000", @ANYRES32, @ANYBLOB="00020000"], 0x48) connect$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) lseek(r3, 0x100401, 0x4) 2.68055393s ago: executing program 5 (id=1979): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000c0000000000000000950000000000009059a89f17cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) setrlimit(0x9, &(0x7f0000000580)={0x3, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xeeef0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c6761636865040bed45d36782a72d667363616368652c76657273696f6e3d3970323030302e75"]) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455cb, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xd) getdents(r7, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000000) syz_open_dev$MSR(&(0x7f00000000c0), 0x6, 0x0) 2.50284678s ago: executing program 3 (id=1980): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800005, 0x100010, r0, 0xffffb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x440, 0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x65e5da80}}, 0x50) 2.432641371s ago: executing program 1 (id=1981): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) open$dir(&(0x7f0000000640)='./file0\x00', 0x0, 0x8) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000040)='./file0\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x14, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x72}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.430908581s ago: executing program 5 (id=1982): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x4001, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 2.328585652s ago: executing program 3 (id=1983): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x7f36}, {0x200, 0x70}, {0x3, 0xf}, {0xa, 0x100}, {0x6, 0x589}, {0x8, 0x7}, {0x10001, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0xb8d, 0x2, 0x3, 0x0, 0xb8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x80001ff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/132, 0x0, 0x1}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) unshare(0x44040000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB]) openat$hpet(0xffffff9c, &(0x7f0000000100), 0x341800, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000300000004000000a40000000000", @ANYRES32, @ANYBLOB="00020000"], 0x48) connect$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) lseek(r3, 0x100401, 0x4) 1.500264065s ago: executing program 1 (id=1984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x8, 0x101400) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000140)=0x2) r2 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$CDROMPLAYTRKIND(r2, 0x5304, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x2c}) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r3, 0x100048ed, 0x0, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @mss={0x2, 0x8}, @window={0x3, 0xfffd}], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.488662852s ago: executing program 3 (id=1985): unshare(0x62040200) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$sw_sync_info(0xffffff9c, &(0x7f00000000c0), 0xc800, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'macvlan1\x00', @random="04c62403b069"}) ftruncate(0xffffffffffffffff, 0x51a9497) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r1, &(0x7f0000000180)=""/79, 0xfffffe69, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f01f}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001b80)='net/if_inet6\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000004280)={0x2020}, 0x2020) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 1.337590492s ago: executing program 1 (id=1986): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820100, 0x0) gettid() prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x4, 0x15, 0x1, 0x3}, {0xfff8, 0x67, 0x0, 0x7}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 1.336111514s ago: executing program 1 (id=1987): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x7f36}, {0x200, 0x70}, {0x3, 0xf}, {0xa, 0x100}, {0x6, 0x589}, {0x8, 0x7}, {0x10001, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0xb8d, 0x2, 0x3, 0x0, 0xb8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x80001ff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/132, 0x0, 0x1}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) unshare(0x44040000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB]) openat$hpet(0xffffff9c, &(0x7f0000000100), 0x341800, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000300000004000000a40000000000", @ANYRES32, @ANYBLOB="00020000"], 0x48) connect$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) lseek(r3, 0x100401, 0x4) 1.068709448s ago: executing program 1 (id=1988): ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x80000c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0x2) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}) ppoll(&(0x7f0000002240)=[{}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f000000ac40)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) 386.920654ms ago: executing program 5 (id=1989): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0xa50003d1) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 97.840903ms ago: executing program 1 (id=1990): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 0s ago: executing program 4 (id=1991): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800005, 0x100010, r0, 0xffffb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x440, 0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x65e5da80}}, 0x50) kernel console output (not intermixed with test programs): r?? [ 274.056786][ T5987] usb 8-1: USB disconnect, device number 20 [ 274.597593][ T26] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 274.721683][T11509] fuse: Bad value for 'fd' [ 274.730808][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 274.762615][ T26] usb 10-1: Using ep0 maxpacket: 8 [ 274.770378][ T26] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 274.773872][ T26] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.776466][ T26] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 274.782471][ T26] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 274.786527][ T26] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 274.789717][ T26] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.808038][ T26] hub 10-1:1.0: bad descriptor, ignoring hub [ 274.810212][ T26] hub 10-1:1.0: probe with driver hub failed with error -5 [ 274.815091][ T26] cdc_wdm 10-1:1.0: skipping garbage [ 274.816756][ T26] cdc_wdm 10-1:1.0: skipping garbage [ 274.825100][ T26] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 274.827020][ T26] cdc_wdm 10-1:1.0: Unknown control protocol [ 274.998232][T11515] overlayfs: missing 'lowerdir' [ 275.262729][ T78] usb 10-1: USB disconnect, device number 18 [ 275.603761][ T26] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 275.755825][ T26] usb 8-1: Using ep0 maxpacket: 16 [ 275.761484][ T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.772722][ T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.775426][ T26] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 275.779131][ T26] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 275.781583][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.792821][ T26] usb 8-1: config 0 descriptor?? [ 276.062771][ T36] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 276.199903][ T26] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 276.202179][ T26] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 276.204365][ T26] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 276.206307][ T26] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 276.208458][ T26] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 276.211193][ T26] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 276.223143][ T26] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 276.225501][ T26] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 276.228874][ T36] usb 6-1: config 0 has no interfaces? [ 276.230478][ T36] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.234845][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.239495][ T36] usb 6-1: config 0 descriptor?? [ 276.241004][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 276.400598][T11518] random: crng reseeded on system resumption [ 276.410114][ T26] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 276.413432][ T63] usb 8-1: USB disconnect, device number 21 [ 276.415945][ T26] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 276.419759][ T26] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 276.422887][ T26] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 276.451960][ T10] usb 6-1: USB disconnect, device number 27 [ 276.969576][T11545] overlayfs: missing 'lowerdir' [ 277.036085][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1486'. [ 277.519598][T11566] fuse: Bad value for 'fd' [ 278.221447][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1491'. [ 278.236488][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1491'. [ 278.272598][ T5954] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 278.842482][ T6005] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 278.993633][ T6005] usb 9-1: config 0 has no interfaces? [ 278.995214][ T6005] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.997714][ T6005] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.006183][T11589] overlayfs: missing 'lowerdir' [ 279.023005][ T6005] usb 9-1: config 0 descriptor?? [ 279.050210][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 279.241105][ T57] usb 9-1: USB disconnect, device number 23 [ 279.502937][T11611] fuse: Bad value for 'fd' [ 279.570008][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1500'. [ 279.858440][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1509'. [ 280.118122][T11632] overlayfs: missing 'lowerdir' [ 280.656935][T11636] overlay: Unknown parameter 'fscontext' [ 280.715229][T11637] lo speed is unknown, defaulting to 1000 [ 280.731794][T11637] lo speed is unknown, defaulting to 1000 [ 280.737538][T11637] lo speed is unknown, defaulting to 1000 [ 280.839118][T11637] infiniband sz1: set active [ 280.840676][T11637] infiniband sz1: added lo [ 280.848178][ T57] lo speed is unknown, defaulting to 1000 [ 280.878879][T11637] RDS/IB: sz1: added [ 280.880440][T11637] smc: adding ib device sz1 with port count 1 [ 280.882319][T11637] smc: ib device sz1 port 1 has pnetid [ 280.887303][T11637] lo speed is unknown, defaulting to 1000 [ 280.926539][T11637] lo speed is unknown, defaulting to 1000 [ 280.964090][T11637] lo speed is unknown, defaulting to 1000 [ 281.002127][T11637] lo speed is unknown, defaulting to 1000 [ 281.043282][ T57] lo speed is unknown, defaulting to 1000 [ 281.112133][T11637] lo speed is unknown, defaulting to 1000 [ 281.173632][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 281.597904][T11660] befs: (nullb0): No write support. Marking filesystem read-only [ 281.600099][T11660] befs: (nullb0): invalid magic header [ 281.782515][ T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 281.934628][ T9] usb 8-1: config 0 has no interfaces? [ 281.936263][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.938883][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.942566][ T9] usb 8-1: config 0 descriptor?? [ 282.014330][T11665] befs: (nullb0): No write support. Marking filesystem read-only [ 282.016633][T11665] befs: (nullb0): invalid magic header [ 282.159208][ T9] usb 8-1: USB disconnect, device number 22 [ 282.186231][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1513'. [ 282.205206][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1513'. [ 282.583334][T11677] fuse: Bad value for 'fd' [ 282.982525][ T26] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 283.132614][ T26] usb 8-1: Using ep0 maxpacket: 8 [ 283.135569][ T26] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 283.138380][ T26] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 283.140926][ T26] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 283.144069][ T26] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 283.147148][ T26] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 283.149674][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.154644][ T26] hub 8-1:1.0: bad descriptor, ignoring hub [ 283.156690][ T26] hub 8-1:1.0: probe with driver hub failed with error -5 [ 283.159033][ T26] cdc_wdm 8-1:1.0: skipping garbage [ 283.160628][ T26] cdc_wdm 8-1:1.0: skipping garbage [ 283.162645][ T26] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 283.164309][ T26] cdc_wdm 8-1:1.0: Unknown control protocol [ 283.364819][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 283.410501][T11696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.413123][T11696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.613737][ T9] usb 8-1: USB disconnect, device number 23 [ 283.995380][T11701] befs: (nullb0): No write support. Marking filesystem read-only [ 283.997611][T11701] befs: (nullb0): invalid magic header [ 284.259945][T11706] overlayfs: missing 'workdir' [ 284.304768][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 285.012800][ T26] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 285.184307][ T26] usb 6-1: config 0 has no interfaces? [ 285.185907][ T26] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.188497][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.191612][ T26] usb 6-1: config 0 descriptor?? [ 285.402020][ T26] usb 6-1: USB disconnect, device number 28 [ 285.505476][T11725] fuse: Bad value for 'fd' [ 285.840634][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'. [ 286.034254][T11739] lo speed is unknown, defaulting to 1000 [ 286.202530][ T63] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 286.352619][ T5954] Bluetooth: hci5: command 0x1003 tx timeout [ 286.355045][ T63] usb 9-1: Using ep0 maxpacket: 8 [ 286.357012][ T5948] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 286.372721][ T63] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 286.377476][ T63] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 286.381902][ T63] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 286.387489][ T63] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 286.391565][ T63] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 286.395228][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.413383][ T63] hub 9-1:1.0: bad descriptor, ignoring hub [ 286.415636][ T63] hub 9-1:1.0: probe with driver hub failed with error -5 [ 286.418126][ T63] cdc_wdm 9-1:1.0: skipping garbage [ 286.429993][ T63] cdc_wdm 9-1:1.0: skipping garbage [ 286.432208][ T63] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 286.437286][ T63] cdc_wdm 9-1:1.0: Unknown control protocol [ 286.661918][T11753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.665841][T11753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.679700][T11752] fuse: Bad value for 'fd' [ 286.902855][ T73] usb 9-1: USB disconnect, device number 24 [ 287.125672][T11756] befs: (nullb0): No write support. Marking filesystem read-only [ 287.128035][T11756] befs: (nullb0): invalid magic header [ 287.299599][T11759] lo speed is unknown, defaulting to 1000 [ 287.536921][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1539'. [ 287.622503][ T57] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 287.837077][ T57] usb 8-1: config 0 has no interfaces? [ 287.838666][ T57] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.841084][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.845807][ T57] usb 8-1: config 0 descriptor?? [ 287.970704][T11776] fuse: Bad value for 'fd' [ 288.063247][ T9] usb 8-1: USB disconnect, device number 24 [ 288.090333][T11781] random: crng reseeded on system resumption [ 288.161115][T11783] syz.1.1543: attempt to access beyond end of device [ 288.161115][T11783] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 288.427006][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1544'. [ 288.446417][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1544'. [ 288.962495][ T9] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 289.032613][ T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 289.112500][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 289.115257][ T9] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 289.118108][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 289.120559][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 289.124004][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 289.127092][ T9] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 289.129583][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.134467][ T9] hub 10-1:1.0: bad descriptor, ignoring hub [ 289.136185][ T9] hub 10-1:1.0: probe with driver hub failed with error -5 [ 289.138411][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 289.139892][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 289.142119][ T9] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 289.143895][ T9] cdc_wdm 10-1:1.0: Unknown control protocol [ 289.182480][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 289.185257][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.188427][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.191241][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.195293][ T10] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 289.197760][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.203932][ T10] usb 8-1: config 0 descriptor?? [ 289.386488][T11802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.389022][T11802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.510310][ T5954] Bluetooth: hci5: sending frame failed (-49) [ 289.512560][ T5948] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 289.602734][ T36] usb 10-1: USB disconnect, device number 19 [ 289.624807][ T10] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 289.626822][ T10] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 289.628724][ T10] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 289.630653][ T10] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 289.632707][ T10] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 289.643330][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input24 [ 289.648344][ T10] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 289.650601][ T10] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 289.786502][T11809] fuse: Bad value for 'fd' [ 289.808223][T11797] random: crng reseeded on system resumption [ 289.816731][ T10] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 289.816755][ T26] usb 8-1: USB disconnect, device number 25 [ 289.820192][ T10] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 289.827596][ T10] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 289.830861][ T10] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 290.229339][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1551'. [ 290.246455][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1551'. [ 290.398449][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1552'. [ 290.566890][T11832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1564'. [ 290.632584][ T73] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 290.685510][T11836] lo speed is unknown, defaulting to 1000 [ 290.784468][ T73] usb 10-1: config 0 has no interfaces? [ 290.786171][ T73] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.788701][ T73] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.804048][ T73] usb 10-1: config 0 descriptor?? [ 291.077290][ T57] usb 10-1: USB disconnect, device number 20 [ 291.309450][T11844] random: crng reseeded on system resumption [ 291.647586][T11854] overlayfs: failed to resolve './file1': -2 [ 291.692629][ T73] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 291.852565][ T73] usb 9-1: Using ep0 maxpacket: 8 [ 291.860667][ T73] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 291.863567][ T73] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 291.866034][ T73] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 291.869036][ T73] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 291.872601][ T73] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 291.875143][ T73] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.879552][ T73] hub 9-1:1.0: bad descriptor, ignoring hub [ 291.881252][ T73] hub 9-1:1.0: probe with driver hub failed with error -5 [ 291.883851][ T73] cdc_wdm 9-1:1.0: skipping garbage [ 291.885348][ T73] cdc_wdm 9-1:1.0: skipping garbage [ 291.887361][ T73] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 291.889029][ T73] cdc_wdm 9-1:1.0: Unknown control protocol [ 292.009306][ T1169] Bluetooth: hci5: Frame reassembly failed (-84) [ 292.134289][T11863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.137249][T11863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.192700][ T73] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 292.282658][ T63] usb 9-1: USB disconnect, device number 25 [ 292.342521][ T73] usb 6-1: Using ep0 maxpacket: 16 [ 292.346792][ T73] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.349764][ T73] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.352519][ T73] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 292.356035][ T73] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 292.358494][ T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.364481][ T73] usb 6-1: config 0 descriptor?? [ 292.771238][ T73] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 292.774480][ T73] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 292.776484][ T73] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 292.779799][ T73] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 292.781761][ T73] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 292.788168][ T73] input: HID 0955:7214 Haptics as /devices/virtual/input/input25 [ 292.806825][ T73] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 292.809387][ T73] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 292.857386][T11871] lo speed is unknown, defaulting to 1000 [ 292.972336][T11858] random: crng reseeded on system resumption [ 293.012445][ T6753] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 293.017701][ T6753] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 293.022880][ T6753] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 293.052613][ T36] usb 6-1: USB disconnect, device number 29 [ 293.054474][ T6753] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 293.498839][T11877] fuse: Bad value for 'fd' [ 294.032506][ T5948] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 294.032559][ T5954] Bluetooth: hci5: command 0x1003 tx timeout [ 294.122473][ T63] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 294.203860][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 294.282544][ T63] usb 9-1: Using ep0 maxpacket: 16 [ 294.285681][ T63] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.289037][ T63] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.292093][ T63] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 294.295929][ T63] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 294.298353][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.301574][ T63] usb 9-1: config 0 descriptor?? [ 294.402547][ T6753] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 294.553600][ T6753] usb 10-1: config 0 has no interfaces? [ 294.555183][ T6753] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.557904][ T6753] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.564270][ T6753] usb 10-1: config 0 descriptor?? [ 294.707233][ T63] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 294.709260][ T63] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 294.711173][ T63] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 294.715044][ T63] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 294.716956][ T63] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 294.722486][ T63] input: HID 0955:7214 Haptics as /devices/virtual/input/input26 [ 294.729143][ T63] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 294.731342][ T63] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 294.772882][ T36] usb 10-1: USB disconnect, device number 21 [ 294.905968][T11880] random: crng reseeded on system resumption [ 294.911567][ T6009] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 294.911731][ T73] usb 9-1: USB disconnect, device number 26 [ 294.914909][ T6009] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 294.919127][ T6009] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 294.922113][ T6009] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 294.973430][ T6753] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 295.132492][ T6753] usb 6-1: Using ep0 maxpacket: 8 [ 295.135315][ T6753] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 295.138021][ T6753] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 295.140352][ T6753] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 295.143459][ T6753] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 295.146463][ T6753] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 295.148879][ T6753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.153091][ T6753] hub 6-1:1.0: bad descriptor, ignoring hub [ 295.154708][ T6753] hub 6-1:1.0: probe with driver hub failed with error -5 [ 295.156867][ T6753] cdc_wdm 6-1:1.0: skipping garbage [ 295.158286][ T6753] cdc_wdm 6-1:1.0: skipping garbage [ 295.161383][ T6753] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 295.163219][ T6753] cdc_wdm 6-1:1.0: Unknown control protocol [ 295.526068][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 295.526165][ T6753] usb 6-1: USB disconnect, device number 30 [ 295.528247][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 295.532243][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 295.879519][T11906] IPVS: stopping backup sync thread 11907 ... [ 295.879865][T11907] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 296.106729][T11909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1578'. [ 296.257964][ T1178] Bluetooth: hci6: Frame reassembly failed (-84) [ 296.259910][ T46] Bluetooth: hci6: Frame reassembly failed (-84) [ 296.272520][ T5948] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 296.458155][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'. [ 296.501167][ T5948] Bluetooth: hci5: sending frame failed (-49) [ 296.503996][ T5941] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 296.552486][ T6753] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 296.712498][ T6753] usb 6-1: Using ep0 maxpacket: 16 [ 296.715762][ T6753] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.718613][ T6753] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.721162][ T6753] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 296.724929][ T6753] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 296.727370][ T6753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.733442][ T6753] usb 6-1: config 0 descriptor?? [ 296.884690][T11926] fuse: Bad value for 'fd' [ 297.143333][ T6753] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 297.145262][ T6753] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 297.147193][ T6753] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 297.149124][ T6753] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 297.150926][ T6753] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 297.153892][ T6753] input: HID 0955:7214 Haptics as /devices/virtual/input/input27 [ 297.161921][ T6753] shield 0003:0955:7214.0013: Registered Thunderstrike controller [ 297.164784][ T6753] shield 0003:0955:7214.0013: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 297.340636][T11912] random: crng reseeded on system resumption [ 297.348955][ T73] usb 6-1: USB disconnect, device number 31 [ 297.351718][ T6753] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 297.356275][ T6753] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 297.359211][ T6753] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 297.362585][ T6753] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 297.652567][T11932] lo speed is unknown, defaulting to 1000 [ 297.735895][ T57] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 297.805932][T11935] syz.4.1586: attempt to access beyond end of device [ 297.805932][T11935] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 297.883745][ T57] usb 8-1: config 0 has no interfaces? [ 297.885293][ T57] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.887724][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.894884][ T57] usb 8-1: config 0 descriptor?? [ 298.008034][T11940] lo speed is unknown, defaulting to 1000 [ 298.131660][ T73] usb 8-1: USB disconnect, device number 26 [ 298.272476][ T5948] Bluetooth: hci6: command 0x1003 tx timeout [ 298.272797][ T5954] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 298.775187][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 299.418748][T11966] lo speed is unknown, defaulting to 1000 [ 299.556153][T11970] fuse: Bad value for 'fd' [ 300.206759][T11977] lo speed is unknown, defaulting to 1000 [ 300.310503][ T1133] Bluetooth: hci6: Frame reassembly failed (-84) [ 300.372572][ T26] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 300.532473][ T26] usb 8-1: Using ep0 maxpacket: 16 [ 300.538389][ T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.545211][ T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.551825][ T26] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 300.555394][ T26] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 300.557844][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.566235][ T26] usb 8-1: config 0 descriptor?? [ 300.842541][ T5954] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 300.842573][ T5941] Bluetooth: hci5: command 0x1003 tx timeout [ 300.977232][ T26] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 300.979211][ T26] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 300.995807][ T26] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 300.997857][ T26] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 301.009977][ T26] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 301.032313][ T26] input: HID 0955:7214 Haptics as /devices/virtual/input/input28 [ 301.038194][ T26] shield 0003:0955:7214.0014: Registered Thunderstrike controller [ 301.040555][ T26] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 301.181532][T11973] random: crng reseeded on system resumption [ 301.188334][ T6009] usb 8-1: USB disconnect, device number 27 [ 301.190038][ T26] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 301.193719][ T26] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 301.196821][ T26] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 301.200488][ T26] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 301.253340][ T78] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 301.413969][ T78] usb 6-1: config 0 has no interfaces? [ 301.415566][ T78] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.417943][ T78] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.421205][ T78] usb 6-1: config 0 descriptor?? [ 301.632841][ T9] usb 6-1: USB disconnect, device number 32 [ 301.771264][T11996] syz.3.1602: attempt to access beyond end of device [ 301.771264][T11996] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 302.249013][T12004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1604'. [ 302.352557][ T5954] Bluetooth: hci6: command 0x1003 tx timeout [ 302.352805][ T5948] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 302.796365][T12016] lo speed is unknown, defaulting to 1000 [ 302.807291][T12017] fuse: Bad value for 'fd' [ 303.515865][T12026] 9pnet_fd: Insufficient options for proto=fd [ 303.594537][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'. [ 303.802733][T12037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1613'. [ 303.806351][T12037] 9pnet_virtio: no channels available for device syz [ 303.985976][T12043] lo speed is unknown, defaulting to 1000 [ 304.082502][ T9] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 304.244809][ T9] usb 8-1: config 0 has no interfaces? [ 304.246382][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.248981][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.252831][ T9] usb 8-1: config 0 descriptor?? [ 304.269540][T12047] tmpfs: Bad value for 'mpol' [ 304.466199][ T10] usb 8-1: USB disconnect, device number 28 [ 304.678282][T12055] befs: (nullb0): No write support. Marking filesystem read-only [ 304.680629][T12055] befs: (nullb0): invalid magic header [ 304.901876][T12059] lo speed is unknown, defaulting to 1000 [ 305.178327][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 305.597573][T12077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1623'. [ 305.690328][T12085] fuse: Bad value for 'fd' [ 305.792475][ T6753] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 305.942484][ T6753] usb 10-1: Using ep0 maxpacket: 32 [ 305.945947][ T6753] usb 10-1: config 0 has no interfaces? [ 305.949122][ T6753] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 305.951718][ T6753] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.952479][ T26] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 305.954773][ T6753] usb 10-1: Product: syz [ 305.958463][ T6753] usb 10-1: Manufacturer: syz [ 305.960255][ T6753] usb 10-1: SerialNumber: syz [ 305.968787][ T6753] usb 10-1: config 0 descriptor?? [ 306.102485][ T26] usb 8-1: Using ep0 maxpacket: 16 [ 306.105417][ T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.108421][ T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.111258][ T26] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 306.115104][ T26] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 306.117306][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.120066][ T26] usb 8-1: config 0 descriptor?? [ 306.179738][ T40] audit: type=1326 audit(1742525619.405:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.5.1625" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740e579 code=0x0 [ 306.462443][ T6753] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 306.525904][ T26] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 306.527703][ T26] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 306.529706][ T26] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 306.531433][ T26] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 306.533443][ T26] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 306.536390][ T26] input: HID 0955:7214 Haptics as /devices/virtual/input/input29 [ 306.545814][ T26] shield 0003:0955:7214.0015: Registered Thunderstrike controller [ 306.547928][ T26] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 306.614022][ T6753] usb 9-1: config 0 has no interfaces? [ 306.615692][ T6753] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.618378][ T6753] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.621861][ T6753] usb 9-1: config 0 descriptor?? [ 306.725120][T12087] random: crng reseeded on system resumption [ 306.730914][ T63] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 306.731016][ T6753] usb 8-1: USB disconnect, device number 29 [ 306.733683][ T63] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 306.733708][ T63] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 306.733730][ T63] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 306.829843][ T36] usb 9-1: USB disconnect, device number 27 [ 307.425631][ T5954] Bluetooth: hci5: sending frame failed (-49) [ 307.428057][ T5948] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 307.546098][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1631'. [ 307.959905][T12110] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 308.015055][T12114] lo speed is unknown, defaulting to 1000 [ 308.323792][T12118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1634'. [ 308.520438][T12122] lo speed is unknown, defaulting to 1000 [ 308.792690][ T57] usb 10-1: USB disconnect, device number 22 [ 308.872246][T12127] FAULT_INJECTION: forcing a failure. [ 308.872246][T12127] name failslab, interval 1, probability 0, space 0, times 0 [ 308.876242][T12127] CPU: 1 UID: 0 PID: 12127 Comm: syz.3.1636 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 308.876256][T12127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.876263][T12127] Call Trace: [ 308.876266][T12127] [ 308.876270][T12127] dump_stack_lvl+0x16c/0x1f0 [ 308.876300][T12127] should_fail_ex+0x50a/0x650 [ 308.876314][T12127] ? fs_reclaim_acquire+0xae/0x150 [ 308.876329][T12127] should_failslab+0xc2/0x120 [ 308.876338][T12127] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 308.876365][T12127] ? __asan_memcpy+0x3c/0x60 [ 308.876379][T12127] ? alloc_pid+0xc7/0xbd0 [ 308.876393][T12127] alloc_pid+0xc7/0xbd0 [ 308.876407][T12127] copy_process+0x3901/0x8c50 [ 308.876416][T12127] ? kasan_save_stack+0x33/0x60 [ 308.876430][T12127] ? kasan_save_track+0x14/0x30 [ 308.876443][T12127] ? __kasan_kmalloc+0xaa/0xb0 [ 308.876456][T12127] ? vhost_task_create+0xe6/0x2e0 [ 308.876467][T12127] ? kvm_mmu_post_init_vm+0x1b7/0x370 [ 308.876479][T12127] ? kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 308.876491][T12127] ? kvm_vcpu_ioctl+0x5ea/0x16b0 [ 308.876502][T12127] ? kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 308.876513][T12127] ? __do_fast_syscall_32+0x73/0x120 [ 308.876527][T12127] ? do_fast_syscall_32+0x32/0x80 [ 308.876547][T12127] ? __pfx_copy_process+0x10/0x10 [ 308.876563][T12127] ? lockdep_init_map_type+0x16d/0x7d0 [ 308.876578][T12127] ? __raw_spin_lock_init+0x3a/0x110 [ 308.876588][T12127] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 308.876603][T12127] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 308.876620][T12127] vhost_task_create+0x1d3/0x2e0 [ 308.876632][T12127] ? __pfx_vhost_task_create+0x10/0x10 [ 308.876669][T12127] ? __pfx_vhost_task_fn+0x10/0x10 [ 308.876682][T12127] ? lock_acquire.part.0+0x11b/0x380 [ 308.876695][T12127] ? find_held_lock+0x2d/0x110 [ 308.876709][T12127] kvm_mmu_post_init_vm+0x1b7/0x370 [ 308.876723][T12127] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 308.876733][T12127] ? lock_acquire+0x2f/0xb0 [ 308.876745][T12127] ? kvm_vcpu_ioctl+0x14be/0x16b0 [ 308.876759][T12127] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 308.876771][T12127] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 308.876783][T12127] ? tomoyo_path_number_perm+0x190/0x590 [ 308.876797][T12127] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 308.876808][T12127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 308.876825][T12127] ? do_vfs_ioctl+0x513/0x1990 [ 308.876837][T12127] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 308.876855][T12127] ? __pfx_lock_release+0x10/0x10 [ 308.876868][T12127] ? trace_lock_acquire+0x14e/0x1f0 [ 308.876880][T12127] kvm_vcpu_compat_ioctl+0x210/0x3d0 [ 308.876892][T12127] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 308.876905][T12127] ? __fget_files+0x206/0x3a0 [ 308.876921][T12127] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 308.876933][T12127] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 308.876946][T12127] __do_fast_syscall_32+0x73/0x120 [ 308.876961][T12127] do_fast_syscall_32+0x32/0x80 [ 308.876976][T12127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 308.876992][T12127] RIP: 0023:0xf7ff3579 [ 308.877001][T12127] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 308.877010][T12127] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 308.877020][T12127] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 308.877026][T12127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.877032][T12127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.877037][T12127] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 308.877042][T12127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.877054][T12127] [ 309.502445][ T5987] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 309.502458][ T9] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 309.672595][ T5987] usb 10-1: Using ep0 maxpacket: 8 [ 309.675810][ T5987] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 309.678667][ T5987] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 309.681194][ T5987] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 309.682428][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 309.684445][ T5987] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 309.698636][ T5987] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 309.701930][ T5987] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.705106][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.708071][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.710172][ T5987] hub 10-1:1.0: bad descriptor, ignoring hub [ 309.719158][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 309.719202][ T5987] hub 10-1:1.0: probe with driver hub failed with error -5 [ 309.732814][ T9] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 309.733817][ T5987] cdc_wdm 10-1:1.0: skipping garbage [ 309.735294][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.736816][ T5987] cdc_wdm 10-1:1.0: skipping garbage [ 309.741106][ T9] usb 8-1: config 0 descriptor?? [ 309.745607][ T5987] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 309.747302][ T5987] cdc_wdm 10-1:1.0: Unknown control protocol [ 309.767905][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'. [ 309.910010][T12149] syz.1.1643: attempt to access beyond end of device [ 309.910010][T12149] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 310.112763][ T10] usb 10-1: USB disconnect, device number 23 [ 310.148907][ T9] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 310.152445][ T9] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 310.154519][ T9] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 310.156419][ T9] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 310.158492][ T9] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 310.161488][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 310.170284][ T9] shield 0003:0955:7214.0016: Registered Thunderstrike controller [ 310.173085][ T9] shield 0003:0955:7214.0016: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 310.174692][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'. [ 310.195958][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'. [ 310.348683][T12136] random: crng reseeded on system resumption [ 310.355552][ T9] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 310.355955][ T36] usb 8-1: USB disconnect, device number 30 [ 310.361498][ T9] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 310.364948][ T9] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 310.368001][ T9] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 310.700649][T12165] lo speed is unknown, defaulting to 1000 [ 311.061097][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 311.213757][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 311.236004][ T10] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 311.239573][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 311.245384][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 311.248878][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 311.254317][ T10] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 311.257223][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.305108][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 311.307015][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 311.316246][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 311.318092][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 311.331217][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 311.334615][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 311.547210][T12177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.551905][T12177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.646903][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1651'. [ 311.792979][ T6007] usb 6-1: USB disconnect, device number 33 [ 311.817931][ T40] audit: type=1800 audit(1742525625.045:149): pid=12190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1652" name="file1" dev="overlay" ino=1643 res=0 errno=0 [ 311.857559][T12191] fuse: Bad value for 'fd' [ 312.049738][T12201] syz.3.1655: attempt to access beyond end of device [ 312.049738][T12201] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 312.272521][ T6007] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 312.472450][ T6007] usb 10-1: Using ep0 maxpacket: 16 [ 312.483284][ T6007] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.487201][ T6007] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.490695][ T6007] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 312.494598][ T6007] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 312.497123][ T6007] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.500107][ T6007] usb 10-1: config 0 descriptor?? [ 312.532497][ T6753] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 312.577990][T12207] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20003 [ 312.682470][ T6753] usb 6-1: Using ep0 maxpacket: 8 [ 312.685226][ T6753] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.687975][ T6753] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 312.690435][ T6753] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 312.693744][ T6753] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 312.696785][ T6753] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 312.699252][ T6753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.703503][ T6753] hub 6-1:1.0: bad descriptor, ignoring hub [ 312.705228][ T6753] hub 6-1:1.0: probe with driver hub failed with error -5 [ 312.707413][ T6753] cdc_wdm 6-1:1.0: skipping garbage [ 312.708926][ T6753] cdc_wdm 6-1:1.0: skipping garbage [ 312.712090][ T6753] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 312.714822][ T6753] cdc_wdm 6-1:1.0: Unknown control protocol [ 312.908440][ T6007] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 312.910355][ T6007] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 312.912304][ T6007] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 312.914706][ T6007] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 312.916984][ T6007] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 312.920934][ T6007] input: HID 0955:7214 Haptics as /devices/virtual/input/input31 [ 312.934254][ T6007] shield 0003:0955:7214.0017: Registered Thunderstrike controller [ 312.937132][ T6007] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 313.108896][T12202] random: crng reseeded on system resumption [ 313.115079][ T9] usb 10-1: USB disconnect, device number 24 [ 313.118711][ T6007] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 313.121794][ T6007] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 313.124997][ T6007] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 313.127985][ T6007] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 313.165878][ T6009] usb 6-1: USB disconnect, device number 34 [ 313.384131][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1660'. [ 313.646560][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 313.662339][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 313.729997][T12229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1663'. [ 313.733638][T12229] 9pnet: Unknown protocol version 9p20 [ 314.042458][ T6009] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 314.195369][ T6009] usb 9-1: config 0 has no interfaces? [ 314.197425][ T6009] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.200654][ T6009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.207513][ T6009] usb 9-1: config 0 descriptor?? [ 314.416540][ T6009] usb 9-1: USB disconnect, device number 28 [ 314.912919][T12256] fuse: Bad value for 'fd' [ 314.922474][ T6753] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 315.082556][ T6753] usb 8-1: Using ep0 maxpacket: 8 [ 315.093504][ T6753] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 315.096308][ T6753] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 315.098723][ T6753] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 315.101715][ T6753] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 315.112423][ T6753] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 315.114919][ T6753] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.118963][ T6753] hub 8-1:1.0: bad descriptor, ignoring hub [ 315.120638][ T6753] hub 8-1:1.0: probe with driver hub failed with error -5 [ 315.123070][ T6753] cdc_wdm 8-1:1.0: skipping garbage [ 315.124530][ T6753] cdc_wdm 8-1:1.0: skipping garbage [ 315.128491][ T6753] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 315.130184][ T6753] cdc_wdm 8-1:1.0: Unknown control protocol [ 315.373061][T12262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.376527][T12262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.382485][ T63] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 315.544859][ T63] usb 9-1: Using ep0 maxpacket: 16 [ 315.547653][ T63] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.550703][ T63] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.553468][ T63] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 315.557050][ T63] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 315.559515][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.562686][ T63] usb 9-1: config 0 descriptor?? [ 315.592741][ T6007] usb 8-1: USB disconnect, device number 31 [ 315.967919][ T63] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 315.970203][ T63] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 315.972203][ T63] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 315.974349][ T63] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 315.976294][ T63] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 315.982178][ T63] input: HID 0955:7214 Haptics as /devices/virtual/input/input32 [ 315.989546][ T63] shield 0003:0955:7214.0018: Registered Thunderstrike controller [ 315.991840][ T63] shield 0003:0955:7214.0018: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 316.170861][T12271] lo speed is unknown, defaulting to 1000 [ 316.173039][T12260] random: crng reseeded on system resumption [ 316.182202][ T63] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 316.182322][ T6007] usb 9-1: USB disconnect, device number 29 [ 316.185414][ T63] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 316.190612][ T63] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 316.196971][ T63] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 316.518164][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.521107][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.961321][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1679'. [ 317.828236][T12308] fuse: Bad value for 'fd' [ 318.429946][T12315] lo speed is unknown, defaulting to 1000 [ 318.705176][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 318.732934][ T6007] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 318.759712][T12330] pimreg: entered allmulticast mode [ 318.787208][ T40] audit: type=1800 audit(1742525632.015:150): pid=12330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1687" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 318.882754][ T6007] usb 10-1: Using ep0 maxpacket: 8 [ 318.893583][ T6007] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 318.906408][ T6007] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 318.920790][ T6007] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 318.925024][ T6007] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 318.928335][ T6007] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 318.931014][ T6007] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.955479][ T6007] hub 10-1:1.0: bad descriptor, ignoring hub [ 318.958122][ T6007] hub 10-1:1.0: probe with driver hub failed with error -5 [ 318.962506][ T6007] cdc_wdm 10-1:1.0: skipping garbage [ 318.963993][ T6007] cdc_wdm 10-1:1.0: skipping garbage [ 318.971958][ T6007] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 318.973879][ T6007] cdc_wdm 10-1:1.0: Unknown control protocol [ 319.205480][T12335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.207913][T12335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.602724][ T9] usb 10-1: USB disconnect, device number 25 [ 320.186267][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'. [ 320.190647][T12350] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 320.261312][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1695'. [ 320.285044][T12356] lo speed is unknown, defaulting to 1000 [ 320.493085][T12362] netlink: 'syz.3.1698': attribute type 1 has an invalid length. [ 320.495263][T12362] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1698'. [ 320.497745][T12362] netlink: 'syz.3.1698': attribute type 1 has an invalid length. [ 320.499919][T12362] netlink: 'syz.3.1698': attribute type 2 has an invalid length. [ 320.514269][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1697'. [ 321.282468][ T63] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 321.432474][ T63] usb 9-1: Using ep0 maxpacket: 16 [ 321.436213][ T63] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.439365][ T63] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.442104][ T63] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 321.445968][ T63] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 321.448512][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.451877][ T63] usb 9-1: config 0 descriptor?? [ 321.693503][ T9] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 321.842465][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 321.845180][ T9] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 321.847978][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 321.850568][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 64 [ 321.854118][ T9] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 321.856634][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.858823][ T63] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 321.860795][ T63] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 321.860820][ T9] hub 8-1:1.0: bad descriptor, ignoring hub [ 321.862937][ T63] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 321.864902][ T9] hub 8-1:1.0: probe with driver hub failed with error -5 [ 321.866346][ T63] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 321.869397][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 321.871003][ T63] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 321.872068][ T63] input: HID 0955:7214 Haptics as /devices/virtual/input/input33 [ 321.876904][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1705'. [ 321.877198][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 321.877230][ T9] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 321.890005][ T63] shield 0003:0955:7214.0019: Registered Thunderstrike controller [ 321.897894][ T63] shield 0003:0955:7214.0019: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 322.060643][T12373] random: crng reseeded on system resumption [ 322.066919][ T1338] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 322.070191][ T6009] usb 9-1: USB disconnect, device number 30 [ 322.073599][ T1338] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 322.076614][ T1338] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 322.079631][ T1338] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 322.182582][ T63] usb 8-1: USB disconnect, device number 32 [ 322.719998][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 322.854688][ T6753] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 322.894206][T12407] befs: (nullb0): No write support. Marking filesystem read-only [ 322.896426][T12407] befs: (nullb0): invalid magic header [ 323.002519][ T6753] usb 10-1: Using ep0 maxpacket: 8 [ 323.011214][ T6753] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 323.015680][ T6753] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 323.019197][ T6753] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 64 [ 323.027189][ T6753] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 323.029698][ T6753] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.035940][ T6753] hub 10-1:1.0: bad descriptor, ignoring hub [ 323.038338][ T6753] hub 10-1:1.0: probe with driver hub failed with error -5 [ 323.041456][ T6753] cdc_wdm 10-1:1.0: skipping garbage [ 323.043668][ T6753] cdc_wdm 10-1:1.0: skipping garbage [ 323.045429][ T6753] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 323.342853][ T6753] usb 10-1: USB disconnect, device number 26 [ 323.579193][T12412] syz.4.1712: attempt to access beyond end of device [ 323.579193][T12412] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 323.972523][ T6009] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 324.132748][ T6009] usb 8-1: Using ep0 maxpacket: 8 [ 324.136450][ T6009] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.139910][ T6009] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 324.142589][ T6009] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 324.146335][ T6009] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 324.149602][ T6009] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 324.152107][ T6009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.166665][ T6009] hub 8-1:1.0: bad descriptor, ignoring hub [ 324.170220][ T6009] hub 8-1:1.0: probe with driver hub failed with error -5 [ 324.173290][ T6009] cdc_wdm 8-1:1.0: skipping garbage [ 324.174950][ T6009] cdc_wdm 8-1:1.0: skipping garbage [ 324.178472][ T6009] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 324.180448][ T6009] cdc_wdm 8-1:1.0: Unknown control protocol [ 324.562932][ T6753] usb 8-1: USB disconnect, device number 33 [ 324.617007][T12430] lo speed is unknown, defaulting to 1000 [ 324.805527][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 325.112582][ T5986] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 325.161881][T12443] lo speed is unknown, defaulting to 1000 [ 325.262523][ T5986] usb 9-1: Using ep0 maxpacket: 16 [ 325.271692][ T5986] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.281732][ T5986] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.290666][ T5986] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 325.302760][ T5986] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 325.311688][ T5986] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.325501][ T5986] usb 9-1: config 0 descriptor?? [ 325.585919][T12449] befs: (nullb0): No write support. Marking filesystem read-only [ 325.588066][T12449] befs: (nullb0): invalid magic header [ 325.862298][ T5986] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 325.866384][ T5986] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 325.869380][ T5986] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 325.873419][ T5986] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 325.877438][ T5986] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 325.883399][ T5986] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 325.902768][ T5986] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 325.907432][ T5986] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 326.002491][ T6753] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 326.059641][T12427] random: crng reseeded on system resumption [ 326.066071][ T78] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 326.069112][ T5987] usb 9-1: USB disconnect, device number 31 [ 326.071554][ T78] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 326.075417][ T78] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 326.079429][ T78] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 326.096404][T12458] syz.3.1725: attempt to access beyond end of device [ 326.096404][T12458] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 326.152426][ T6753] usb 6-1: Using ep0 maxpacket: 8 [ 326.157126][ T6753] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 326.159816][ T6753] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 326.162142][ T6753] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 326.165639][ T6753] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 326.168592][ T6753] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 326.171036][ T6753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.178636][ T6753] hub 6-1:1.0: bad descriptor, ignoring hub [ 326.180242][ T6753] hub 6-1:1.0: probe with driver hub failed with error -5 [ 326.183093][ T6753] cdc_wdm 6-1:1.0: skipping garbage [ 326.184465][ T6753] cdc_wdm 6-1:1.0: skipping garbage [ 326.186591][ T6753] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 326.188170][ T6753] cdc_wdm 6-1:1.0: Unknown control protocol [ 326.432532][T12461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.435439][T12461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.663563][ T6009] usb 6-1: USB disconnect, device number 35 [ 327.382474][ T6009] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 327.472732][ T1338] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 327.626070][ T6009] usb 8-1: Using ep0 maxpacket: 16 [ 327.633713][ T6009] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.637593][ T6009] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.641051][ T6009] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 327.652502][ T6009] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 327.655692][ T6009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.663066][ T6009] usb 8-1: config 0 descriptor?? [ 327.712509][ T1338] usb 10-1: Using ep0 maxpacket: 16 [ 327.715299][ T1338] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.718544][ T1338] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.722461][ T1338] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 327.726241][ T1338] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 327.729047][ T1338] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.736334][ T1338] usb 10-1: config 0 descriptor?? [ 328.072107][ T6009] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 328.074307][ T6009] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 328.076357][ T6009] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 328.079158][ T6009] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 328.081889][ T6009] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 328.087656][ T6009] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 328.109797][ T6009] shield 0003:0955:7214.001B: Registered Thunderstrike controller [ 328.113230][ T6009] shield 0003:0955:7214.001B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 328.155167][ T1338] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 328.157806][ T1338] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 328.160374][ T1338] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 328.163771][ T1338] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 328.165688][ T1338] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 328.172786][ T1338] input: HID 0955:7214 Haptics as /devices/virtual/input/input36 [ 328.186842][ T1338] shield 0003:0955:7214.001C: Registered Thunderstrike controller [ 328.189108][ T1338] shield 0003:0955:7214.001C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 328.270915][T12469] random: crng reseeded on system resumption [ 328.279930][ T26] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 328.280087][ T6753] usb 8-1: USB disconnect, device number 34 [ 328.284753][ T26] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 328.289164][ T26] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 328.292154][ T26] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 328.356185][T12467] random: crng reseeded on system resumption [ 328.370116][ T6009] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 328.383423][ T26] usb 10-1: USB disconnect, device number 27 [ 328.403662][ T6009] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 328.408390][ T6009] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 328.411465][ T6009] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 329.023697][T12492] lo speed is unknown, defaulting to 1000 [ 329.028955][T12493] Driver unsupported XDP return value 0 on prog (id 579) dev N/A, expect packet loss! [ 329.157598][T12493] lo speed is unknown, defaulting to 1000 [ 329.840199][T12502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1734'. [ 329.849858][T12502] 9pnet: Unknown protocol version 9p2000. [ 329.874674][T12506] syz.5.1736: attempt to access beyond end of device [ 329.874674][T12506] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 329.942245][T12503] befs: (nullb0): No write support. Marking filesystem read-only [ 329.944490][T12503] befs: (nullb0): invalid magic header [ 330.740165][T12519] lo speed is unknown, defaulting to 1000 [ 331.127973][T12536] lo speed is unknown, defaulting to 1000 [ 331.343608][ T6009] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 331.361095][T12540] lo speed is unknown, defaulting to 1000 [ 331.489049][T12544] usb usb8: usbfs: process 12544 (syz.1.1747) did not claim interface 7 before use [ 331.573412][ T6009] usb 9-1: Using ep0 maxpacket: 16 [ 331.595751][ T6009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.601868][ T6009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.605494][ T6009] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 331.609195][ T6009] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 331.611806][ T6009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.653858][ T6009] usb 9-1: config 0 descriptor?? [ 331.779186][T12548] syz.1.1748: attempt to access beyond end of device [ 331.779186][T12548] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 332.116712][ T6009] shield 0003:0955:7214.001D: unknown main item tag 0x0 [ 332.119521][ T6009] shield 0003:0955:7214.001D: unknown main item tag 0x0 [ 332.128328][ T6009] shield 0003:0955:7214.001D: unknown main item tag 0x0 [ 332.131401][ T6009] shield 0003:0955:7214.001D: unknown main item tag 0x0 [ 332.141472][ T6009] shield 0003:0955:7214.001D: unknown main item tag 0x0 [ 332.157077][ T6009] input: HID 0955:7214 Haptics as /devices/virtual/input/input37 [ 332.198124][ T6009] shield 0003:0955:7214.001D: Registered Thunderstrike controller [ 332.201740][ T6009] shield 0003:0955:7214.001D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 332.287570][T12526] random: crng reseeded on system resumption [ 332.304385][ T6009] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 332.305196][ T36] usb 9-1: USB disconnect, device number 32 [ 332.307672][ T6009] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 332.315927][ T6009] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 332.320347][ T6009] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 332.660411][T12559] random: crng reseeded on system resumption [ 332.733854][T12563] lo speed is unknown, defaulting to 1000 [ 333.082908][T12570] lo speed is unknown, defaulting to 1000 [ 333.542540][ T6753] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 333.692710][ T6753] usb 10-1: Using ep0 maxpacket: 16 [ 333.701770][ T6753] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.708759][ T6753] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.711562][ T6753] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 333.722288][ T6753] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 333.725862][ T6753] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.739284][ T6753] usb 10-1: config 0 descriptor?? [ 333.764914][T12583] lo speed is unknown, defaulting to 1000 [ 334.180711][ T6753] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 334.188267][ T6753] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 334.190228][ T6753] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 334.192172][ T6753] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 334.196998][ T6753] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 334.201204][ T6753] input: HID 0955:7214 Haptics as /devices/virtual/input/input38 [ 334.210049][ T6753] shield 0003:0955:7214.001E: Registered Thunderstrike controller [ 334.212328][ T6753] shield 0003:0955:7214.001E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 334.300358][ T5986] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 334.374557][ T67] Bluetooth: hci5: Frame reassembly failed (-84) [ 334.376480][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 334.380131][T12573] random: crng reseeded on system resumption [ 334.387700][ T73] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 334.391009][ T73] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 334.395251][ T36] usb 10-1: USB disconnect, device number 28 [ 334.399950][ T73] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 334.404280][ T73] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 334.512555][ T5986] usb 8-1: Using ep0 maxpacket: 8 [ 334.523773][ T5986] usb 8-1: unable to get BOS descriptor or descriptor too short [ 334.526716][ T5986] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.534766][ T5986] usb 8-1: string descriptor 0 read error: -22 [ 334.536534][ T5986] usb 8-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40 [ 334.539000][ T5986] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.554825][ T5986] usbhid 8-1:1.0: can't add hid device: -22 [ 334.556486][ T5986] usbhid 8-1:1.0: probe with driver usbhid failed with error -22 [ 334.758298][ T78] usb 8-1: USB disconnect, device number 35 [ 334.960170][T12600] syz.5.1760: attempt to access beyond end of device [ 334.960170][T12600] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 335.591728][T12610] lo speed is unknown, defaulting to 1000 [ 335.906934][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 336.389633][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 336.432549][ T5948] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 336.433021][ T5954] Bluetooth: hci5: command 0x1003 tx timeout [ 336.514005][T12640] random: crng reseeded on system resumption [ 336.536484][T12641] syz.3.1773: attempt to access beyond end of device [ 336.536484][T12641] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 336.913855][T12649] lo speed is unknown, defaulting to 1000 [ 337.085456][T12654] random: crng reseeded on system resumption [ 337.402654][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 337.569869][ T10] usb 6-1: config 0 has no interfaces? [ 337.571434][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1778'. [ 337.576219][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.578778][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.583883][ T10] usb 6-1: config 0 descriptor?? [ 337.806301][ T10] usb 6-1: USB disconnect, device number 36 [ 337.811623][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1783'. [ 337.902676][ T63] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 338.032494][ T63] usb 10-1: device descriptor read/64, error -71 [ 338.082558][ T36] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 338.212500][ T36] usb 8-1: device descriptor read/64, error -71 [ 338.272642][ T63] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 338.402665][ T63] usb 10-1: device descriptor read/64, error -71 [ 338.462505][ T36] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 338.500693][T12678] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 338.512650][ T63] usb usb10-port1: attempt power cycle [ 338.555883][T12681] syz.1.1786: attempt to access beyond end of device [ 338.555883][T12681] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 338.592742][ T36] usb 8-1: device descriptor read/64, error -71 [ 338.713578][ T36] usb usb8-port1: attempt power cycle [ 338.765966][T12688] befs: (nullb0): No write support. Marking filesystem read-only [ 338.768245][T12688] befs: (nullb0): invalid magic header [ 338.932688][ T63] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 338.953350][ T63] usb 10-1: device descriptor read/8, error -71 [ 339.204049][ T63] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 339.222930][ T63] usb 10-1: device descriptor read/8, error -71 [ 339.312602][ T36] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 339.332913][ T63] usb usb10-port1: unable to enumerate USB device [ 339.332958][ T36] usb 8-1: device descriptor read/8, error -71 [ 339.520703][T12695] random: crng reseeded on system resumption [ 339.548195][T12696] lo speed is unknown, defaulting to 1000 [ 339.592659][ T36] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 339.622980][ T36] usb 8-1: device descriptor read/8, error -71 [ 339.735144][ T36] usb usb8-port1: unable to enumerate USB device [ 340.076127][T12700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.222799][T12703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.042555][ T5986] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 341.192524][ T5986] usb 10-1: Using ep0 maxpacket: 16 [ 341.195309][ T5986] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.198402][ T5986] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.201137][ T5986] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 341.204908][ T5986] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 341.208199][ T5986] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.212953][ T5986] usb 10-1: config 0 descriptor?? [ 341.282473][ T6007] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 341.433567][ T6007] usb 8-1: config 0 has no interfaces? [ 341.435221][ T6007] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.437706][ T6007] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.440731][ T6007] usb 8-1: config 0 descriptor?? [ 341.631024][ T5986] shield 0003:0955:7214.001F: unknown main item tag 0x0 [ 341.633179][ T5986] shield 0003:0955:7214.001F: unknown main item tag 0x0 [ 341.635598][ T5986] shield 0003:0955:7214.001F: unknown main item tag 0x0 [ 341.637849][ T5986] shield 0003:0955:7214.001F: unknown main item tag 0x0 [ 341.640287][ T5986] shield 0003:0955:7214.001F: unknown main item tag 0x0 [ 341.643795][ T5986] input: HID 0955:7214 Haptics as /devices/virtual/input/input39 [ 341.650045][ T5986] shield 0003:0955:7214.001F: Registered Thunderstrike controller [ 341.652656][ T5986] shield 0003:0955:7214.001F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 341.652731][ T36] usb 8-1: USB disconnect, device number 40 [ 341.818587][T12709] random: crng reseeded on system resumption [ 341.824085][ T5987] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 341.824829][ T6753] usb 10-1: USB disconnect, device number 33 [ 341.827145][ T5987] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 341.827167][ T5987] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 341.835044][ T5987] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 342.244158][T12724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1797'. [ 342.379213][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1799'. [ 342.415374][T12728] lo speed is unknown, defaulting to 1000 [ 342.792495][ T78] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 342.922468][ T78] usb 9-1: device descriptor read/64, error -71 [ 343.052577][ T63] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 343.162438][ T78] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 343.206615][ T63] usb 10-1: config 0 has no interfaces? [ 343.208240][ T63] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.210797][ T63] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.214525][ T63] usb 10-1: config 0 descriptor?? [ 343.302507][ T78] usb 9-1: device descriptor read/64, error -71 [ 343.412681][ T78] usb usb9-port1: attempt power cycle [ 343.423214][ T63] usb 10-1: USB disconnect, device number 34 [ 343.692553][ T36] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 343.712520][T12756] bad cache= option: none [ 343.712520][T12756] [ 343.714411][T12756] CIFS: VFS: bad cache= option: none [ 343.772519][ T78] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 343.792965][ T78] usb 9-1: device descriptor read/8, error -71 [ 343.842522][ T36] usb 8-1: Using ep0 maxpacket: 16 [ 343.846224][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.850632][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.853934][ T36] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 343.858785][ T36] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 343.861320][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.864400][ T36] usb 8-1: config 0 descriptor?? [ 344.042590][ T78] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 344.064523][ T78] usb 9-1: device descriptor read/8, error -71 [ 344.173088][ T78] usb usb9-port1: unable to enumerate USB device [ 344.270825][ T36] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 344.272996][ T36] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 344.274869][ T36] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 344.276808][ T36] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 344.278721][ T36] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 344.284735][ T36] input: HID 0955:7214 Haptics as /devices/virtual/input/input40 [ 344.290860][ T36] shield 0003:0955:7214.0020: Registered Thunderstrike controller [ 344.293211][ T36] shield 0003:0955:7214.0020: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 344.458899][T12763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1810'. [ 344.470201][T12751] random: crng reseeded on system resumption [ 344.477119][ T36] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 344.477179][ T10] usb 8-1: USB disconnect, device number 41 [ 344.480185][ T36] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 344.492475][ T36] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 344.495735][ T36] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 344.625774][T12766] lo speed is unknown, defaulting to 1000 [ 345.085899][T12783] syz.1.1816: attempt to access beyond end of device [ 345.085899][T12783] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 345.292494][ T36] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 345.458241][ T36] usb 8-1: config 0 has no interfaces? [ 345.460319][ T36] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.465009][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.469376][ T36] usb 8-1: config 0 descriptor?? [ 345.681869][ T36] usb 8-1: USB disconnect, device number 42 [ 345.868444][T12794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.012464][ T5987] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 346.175542][ T5987] usb 9-1: Using ep0 maxpacket: 16 [ 346.489312][ T5987] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.492340][ T5987] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.495240][ T5987] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 346.498802][ T5987] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 346.501351][ T5987] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.505774][ T5987] usb 9-1: config 0 descriptor?? [ 346.922743][ T5987] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 346.924793][ T5987] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 346.926757][ T5987] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 346.928714][ T5987] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 346.930672][ T5987] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 346.943108][ T5987] input: HID 0955:7214 Haptics as /devices/virtual/input/input41 [ 346.948509][ T5987] shield 0003:0955:7214.0021: Registered Thunderstrike controller [ 346.950817][ T5987] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 347.115859][T12790] random: crng reseeded on system resumption [ 347.131901][ T5987] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 347.135994][ T5986] usb 9-1: USB disconnect, device number 37 [ 347.138301][ T5987] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 347.142749][ T5987] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 347.146030][ T5987] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 347.512467][ T6753] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 347.532547][ T26] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 347.652529][ T6753] usb 8-1: device descriptor read/64, error -71 [ 347.672600][ T26] usb 10-1: device descriptor read/64, error -71 [ 347.912469][ T6753] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 347.922526][ T26] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 348.043218][ T6753] usb 8-1: device descriptor read/64, error -71 [ 348.062553][ T26] usb 10-1: device descriptor read/64, error -71 [ 348.153283][ T6753] usb usb8-port1: attempt power cycle [ 348.172759][ T26] usb usb10-port1: attempt power cycle [ 348.183100][ T36] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 348.333603][ T36] usb 6-1: config 0 has no interfaces? [ 348.335218][ T36] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.337686][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.340899][ T36] usb 6-1: config 0 descriptor?? [ 348.502508][ T6753] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 348.522472][ T26] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 348.523062][ T6753] usb 8-1: device descriptor read/8, error -71 [ 348.552476][ T36] usb 6-1: USB disconnect, device number 37 [ 348.558101][ T26] usb 10-1: device descriptor read/8, error -71 [ 348.636162][T12830] random: crng reseeded on system resumption [ 348.693834][T12832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1833'. [ 348.762507][ T6753] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 348.782983][ T6753] usb 8-1: device descriptor read/8, error -71 [ 348.822481][ T26] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 348.843204][ T26] usb 10-1: device descriptor read/8, error -71 [ 348.892654][ T6753] usb usb8-port1: unable to enumerate USB device [ 348.954482][ T26] usb usb10-port1: unable to enumerate USB device [ 349.186719][T12842] syz.1.1836: attempt to access beyond end of device [ 349.186719][T12842] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 350.266526][T12856] lo speed is unknown, defaulting to 1000 [ 350.301572][T12859] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1840'. [ 350.307359][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1840'. [ 350.309894][T12859] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1840'. [ 350.312803][T12859] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1840'. [ 350.662974][T12868] befs: (nullb0): No write support. Marking filesystem read-only [ 350.666303][T12868] befs: (nullb0): invalid magic header [ 351.163126][ T26] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 351.285963][T12880] syz.5.1846: attempt to access beyond end of device [ 351.285963][T12880] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 351.323981][ T26] usb 9-1: config 0 has no interfaces? [ 351.325582][ T26] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.327949][ T26] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.331013][ T26] usb 9-1: config 0 descriptor?? [ 351.544894][ T26] usb 9-1: USB disconnect, device number 38 [ 351.759614][ T1133] Bluetooth: hci5: Frame reassembly failed (-84) [ 351.761473][ T1136] Bluetooth: hci5: Frame reassembly failed (-84) [ 352.215279][T12891] lo speed is unknown, defaulting to 1000 [ 352.522482][ T26] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 352.652612][ T26] usb 8-1: device descriptor read/64, error -71 [ 352.902515][ T26] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 353.032526][ T26] usb 8-1: device descriptor read/64, error -71 [ 353.145868][ T26] usb usb8-port1: attempt power cycle [ 353.482721][ T26] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 353.503110][ T26] usb 8-1: device descriptor read/8, error -71 [ 353.742509][ T26] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 353.772951][ T26] usb 8-1: device descriptor read/8, error -71 [ 353.792597][ T5954] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 353.882818][ T26] usb usb8-port1: unable to enumerate USB device [ 355.302576][ T6009] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 355.452550][ T6009] usb 6-1: Using ep0 maxpacket: 16 [ 355.456077][ T6009] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.459824][ T6009] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.463633][ T6009] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 355.468063][ T6009] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 355.471199][ T6009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.481122][ T6009] usb 6-1: config 0 descriptor?? [ 355.672677][ T5986] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 355.824008][ T5986] usb 10-1: config 0 has no interfaces? [ 355.826309][ T5986] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.829903][ T5986] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.834956][ T5986] usb 10-1: config 0 descriptor?? [ 355.885657][T12931] random: crng reseeded on system resumption [ 355.894525][ T6009] usbhid 6-1:0.0: can't add hid device: -71 [ 355.896243][ T6009] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 355.899685][ T6009] usb 6-1: USB disconnect, device number 38 [ 355.975966][T12951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.051502][ T5986] usb 10-1: USB disconnect, device number 39 [ 356.162488][ T36] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 356.322596][ T36] usb 8-1: Using ep0 maxpacket: 16 [ 356.326002][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.329933][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.333657][ T36] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 356.338064][ T36] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 356.341200][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.346218][ T36] usb 8-1: config 0 descriptor?? [ 356.496321][T12955] lo speed is unknown, defaulting to 1000 [ 356.765636][ T36] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 356.767627][ T36] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 356.769569][ T36] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 356.771463][ T36] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 356.773485][ T36] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 356.778359][ T36] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 356.813941][ T36] shield 0003:0955:7214.0022: Registered Thunderstrike controller [ 356.816761][ T36] shield 0003:0955:7214.0022: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 356.885779][T12961] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1868'. [ 356.888317][T12961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1868'. [ 356.891211][T12961] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1868'. [ 356.894406][T12961] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1868'. [ 356.932588][ T5986] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 356.963901][T12948] random: crng reseeded on system resumption [ 356.974801][ T78] usb 8-1: USB disconnect, device number 51 [ 356.974821][ T8392] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 356.984513][ T8392] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 356.993112][ T8392] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 356.997051][ T8392] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 357.072491][ T5986] usb 10-1: device descriptor read/64, error -71 [ 357.254344][T12965] fuse: Bad value for 'fd' [ 357.394103][ T5986] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 357.452793][T12968] befs: (nullb0): No write support. Marking filesystem read-only [ 357.455177][T12968] befs: (nullb0): invalid magic header [ 357.532476][ T5986] usb 10-1: device descriptor read/64, error -71 [ 357.642873][ T5986] usb usb10-port1: attempt power cycle [ 357.754935][T12976] lo speed is unknown, defaulting to 1000 [ 358.002497][ T5986] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 358.032981][ T5986] usb 10-1: device descriptor read/8, error -71 [ 358.146146][T12984] lo speed is unknown, defaulting to 1000 [ 358.302504][ T5986] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 358.322922][ T5986] usb 10-1: device descriptor read/8, error -71 [ 358.432938][ T5986] usb usb10-port1: unable to enumerate USB device [ 358.472502][ T6753] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 358.634694][ T6753] usb 6-1: config 0 has no interfaces? [ 358.636808][ T6753] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.639765][ T6753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.643925][ T6753] usb 6-1: config 0 descriptor?? [ 358.860135][ T5986] usb 6-1: USB disconnect, device number 39 [ 358.886142][T12994] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1877'. [ 358.889527][T12994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1877'. [ 358.893063][T12994] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1877'. [ 358.896621][T12994] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1877'. [ 359.030757][T12998] lo speed is unknown, defaulting to 1000 [ 359.769025][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1882'. [ 359.995493][T13021] befs: (nullb0): No write support. Marking filesystem read-only [ 359.997770][T13021] befs: (nullb0): invalid magic header [ 360.069666][T13025] fuse: Bad value for 'fd' [ 360.081507][T13027] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1886'. [ 360.190764][T13031] lo speed is unknown, defaulting to 1000 [ 360.222438][ T6007] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 360.382455][ T6007] usb 9-1: Using ep0 maxpacket: 8 [ 360.386368][ T6007] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.389720][ T6007] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 360.395368][ T6007] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.402657][ T6007] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 360.407410][ T6007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.416274][ T6007] hub 9-1:1.0: bad descriptor, ignoring hub [ 360.419768][ T6007] hub 9-1:1.0: probe with driver hub failed with error -5 [ 360.424642][ T6007] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 360.742608][ T8392] usb 9-1: USB disconnect, device number 39 [ 360.941474][T13046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.043211][ T26] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 361.172466][ T26] usb 8-1: device descriptor read/64, error -71 [ 361.247650][T13053] lo speed is unknown, defaulting to 1000 [ 361.422497][ T26] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 361.552473][ T26] usb 8-1: device descriptor read/64, error -71 [ 361.662725][ T26] usb usb8-port1: attempt power cycle [ 362.002436][ T26] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 362.022982][ T26] usb 8-1: device descriptor read/8, error -71 [ 362.159393][T13080] lo speed is unknown, defaulting to 1000 [ 362.192575][ T63] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 362.262525][ T26] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 362.283382][ T26] usb 8-1: device descriptor read/8, error -71 [ 362.342432][ T63] usb 6-1: Using ep0 maxpacket: 16 [ 362.345072][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.348081][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.350736][ T63] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 362.356038][ T63] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 362.358556][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.368481][ T63] usb 6-1: config 0 descriptor?? [ 362.392902][ T26] usb usb8-port1: unable to enumerate USB device [ 362.722557][ T26] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 362.777020][ T63] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 362.779141][ T63] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 362.781239][ T63] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 362.784061][ T63] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 362.786863][ T63] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 362.790904][ T63] input: HID 0955:7214 Haptics as /devices/virtual/input/input43 [ 362.797771][ T63] shield 0003:0955:7214.0023: Registered Thunderstrike controller [ 362.800609][ T63] shield 0003:0955:7214.0023: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 362.872870][ T26] usb 10-1: Using ep0 maxpacket: 8 [ 362.876263][ T26] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.879222][ T26] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 362.881926][ T26] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.885679][ T26] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 362.888339][ T26] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.893797][ T26] hub 10-1:1.0: bad descriptor, ignoring hub [ 362.895564][ T26] hub 10-1:1.0: probe with driver hub failed with error -5 [ 362.897865][ T26] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 362.976039][T13069] random: crng reseeded on system resumption [ 362.983689][T13087] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 362.984024][ T57] usb 6-1: USB disconnect, device number 40 [ 362.986795][T13087] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 362.992265][T13087] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 362.995532][T13087] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 363.203234][T13087] usb 10-1: USB disconnect, device number 44 [ 363.643626][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 363.846922][T13103] __nla_validate_parse: 12 callbacks suppressed [ 363.846932][T13103] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1908'. [ 363.851178][T13103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1908'. [ 363.854474][T13103] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1908'. [ 363.857201][T13103] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1908'. [ 363.999189][T13110] lo speed is unknown, defaulting to 1000 [ 364.570404][T13116] fuse: Bad value for 'fd' [ 365.097456][T13122] lo speed is unknown, defaulting to 1000 [ 365.472612][ T5986] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 365.482582][ T10] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 365.622477][ T5986] usb 6-1: Using ep0 maxpacket: 16 [ 365.625873][ T5986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.629700][ T5986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.633381][ T5986] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 365.637263][ T5986] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 365.639777][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.642801][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 365.645454][ T5986] usb 6-1: config 0 descriptor?? [ 365.648015][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.651087][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 365.653727][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 365.657502][ T10] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 365.660087][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.666218][ T10] hub 9-1:1.0: bad descriptor, ignoring hub [ 365.668030][ T10] hub 9-1:1.0: probe with driver hub failed with error -5 [ 365.670515][ T10] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 365.712544][ T5954] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 365.714628][ T5948] Bluetooth: hci5: command 0x1003 tx timeout [ 365.982844][ T26] usb 9-1: USB disconnect, device number 40 [ 366.055741][ T5986] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 366.058933][ T5986] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 366.061225][ T5986] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 366.063582][ T5986] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 366.065699][ T5986] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 366.068402][ T5986] input: HID 0955:7214 Haptics as /devices/virtual/input/input44 [ 366.076910][ T5986] shield 0003:0955:7214.0024: Registered Thunderstrike controller [ 366.079343][ T5986] shield 0003:0955:7214.0024: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 366.112454][T13087] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 366.254174][T13121] random: crng reseeded on system resumption [ 366.259391][ T78] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 366.259516][ T10] usb 6-1: USB disconnect, device number 41 [ 366.262696][ T78] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 366.268708][ T78] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 366.272674][T13087] usb 8-1: Using ep0 maxpacket: 16 [ 366.273955][T13087] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.274700][ T78] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 366.277408][T13087] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 366.283887][T13087] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 366.286361][T13087] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.289708][T13087] usb 8-1: config 0 descriptor?? [ 366.542484][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1919'. [ 366.679196][T13148] lo speed is unknown, defaulting to 1000 [ 366.925155][T13156] lo speed is unknown, defaulting to 1000 [ 367.173276][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 367.196401][T13166] random: crng reseeded on system resumption [ 367.422480][ T57] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 367.572461][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 367.579048][ T57] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.583179][ T57] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 367.587256][ T57] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.592648][ T57] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 367.596410][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.611902][ T57] hub 6-1:1.0: bad descriptor, ignoring hub [ 367.614739][ T57] hub 6-1:1.0: probe with driver hub failed with error -5 [ 367.620218][ T57] cdc_wdm 6-1:1.0: skipping garbage [ 367.622785][ T57] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 367.749807][ T1169] Bluetooth: hci6: Frame reassembly failed (-84) [ 367.913095][ T57] usb 6-1: USB disconnect, device number 42 [ 368.352633][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'. [ 368.772488][ T8392] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 368.882188][ T57] usb 8-1: USB disconnect, device number 56 [ 368.912581][ T8392] usb 6-1: device descriptor read/64, error -71 [ 369.128496][T13185] fuse: Bad value for 'fd' [ 369.152798][ T8392] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 369.232639][ T5954] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 369.292623][ T8392] usb 6-1: device descriptor read/64, error -71 [ 369.413017][ T8392] usb usb6-port1: attempt power cycle [ 369.456460][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 369.752463][ T8392] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 369.775294][ T8392] usb 6-1: device descriptor read/8, error -71 [ 369.792812][ T5948] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 369.894712][T13197] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1935'. [ 369.898291][T13197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1935'. [ 369.901675][T13197] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1935'. [ 369.907296][T13197] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1935'. [ 369.910491][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1936'. [ 369.910705][T13200] fuse: Bad value for 'fd' [ 370.022470][ T8392] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 370.055923][ T8392] usb 6-1: device descriptor read/8, error -71 [ 370.162762][ T8392] usb usb6-port1: unable to enumerate USB device [ 370.178105][T13210] lo speed is unknown, defaulting to 1000 [ 370.741322][T13216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1939'. [ 370.825010][T13222] lo speed is unknown, defaulting to 1000 [ 370.923045][T13226] 9pnet_fd: Insufficient options for proto=fd [ 371.263004][ T8392] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 371.412510][ T8392] usb 9-1: Using ep0 maxpacket: 16 [ 371.417398][ T8392] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.421391][ T8392] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.428336][ T8392] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 371.432095][ T8392] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 371.435352][ T8392] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.454187][ T8392] usb 9-1: config 0 descriptor?? [ 371.617736][T13239] No control pipe specified [ 371.661443][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1945'. [ 371.664592][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1945'. [ 371.667144][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1945'. [ 371.864756][ T8392] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 371.866985][ T8392] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 371.868941][ T8392] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 371.870871][ T8392] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 371.874963][ T8392] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 371.880425][ T8392] input: HID 0955:7214 Haptics as /devices/virtual/input/input45 [ 371.888858][ T8392] shield 0003:0955:7214.0025: Registered Thunderstrike controller [ 371.891121][ T8392] shield 0003:0955:7214.0025: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 372.212868][T13231] random: crng reseeded on system resumption [ 372.219327][ T36] usb 9-1: USB disconnect, device number 41 [ 372.222285][ T6753] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 372.226031][ T6753] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 372.229055][ T6753] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 372.232040][ T6753] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 372.311935][T13250] fuse: Bad value for 'fd' [ 372.440491][T13255] lo speed is unknown, defaulting to 1000 [ 372.785968][T13270] No control pipe specified [ 372.859488][T13274] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ¯HcUØîÑË•‚Ž¹+ÕuµŽê!×÷œ8¦ [ 373.002598][ T26] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 373.132468][ T26] usb 6-1: device descriptor read/64, error -71 [ 373.186434][T13087] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 373.332521][T13087] usb 10-1: Using ep0 maxpacket: 8 [ 373.344766][T13087] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.347543][T13087] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 373.350011][T13087] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.353657][T13087] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 373.356247][T13087] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.361471][T13087] hub 10-1:1.0: bad descriptor, ignoring hub [ 373.364261][T13087] hub 10-1:1.0: probe with driver hub failed with error -5 [ 373.367055][T13087] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 373.382532][ T26] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 373.522585][ T26] usb 6-1: device descriptor read/64, error -71 [ 373.632719][ T26] usb usb6-port1: attempt power cycle [ 373.672689][ T6753] usb 10-1: USB disconnect, device number 45 [ 373.859365][T13291] lo speed is unknown, defaulting to 1000 [ 373.962938][T13293] fuse: Bad value for 'fd' [ 373.982494][ T26] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 374.002905][ T26] usb 6-1: device descriptor read/8, error -71 [ 374.264547][T13299] lo speed is unknown, defaulting to 1000 [ 374.272599][ T26] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 374.303593][ T26] usb 6-1: device descriptor read/8, error -71 [ 374.412908][T13087] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 374.422435][ T26] usb usb6-port1: unable to enumerate USB device [ 374.572451][T13087] usb 9-1: Using ep0 maxpacket: 16 [ 374.576025][T13087] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.579132][T13087] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.581845][T13087] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 374.586447][T13087] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 374.589054][T13087] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.595049][T13087] usb 9-1: config 0 descriptor?? [ 374.728837][T13304] No control pipe specified [ 374.784699][T13308] __nla_validate_parse: 7 callbacks suppressed [ 374.784711][T13308] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1966'. [ 374.789346][T13308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1966'. [ 374.791910][T13308] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1966'. [ 374.794747][T13308] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1966'. [ 374.902836][T13313] lo speed is unknown, defaulting to 1000 [ 375.031818][T13087] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 375.033873][T13087] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 375.035778][T13087] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 375.037680][T13087] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 375.039574][T13087] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 375.042130][T13087] input: HID 0955:7214 Haptics as /devices/virtual/input/input46 [ 375.086151][T13087] shield 0003:0955:7214.0026: Registered Thunderstrike controller [ 375.089238][T13087] shield 0003:0955:7214.0026: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 375.185377][T13317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1969'. [ 375.187877][T13317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1969'. [ 375.190343][T13317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1969'. [ 375.192898][T13317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1969'. [ 375.213319][T13296] random: crng reseeded on system resumption [ 375.236917][T13318] fuse: Bad value for 'fd' [ 375.243346][ T6753] usb 9-1: USB disconnect, device number 42 [ 375.244855][ T1338] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 375.261630][ T1338] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 375.265716][ T1338] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 375.269628][ T1338] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 375.315818][T13321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1970'. [ 375.726088][T13331] fuse: Bad value for 'fd' [ 375.786326][T13334] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 375.789299][T13334] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 375.793280][T13334] overlayfs: failed to get uuid (353/file1, err=-13); falling back to uuid=null. [ 375.867151][T13340] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1976'. [ 376.001607][T13343] lo speed is unknown, defaulting to 1000 [ 376.159381][T13346] lo speed is unknown, defaulting to 1000 [ 376.277298][ T9] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 376.412459][ T9] usb 9-1: device descriptor read/64, error -71 [ 376.715189][ T9] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 376.725902][T13359] syz.1.1981: attempt to access beyond end of device [ 376.725902][T13359] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 376.842990][ T9] usb 9-1: device descriptor read/64, error -71 [ 376.851403][T13366] lo speed is unknown, defaulting to 1000 [ 376.942563][ T6007] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 376.952791][ T9] usb usb9-port1: attempt power cycle [ 377.102541][ T6007] usb 10-1: Using ep0 maxpacket: 16 [ 377.106726][ T6007] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.109770][ T6007] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.112655][ T6007] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 377.116265][ T6007] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 377.119062][ T6007] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.124817][ T6007] usb 10-1: config 0 descriptor?? [ 377.292571][ T9] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 377.317634][ T9] usb 9-1: device descriptor read/8, error -71 [ 377.547637][ T6007] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 377.549657][ T6007] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 377.561896][ T9] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 377.564154][ T6007] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 377.566159][ T6007] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 377.568074][ T6007] shield 0003:0955:7214.0027: unknown main item tag 0x0 [ 377.570666][ T6007] input: HID 0955:7214 Haptics as /devices/virtual/input/input47 [ 377.586095][ T6007] shield 0003:0955:7214.0027: Registered Thunderstrike controller [ 377.588337][ T6007] shield 0003:0955:7214.0027: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 377.597718][ T9] usb 9-1: device descriptor read/8, error -71 [ 377.662020][T13375] lo speed is unknown, defaulting to 1000 [ 377.712703][ T9] usb usb9-port1: unable to enumerate USB device [ 377.733685][T13361] random: crng reseeded on system resumption [ 377.740986][T13371] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 377.745826][ T9] usb 10-1: USB disconnect, device number 46 [ 377.748233][T13371] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 377.751278][T13371] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 377.755112][T13371] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 377.881081][T13383] lo speed is unknown, defaulting to 1000 [ 377.965162][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.966984][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.204273][T13387] fuse: Bad value for 'fd' [ 378.974445][T13391] befs: (nullb0): No write support. Marking filesystem read-only [ 378.976725][T13391] befs: (nullb0): invalid magic header [ 379.128057][ T1136] Bluetooth: hci5: Frame reassembly failed (-84) [ 379.587591][ T45] page: refcount:2 mapcount:0 mapping:0000000000000000 index:0x240 pfn:0x53ceb [ 379.611895][ T45] flags: 0x4fff00000010001(locked|reclaim|node=1|zone=1|lastcpupid=0x7ff) [ 379.614901][ T45] raw: 04fff00000010001 ffffc900006c7588 ffffc900006c7588 ffffffff8b7e0602 [ 379.617342][ T45] raw: 0000000000000240 0000000000000000 00000002ffffffff 0000000000000000 [ 379.643243][ T45] page dumped because: VM_BUG_ON_PAGE(!((__builtin_constant_p(PAGE_CLAIMED) && __builtin_constant_p((uintptr_t)(&page->private) != (uintptr_t)((void *)0)) && (uintptr_t)(&page->private) != (uintptr_t)((void *)0) && __builtin_constant_p(*(const unsigned long *)(&page->private))) ? const_test_bit(PAGE_CLAIMED, &page->private) : _test_bit(PAGE_CLAIMED, &page->private))) [ 379.667322][ T45] page_owner tracks the page as allocated [ 379.668966][ T45] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12800(GFP_NOWAIT|__GFP_NORETRY), pid 114, tgid 114 (kswapd1), ts 379471163280, free_ts 379469495064 [ 379.692408][ T45] post_alloc_hook+0x181/0x1b0 [ 379.694177][ T45] get_page_from_freelist+0xfce/0x2f80 [ 379.696101][ T45] __alloc_frozen_pages_noprof+0x6a6/0x2470 [ 379.697800][ T45] alloc_pages_mpol+0x1fc/0x540 [ 379.699169][ T45] alloc_pages_noprof+0x131/0x390 [ 379.700595][ T45] z3fold_zpool_malloc+0x853/0x14f0 [ 379.702048][ T45] zswap_store+0xf9d/0x2690 [ 379.730738][ T45] swap_writepage+0x3b6/0x1120 [ 379.732134][ T45] pageout+0x3b2/0xaa0 [ 379.742476][ T45] shrink_folio_list+0x2f7f/0x40c0 [ 379.743940][ T45] evict_folios+0x774/0x1ab0 [ 379.745286][ T45] try_to_shrink_lruvec+0x5a2/0x9a0 [ 379.746777][ T45] shrink_one+0x3e3/0x7b0 [ 379.748022][ T45] shrink_node+0x2761/0x3e60 [ 379.749333][ T45] balance_pgdat+0xbab/0x19c0 [ 379.750675][ T45] kswapd+0x590/0xb70 [ 379.751761][ T45] page last free pid 13393 tgid 13392 stack trace: [ 379.754209][ T45] free_unref_folios+0xa7b/0x1500 [ 379.756462][ T45] shrink_folio_list+0x32b2/0x40c0 [ 379.762647][ T45] evict_folios+0x774/0x1ab0 [ 379.764913][ T45] try_to_shrink_lruvec+0x5a2/0x9a0 [ 379.766375][ T45] shrink_one+0x3e3/0x7b0 [ 379.767592][ T45] shrink_node+0x2761/0x3e60 [ 379.768921][ T45] do_try_to_free_pages+0x35f/0x1a30 [ 379.770389][ T45] try_to_free_pages+0x2ae/0x6b0 [ 379.771782][ T45] __alloc_frozen_pages_noprof+0xb06/0x2470 [ 379.776894][ T45] alloc_pages_mpol+0x1fc/0x540 [ 379.782397][ T45] folio_alloc_mpol_noprof+0x36/0x2f0 [ 379.783941][ T45] shmem_alloc_folio+0x135/0x160 [ 379.785358][ T45] shmem_alloc_and_add_folio+0x48e/0xc10 [ 379.786998][ T45] shmem_get_folio_gfp+0x689/0x1530 [ 379.788503][ T45] shmem_fault+0x200/0xae0 [ 379.789749][ T45] __do_fault+0x10a/0x490 [ 379.791064][ T45] ------------[ cut here ]------------ [ 379.793313][ T45] kernel BUG at mm/z3fold.c:1293! [ 379.797150][ T45] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 379.800701][ T45] CPU: 1 UID: 0 PID: 45 Comm: kcompactd1 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 379.803597][ T45] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 379.806638][ T45] RIP: 0010:z3fold_page_migrate+0xc6b/0x1390 [ 379.808336][ T45] Code: 20 93 ff 48 c7 c6 c0 fd 7d 8b 48 89 ef e8 6d a1 d9 ff 90 0f 0b e8 a5 20 93 ff 48 c7 c6 20 fe 7d 8b 48 89 ef e8 56 a1 d9 ff 90 <0f> 0b e8 8e 20 93 ff 48 8d bb a0 00 00 00 48 b8 00 00 00 00 00 fc [ 379.813700][ T45] RSP: 0000:ffffc900006c7400 EFLAGS: 00010293 [ 379.815467][ T45] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 379.817651][ T45] RDX: ffff888040ecc880 RSI: ffffffff8226d1ba RDI: ffff888040ecccc4 [ 379.819826][ T45] RBP: ffffea00014f3ac0 R08: 0000000000000001 R09: 0000000000000001 [ 379.822012][ T45] R10: ffffffff90628e17 R11: 0000000000000003 R12: ffffea0001cf22c0 [ 379.824220][ T45] R13: ffffea00014f3ae8 R14: 0000000000000001 R15: ffffea00014f3ad8 [ 379.826438][ T45] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 379.828973][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.830909][ T45] CR2: 000000000c2f901e CR3: 000000006a9ba000 CR4: 0000000000352ef0 [ 379.833256][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 379.835506][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 379.837699][ T45] Call Trace: [ 379.838686][ T45] [ 379.839592][ T45] ? die+0x31/0x80 [ 379.840750][ T45] ? do_trap+0x232/0x430 [ 379.842024][ T45] ? z3fold_page_migrate+0xc6b/0x1390 [ 379.843639][ T45] ? z3fold_page_migrate+0xc6b/0x1390 [ 379.845127][ T45] ? do_error_trap+0xf4/0x230 [ 379.846433][ T45] ? z3fold_page_migrate+0xc6b/0x1390 [ 379.847905][ T45] ? handle_invalid_op+0x34/0x40 [ 379.849289][ T45] ? z3fold_page_migrate+0xc6b/0x1390 [ 379.850769][ T45] ? exc_invalid_op+0x2e/0x50 [ 379.852090][ T45] ? asm_exc_invalid_op+0x1a/0x20 [ 379.853513][ T45] ? z3fold_page_migrate+0xc6a/0x1390 [ 379.855086][ T45] ? z3fold_page_migrate+0xc6b/0x1390 [ 379.856571][ T45] move_to_new_folio+0x449/0x700 [ 379.857946][ T45] migrate_pages_batch+0x2009/0x3150 [ 379.859414][ T45] ? __pfx_compaction_free+0x10/0x10 [ 379.860882][ T45] ? __pfx_migrate_pages_batch+0x10/0x10 [ 379.862440][ T45] ? __pfx___lock_acquire+0x10/0x10 [ 379.863828][ T45] ? __pfx___lock_acquire+0x10/0x10 [ 379.865247][ T45] migrate_pages_sync+0x4f1/0x910 [ 379.866644][ T45] ? __pfx_compaction_alloc+0x10/0x10 [ 379.868301][ T45] ? __pfx_compaction_free+0x10/0x10 [ 379.869780][ T45] ? __pfx_migrate_pages_sync+0x10/0x10 [ 379.871311][ T45] ? _raw_spin_unlock+0x28/0x50 [ 379.872682][ T45] migrate_pages+0x1acf/0x2290 [ 379.874067][ T45] ? __pfx_compaction_alloc+0x10/0x10 [ 379.875690][ T45] ? __pfx_compaction_free+0x10/0x10 [ 379.877250][ T45] ? __pfx_migrate_pages+0x10/0x10 [ 379.878666][ T45] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 379.880442][ T45] compact_zone+0x1f66/0x4220 [ 379.881756][ T45] ? __pfx_compact_zone+0x10/0x10 [ 379.883200][ T45] ? compaction_suitable+0x112/0x2f0 [ 379.884818][ T45] ? compaction_suit_allocation_order+0x116/0x260 [ 379.886686][ T45] kcompactd_do_work+0x43d/0x9b0 [ 379.888123][ T45] ? __pfx_kcompactd_do_work+0x10/0x10 [ 379.889643][ T45] ? psi_task_change+0x1a2/0x2d0 [ 379.891021][ T45] ? psi_memstall_enter+0x1c4/0x2b0 [ 379.892434][ T45] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.893884][ T45] kcompactd+0x8ad/0xdd0 [ 379.895077][ T45] ? __pfx_kcompactd+0x10/0x10 [ 379.896425][ T45] ? __pfx_autoremove_wake_function+0x10/0x10 [ 379.898104][ T45] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.899549][ T45] ? __kthread_parkme+0x148/0x220 [ 379.900951][ T45] ? __pfx_kcompactd+0x10/0x10 [ 379.902304][ T45] kthread+0x3af/0x750 [ 379.903479][ T45] ? __pfx_kthread+0x10/0x10 [ 379.904790][ T45] ? __pfx_kthread+0x10/0x10 [ 379.906078][ T45] ret_from_fork+0x45/0x80 [ 379.907409][ T45] ? __pfx_kthread+0x10/0x10 [ 379.908704][ T45] ret_from_fork_asm+0x1a/0x30 [ 379.910214][ T45] [ 379.911089][ T45] Modules linked in: [ 379.912410][ T45] ---[ end trace 0000000000000000 ]--- [ 379.921403][ T45] RIP: 0010:z3fold_page_migrate+0xc6b/0x1390 [ 379.927679][ T45] Code: 20 93 ff 48 c7 c6 c0 fd 7d 8b 48 89 ef e8 6d a1 d9 ff 90 0f 0b e8 a5 20 93 ff 48 c7 c6 20 fe 7d 8b 48 89 ef e8 56 a1 d9 ff 90 <0f> 0b e8 8e 20 93 ff 48 8d bb a0 00 00 00 48 b8 00 00 00 00 00 fc [ 379.933150][ T45] RSP: 0000:ffffc900006c7400 EFLAGS: 00010293 [ 379.934904][ T45] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 379.937136][ T45] RDX: ffff888040ecc880 RSI: ffffffff8226d1ba RDI: ffff888040ecccc4 [ 379.939297][ T45] RBP: ffffea00014f3ac0 R08: 0000000000000001 R09: 0000000000000001 [ 379.941484][ T45] R10: ffffffff90628e17 R11: 0000000000000003 R12: ffffea0001cf22c0 [ 379.943780][ T45] R13: ffffea00014f3ae8 R14: 0000000000000001 R15: ffffea00014f3ad8 [ 379.945979][ T45] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 379.948407][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.950235][ T45] CR2: 00000000f72b5e22 CR3: 000000006373c000 CR4: 0000000000352ef0 [ 379.952452][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 379.954663][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 379.956828][ T45] Kernel panic - not syncing: Fatal exception [ 379.959038][ T45] Kernel Offset: disabled [ 379.960242][ T45] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:54:53 Registers: info registers vcpu 0 CPU#0 RAX=ffff888026af0004 RBX=ffffffff8ed42a69 RCX=ffffffff84c8e925 RDX=ffff888043ee0000 RSI=ffffffff84c8e97d RDI=ffff888026afd8d2 RBP=0000000000000059 RSP=ffffc9000219ec08 R8 =0000000000000002 R9 =00000000000047f7 R10=00000000000047f7 R11=ffff888026af0030 R12=dffffc0000000000 R13=0000000000000002 R14=0000000000000001 R15=ffff888026af0000 RIP=ffffffff84c8e98c RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73b8970 CR3=0000000067f98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f747cff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853eac75 RDI=ffffffff9ab72ea0 RBP=ffffffff9ab72e60 RSP=ffffc900006c6d88 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=000000000000006e R14=ffffffff9ab72e60 R15=0000000000000000 RIP=ffffffff853eac9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2f901e CR3=000000006a9ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001b800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000080 RBX=0000000000000100 RCX=ffffc90006d79000 RDX=0000000000080000 RSI=ffffffff84c8cec5 RDI=ffff88802a5ddc70 RBP=ffff88802a5ddc80 RSP=ffffc90006956300 R8 =0000000000000001 R9 =000000000000088d R10=0000000000000000 R11=ffff88802a5d0030 R12=dffffc0000000000 R13=ffff88802a5ddc68 R14=0000000000000c00 R15=ffff88802a5d0000 RIP=ffffffff81b9f250 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ba81310a1b CR3=0000000023f18000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0154b20808000680 030fffffffff0205 80021c0800000800 08014bba02960800 0588031008000580 03058002188d82d8 8a08000108000601 3ad0000000000000 ZMM17=0008000380030004 000180c180080001 80021ffffffeb808 00080046ca00306d 656d6e2f7665642f 01ffffffffffffff ffe9080180030680 0204080000080006 ZMM18=fffffffffffff8b5 0808800301dc0800 1880020100000408 06060103e602b8c4 0800188803000200 1884030004001880 0301900800168002 000800060102a800 ZMM19=0008016dfa000400 000800000201c708 000801469e007465 70682f7665642f01 ffffffffffffffff eb08000306800208 80c5ba9208000108 0006011cf608c0a0 ZMM20=139f4fe5139f4fe5 139f4fe5139f4fe5 139f4fe5139f4fe5 139f4fe5139f4fe5 139f4fe5139f4fe5 139f4fe5139f4fe5 139f4fe5139f4fe5 139f4fe5139f4fe5 ZMM21=04d9b7e604d9b7e6 04d9b7e604d9b7e6 04d9b7e604d9b7e6 04d9b7e604d9b7e6 04d9b7e604d9b7e6 04d9b7e604d9b7e6 04d9b7e604d9b7e6 04d9b7e604d9b7e6 ZMM22=38ac490738ac4907 38ac490738ac4907 38ac490738ac4907 38ac490738ac4907 38ac490738ac4907 38ac490738ac4907 38ac490738ac4907 38ac490738ac4907 ZMM23=3ff4b31f3ff4b31f 3ff4b31f3ff4b31f 3ff4b31f3ff4b31f 3ff4b31f3ff4b31f 3ff4b31f3ff4b31f 3ff4b31f3ff4b31f 3ff4b31f3ff4b31f 3ff4b31f3ff4b31f ZMM24=3096d6093096d609 3096d6093096d609 3096d6093096d609 3096d6093096d609 3096d6093096d609 3096d6093096d609 3096d6093096d609 3096d6093096d609 ZMM25=c44a67dec44a67de c44a67dec44a67de c44a67dec44a67de c44a67dec44a67de c44a67dec44a67de c44a67dec44a67de c44a67dec44a67de c44a67dec44a67de ZMM26=cd1fb0a5cd1fb0a5 cd1fb0a5cd1fb0a5 cd1fb0a5cd1fb0a5 cd1fb0a5cd1fb0a5 cd1fb0a5cd1fb0a5 cd1fb0a5cd1fb0a5 cd1fb0a5cd1fb0a5 cd1fb0a5cd1fb0a5 ZMM27=340bddad340bddad 340bddad340bddad 340bddad340bddad 340bddad340bddad 340bddad340bddad 340bddad340bddad 340bddad340bddad 340bddad340bddad ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a30e0000a30e0000 a30e0000a30e0000 a30e0000a30e0000 a30e0000a30e0000 a30e0000a30e0000 a30e0000a30e0000 a30e0000a30e0000 a30e0000a30e0000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc9000da77f58 RCX=0000000000000814 RDX=0000000000000000 RSI=ffffffff8bd358e0 RDI=0000000000000014 RBP=ffffc9000da77f48 RSP=ffffc9000da77f18 R8 =0000000000000000 R9 =fffffbfff20c51c2 R10=ffffffff90628e17 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8167f278 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f8eddef4df CR3=0000000023f18000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000