last executing test programs: 10m18.134052247s ago: executing program 3 (id=1351): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r1, 0x25, 0x4, @void}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000700)={@initdev, @multicast1, 0x0}, &(0x7f0000000740)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000007c0)={0x0, @empty, @private}, &(0x7f0000000800)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f00000002c0)={@mcast1, @remote, @loopback, 0x5, 0x6, 0x0, 0x100, 0x4, 0x100d40210, r14}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000000880)={0xac4, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8151, 0x2, 0x6, 0x7}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8d7d}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd8e}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xde}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xabeb}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x47}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb6}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xf, 0xff, 0x0, 0x401}, {0x8, 0x2, 0x8, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r9}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x79}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x43b}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x580}}}]}}, {{0x8, 0x1, r11}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1760}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x13}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xac4}, 0x1, 0x0, 0x0, 0x8000}, 0x6000) socket$nl_netfilter(0x10, 0x3, 0xc) r15 = memfd_secret(0x80000) ftruncate(r15, 0x3) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) socket$nl_netfilter(0x10, 0x3, 0xc) r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) r18 = ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r18, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r17]) ioctl$KVM_GET_VCPU_EVENTS(r18, 0xc048aeca, &(0x7f0000000080)) 10m17.942408969s ago: executing program 3 (id=1353): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) ioctl$BLKRRPART(r0, 0x125f, 0x1f) 10m17.875417928s ago: executing program 3 (id=1355): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x18) lsm_set_self_attr(0x66, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) fsetxattr$security_ima(r5, &(0x7f00000002c0), &(0x7f0000000300), 0x1, 0x2) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0) 10m16.08082471s ago: executing program 3 (id=1363): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f00000004c0)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x8, r2, 0x1}) close(r4) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385a01e7b3011373dd0c9ee9c6646a", 0x10) accept4(r3, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x5945, &(0x7f0000000300)={0x0, 0xbeea, 0x80, 0x1, 0x30b}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x7556, 0x0, 0xe, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, 0x0) r9 = openat$vimc0(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)=0x9) writev(r8, &(0x7f0000000a40)=[{&(0x7f00000007c0)="4eabf2", 0x3}], 0x1) 10m15.212670087s ago: executing program 3 (id=1366): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='.\x00', 0x3f00, 0x0) 10m15.161086658s ago: executing program 3 (id=1367): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000300"/28], 0x50) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000}) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x0, 0x121a0, 0x0) capset(0x0, &(0x7f0000000140)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40040) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040), 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r8, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) get_robust_list(r1, &(0x7f00000004c0)=&(0x7f00000003c0)={&(0x7f0000000280), 0x0, &(0x7f0000000340)={&(0x7f0000000300)}}, &(0x7f0000000500)=0xc) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r6) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_bond\x00', [0x2f, 0x80, 0x10006, 0x4, 0x1, 0xcc7, 0x8, 0x17, 0x6, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x4, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x89, 0x6, 0x0, 0x20001e5a, 0x8, 0x7, 0x9, 0x8, 0x6, 0x401, 0x5]}) 10m14.843468694s ago: executing program 2 (id=1371): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x80000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x234, &(0x7f00000002c0)={0x0, 0x4534, 0x10000, 0x0, 0x3a1, 0x0, r1}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4}) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x44, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) r6 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) read(r6, &(0x7f0000000140)=""/109, 0x6d) 10m14.335939658s ago: executing program 2 (id=1373): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x8a, 0x6}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000100)={0x4, 0x1}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000640)='./cgroup\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001ac0)=@ethtool_regs={0x4, 0x5}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=@delpolicy={0x50, 0x14, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@mcast2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, 0x8000000}}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$unix(r4, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e4197", 0x4}], 0x1, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [r4]}}], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) epoll_create(0xc) 10m12.732757701s ago: executing program 2 (id=1376): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) r7 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0xfffffffe, 0x1, 0x0, r7}, &(0x7f00000002c0), &(0x7f0000000300)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0301ac1414aa030490781a00183f2500000000680000000100007f0000017f00000100186371ae9b1c03"], 0x0) 10m12.495640872s ago: executing program 2 (id=1377): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000040)) (fail_nth: 5) 10m12.43170314s ago: executing program 2 (id=1378): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000200)=""/148, 0x94}, {&(0x7f0000000440)=""/237, 0xed}], 0x3, &(0x7f0000000540)=""/236, 0xec}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 10m12.431438099s ago: executing program 2 (id=1379): io_setup(0x4, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000001c0)=0x9, 0x4) bind$inet(r1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000100d8ea3fa1a08f361a6037b4c655b416"], 0x14}}, 0x40) socket$nl_sock_diag(0x10, 0x3, 0x4) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_create_resource$binfmt(&(0x7f00000002c0)='./cgroup\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) 10m0.131568045s ago: executing program 32 (id=1367): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000300"/28], 0x50) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000}) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x0, 0x121a0, 0x0) capset(0x0, &(0x7f0000000140)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40040) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040), 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r8, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) get_robust_list(r1, &(0x7f00000004c0)=&(0x7f00000003c0)={&(0x7f0000000280), 0x0, &(0x7f0000000340)={&(0x7f0000000300)}}, &(0x7f0000000500)=0xc) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r6) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_bond\x00', [0x2f, 0x80, 0x10006, 0x4, 0x1, 0xcc7, 0x8, 0x17, 0x6, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x4, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x89, 0x6, 0x0, 0x20001e5a, 0x8, 0x7, 0x9, 0x8, 0x6, 0x401, 0x5]}) 9m57.302660564s ago: executing program 33 (id=1379): io_setup(0x4, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000001c0)=0x9, 0x4) bind$inet(r1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000100d8ea3fa1a08f361a6037b4c655b416"], 0x14}}, 0x40) socket$nl_sock_diag(0x10, 0x3, 0x4) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_create_resource$binfmt(&(0x7f00000002c0)='./cgroup\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) 4.997062964s ago: executing program 5 (id=4110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x14, 0xd233}, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14fffff0", @ANYRES16=r5, @ANYBLOB="016b28bd7000ffdbdf250300"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) 4.586702527s ago: executing program 0 (id=4112): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101}) r3 = socket$alg(0x26, 0x5, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x21c, &(0x7f0000001140)=ANY=[@ANYBLOB="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"]) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1e1) recvmmsg(0xffffffffffffffff, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d40)=""/13, 0xd}], 0x1}, 0x3}], 0x1, 0x1, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="5d2c53fbef80181fae0c3c362425a3dc9c29ab06095c301a247a05663dd0339e33f937723c0e747e4b692263874b83110b47a6464cf43728c8f87a5de29499a43ba740851fece0e2073dfeeced3bb6060d5f60cd20e5e9f30ebb98ab5c138e5dc4eb01bf5c70d0f6ed942abb86e4d0d4755120dec9df1876bd842878129f92ebd35a08aa9e000000000000000000", 0x8e, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @local, 0x100000}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="010028bd70000000000001000000840008808000008024000100d1732899f611cd8994034d7f513dc957630e5493c285aca40065cb6311be696b5800098028000080060001000a0000001400020000000000000000000000000000000000050003000200000028000080060001000a000000140002000000000000000000000000000000000005000300010000000400008014000200776730000000000000000000000000000800050001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001580)=""/4090, 0xffa}, {0x0}], 0x2}, 0x0) socket$tipc(0x1e, 0x5, 0x0) setxattr$security_capability(&(0x7f0000000640)='./file0\x00', &(0x7f00000010c0), &(0x7f0000000140)=@v3={0x3000000, [{0x5}, {0x0, 0x6}]}, 0x18, 0x1) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x7, 0x26040885}, 0x4810) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xd07, 0x1a001}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5336ae46a3975501}}]}, 0x40}}, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x1a3000, 0x0) 4.056481822s ago: executing program 5 (id=4114): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x8a, 0x6}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000100)={0x4, 0x1}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000640)='./cgroup\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001ac0)=@ethtool_regs={0x4, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4c050) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=@delpolicy={0x50, 0x14, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@mcast2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, 0x8000000}}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$unix(r4, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e4197", 0x4}], 0x1, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [r4]}}], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) epoll_create(0xc) 3.880511934s ago: executing program 4 (id=4115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a01020000000000000000010000000900030073797a32000000000900010028b65685052df4bf28000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000500), 0xb, 0x20) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x7, 0xcb4, 0x4, 0xc3, '\x00', '\x00', '\x00', 0x0, 0x5, 0x23a5, 0x2e, "10e88cd3db6240af586109472c7f556e"}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x280, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x501001, 0x1c0) syz_fuse_handle_req(r4, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000140), 0xffffffff, 0x660042) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000300)=[r9], 0x1, 0x40000}) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r4) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x114, 0x30, 0x1, 0x0, 0x0, {}, [{0x100, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xb8, 0x1, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x80000001, 0x9, 0xffffffffffffffff, 0x6, 0x4}}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x79, 0x3, 0x8, 0x8, 0x3}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x4, 0x0, 0xb290}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 3.276994786s ago: executing program 1 (id=4116): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a640009000000000000000000000000000200000038000480340001800b00010065787468647200002400028008000640000000010800034000000004050002000000000008000740000000020900010000e600000900020073797a3200000000140000001100010000000000000000000300000a"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) r5 = socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800", @ANYBLOB="96f0ba0c", @ANYRES32=r5], 0x74}}, 0x0) bind$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000027000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="ff07000000000000ab5becdc7da9", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.17681249s ago: executing program 0 (id=4117): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) (fail_nth: 2) 2.976432631s ago: executing program 4 (id=4118): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1a, 0xc, &(0x7f0000001200)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="0ed3648194ee36227fc6494c88e816d79a58bd108ddd77fd68bb0f018c9eb83f8fe943c0ec8146272627c553f206a9997414e1fad2deff731e3c80a1a2b7d11ccf64bd06c0f00ca5b554c0bb677c612545ca054383333c6f86a7c6bc329c861cbd6a0c7d7112e2", @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES64=r0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000011c0)='tcp_probe\x00', r2, 0x0, 0xcf}, 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mount(&(0x7f0000000040)=@md0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) r4 = open(0x0, 0x60840, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) truncate(0x0, 0x0) fcntl$setlease(r4, 0x400, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x26}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0xf7) io_uring_enter(0xffffffffffffffff, 0x7737, 0xa3b3, 0x30, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2.975964545s ago: executing program 0 (id=4119): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xfffffffffffff800, 0x12) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) r1 = socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x2040400) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) mmap(&(0x7f0000488000/0x2000)=nil, 0x2000, 0x3000004, 0x8010, 0xffffffffffffffff, 0x0) listen(r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x6, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000000100)=0xffffff83) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 2.776370164s ago: executing program 0 (id=4120): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f198cb65a7895d3dca695574fee303030303030303030303030303030303034303030302c836d65a58ace24983b5bfe6252fc51bd721c26ebc941370a85f895781eff9d824189c53d5f0142993aba63c7ce07c545d78d277e14b8f3c15424619028aea1f799088ba71183bd99871f595d1192c9f96bc49b12aa9cf83e565fccb05726c7e7e634", @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRES32=r4, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x42701, 0x1b2) io_submit(0x0, 0x1, &(0x7f0000002a00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r6, &(0x7f00000000c0)='3', 0x1, 0x8000000000005}]) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x6a4, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$CEC_ADAP_G_PHYS_ADDR(0xffffffffffffffff, 0x80026101, &(0x7f0000000280)) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x334, 0x7, 0x1, 0xff, 0x67, @multicast}, 0x10) 2.297015188s ago: executing program 1 (id=4121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) syz_emit_ethernet(0x46, &(0x7f0000000140)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x10, 0x3a, 0xff, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @ni={0x8c, 0x0, 0x0, 0x3, 0xfb, 0xffffffffffffffff}}}}}}, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={[&(0x7f00000001c0)='syz1\x00', &(0x7f0000000200)='\x00']}, &(0x7f0000000500)={[&(0x7f0000000300)='/\x00', &(0x7f0000000340)='\'^\\#\'\x89/\x00', &(0x7f00000003c0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000400)='syz2\x00', &(0x7f0000000440)=':/#}&+\x00', &(0x7f0000000480)='redir\x00', &(0x7f00000004c0)='syz2\x00']}) 2.296726811s ago: executing program 1 (id=4122): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50401, 0x1b) (async) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4010, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) ioctl$int_out(r1, 0x0, &(0x7f0000000040)) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b0010000190023090000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000040000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) (async) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000080)=""/185, 0xb9}], 0x1, 0x42, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400"], 0x48) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000280)={&(0x7f0000749000/0x2000)=nil, &(0x7f0000acd000/0xd000)=nil, 0x2000, 0x1}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f00000002c0), 0x0, 0x0, 0x0) (async) sendfile(r4, r4, 0x0, 0x200900) socket(0xa, 0x1, 0x0) 2.206793326s ago: executing program 1 (id=4123): ioperm(0x2, 0x2, 0x81) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2, 0x1]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000700)=[{0xffffffffffffffff, 0x9100}], 0x1, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180b0000000800000000000000510000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x9}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0xfdfdffff, 0xff600000}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x63f2, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x4}, 0x8}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x3e, &(0x7f0000000100)=[{0x6, 0x64, 0x0, 0x7}]}) close_range(r6, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x2, 0x4}) 2.076714844s ago: executing program 4 (id=4124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000100)={"0000000000000008e4641d9d", &(0x7f0000000580)="dd4ddfa6fc50d1594c8fa8d688f85930d60eb5e2ba4ccc745a32c00faba05cc4", 0x20, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/114, 0xfffffffffffffff8}, {&(0x7f0000002140)=""/4096}, {&(0x7f0000000400)=""/186}, {&(0x7f00000004c0)=""/160}, {&(0x7f0000000640)=""/113}, {&(0x7f0000004140)=""/4109}], 0x1, 0x3fc, 0xfc8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) preadv(0xffffffffffffffff, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/130, 0x82}], 0x1, 0x0, 0x7f) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114e2, 0x0, 0x3, 0x89}, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="66643f0aad88f18b", @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000004000', @ANYBLOB=',group_', @ANYRESDEC=0x0]) r4 = syz_open_dev$dri(&(0x7f0000001200), 0x0, 0x200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000400)={0x0, 0x0, 0x0}) 1.67637355s ago: executing program 0 (id=4125): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000004480)=[{{&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000001ac0)=""/36, 0x24}, 0x7ff}, {{&(0x7f0000001b00)=@phonet, 0x80, &(0x7f0000002fc0), 0x0, &(0x7f0000003040)=""/22, 0xfffffffffffffd04}, 0x1}, {{&(0x7f0000003080)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000004440)=[{&(0x7f0000003100)=""/59, 0x3b}, {&(0x7f0000003140)=""/24, 0x18}, {&(0x7f0000001cc0)=""/245, 0xf5}, {&(0x7f0000003280)=""/140, 0x8c}, {&(0x7f0000003340)=""/4086, 0xff6}, {&(0x7f0000000500)=""/68, 0x44}, {&(0x7f00000043c0)=""/120, 0xfd8f}], 0x7}, 0x2}], 0x3, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@initdev, @dev, 0x0}, &(0x7f0000000280)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x8, '\x00', r3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)="dd0300000000000000f7d3b5f55e9058f834557cd8a9d1c4bc7a40ccccde057fe1ee706f431f5e41d17ae83b01c7102a744b9388833397b9d0dd783fedb7cc8bc9adb45cad92d9f0b1b5ab16a10012", &(0x7f0000001800)="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", 0x401, r4, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/19, @ANYBLOB], 0x74}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="a351236baefd2ef8d9d4f45bce79e7057a7467bacb70dab59ebc11ea3be32c6ffdd95d8e7a0c17fcc3018acf4b795d8ac469ea00002a29ef686b5e1921708e9a4c7ed887afa3ddc5fb3c6507018db352166d63719e733a3c2c1e348d5ce4eafe7e16d4a1bacbec19b0ac7dc4837cdb93edb1c87a63a11169111e776dcaf0666e16fbb76bfc521d0484f7c3a045b01799406abbd24d88c36308fb203ba8"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ac0)={'wlan0\x00'}) syz_emit_ethernet(0x1230, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x1, 0x1, [0x6ea, 0x918, 0xf5d, 0x5ae]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 1.306643181s ago: executing program 1 (id=4126): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffc, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x9, 0x2, 0x9, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x40091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) modify_ldt$read(0x0, &(0x7f0000000400)=""/229, 0xe5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) syz_io_uring_setup(0x779b, &(0x7f0000000380)={0x0, 0xf5a5, 0x0, 0xffffffff, 0x2028a}, &(0x7f0000000280), &(0x7f0000000200)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xae) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) 1.114660161s ago: executing program 4 (id=4127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x2000000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000002580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfffffffffffffd5c, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x440}], 0x0, 0x0, 0x0}) 1.103608349s ago: executing program 4 (id=4128): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x202, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x7, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r6 = dup(r5) write$uinput_user_dev(r6, 0x0, 0x36) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r2, &(0x7f0000000040), 0x4001) preadv(r7, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) ioctl$CDROMREADRAW(r6, 0x5314, &(0x7f0000000500)={0x1, 0x3, 0x7, 0x1, 0x1, 0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 1.036073682s ago: executing program 5 (id=4129): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) r6 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r6, 0x11, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0xfffffffe, 0x1, 0x0, r6}, &(0x7f00000002c0), &(0x7f0000000300)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0301ac1414aa030490781a00183f2500000000680000000100007f0000017f00000100186371ae9b1c03"], 0x0) 816.883146ms ago: executing program 5 (id=4130): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xf1, &(0x7f0000000000)=""/241, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="390300"}) 726.185685ms ago: executing program 5 (id=4131): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x6) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) unshare(0x24040000) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800, 0xfffffffc}, &(0x7f0000001200)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) (async, rerun: 32) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0xc0b45545, 0x0) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) accept4$alg(r7, 0x0, 0x0, 0x80000) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) symlink(&(0x7f00000003c0)='./file0\x00', 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x1b, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x700, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 226.34892ms ago: executing program 5 (id=4132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f00007cc000/0x4000)=nil) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) rename(0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000892e79106d042107259c010203"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) (fail_nth: 8) 166.714274ms ago: executing program 4 (id=4133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0xd, 0x100, 0xffffffffffffffff, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000380)={0x3}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x401], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0xff, 0x0, 0x81, 0x80}, {0x5000, 0xf000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x16, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa3, 0x5, 0x5}, {0x1, 0xeeef0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x0, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0xdddd1000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00003d0000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f00008b4000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000700"/25], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000080000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) 36.648609ms ago: executing program 0 (id=4134): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xf1, &(0x7f0000000000)=""/241, 0x0, 0x8}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0xac, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) 0s ago: executing program 1 (id=4135): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000100)={"0000000000000008e4641d9d", &(0x7f0000000580)="dd4ddfa6fc50d1594c8fa8d688f85930d60eb5e2ba4ccc745a32c00faba05cc4", 0x20, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/114, 0xfffffffffffffff8}, {&(0x7f0000002140)=""/4096}, {&(0x7f0000000400)=""/186}, {&(0x7f00000004c0)=""/160}, {&(0x7f0000000640)=""/113}, {&(0x7f0000004140)=""/4109}], 0x1, 0x3fc, 0xfc8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) preadv(0xffffffffffffffff, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/130, 0x82}], 0x1, 0x0, 0x7f) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114e2, 0x0, 0x3, 0x89}, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="66643f0aad88f18b", @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000004000', @ANYBLOB=',group_', @ANYRESDEC=0x0]) r4 = syz_open_dev$dri(&(0x7f0000001200), 0x0, 0x200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000400)={0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): erval 0, changing to 7 [ 903.460133][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.463613][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 903.468376][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 903.473474][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.485957][ T34] usb 6-1: config 0 descriptor?? [ 903.981208][ T34] hid_parser_main: 5 callbacks suppressed [ 903.981508][ T34] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 904.068880][ T34] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 904.071467][ T34] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 904.074373][ T34] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 904.077668][ T34] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 904.081813][ T34] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 904.085062][ T34] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 904.088354][ T34] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 904.091905][ T34] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 904.101805][ T34] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 904.125616][ T34] plantronics 0003:047F:FFFF.007F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 904.569812][ T34] usb 6-1: USB disconnect, device number 11 [ 904.701829][ T10] usb 10-1: new full-speed USB device number 46 using dummy_hcd [ 904.761447][T19207] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 904.763549][T19207] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 904.766812][T19207] vhci_hcd vhci_hcd.0: Device attached [ 904.841838][ T10] usb 10-1: device descriptor read/64, error -71 [ 904.849335][T19210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3463'. [ 905.041755][ T6140] usb 46-1: SetAddress Request (63) to port 0 [ 905.043814][ T6140] usb 46-1: new SuperSpeed USB device number 63 using vhci_hcd [ 905.081871][ T10] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 905.293096][ T10] usb 10-1: device descriptor read/64, error -71 [ 905.395363][T19208] vhci_hcd: connection reset by peer [ 905.402660][T13402] vhci_hcd: stop threads [ 905.404066][T13402] vhci_hcd: release socket [ 905.405590][T13402] vhci_hcd: disconnect device [ 906.432141][ T10] usb usb10-port1: attempt power cycle [ 906.771859][ T10] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 906.792271][ T10] usb 10-1: device descriptor read/8, error -71 [ 907.134812][ T10] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 907.153581][ T10] usb 10-1: device descriptor read/8, error -71 [ 907.272227][ T10] usb usb10-port1: unable to enumerate USB device [ 907.872134][T19245] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 907.874723][T19245] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 907.905174][T19245] vhci_hcd vhci_hcd.0: Device attached [ 907.942593][T19248] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 908.211877][T18719] usb 48-1: SetAddress Request (62) to port 0 [ 908.227876][T18719] usb 48-1: new SuperSpeed USB device number 62 using vhci_hcd [ 908.264749][T19249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3474'. [ 908.270041][T19249] netlink: 'syz.5.3474': attribute type 18 has an invalid length. syzkaller syzkaller login: [ 908.601852][T10581] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 908.782309][T10581] usb 9-1: Using ep0 maxpacket: 8 [ 908.786220][T10581] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 908.789465][T10581] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 908.792611][T10581] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 908.795847][T10581] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 908.798916][T10581] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.803128][T10581] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 908.806021][T10581] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.816724][T10581] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 908.951837][T19246] vhci_hcd: connection reset by peer [ 908.953849][T13402] vhci_hcd: stop threads [ 908.955285][T13402] vhci_hcd: release socket [ 908.957037][T13402] vhci_hcd: disconnect device [ 910.031806][T10581] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 910.151766][ T6140] usb 46-1: device descriptor read/8, error -110 [ 910.183550][T10581] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 910.188009][T10581] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 910.193443][T10581] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 910.197043][T10581] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.201869][T10581] usb 10-1: config 0 descriptor?? [ 910.206813][T10581] usbhid 10-1:0.0: couldn't find an input interrupt endpoint syzkaller syzkaller login: [ 910.582279][ T6140] usb usb46-port1: attempt power cycle [ 911.142851][ T6140] usb usb46-port1: unable to enumerate USB device [ 911.361995][T10581] usb 9-1: USB disconnect, device number 61 [ 911.824266][T19300] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 912.611557][T19313] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 912.613647][T19313] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 912.616659][T19313] vhci_hcd vhci_hcd.0: Device attached [ 912.825215][ T34] usb 10-1: USB disconnect, device number 50 [ 912.901763][ T6140] usb 40-1: SetAddress Request (25) to port 0 [ 912.904121][ T6140] usb 40-1: new SuperSpeed USB device number 25 using vhci_hcd [ 913.247084][T19315] vhci_hcd: connection reset by peer [ 913.256588][T13402] vhci_hcd: stop threads [ 913.258404][T13402] vhci_hcd: release socket [ 913.261494][T13402] vhci_hcd: disconnect device [ 913.431797][T18719] usb 48-1: device descriptor read/8, error -110 [ 914.342030][T18719] usb usb48-port1: attempt power cycle [ 914.602661][ T34] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 914.661792][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 914.751831][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 914.760498][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 914.764899][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 914.768899][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 914.773095][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.777525][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 914.782958][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.833093][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.836297][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 914.839100][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 914.841998][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.846257][ T10] usb 6-1: config 0 descriptor?? [ 914.902775][T18719] usb usb48-port1: unable to enumerate USB device [ 914.994041][ T34] usb 9-1: usb_control_msg returned -32 [ 914.997204][ T34] usbtmc 9-1:16.0: can't read capabilities [ 915.003347][ T34] usb 9-1: USB disconnect, device number 62 [ 915.312822][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3499'. [ 915.565818][ T10] usb 6-1: string descriptor 0 read error: -71 [ 915.572932][ T10] usb 6-1: USB disconnect, device number 12 [ 915.604774][T19362] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3506'. [ 915.970083][T19379] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 915.972853][T19379] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 915.976996][T19379] vhci_hcd vhci_hcd.0: Device attached syzkaller syzkaller login: [ 916.574748][T19393] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 916.576885][T19393] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 916.621874][T18719] usb 46-1: SetAddress Request (67) to port 0 [ 916.638647][T19393] vhci_hcd vhci_hcd.0: Device attached [ 916.643417][T18719] usb 46-1: new SuperSpeed USB device number 67 using vhci_hcd [ 916.805735][T19380] vhci_hcd: connection reset by peer [ 916.807838][T13394] vhci_hcd: stop threads [ 916.809218][T13394] vhci_hcd: release socket [ 916.810780][T13394] vhci_hcd: disconnect device [ 916.825301][T19397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3510'. [ 916.828596][T19397] netlink: 'syz.0.3510': attribute type 18 has an invalid length. [ 916.932043][ T29] usb 38-1: SetAddress Request (9) to port 0 [ 916.935278][ T29] usb 38-1: new SuperSpeed USB device number 9 using vhci_hcd [ 917.029993][T19394] vhci_hcd: connection reset by peer [ 917.032730][T13394] vhci_hcd: stop threads [ 917.034570][T13394] vhci_hcd: release socket [ 917.036625][T13394] vhci_hcd: disconnect device [ 917.336178][T19402] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 918.021262][ T6140] usb 40-1: device descriptor read/8, error -110 [ 918.031806][ T34] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 918.211791][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 918.214779][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 918.217818][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 918.220893][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 918.231900][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 918.241864][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 918.251920][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.470991][ T34] usb 9-1: usb_control_msg returned -32 [ 918.472900][ T34] usbtmc 9-1:16.0: can't read capabilities [ 918.484258][ T34] usb 9-1: USB disconnect, device number 63 [ 918.568409][ T6140] usb usb40-port1: attempt power cycle [ 919.186320][ T6140] usb usb40-port1: unable to enumerate USB device [ 919.531227][T19445] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 919.533310][T19445] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 919.536678][T19445] vhci_hcd vhci_hcd.0: Device attached [ 919.616266][T19448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3523'. [ 919.808919][T19451] fuse: Bad value for 'fd' [ 919.886779][T19455] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.3527'. [ 920.025338][T19446] vhci_hcd: connection closed [ 920.026094][T13397] vhci_hcd: stop threads [ 920.029032][T13397] vhci_hcd: release socket [ 920.031149][T13397] vhci_hcd: disconnect device [ 920.117868][T19469] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 920.206979][T19468] fuse: Unknown parameter 'ÿ' syzkaller syzkaller login: [ 920.898326][T13402] erspan0: left allmulticast mode [ 920.900628][T13402] erspan0: left promiscuous mode [ 920.903155][T13402] bridge0: port 3(erspan0) entered disabled state [ 920.909862][T13402] bridge_slave_1: left allmulticast mode [ 920.912289][T13402] bridge_slave_1: left promiscuous mode [ 920.914211][T13402] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.922183][T13402] bridge_slave_0: left allmulticast mode [ 920.924126][T13402] bridge_slave_0: left promiscuous mode [ 920.925989][T13402] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.931925][ T34] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 921.028708][T13402] bond1 (unregistering): (slave geneve2): Releasing active interface [ 921.046194][T13425] smc: removing ib device syz2 [ 921.081878][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 921.087810][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 921.091432][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 921.106892][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 921.111047][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.118918][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 921.122473][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.348784][ T34] usb 9-1: usb_control_msg returned -32 [ 921.350613][ T34] usbtmc 9-1:16.0: can't read capabilities [ 921.405022][ T34] usb 9-1: USB disconnect, device number 64 [ 921.668262][T19489] fuse: Bad value for 'fd' [ 921.714592][T13402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.719737][T13402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.724993][T13402] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 921.733854][T13402] bond0 (unregistering): Released all slaves [ 921.761924][T18719] usb 46-1: device descriptor read/8, error -110 [ 921.842898][T13402] bond1 (unregistering): Released all slaves [ 921.991962][ T29] usb 38-1: device descriptor read/8, error -110 [ 922.496193][T18719] usb usb46-port1: attempt power cycle [ 923.009129][ T29] usb usb38-port1: attempt power cycle [ 923.016281][T13402] hsr_slave_0: left promiscuous mode [ 923.019197][T13402] hsr_slave_1: left promiscuous mode [ 923.024322][T13402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.327379][T18719] usb usb46-port1: unable to enumerate USB device [ 923.403674][T19514] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 923.405857][T19514] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 923.409018][T19514] vhci_hcd vhci_hcd.0: Device attached [ 923.543500][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3540'. [ 923.679930][ T29] usb usb38-port1: unable to enumerate USB device [ 923.708561][T19515] vhci_hcd: connection closed [ 923.708888][T13419] vhci_hcd: stop threads [ 923.720322][T13419] vhci_hcd: release socket [ 923.722290][T13419] vhci_hcd: disconnect device [ 923.731800][T18719] usb 48-1: enqueue for inactive port 0 [ 923.981489][T13402] team0 (unregistering): Port device team_slave_1 removed [ 924.068175][T13402] team0 (unregistering): Port device team_slave_0 removed [ 924.264809][T18719] usb usb48-port1: attempt power cycle [ 924.743605][T19536] fuse: Bad value for 'fd' [ 924.798583][T19539] fuse: Unknown parameter 'ÿ' [ 924.832805][T18719] usb usb48-port1: unable to enumerate USB device [ 925.253551][T13402] IPVS: stop unused estimator thread 0... [ 926.271062][T19574] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 926.273163][T19574] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 926.336410][T19574] vhci_hcd vhci_hcd.0: Device attached [ 926.469738][T19578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3551'. [ 926.472930][T19578] netlink: 'syz.1.3551': attribute type 18 has an invalid length. [ 926.712191][T19579] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 926.714267][T19579] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 926.717222][T19579] vhci_hcd vhci_hcd.0: Device attached [ 926.791762][T18719] usb 40-1: SetAddress Request (29) to port 0 [ 926.793745][T18719] usb 40-1: new SuperSpeed USB device number 29 using vhci_hcd [ 926.797364][T19582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3557'. [ 926.811214][T19575] vhci_hcd: connection closed [ 926.811326][T13397] vhci_hcd: stop threads [ 926.814337][T13397] vhci_hcd: release socket [ 926.815934][T13397] vhci_hcd: disconnect device [ 927.033862][T19580] vhci_hcd: connection closed [ 927.035471][T13397] vhci_hcd: stop threads [ 927.039001][T13397] vhci_hcd: release socket [ 927.040760][T13397] vhci_hcd: disconnect device [ 927.092004][ T29] usb 46-1: enqueue for inactive port 0 syzkaller syzkaller login: [ 927.606287][ T29] usb usb46-port1: attempt power cycle [ 928.553123][ T29] usb usb46-port1: unable to enumerate USB device [ 929.031836][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 929.156154][T19636] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 929.158807][T19636] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 929.161516][T19636] vhci_hcd vhci_hcd.0: Device attached [ 929.194734][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.201901][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 929.206174][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 929.212572][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.223342][ T10] usb 6-1: config 0 descriptor?? [ 929.238896][T19640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3569'. [ 929.445067][T19643] fuse: Unknown parameter 'ÿ' [ 929.451810][ T29] usb 48-1: SetAddress Request (70) to port 0 [ 929.456626][ T29] usb 48-1: new SuperSpeed USB device number 70 using vhci_hcd [ 929.620987][T19637] vhci_hcd: connection reset by peer [ 929.623646][T13402] vhci_hcd: stop threads [ 929.625028][T13402] vhci_hcd: release socket [ 929.626592][T13402] vhci_hcd: disconnect device [ 929.696008][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3568'. [ 929.887404][ T10] usb 6-1: string descriptor 0 read error: -71 [ 929.890720][ T10] usb 6-1: USB disconnect, device number 13 [ 931.125886][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.128636][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.734722][T19699] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 931.737156][T19699] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 931.740315][T19699] vhci_hcd vhci_hcd.0: Device attached [ 931.833193][T18719] usb 40-1: device descriptor read/8, error -110 [ 931.992227][T19707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3586'. [ 932.082840][ T6140] usb 46-1: SetAddress Request (75) to port 0 [ 932.085452][ T6140] usb 46-1: new SuperSpeed USB device number 75 using vhci_hcd [ 932.243243][T18719] usb usb40-port1: attempt power cycle [ 932.362265][T19700] vhci_hcd: connection reset by peer [ 932.392069][T13390] vhci_hcd: stop threads [ 932.395260][T13390] vhci_hcd: release socket [ 932.397742][T13390] vhci_hcd: disconnect device [ 933.117109][T18719] usb usb40-port1: unable to enumerate USB device [ 933.845111][T19753] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 934.253459][T19756] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 934.331231][T19772] fuse: Unknown parameter 'ÿ' [ 934.608213][ T29] usb 48-1: device descriptor read/8, error -110 [ 934.993636][T19787] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 934.995827][T19787] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 935.111231][ T29] usb usb48-port1: attempt power cycle [ 935.125949][T19787] vhci_hcd vhci_hcd.0: Device attached [ 935.129626][T19794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3610'. [ 935.379853][T19788] vhci_hcd: connection closed [ 935.380531][T13419] vhci_hcd: stop threads [ 935.385357][T13419] vhci_hcd: release socket [ 935.387942][T13419] vhci_hcd: disconnect device [ 935.411805][T18719] usb 38-1: enqueue for inactive port 0 [ 935.682447][ T29] usb usb48-port1: unable to enumerate USB device [ 935.916625][T18719] usb usb38-port1: attempt power cycle [ 936.292436][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3617'. [ 936.376041][T19825] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 936.483357][T18719] usb usb38-port1: unable to enumerate USB device [ 937.194373][ T6140] usb 46-1: device descriptor read/8, error -110 [ 937.384569][T19838] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 937.386907][T19838] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 937.390083][T19838] vhci_hcd vhci_hcd.0: Device attached syzkaller syzkaller login: [ 937.431772][T19837] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 937.434004][T19837] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 937.437469][T19837] vhci_hcd vhci_hcd.0: Device attached [ 937.697907][T19857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3625'. [ 937.722017][T19855] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3624'. [ 937.781781][ T6140] usb 46-1: SetAddress Request (76) to port 0 [ 937.783850][ T6140] usb 46-1: new SuperSpeed USB device number 76 using vhci_hcd [ 937.863894][T18719] usb 48-1: SetAddress Request (74) to port 0 [ 937.866055][T18719] usb 48-1: new SuperSpeed USB device number 74 using vhci_hcd [ 938.078577][T19842] vhci_hcd: connection reset by peer [ 938.080690][T13402] vhci_hcd: stop threads [ 938.082785][T13402] vhci_hcd: release socket [ 938.084916][T13402] vhci_hcd: disconnect device [ 938.225774][T19839] vhci_hcd: connection reset by peer [ 938.228127][T13402] vhci_hcd: stop threads [ 938.229722][T13402] vhci_hcd: release socket [ 938.232096][T13402] vhci_hcd: disconnect device [ 939.134221][T19881] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 939.325983][T12836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 939.330958][T12836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 939.337478][T12836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 939.343887][T12836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 939.347848][T12836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 939.429090][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3635'. [ 939.678922][T19886] chnl_net:caif_netlink_parms(): no params data found [ 939.775675][T19886] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.782142][T19886] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.784495][T19886] bridge_slave_0: entered allmulticast mode [ 939.787014][T19886] bridge_slave_0: entered promiscuous mode [ 939.793688][T19886] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.795963][T19886] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.798243][T19886] bridge_slave_1: entered allmulticast mode [ 939.811319][T19886] bridge_slave_1: entered promiscuous mode [ 939.844540][T19886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.849070][T19886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.894718][T19886] team0: Port device team_slave_0 added [ 939.898147][T19886] team0: Port device team_slave_1 added [ 939.939409][T19886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.941889][T19886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.950221][T19886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.956093][T19886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.958324][T19886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.966329][T19886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.004726][T19886] hsr_slave_0: entered promiscuous mode [ 940.007014][T19886] hsr_slave_1: entered promiscuous mode [ 940.009192][T19886] debugfs: 'hsr0' already exists in 'hsr' [ 940.010947][T19886] Cannot create hsr debugfs directory [ 940.486566][T19886] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 940.491972][T19886] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 940.496975][T19886] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 940.501992][T19886] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 940.556404][T19886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.566982][T19886] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.575750][T13397] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.578739][T13397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.585803][T13402] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.588540][T13402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.055863][T19886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.432939][ T5946] Bluetooth: hci2: command tx timeout [ 941.785115][T19886] veth0_vlan: entered promiscuous mode [ 941.819142][T19886] veth1_vlan: entered promiscuous mode [ 941.904760][T19886] veth0_macvtap: entered promiscuous mode [ 941.920287][T19886] veth1_macvtap: entered promiscuous mode [ 941.929675][T19886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.935755][T19886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.941362][T13419] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.960915][T13419] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.966750][T13419] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.971298][T13419] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.008012][T13390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.010793][T13390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.043600][T13397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.046030][T13397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.352421][T19936] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 942.354503][T19936] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 942.357341][T19936] vhci_hcd vhci_hcd.0: Device attached [ 942.443351][T19939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3641'. [ 942.631751][ T29] usb 38-1: SetAddress Request (17) to port 0 [ 942.633883][ T29] usb 38-1: new SuperSpeed USB device number 17 using vhci_hcd [ 942.883641][T19937] vhci_hcd: connection reset by peer [ 942.885648][T13419] vhci_hcd: stop threads [ 942.887501][T13419] vhci_hcd: release socket [ 942.889514][T13419] vhci_hcd: disconnect device [ 942.921903][ T6140] usb 46-1: device descriptor read/8, error -110 [ 942.951882][T18719] usb 48-1: device descriptor read/8, error -110 [ 943.104860][ T6140] usb usb46-port1: attempt power cycle [ 943.149593][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3643'. [ 943.521830][ T5946] Bluetooth: hci2: command tx timeout [ 943.540552][T18719] usb usb48-port1: attempt power cycle [ 943.822602][ T6140] usb usb46-port1: unable to enumerate USB device [ 943.861747][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 943.950934][T19960] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.3648'. [ 944.033420][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.036866][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 944.041359][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 944.044560][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.089789][ T24] usb 6-1: config 0 descriptor?? [ 944.123759][T18719] usb usb48-port1: unable to enumerate USB device [ 944.866353][ T24] usb 6-1: string descriptor 0 read error: -71 [ 944.870441][ T24] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 944.875600][ T24] usb 6-1: USB disconnect, device number 14 syzkaller syzkaller login: [ 945.398006][T19987] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 945.400206][T19987] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 945.403555][T19987] vhci_hcd vhci_hcd.0: Device attached [ 945.643548][ T5946] Bluetooth: hci2: command tx timeout [ 945.747340][T19993] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3654'. [ 945.891784][T18719] usb 48-1: SetAddress Request (78) to port 0 [ 945.900785][T18719] usb 48-1: new SuperSpeed USB device number 78 using vhci_hcd [ 946.047695][T19988] vhci_hcd: connection reset by peer [ 946.050355][T13397] vhci_hcd: stop threads [ 946.052994][T13397] vhci_hcd: release socket [ 946.055028][T13397] vhci_hcd: disconnect device [ 946.616410][T19997] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.3657'. [ 947.672306][ T29] usb 38-1: device descriptor read/8, error -110 [ 947.681750][ T5946] Bluetooth: hci2: command tx timeout [ 948.232349][ T29] usb usb38-port1: attempt power cycle [ 948.855068][T20040] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 948.857135][T20040] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 948.868204][T20040] vhci_hcd vhci_hcd.0: Device attached [ 948.959741][T20040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3666'. [ 949.139011][T20041] vhci_hcd: connection closed [ 949.139140][T13402] vhci_hcd: stop threads [ 949.143621][T13402] vhci_hcd: release socket [ 949.145463][T13402] vhci_hcd: disconnect device [ 949.150832][ T5940] usb 46-1: enqueue for inactive port 0 [ 949.153392][ T29] usb usb38-port1: unable to enumerate USB device [ 949.261121][T20045] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.3668'. [ 949.755930][ T5940] usb usb46-port1: attempt power cycle [ 950.385254][ T5940] usb usb46-port1: unable to enumerate USB device [ 950.577189][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3674'. [ 950.954352][T18719] usb 48-1: device descriptor read/8, error -110 [ 951.093040][T20084] netlink: 'syz.4.3679': attribute type 72 has an invalid length. [ 951.500588][T18719] usb usb48-port1: attempt power cycle [ 951.999467][T20095] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 952.001843][T20095] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 952.005089][T20095] vhci_hcd vhci_hcd.0: Device attached [ 952.095023][T20099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3681'. [ 952.272023][ T5940] usb 40-1: SetAddress Request (33) to port 0 [ 952.274860][ T5940] usb 40-1: new SuperSpeed USB device number 33 using vhci_hcd [ 952.371724][ T34] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 952.392463][T18719] usb usb48-port1: unable to enumerate USB device [ 952.531794][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 952.535657][ T34] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 952.539074][ T34] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 952.542179][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.597307][T20096] vhci_hcd: connection reset by peer [ 952.599248][T13397] vhci_hcd: stop threads [ 952.600731][T13397] vhci_hcd: release socket [ 952.602334][T13397] vhci_hcd: disconnect device [ 953.952263][T20124] netlink: 'syz.4.3688': attribute type 72 has an invalid length. [ 954.883090][T20137] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 954.885208][T20137] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 954.888022][T20137] vhci_hcd vhci_hcd.0: Device attached [ 955.000015][T20142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3691'. [ 955.173400][ T34] usb 10-1: USB disconnect, device number 51 [ 955.231937][T18719] usb 38-1: SetAddress Request (21) to port 0 [ 955.236463][T18719] usb 38-1: new SuperSpeed USB device number 21 using vhci_hcd [ 955.650634][T20138] vhci_hcd: connection reset by peer [ 955.654701][T13390] vhci_hcd: stop threads [ 955.659805][T13390] vhci_hcd: release socket [ 955.664621][T13390] vhci_hcd: disconnect device [ 955.960065][T20159] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 955.962175][T20159] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 955.965286][T20159] vhci_hcd vhci_hcd.0: Device attached [ 956.061894][T20162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3695'. [ 956.472130][T20166] netlink: 'syz.0.3697': attribute type 72 has an invalid length. [ 956.571451][T20160] vhci_hcd: connection closed [ 956.572060][T13402] vhci_hcd: stop threads [ 956.575960][T13402] vhci_hcd: release socket [ 956.578421][T13402] vhci_hcd: disconnect device [ 957.352101][ T5940] usb 40-1: device descriptor read/8, error -110 [ 957.844840][ T5940] usb usb40-port1: attempt power cycle [ 958.033460][T20202] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3707'. syzkaller syzkaller login: [ 958.423342][ T5940] usb usb40-port1: unable to enumerate USB device [ 958.711840][T20211] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 958.714642][T20211] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 958.718654][T20211] vhci_hcd vhci_hcd.0: Device attached [ 958.759896][T20217] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 958.762156][T20217] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 958.772655][T20217] vhci_hcd vhci_hcd.0: Device attached [ 958.828701][T20221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3708'. [ 958.982386][ T24] usb 40-1: SetAddress Request (37) to port 0 [ 958.985008][ T24] usb 40-1: new SuperSpeed USB device number 37 using vhci_hcd [ 959.071929][ T5940] usb 48-1: SetAddress Request (82) to port 0 [ 959.076003][ T5940] usb 48-1: new SuperSpeed USB device number 82 using vhci_hcd [ 959.272734][T20215] vhci_hcd: connection reset by peer [ 959.274791][T13443] vhci_hcd: stop threads [ 959.276170][T13443] vhci_hcd: release socket [ 959.277712][T13443] vhci_hcd: disconnect device [ 959.374172][T20218] vhci_hcd: connection reset by peer [ 959.376084][T13443] vhci_hcd: stop threads [ 959.377443][T13443] vhci_hcd: release socket [ 959.378906][T13443] vhci_hcd: disconnect device [ 960.079142][T20238] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3716'. [ 960.312020][T18719] usb 38-1: device descriptor read/8, error -110 [ 960.639793][T20248] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 960.642638][T20248] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 960.646660][T20248] vhci_hcd vhci_hcd.0: Device attached [ 960.875849][T18719] usb usb38-port1: attempt power cycle [ 961.276383][T20249] vhci_hcd: connection closed [ 961.276722][T13390] vhci_hcd: stop threads [ 961.279848][T13390] vhci_hcd: release socket [ 961.285095][T13390] vhci_hcd: disconnect device [ 961.563847][T18719] usb usb38-port1: unable to enumerate USB device [ 962.251111][T20282] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 962.253293][T20282] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 962.256176][T20282] vhci_hcd vhci_hcd.0: Device attached [ 962.541771][T18719] usb 46-1: SetAddress Request (83) to port 0 [ 962.544373][T18719] usb 46-1: new SuperSpeed USB device number 83 using vhci_hcd [ 962.896928][T20283] vhci_hcd: connection reset by peer [ 962.899201][T13443] vhci_hcd: stop threads [ 962.901769][T13443] vhci_hcd: release socket [ 962.903347][T13443] vhci_hcd: disconnect device [ 964.081739][ T24] usb 40-1: device descriptor read/8, error -110 [ 964.163633][ T5940] usb 48-1: device descriptor read/8, error -110 [ 964.419413][T20305] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 964.422184][T20305] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 964.431733][T20305] vhci_hcd vhci_hcd.0: Device attached [ 964.519373][T20312] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3731'. [ 964.541046][ T24] usb usb40-port1: attempt power cycle [ 964.611769][ T5940] usb 48-1: SetAddress Request (83) to port 0 [ 964.613833][ T5940] usb 48-1: new SuperSpeed USB device number 83 using vhci_hcd [ 965.104561][T20306] vhci_hcd: connection reset by peer [ 965.106900][T13394] vhci_hcd: stop threads [ 965.108278][T13394] vhci_hcd: release socket [ 965.109743][T13394] vhci_hcd: disconnect device [ 965.122899][ T24] usb usb40-port1: unable to enumerate USB device [ 966.171755][ T24] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 966.201788][ T61] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 966.353668][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.353765][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.360976][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.365063][ T61] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 966.369095][ T24] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 966.373401][ T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 966.376430][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.383163][ T24] usb 10-1: config 0 descriptor?? [ 966.479840][ T61] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 966.482749][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.486465][ T61] usb 6-1: config 0 descriptor?? [ 966.894322][T20344] bridge0: port 3(erspan0) entered blocking state [ 966.894776][ T61] hid_parser_main: 5 callbacks suppressed [ 966.894788][ T61] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 966.896685][T20344] bridge0: port 3(erspan0) entered disabled state [ 966.898354][ T61] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 966.900996][T20344] erspan0: entered allmulticast mode [ 966.905771][ T61] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 966.909494][ T61] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 966.910616][T20344] erspan0: entered promiscuous mode [ 966.912302][ T61] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 966.914660][T20344] bridge0: port 3(erspan0) entered blocking state [ 966.916089][ T61] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 966.918266][T20344] bridge0: port 3(erspan0) entered forwarding state [ 966.920592][ T61] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 966.925302][ T61] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 966.927666][ T61] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 966.929999][ T61] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 966.938325][ T61] plantronics 0003:047F:FFFF.0080: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 967.080772][T20344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3738'. [ 967.195697][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3739'. [ 967.620739][T18719] usb 46-1: device descriptor read/8, error -110 [ 968.012219][T18719] usb usb46-port1: attempt power cycle [ 968.098100][ T10] usb 6-1: USB disconnect, device number 15 [ 968.583475][T18719] usb usb46-port1: unable to enumerate USB device [ 968.954299][ T24] usb 10-1: string descriptor 0 read error: -71 [ 968.971951][ T24] usb 10-1: USB disconnect, device number 52 [ 968.974324][T20368] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 968.977357][T20368] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 968.980380][T20368] vhci_hcd vhci_hcd.0: Device attached [ 969.099163][T20375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3746'. [ 969.403187][T18719] usb 40-1: SetAddress Request (41) to port 0 [ 969.422753][T18719] usb 40-1: new SuperSpeed USB device number 41 using vhci_hcd [ 969.599339][T20370] vhci_hcd: connection closed [ 969.599576][T13419] vhci_hcd: stop threads [ 969.612888][T13419] vhci_hcd: release socket [ 969.616938][T13419] vhci_hcd: disconnect device [ 969.671866][ T5940] usb 48-1: device descriptor read/8, error -110 [ 969.782238][ T5940] usb usb48-port1: attempt power cycle [ 970.298999][T20389] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 970.301542][T20389] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 970.306248][T20389] vhci_hcd vhci_hcd.0: Device attached [ 970.427409][T20392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3750'. [ 970.601735][ T6140] usb 46-1: SetAddress Request (87) to port 0 [ 970.603742][ T6140] usb 46-1: new SuperSpeed USB device number 87 using vhci_hcd [ 970.940122][T20396] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 971.145610][ T5940] usb usb48-port1: unable to enumerate USB device [ 971.193202][T20390] vhci_hcd: connection reset by peer [ 971.195265][T13419] vhci_hcd: stop threads [ 971.197039][T13419] vhci_hcd: release socket [ 971.198987][T13419] vhci_hcd: disconnect device [ 973.313587][T20434] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 973.316198][T20434] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 973.322504][T20434] vhci_hcd vhci_hcd.0: Device attached [ 973.426952][T20437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3763'. [ 973.860235][T20446] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 973.978590][T20435] vhci_hcd: connection closed [ 973.978911][T13394] vhci_hcd: stop threads [ 973.992255][T13394] vhci_hcd: release socket [ 973.994281][T13394] vhci_hcd: disconnect device [ 974.645011][T18719] usb 40-1: device descriptor read/8, error -110 [ 975.246105][T18719] usb usb40-port1: attempt power cycle [ 975.701902][ T6030] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 975.813764][T18719] usb usb40-port1: unable to enumerate USB device [ 975.916946][ T6140] usb 46-1: device descriptor read/8, error -110 [ 975.920373][ T6030] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.929079][ T6030] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 975.936846][ T6030] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 975.943659][ T6030] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.974450][ T6030] usb 10-1: config 0 descriptor?? [ 976.398028][ T6140] usb usb46-port1: attempt power cycle [ 976.453155][T20483] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 976.667354][T20494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3773'. [ 976.850840][ T6030] usb 10-1: string descriptor 0 read error: -71 [ 976.853708][ T6030] usb 10-1: USB disconnect, device number 53 [ 976.962543][ T6140] usb usb46-port1: unable to enumerate USB device [ 980.152305][ T6140] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 980.378385][ T6140] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.389342][ T6140] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 980.393392][ T6140] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 980.397185][ T6140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.407269][ T6140] usb 6-1: config 0 descriptor?? [ 980.505303][T20563] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 980.507504][T20563] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 980.511950][T20563] vhci_hcd vhci_hcd.0: Device attached [ 980.782875][T18719] usb 48-1: SetAddress Request (86) to port 0 [ 980.785555][T18719] usb 48-1: new SuperSpeed USB device number 86 using vhci_hcd [ 981.023405][T20567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3791'. [ 981.256762][T20564] vhci_hcd: connection reset by peer [ 981.259286][T13419] vhci_hcd: stop threads [ 981.260768][T13419] vhci_hcd: release socket [ 981.262737][T13419] vhci_hcd: disconnect device [ 981.367567][ T6140] usb 6-1: string descriptor 0 read error: -71 [ 981.371189][ T6140] usb 6-1: USB disconnect, device number 16 [ 984.832015][ T61] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 984.876977][T20615] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 985.036268][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.041090][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.047825][ T61] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 985.052716][ T61] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 985.056399][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.061233][ T61] usb 9-1: config 0 descriptor?? [ 985.476963][ T61] hid_parser_main: 5 callbacks suppressed [ 985.476976][ T61] plantronics 0003:047F:FFFF.0081: unknown main item tag 0x0 [ 985.482042][ T61] plantronics 0003:047F:FFFF.0081: unknown main item tag 0x0 [ 985.484571][ T61] plantronics 0003:047F:FFFF.0081: unknown main item tag 0x0 [ 985.486889][ T61] plantronics 0003:047F:FFFF.0081: unknown main item tag 0x0 [ 985.489206][ T61] plantronics 0003:047F:FFFF.0081: unknown main item tag 0x0 [ 985.491597][ T61] plantronics 0003:047F:FFFF.0081: unknown main item tag 0x0 [ 985.494402][ T61] plantronics 0003:047F:FFFF.0081: unknown main item tag 0x0 [ 985.496721][ T61] plantronics 0003:047F:FFFF.0081: unknown main item tag 0x0 [ 985.499035][ T61] plantronics 0003:047F:FFFF.0081: unknown main item tag 0x0 [ 985.501404][ T61] plantronics 0003:047F:FFFF.0081: unknown main item tag 0x0 [ 985.507030][ T61] plantronics 0003:047F:FFFF.0081: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 985.746800][T20625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3807'. [ 985.841861][T18719] usb 48-1: device descriptor read/8, error -110 [ 986.238657][T18719] usb usb48-port1: attempt power cycle [ 986.793335][T20631] fuse: Unknown parameter 'ÿ' [ 987.011755][T10581] usb 9-1: reset high-speed USB device number 65 using dummy_hcd [ 987.303991][T18719] usb usb48-port1: unable to enumerate USB device [ 987.437047][T20641] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 987.439137][T20641] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 987.442475][T20641] vhci_hcd vhci_hcd.0: Device attached [ 987.544288][T20644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3815'. [ 987.711763][T18719] usb 40-1: SetAddress Request (45) to port 0 [ 987.713759][T18719] usb 40-1: new SuperSpeed USB device number 45 using vhci_hcd [ 987.812435][ T24] usb 9-1: USB disconnect, device number 65 [ 988.032522][T20642] vhci_hcd: connection reset by peer [ 988.034714][T13443] vhci_hcd: stop threads [ 988.036492][T13443] vhci_hcd: release socket [ 988.038395][T13443] vhci_hcd: disconnect device [ 990.421079][T20690] fuse: Unknown parameter 'ÿ' [ 990.583628][T20697] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 990.586418][T20697] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 990.596446][T20697] vhci_hcd vhci_hcd.0: Device attached [ 990.718889][T20701] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3829'. [ 990.851963][ T6140] usb 48-1: SetAddress Request (90) to port 0 [ 990.854112][ T6140] usb 48-1: new SuperSpeed USB device number 90 using vhci_hcd [ 991.116740][T20698] vhci_hcd: connection reset by peer [ 991.119014][T13443] vhci_hcd: stop threads [ 991.120489][T13443] vhci_hcd: release socket [ 991.122235][T13443] vhci_hcd: disconnect device [ 992.564694][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.566780][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 992.791965][T18719] usb 40-1: device descriptor read/8, error -110 [ 993.192738][T18719] usb usb40-port1: attempt power cycle [ 993.371758][ T24] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 993.533382][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.537973][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.542118][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 993.547208][ T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 993.550853][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.555977][ T24] usb 10-1: config 0 descriptor?? [ 993.863377][T18719] usb usb40-port1: unable to enumerate USB device [ 994.032503][ T24] hid_parser_main: 5 callbacks suppressed [ 994.032516][ T24] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 994.041957][ T24] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 994.054103][ T24] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 994.056406][ T24] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 994.058695][ T24] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 994.061078][ T24] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 994.066800][ T24] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 994.070327][ T24] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 994.073371][ T24] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 994.075696][ T24] plantronics 0003:047F:FFFF.0082: unknown main item tag 0x0 [ 994.089613][ T24] plantronics 0003:047F:FFFF.0082: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 994.351394][T20764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3841'. [ 994.401819][ T34] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 994.408141][T20765] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 994.410252][T20765] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 994.413446][T20765] vhci_hcd vhci_hcd.0: Device attached [ 994.493051][T20769] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3846'. [ 994.565592][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.569948][ T34] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 994.574083][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 994.577814][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.584658][ T34] usb 9-1: config 0 descriptor?? [ 994.791727][T18719] usb 38-1: SetAddress Request (25) to port 0 [ 994.793769][T18719] usb 38-1: new SuperSpeed USB device number 25 using vhci_hcd [ 995.002909][T20766] vhci_hcd: connection reset by peer [ 995.005212][T13443] vhci_hcd: stop threads [ 995.007242][T13443] vhci_hcd: release socket [ 995.009415][T13443] vhci_hcd: disconnect device [ 995.063181][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3845'. [ 995.241052][ T34] usb 9-1: string descriptor 0 read error: -71 [ 995.244139][ T34] usb 9-1: USB disconnect, device number 66 [ 995.671988][ T24] usb 10-1: reset high-speed USB device number 54 using dummy_hcd [ 995.911792][ T6140] usb 48-1: device descriptor read/8, error -110 [ 996.312797][ T6140] usb usb48-port1: attempt power cycle [ 996.481843][ T24] usb 10-1: device descriptor read/64, error -71 [ 996.742217][ T24] usb 10-1: reset high-speed USB device number 54 using dummy_hcd [ 996.805139][T12836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 996.815042][T12836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 996.846486][T12836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 996.852676][T12836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 996.855268][T12836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 996.889492][T14519] syz_tun (unregistering): left promiscuous mode [ 996.892464][ T6140] usb usb48-port1: unable to enumerate USB device [ 996.904739][T13443] smc: removing ib device syz1 [ 996.923128][ T24] usb 10-1: device firmware changed [ 996.925383][T10581] usb 10-1: USB disconnect, device number 54 [ 997.132113][T10581] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 997.153539][T20795] chnl_net:caif_netlink_parms(): no params data found [ 997.332008][T10581] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.336017][T10581] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 997.338857][T10581] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 997.349463][T10581] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.368636][T10581] usb 10-1: config 0 descriptor?? [ 997.377754][T20795] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.380137][T20795] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.382618][T20795] bridge_slave_0: entered allmulticast mode [ 997.391317][T20795] bridge_slave_0: entered promiscuous mode [ 997.395038][T20795] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.412910][T20795] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.415354][T20795] bridge_slave_1: entered allmulticast mode [ 997.419122][T20795] bridge_slave_1: entered promiscuous mode [ 997.495361][T20795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.508210][T13419] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.519829][T20795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.565183][T20795] team0: Port device team_slave_0 added [ 997.568459][T20795] team0: Port device team_slave_1 added [ 997.598309][T13419] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.621230][T20795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.654852][T20795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.663943][T20795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.668501][T20795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.670672][T20795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.678770][T20795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.729296][T13419] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.740130][T20795] hsr_slave_0: entered promiscuous mode [ 997.743093][T20795] hsr_slave_1: entered promiscuous mode [ 997.745474][T20795] debugfs: 'hsr0' already exists in 'hsr' [ 997.747301][T20795] Cannot create hsr debugfs directory [ 997.844878][T13419] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.860803][T20808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3853'. [ 998.016514][T13419] erspan0: left allmulticast mode [ 998.018425][T13419] erspan0: left promiscuous mode [ 998.019975][T13419] bridge0: port 3(erspan0) entered disabled state [ 998.024517][T13419] bridge_slave_1: left allmulticast mode [ 998.026188][T13419] bridge_slave_1: left promiscuous mode [ 998.028169][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.034308][T13419] bridge_slave_0: left allmulticast mode [ 998.035977][T13419] bridge_slave_0: left promiscuous mode [ 998.041856][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.095362][T20814] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 998.097457][T20814] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 998.100939][T20814] vhci_hcd vhci_hcd.0: Device attached [ 998.186840][T20817] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3857'. [ 998.358498][T13419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 998.364303][T13419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.368157][T13419] bond0 (unregistering): Released all slaves [ 998.445976][T13419] bond1 (unregistering): (slave bond2): Releasing backup interface [ 998.448297][T13419] bond2 (unregistering): left promiscuous mode [ 998.451407][T13419] bond1 (unregistering): Released all slaves [ 998.537601][T13419] bond2 (unregistering): Released all slaves [ 998.738165][T20815] vhci_hcd: connection closed [ 998.742993][T13394] vhci_hcd: stop threads [ 998.746781][T13394] vhci_hcd: release socket [ 998.749303][T13394] vhci_hcd: disconnect device [ 998.801018][T10581] usb 10-1: string descriptor 0 read error: -71 [ 998.807534][T10581] usb 10-1: USB disconnect, device number 55 [ 998.813452][T20830] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 998.816212][T20830] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 998.830635][T20830] vhci_hcd vhci_hcd.0: Device attached [ 998.871860][ T5946] Bluetooth: hci4: command tx timeout [ 998.950345][T20833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3859'. [ 999.019249][T13419] hsr_slave_0: left promiscuous mode [ 999.021354][T13419] hsr_slave_1: left promiscuous mode [ 999.024504][T13419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.027387][T13419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.111829][ T5940] usb 40-1: SetAddress Request (49) to port 0 [ 999.114305][ T5940] usb 40-1: new SuperSpeed USB device number 49 using vhci_hcd [ 999.383040][T20831] vhci_hcd: connection reset by peer [ 999.386218][T13443] vhci_hcd: stop threads [ 999.388052][T13443] vhci_hcd: release socket [ 999.390021][T13443] vhci_hcd: disconnect device syzkaller syzkaller login: [ 999.611761][ T24] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 999.686697][T13419] team0 (unregistering): Port device team_slave_1 removed [ 999.754643][T13419] team0 (unregistering): Port device team_slave_0 removed [ 999.773370][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.776607][ T24] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 999.779473][ T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 999.782843][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.786484][ T24] usb 10-1: config 0 descriptor?? [ 999.841896][T18719] usb 38-1: device descriptor read/8, error -110 [ 1000.232283][T18719] usb usb38-port1: attempt power cycle [ 1000.332498][T20855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3861'. [ 1000.441806][T20795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1000.445866][T20795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1000.449802][T20795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1000.455826][T20795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1000.513475][T20795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.523978][T20795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.528977][T13402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.531901][T13402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.538278][T13402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.541106][T13402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.567413][ T24] usb 10-1: string descriptor 0 read error: -71 [ 1000.570039][ T24] usb 10-1: USB disconnect, device number 56 [ 1000.641927][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1000.649894][T20795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.670517][T13419] IPVS: stop unused estimator thread 0... [ 1000.771049][T20795] veth0_vlan: entered promiscuous mode [ 1000.777932][T20795] veth1_vlan: entered promiscuous mode [ 1000.792738][T18719] usb usb38-port1: unable to enumerate USB device [ 1000.792953][T20795] veth0_macvtap: entered promiscuous mode [ 1000.798689][T20795] veth1_macvtap: entered promiscuous mode [ 1000.803582][ T10] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1000.807053][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1000.807297][T20795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.811044][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1000.816938][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.819118][T20795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.821239][ T10] usb 6-1: config 0 descriptor?? [ 1000.824887][T13394] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.828164][T13394] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.828511][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1000.830967][T13394] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.836196][T13394] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.865504][T13394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.867938][T13394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.895524][T13394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.897991][T13394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.961772][ T5946] Bluetooth: hci4: command tx timeout [ 1001.153292][T20884] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1002.434740][T20904] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1002.436877][T20904] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1002.439590][T20904] vhci_hcd vhci_hcd.0: Device attached [ 1002.531349][T20907] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3867'. [ 1002.811774][ T6140] usb 48-1: SetAddress Request (94) to port 0 [ 1002.813741][ T6140] usb 48-1: new SuperSpeed USB device number 94 using vhci_hcd [ 1003.031763][ T5946] Bluetooth: hci4: command tx timeout [ 1003.080591][T20905] vhci_hcd: connection reset by peer [ 1003.082661][T13425] vhci_hcd: stop threads [ 1003.084060][T13425] vhci_hcd: release socket [ 1003.085501][T13425] vhci_hcd: disconnect device [ 1003.104448][ T10] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1003.274544][ T10] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1003.277980][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1003.282254][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1003.285315][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.289796][ T10] usb 9-1: config 0 descriptor?? [ 1003.298833][ T10] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1003.419892][ T61] usb 6-1: USB disconnect, device number 17 [ 1003.696183][T20917] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1003.698427][T20917] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1003.701220][T20917] vhci_hcd vhci_hcd.0: Device attached [ 1003.793961][T20926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3871'. [ 1004.367535][T20918] vhci_hcd: connection reset by peer [ 1004.370018][T13425] vhci_hcd: stop threads [ 1004.371437][T13425] vhci_hcd: release socket [ 1004.376085][T13425] vhci_hcd: disconnect device [ 1004.378152][ T5940] usb 40-1: device descriptor read/8, error -110 [ 1004.762976][ T5940] usb usb40-port1: attempt power cycle [ 1005.161771][ T5946] Bluetooth: hci4: command tx timeout [ 1005.769515][ T5940] usb usb40-port1: unable to enumerate USB device [ 1005.894705][ T61] usb 9-1: USB disconnect, device number 67 [ 1006.187342][T20966] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1006.190006][T20966] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1006.276570][T20966] vhci_hcd vhci_hcd.0: Device attached [ 1006.479329][T20969] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3880'. [ 1006.611776][ T5940] usb 46-1: SetAddress Request (91) to port 0 [ 1006.614425][ T5940] usb 46-1: new SuperSpeed USB device number 91 using vhci_hcd [ 1006.777472][T20967] vhci_hcd: connection reset by peer [ 1006.779979][T13419] vhci_hcd: stop threads [ 1006.781460][T13419] vhci_hcd: release socket [ 1006.783691][T13419] vhci_hcd: disconnect device [ 1006.991745][T18719] usb 10-1: new full-speed USB device number 57 using dummy_hcd [ 1007.131792][T18719] usb 10-1: device descriptor read/64, error -71 [ 1007.463980][T18719] usb 10-1: new full-speed USB device number 58 using dummy_hcd [ 1007.591965][T18719] usb 10-1: device descriptor read/64, error -71 [ 1007.614528][T20996] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1007.616736][T20996] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1007.620562][T20996] vhci_hcd vhci_hcd.0: Device attached [ 1007.704379][T18719] usb usb10-port1: attempt power cycle [ 1007.823390][T21001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3886'. [ 1007.839631][T21001] vxlan0: entered promiscuous mode [ 1007.844119][T13397] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.848178][T13397] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.852199][T13397] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.858340][T13397] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.911779][ T6140] usb 48-1: device descriptor read/8, error -110 [ 1007.971844][ T61] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1008.041774][T18719] usb 10-1: new full-speed USB device number 59 using dummy_hcd [ 1008.062127][T18719] usb 10-1: device descriptor read/8, error -71 [ 1008.123571][ T61] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1008.128098][ T61] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1008.133693][ T61] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1008.137449][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.141347][ T61] usb 6-1: config 0 descriptor?? [ 1008.145356][ T61] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1008.202997][T20997] vhci_hcd: connection closed [ 1008.203122][T13419] vhci_hcd: stop threads [ 1008.205967][T13419] vhci_hcd: release socket [ 1008.211733][T13419] vhci_hcd: disconnect device [ 1008.311757][T18719] usb 10-1: new full-speed USB device number 60 using dummy_hcd [ 1008.316296][ T6140] usb usb48-port1: attempt power cycle [ 1008.342209][T18719] usb 10-1: device descriptor read/8, error -71 [ 1008.452270][T18719] usb usb10-port1: unable to enumerate USB device [ 1008.900598][ T6140] usb usb48-port1: unable to enumerate USB device [ 1010.746878][ T6030] usb 6-1: USB disconnect, device number 18 [ 1011.028644][T21036] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1011.031329][T21036] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1011.036710][T21036] vhci_hcd vhci_hcd.0: Device attached [ 1011.273563][T21031] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3894'. [ 1011.366226][T21043] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1011.368893][T21043] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1011.372766][T21043] vhci_hcd vhci_hcd.0: Device attached [ 1011.499780][T21047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3898'. [ 1012.101799][T21037] vhci_hcd: connection reset by peer [ 1012.103924][T13425] vhci_hcd: stop threads [ 1012.105473][T13425] vhci_hcd: release socket [ 1012.107245][T13425] vhci_hcd: disconnect device [ 1012.243337][T21044] vhci_hcd: connection closed [ 1012.243546][T13425] vhci_hcd: stop threads [ 1012.246494][T13425] vhci_hcd: release socket [ 1012.248214][T13425] vhci_hcd: disconnect device [ 1012.305996][ T5940] usb 46-1: device descriptor read/8, error -110 [ 1012.622178][ T6030] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1012.703193][ T5940] usb usb46-port1: attempt power cycle [ 1012.771756][ T6030] usb 6-1: device descriptor read/64, error -71 [ 1013.011977][ T6030] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1013.048735][T13397] erspan0: left allmulticast mode [ 1013.050404][T13397] erspan0: left promiscuous mode [ 1013.052344][T13397] bridge0: port 1(erspan0) entered disabled state [ 1013.151901][ T6030] usb 6-1: device descriptor read/64, error -71 [ 1013.269466][ T6030] usb usb6-port1: attempt power cycle [ 1013.272317][ T5940] usb usb46-port1: unable to enumerate USB device [ 1013.365421][T13397] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1013.367930][T13397] bond1 (unregistering): left promiscuous mode [ 1013.373245][T13397] bond0 (unregistering): Released all slaves [ 1013.467426][T13397] bond1 (unregistering): Released all slaves [ 1013.554067][T13397] tipc: Left network mode [ 1013.631981][ T6030] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1013.662775][ T6030] usb 6-1: device descriptor read/8, error -71 [ 1013.762005][ T10] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1013.785099][T13397] hsr_slave_0: left promiscuous mode [ 1013.789009][T13397] hsr_slave_1: left promiscuous mode [ 1013.911716][ T6030] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1013.934948][ T6030] usb 6-1: device descriptor read/8, error -71 [ 1013.943122][ T10] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1013.946505][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1013.950693][ T10] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1013.953639][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.959675][ T10] usb 10-1: config 0 descriptor?? [ 1013.966726][ T10] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1014.041992][ T6030] usb usb6-port1: unable to enumerate USB device [ 1015.340041][T13397] IPVS: stop unused estimator thread 0... [ 1016.292049][T21088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3909'. [ 1016.540368][ T6030] usb 10-1: USB disconnect, device number 61 [ 1018.652825][T21122] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1018.654918][T21122] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1018.658010][T21122] vhci_hcd vhci_hcd.0: Device attached [ 1019.074350][ T5940] usb 40-1: SetAddress Request (53) to port 0 [ 1019.076512][ T5940] usb 40-1: new SuperSpeed USB device number 53 using vhci_hcd [ 1019.152450][ T6007] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1019.313971][ T6007] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1019.317581][ T6007] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1019.321534][ T6007] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1019.324513][ T6007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.328395][ T6007] usb 9-1: config 0 descriptor?? [ 1019.332217][ T6007] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1019.376014][T21123] vhci_hcd: connection reset by peer [ 1019.382853][T13425] vhci_hcd: stop threads [ 1019.384224][T13425] vhci_hcd: release socket [ 1019.385696][T13425] vhci_hcd: disconnect device [ 1020.295612][T21149] bridge0: port 3(erspan0) entered blocking state [ 1020.298022][T21149] bridge0: port 3(erspan0) entered disabled state [ 1020.300358][T21149] erspan0: entered allmulticast mode [ 1020.304849][T21149] erspan0: entered promiscuous mode [ 1020.307113][T21149] bridge0: port 3(erspan0) entered blocking state [ 1020.309181][T21149] bridge0: port 3(erspan0) entered forwarding state [ 1020.311831][ T6007] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1020.441802][ T6007] usb 6-1: device descriptor read/64, error -71 [ 1020.611750][ T6030] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1020.681783][ T6007] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1020.772980][ T6030] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.776642][ T6030] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.779869][ T6030] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1020.784327][ T6030] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1020.787224][ T6030] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.791256][ T6030] usb 10-1: config 0 descriptor?? [ 1020.811834][ T6007] usb 6-1: device descriptor read/64, error -71 [ 1020.922921][ T6007] usb usb6-port1: attempt power cycle [ 1021.204337][ T6030] hid_parser_main: 5 callbacks suppressed [ 1021.204349][ T6030] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1021.208604][ T6030] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1021.211036][ T6030] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1021.213470][ T6030] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1021.215862][ T6030] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1021.218268][ T6030] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1021.220952][ T6030] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1021.231859][ T6030] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1021.234357][ T6030] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1021.241853][ T6030] plantronics 0003:047F:FFFF.0083: unknown main item tag 0x0 [ 1021.250081][ T6030] plantronics 0003:047F:FFFF.0083: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1021.262038][ T6007] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1021.282481][ T6007] usb 6-1: device descriptor read/8, error -71 [ 1021.462413][T21157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3923'. [ 1021.521765][ T6007] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1021.543347][ T6007] usb 6-1: device descriptor read/8, error -71 [ 1021.652049][ T6007] usb usb6-port1: unable to enumerate USB device [ 1021.934345][T16004] usb 9-1: USB disconnect, device number 68 [ 1022.271901][T16004] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1022.441864][T16004] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.451954][T16004] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1022.455035][T16004] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1022.458312][T16004] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.481750][T16004] usb 9-1: config 0 descriptor?? [ 1022.671800][T18719] usb 10-1: reset high-speed USB device number 62 using dummy_hcd [ 1022.999030][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3925'. [ 1023.405973][T16004] usb 9-1: string descriptor 0 read error: -71 [ 1023.413983][T16004] usb 9-1: USB disconnect, device number 69 [ 1024.167625][ T5940] usb 40-1: device descriptor read/8, error -110 [ 1024.237973][ T29] usb 10-1: USB disconnect, device number 62 [ 1024.553307][ T5940] usb usb40-port1: attempt power cycle [ 1025.122577][ T5940] usb usb40-port1: unable to enumerate USB device [ 1026.161783][ T5940] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1026.174512][T21208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3936'. [ 1026.182032][ T6030] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1026.313452][ T5940] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1026.321803][ T5940] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1026.330378][ T5940] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1026.334023][ T6030] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.334307][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.338401][ T6030] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1026.343578][ T5940] usb 6-1: config 0 descriptor?? [ 1026.344769][ T6030] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1026.349317][ T6030] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.350987][ T5940] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1026.353527][ T6030] usb 9-1: config 0 descriptor?? [ 1026.819315][T21209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3935'. [ 1027.048779][ T6030] usb 9-1: string descriptor 0 read error: -71 [ 1027.056708][ T6030] usb 9-1: USB disconnect, device number 70 [ 1027.821832][ T24] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1027.973837][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.977541][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.980813][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1027.985196][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1027.988218][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.998338][ T24] usb 9-1: config 0 descriptor?? [ 1028.410388][ T24] hid_parser_main: 5 callbacks suppressed [ 1028.410401][ T24] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1028.414889][ T24] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1028.417301][ T24] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1028.419643][ T24] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1028.422110][ T24] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1028.424446][ T24] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1028.426777][ T24] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1028.429227][ T24] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1028.431757][ T24] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1028.434341][ T24] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1028.440150][ T24] plantronics 0003:047F:FFFF.0084: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1028.667978][T21227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3938'. [ 1028.781000][T21229] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1028.959528][T16004] usb 6-1: USB disconnect, device number 27 [ 1029.991769][ T24] usb 9-1: reset high-speed USB device number 71 using dummy_hcd [ 1030.102908][T21242] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1030.104985][T21242] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1030.107757][T21242] vhci_hcd vhci_hcd.0: Device attached [ 1030.198922][T21245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3943'. [ 1030.461910][ T5940] usb 40-1: SetAddress Request (57) to port 0 [ 1030.464635][ T5940] usb 40-1: new SuperSpeed USB device number 57 using vhci_hcd [ 1030.733522][T21243] vhci_hcd: connection reset by peer [ 1030.736296][T13425] vhci_hcd: stop threads [ 1030.738147][T13425] vhci_hcd: release socket [ 1030.740127][T13425] vhci_hcd: disconnect device [ 1030.971761][ T24] usb 9-1: device descriptor read/64, error -71 [ 1031.211755][ T24] usb 9-1: reset high-speed USB device number 71 using dummy_hcd [ 1031.362915][ T24] usb 9-1: device firmware changed [ 1031.365802][T10581] usb 9-1: USB disconnect, device number 71 [ 1031.511818][T10581] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1031.531747][T16004] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1031.601216][T21264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3948'. [ 1031.663082][T10581] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1031.666600][T10581] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1031.673637][T10581] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1031.677327][T10581] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.683301][T10581] usb 9-1: config 0 descriptor?? [ 1031.687258][T10581] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1031.703352][T16004] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.711967][T16004] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1031.715642][T16004] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1031.718597][T16004] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.747127][T16004] usb 10-1: config 0 descriptor?? [ 1032.219664][T21269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3947'. [ 1032.281123][T21270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3949'. [ 1032.575290][T16004] usb 10-1: string descriptor 0 read error: -71 [ 1032.578313][T16004] usb 10-1: USB disconnect, device number 63 [ 1033.211735][T10581] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1033.322793][T21281] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1033.373303][T10581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.377615][T10581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.381476][T10581] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1033.386416][T10581] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1033.389480][T10581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.394606][T10581] usb 6-1: config 0 descriptor?? [ 1033.807828][T10581] hid_parser_main: 5 callbacks suppressed [ 1033.807848][T10581] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1033.813556][T10581] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1033.816670][T10581] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1033.819771][T10581] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1033.823003][T10581] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1033.826091][T10581] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1033.829248][T10581] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1033.832437][T10581] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1033.835504][T10581] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1033.838445][T10581] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1033.845660][T10581] plantronics 0003:047F:FFFF.0085: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1033.900216][T16004] usb 9-1: USB disconnect, device number 72 [ 1034.065656][T21290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3950'. [ 1034.588508][T21302] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1034.590667][T21302] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1034.613706][T21302] vhci_hcd vhci_hcd.0: Device attached [ 1034.727694][T21307] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1034.729774][T21307] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1034.732663][T21307] vhci_hcd vhci_hcd.0: Device attached [ 1035.124557][T18719] usb 48-1: SetAddress Request (98) to port 0 [ 1035.131874][T21304] vhci_hcd: connection closed [ 1035.132086][T13425] vhci_hcd: stop threads [ 1035.132410][T18719] usb 48-1: new SuperSpeed USB device number 98 using vhci_hcd [ 1035.133634][T13425] vhci_hcd: release socket [ 1035.133706][T13425] vhci_hcd: disconnect device [ 1035.162179][T18719] usb 48-1: enqueue for inactive port 0 [ 1035.199014][T21313] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1035.211170][ T29] usb 38-1: SetAddress Request (30) to port 0 [ 1035.214251][ T29] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1035.274985][ T24] usb 6-1: reset high-speed USB device number 28 using dummy_hcd [ 1035.338248][T21308] vhci_hcd: connection reset by peer [ 1035.340332][T13425] vhci_hcd: stop threads [ 1035.342223][T13425] vhci_hcd: release socket [ 1035.344265][T13425] vhci_hcd: disconnect device syzkaller syzkaller login: [ 1035.511792][ T5940] usb 40-1: device descriptor read/8, error -110 [ 1035.552678][T18719] usb usb48-port1: attempt power cycle [ 1035.906003][ T5940] usb usb40-port1: attempt power cycle [ 1035.976955][T21322] fuse: Unknown parameter 'ÿ' [ 1036.123692][T18719] usb usb48-port1: unable to enumerate USB device [ 1036.284414][T21330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3962'. [ 1036.533477][T21332] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1036.539082][ T5940] usb usb40-port1: unable to enumerate USB device [ 1036.783007][T10581] usb 6-1: USB disconnect, device number 28 [ 1037.564878][T21357] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1037.566958][T21357] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1037.570488][T21357] vhci_hcd vhci_hcd.0: Device attached [ 1037.686181][T21364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3969'. [ 1037.809617][T21366] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1037.811756][T21366] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1037.814635][T21366] vhci_hcd vhci_hcd.0: Device attached [ 1038.104796][ T5940] usb 40-1: SetAddress Request (61) to port 0 [ 1038.107590][ T5940] usb 40-1: new SuperSpeed USB device number 61 using vhci_hcd [ 1038.214325][T21358] vhci_hcd: connection closed [ 1038.214701][T13390] vhci_hcd: stop threads [ 1038.218640][T13390] vhci_hcd: release socket [ 1038.220641][T13390] vhci_hcd: disconnect device [ 1038.539708][T21368] vhci_hcd: connection reset by peer [ 1038.542173][T13443] vhci_hcd: stop threads [ 1038.543601][T13443] vhci_hcd: release socket [ 1038.551726][T13443] vhci_hcd: disconnect device syzkaller syzkaller login: [ 1039.635848][T21390] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1040.152600][T21401] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1040.155757][T21401] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1040.159558][T21401] vhci_hcd vhci_hcd.0: Device attached [ 1040.182045][T21404] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1040.278269][T21405] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3977'. [ 1040.312091][ T29] usb 38-1: device descriptor read/8, error -110 [ 1040.432613][T18719] usb 48-1: SetAddress Request (102) to port 0 [ 1040.436585][T18719] usb 48-1: new SuperSpeed USB device number 102 using vhci_hcd [ 1040.722523][ T29] usb usb38-port1: attempt power cycle [ 1040.757925][T21402] vhci_hcd: connection reset by peer [ 1040.759957][T13425] vhci_hcd: stop threads [ 1040.761431][T13425] vhci_hcd: release socket [ 1040.762983][T13425] vhci_hcd: disconnect device [ 1041.293251][ T29] usb usb38-port1: unable to enumerate USB device syzkaller syzkaller login: [ 1043.201746][ T5940] usb 40-1: device descriptor read/8, error -110 [ 1043.632935][ T5940] usb usb40-port1: attempt power cycle [ 1043.771830][T11855] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1043.821041][T21457] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1043.823181][T21457] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1043.830294][T21457] vhci_hcd vhci_hcd.0: Device attached [ 1043.923785][T11855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.927207][T11855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.930240][T11855] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1043.941379][T11855] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1043.945972][T11855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.955782][T11855] usb 10-1: config 0 descriptor?? [ 1044.101786][ T6140] usb 46-1: SetAddress Request (95) to port 0 [ 1044.106148][ T6140] usb 46-1: new SuperSpeed USB device number 95 using vhci_hcd [ 1044.213711][ T5940] usb usb40-port1: unable to enumerate USB device [ 1044.373914][T11855] hid_parser_main: 5 callbacks suppressed [ 1044.373927][T11855] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 1044.384544][T11855] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 1044.388975][T11855] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 1044.392291][T11855] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 1044.395621][T11855] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 1044.400072][T11855] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 1044.402734][T11855] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 1044.406741][T11855] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 1044.410060][T11855] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 1044.417243][T11855] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 1044.428024][T21458] vhci_hcd: connection reset by peer [ 1044.430190][T13397] vhci_hcd: stop threads [ 1044.430372][T11855] plantronics 0003:047F:FFFF.0086: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1044.431875][T13397] vhci_hcd: release socket [ 1044.432175][T13397] vhci_hcd: disconnect device [ 1044.634704][T21465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3989'. [ 1044.771741][T16004] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1044.800456][T10581] usb 10-1: USB disconnect, device number 64 [ 1044.933481][T16004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.938140][T16004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.942504][T16004] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1044.947867][T16004] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1044.951619][T16004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.961799][T16004] usb 6-1: config 0 descriptor?? [ 1045.354306][T21474] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1045.357072][T21474] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1045.360825][T21474] vhci_hcd vhci_hcd.0: Device attached [ 1045.393762][T16004] plantronics 0003:047F:FFFF.0087: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1045.613610][T18719] usb 48-1: device descriptor read/8, error -110 [ 1045.646540][T21481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3992'. [ 1046.053798][T18719] usb usb48-port1: attempt power cycle [ 1046.112638][T21475] vhci_hcd: connection closed [ 1046.112962][T13443] vhci_hcd: stop threads [ 1046.116614][T11855] usb 6-1: USB disconnect, device number 29 [ 1046.116772][T13443] vhci_hcd: release socket [ 1046.123322][T13443] vhci_hcd: disconnect device [ 1046.561757][T16004] usb 10-1: new full-speed USB device number 65 using dummy_hcd [ 1046.632641][T18719] usb usb48-port1: unable to enumerate USB device [ 1046.691843][T16004] usb 10-1: device descriptor read/64, error -71 [ 1046.931808][T16004] usb 10-1: new full-speed USB device number 66 using dummy_hcd [ 1047.061792][T16004] usb 10-1: device descriptor read/64, error -71 [ 1047.172071][T16004] usb usb10-port1: attempt power cycle [ 1047.511850][T16004] usb 10-1: new full-speed USB device number 67 using dummy_hcd [ 1047.532567][T16004] usb 10-1: device descriptor read/8, error -71 [ 1047.781814][T16004] usb 10-1: new full-speed USB device number 68 using dummy_hcd [ 1047.809337][T16004] usb 10-1: device descriptor read/8, error -71 [ 1047.912851][T16004] usb usb10-port1: unable to enumerate USB device [ 1047.938089][T21514] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1048.231428][T21516] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1048.851788][T10581] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1049.013525][T10581] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1049.014765][T21522] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1049.017767][T10581] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1049.017807][T10581] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1049.029756][T10581] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.034971][T10581] usb 9-1: config 0 descriptor?? [ 1049.041151][T10581] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1049.191827][ T6140] usb 46-1: device descriptor read/8, error -110 [ 1049.592491][ T6140] usb usb46-port1: attempt power cycle [ 1050.164608][ T6140] usb usb46-port1: unable to enumerate USB device [ 1051.624737][T10581] usb 9-1: USB disconnect, device number 73 [ 1051.931745][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1052.083488][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.092079][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.095210][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1052.108841][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1052.121849][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.136504][ T24] usb 6-1: config 0 descriptor?? [ 1052.562141][ T24] hid_parser_main: 20 callbacks suppressed [ 1052.562155][ T24] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 1052.571592][ T24] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 1052.580563][ T24] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 1052.587362][ T24] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 1052.589800][ T24] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 1052.601728][ T24] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 1052.611889][ T24] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 1052.614251][ T24] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 1052.617826][T21576] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1052.619888][T21576] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1052.620760][ T24] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 1052.623312][T21576] vhci_hcd vhci_hcd.0: Device attached [ 1052.625652][ T24] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 1052.639364][ T24] plantronics 0003:047F:FFFF.0088: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1052.806321][T21581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4015'. [ 1052.911814][ T29] usb 38-1: SetAddress Request (34) to port 0 [ 1052.913814][ T29] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1053.075642][T16004] usb 6-1: USB disconnect, device number 30 [ 1053.437701][T21587] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1053.492082][T21577] vhci_hcd: connection reset by peer [ 1053.504936][T13397] vhci_hcd: stop threads [ 1053.506408][T13397] vhci_hcd: release socket [ 1053.508000][T13397] vhci_hcd: disconnect device [ 1053.995487][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.998182][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.211784][T16004] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1054.363044][T16004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.366618][T16004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.369730][T16004] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1054.374952][T16004] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1054.378703][T16004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.387686][T16004] usb 6-1: config 0 descriptor?? [ 1054.417035][T21602] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1054.419317][T21602] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1054.422082][T21602] vhci_hcd vhci_hcd.0: Device attached [ 1054.513394][T21605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4023'. [ 1054.813062][T16004] plantronics 0003:047F:FFFF.0089: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1055.092597][T21603] vhci_hcd: connection closed [ 1055.092827][T13443] vhci_hcd: stop threads [ 1055.095841][T13443] vhci_hcd: release socket [ 1055.101752][T13443] vhci_hcd: disconnect device [ 1055.102245][T21610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4020'. [ 1055.375862][T10581] usb 6-1: USB disconnect, device number 31 [ 1056.550634][T21631] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1056.553342][T21631] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1056.565922][T21631] vhci_hcd vhci_hcd.0: Device attached [ 1056.736167][T21636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4028'. [ 1056.942278][ T6140] usb 40-1: SetAddress Request (65) to port 0 [ 1056.948060][ T6140] usb 40-1: new SuperSpeed USB device number 65 using vhci_hcd [ 1057.081827][T21632] vhci_hcd: connection reset by peer [ 1057.084222][T21553] vhci_hcd: stop threads [ 1057.085747][T21553] vhci_hcd: release socket [ 1057.087201][T21553] vhci_hcd: disconnect device [ 1057.927441][T21650] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1057.991870][ T29] usb 38-1: device descriptor read/8, error -110 [ 1058.382549][ T29] usb usb38-port1: attempt power cycle [ 1058.952239][ T29] usb usb38-port1: unable to enumerate USB device [ 1058.981784][T11855] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1059.133149][T11855] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1059.136391][T11855] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1059.140450][T11855] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1059.143704][T11855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.147291][T11855] usb 9-1: config 0 descriptor?? [ 1059.151093][T11855] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1059.201720][ T6030] usb 10-1: new full-speed USB device number 69 using dummy_hcd [ 1059.331825][ T6030] usb 10-1: device descriptor read/64, error -71 [ 1059.571778][ T6030] usb 10-1: new full-speed USB device number 70 using dummy_hcd [ 1059.701765][ T6030] usb 10-1: device descriptor read/64, error -71 [ 1059.812096][ T6030] usb usb10-port1: attempt power cycle [ 1060.151751][ T6030] usb 10-1: new full-speed USB device number 71 using dummy_hcd [ 1060.182336][ T6030] usb 10-1: device descriptor read/8, error -71 [ 1060.421799][ T6030] usb 10-1: new full-speed USB device number 72 using dummy_hcd [ 1060.442987][ T6030] usb 10-1: device descriptor read/8, error -71 [ 1060.613785][ T6030] usb usb10-port1: unable to enumerate USB device [ 1061.149552][T21684] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1061.756399][T10581] usb 9-1: USB disconnect, device number 74 [ 1061.999603][ T6140] usb 40-1: device descriptor read/8, error -110 [ 1062.003182][T21694] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1062.005311][T21694] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1062.027917][T21694] vhci_hcd vhci_hcd.0: Device attached [ 1062.207048][T21701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4041'. [ 1062.301835][ T29] usb 38-1: SetAddress Request (38) to port 0 [ 1062.304784][ T29] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1062.403843][ T6140] usb usb40-port1: attempt power cycle [ 1062.551719][T16004] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1062.605655][T21695] vhci_hcd: connection reset by peer [ 1062.608922][T13425] vhci_hcd: stop threads [ 1062.610706][T13425] vhci_hcd: release socket [ 1062.613082][T13425] vhci_hcd: disconnect device [ 1062.739052][T16004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.743646][T16004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.747623][T16004] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1062.753516][T16004] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1062.757272][T16004] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.779597][T16004] usb 10-1: config 0 descriptor?? [ 1063.061937][T10581] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1063.203005][ T6140] usb usb40-port1: unable to enumerate USB device [ 1063.213072][T10581] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1063.214537][T21715] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1063.216442][T10581] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1063.217510][T16004] hid_parser_main: 20 callbacks suppressed [ 1063.217521][T16004] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1063.217536][T16004] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1063.217548][T16004] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1063.217560][T16004] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1063.217572][T16004] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1063.217584][T16004] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1063.217596][T16004] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1063.217608][T16004] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1063.217620][T16004] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1063.217632][T16004] plantronics 0003:047F:FFFF.008A: unknown main item tag 0x0 [ 1063.226200][T16004] plantronics 0003:047F:FFFF.008A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1063.228826][T10581] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1063.256474][T10581] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.264366][T10581] usb 9-1: config 0 descriptor?? [ 1063.268050][T10581] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1063.479842][T21717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4046'. [ 1063.665834][ T6140] usb 10-1: USB disconnect, device number 73 [ 1064.266377][T21727] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1064.269136][T21727] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1064.288304][T21727] vhci_hcd vhci_hcd.0: Device attached [ 1064.493798][T21732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4049'. [ 1064.762907][ T6140] usb 40-1: SetAddress Request (69) to port 0 [ 1064.765562][ T6140] usb 40-1: new SuperSpeed USB device number 69 using vhci_hcd [ 1065.022642][T21729] vhci_hcd: connection reset by peer [ 1065.025559][T13425] vhci_hcd: stop threads [ 1065.027515][T13425] vhci_hcd: release socket [ 1065.029652][T13425] vhci_hcd: disconnect device [ 1065.792031][T16004] usb 10-1: new full-speed USB device number 74 using dummy_hcd [ 1065.850765][ T6007] usb 9-1: USB disconnect, device number 75 [ 1065.921783][T16004] usb 10-1: device descriptor read/64, error -71 [ 1066.172692][T16004] usb 10-1: new full-speed USB device number 75 using dummy_hcd [ 1066.311978][T16004] usb 10-1: device descriptor read/64, error -71 [ 1066.321777][ T5946] Bluetooth: hci2: command 0x0406 tx timeout [ 1066.421956][T16004] usb usb10-port1: attempt power cycle [ 1066.761786][T16004] usb 10-1: new full-speed USB device number 76 using dummy_hcd [ 1066.793255][T16004] usb 10-1: device descriptor read/8, error -71 [ 1067.344135][T16004] usb 10-1: new full-speed USB device number 77 using dummy_hcd [ 1067.361785][ T29] usb 38-1: device descriptor read/8, error -110 [ 1067.389150][T16004] usb 10-1: device descriptor read/8, error -71 [ 1067.502046][T16004] usb usb10-port1: unable to enumerate USB device [ 1067.801793][T16004] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1067.993195][T16004] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1067.996365][T16004] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1068.001771][T16004] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1068.009881][T16004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.015470][T16004] usb 6-1: config 0 descriptor?? [ 1068.018659][ T29] usb usb38-port1: attempt power cycle [ 1068.020873][T16004] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1068.624376][ T29] usb usb38-port1: unable to enumerate USB device [ 1069.832001][T11855] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1069.832207][ T6140] usb 40-1: device descriptor read/8, error -110 [ 1069.981972][T21818] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1069.984639][T21818] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1069.990188][T21818] vhci_hcd vhci_hcd.0: Device attached [ 1069.992826][T11855] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1069.996346][T11855] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1070.000614][T11855] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1070.003987][T11855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.012581][T11855] usb 10-1: config 0 descriptor?? [ 1070.016408][T11855] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1070.156068][T21821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4069'. [ 1070.282976][ T6140] usb usb40-port1: attempt power cycle [ 1070.285341][ T5940] usb 38-1: SetAddress Request (42) to port 0 [ 1070.287540][ T5940] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd [ 1070.573335][T16004] usb 6-1: USB disconnect, device number 32 [ 1070.580222][T21819] vhci_hcd: connection reset by peer [ 1070.586202][T13394] vhci_hcd: stop threads [ 1070.588103][T13394] vhci_hcd: release socket [ 1070.590140][T13394] vhci_hcd: disconnect device [ 1070.618613][T21824] fuse: Unknown parameter 'ÿ' [ 1070.853039][ T6140] usb usb40-port1: unable to enumerate USB device [ 1072.515906][T11855] usb 10-1: USB disconnect, device number 78 [ 1074.094261][T21865] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1074.289922][T21869] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1074.806247][T21874] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1074.808328][T21874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1074.811263][T21874] vhci_hcd vhci_hcd.0: Device attached [ 1074.981547][T21877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4081'. [ 1075.072425][ T6140] usb 46-1: SetAddress Request (99) to port 0 [ 1075.081793][ T6140] usb 46-1: new SuperSpeed USB device number 99 using vhci_hcd [ 1075.179425][T21887] loop0: detected capacity change from 0 to 2560 [ 1075.188196][T20757] buffer_io_error: 14 callbacks suppressed [ 1075.188206][T20757] Buffer I/O error on dev loop0, logical block 0, async page read [ 1075.193456][T20757] Buffer I/O error on dev loop0, logical block 0, async page read [ 1075.196479][T20757] Buffer I/O error on dev loop0, logical block 0, async page read [ 1075.199302][T20757] Buffer I/O error on dev loop0, logical block 0, async page read [ 1075.202431][T20757] Buffer I/O error on dev loop0, logical block 0, async page read [ 1075.293059][T21890] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1075.351790][ T5940] usb 38-1: device descriptor read/8, error -110 [ 1075.411769][ T34] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1075.442518][T21875] vhci_hcd: connection reset by peer [ 1075.444392][T21553] vhci_hcd: stop threads [ 1075.445839][T21553] vhci_hcd: release socket [ 1075.447317][T21553] vhci_hcd: disconnect device [ 1075.541778][ T34] usb 6-1: device descriptor read/64, error -71 [ 1075.752648][ T5940] usb usb38-port1: attempt power cycle [ 1075.781769][ T34] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1075.912972][ T34] usb 6-1: device descriptor read/64, error -71 [ 1076.032697][ T34] usb usb6-port1: attempt power cycle [ 1076.323117][ T5940] usb usb38-port1: unable to enumerate USB device [ 1076.371728][ T34] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1076.572505][ T34] usb 6-1: device descriptor read/8, error -71 [ 1076.821809][ T34] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1076.842167][ T34] usb 6-1: device descriptor read/8, error -71 [ 1076.952179][ T34] usb usb6-port1: unable to enumerate USB device [ 1077.121522][T21908] autofs: Bad value for 'fd' [ 1077.601778][ T6007] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1077.673937][T21914] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1077.763211][ T6007] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.766891][ T6007] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.770119][ T6007] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1077.774545][ T6007] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1077.777553][ T6007] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.781987][ T6007] usb 10-1: config 0 descriptor?? [ 1078.190842][ T6007] hid_parser_main: 5 callbacks suppressed [ 1078.190853][ T6007] plantronics 0003:047F:FFFF.008B: unknown main item tag 0x0 [ 1078.195326][ T6007] plantronics 0003:047F:FFFF.008B: unknown main item tag 0x0 [ 1078.197670][ T6007] plantronics 0003:047F:FFFF.008B: unknown main item tag 0x0 [ 1078.199966][ T6007] plantronics 0003:047F:FFFF.008B: unknown main item tag 0x0 [ 1078.203037][ T6007] plantronics 0003:047F:FFFF.008B: unknown main item tag 0x0 [ 1078.205362][ T6007] plantronics 0003:047F:FFFF.008B: unknown main item tag 0x0 [ 1078.207651][ T6007] plantronics 0003:047F:FFFF.008B: unknown main item tag 0x0 [ 1078.209923][ T6007] plantronics 0003:047F:FFFF.008B: unknown main item tag 0x0 [ 1078.212877][ T6007] plantronics 0003:047F:FFFF.008B: unknown main item tag 0x0 [ 1078.215207][ T6007] plantronics 0003:047F:FFFF.008B: unknown main item tag 0x0 [ 1078.219308][ T6007] plantronics 0003:047F:FFFF.008B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1078.448120][T21922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4091'. [ 1078.744919][ T6007] usb 10-1: USB disconnect, device number 79 [ 1079.268696][T21940] Invalid logical block size (18) [ 1080.151888][ T6140] usb 46-1: device descriptor read/8, error -110 [ 1080.171751][ T5940] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1080.326272][ T5940] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1080.332331][ T5940] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1080.336420][ T5940] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1080.339129][ T5940] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.351490][ T5940] usb 9-1: config 0 descriptor?? [ 1080.356692][ T5940] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1080.552723][ T6140] usb usb46-port1: attempt power cycle [ 1081.113227][ T6140] usb usb46-port1: unable to enumerate USB device [ 1081.768466][T21982] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.4109'. [ 1081.771433][T21982] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.4109'. [ 1081.997168][T21992] overlayfs: conflicting lowerdir path [ 1082.005272][T21992] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1082.972100][T11855] usb 9-1: USB disconnect, device number 76 [ 1083.041752][ T34] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1083.192991][ T34] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1083.196239][ T34] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1083.200870][ T34] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1083.204669][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.209955][ T34] usb 10-1: config 0 descriptor?? [ 1083.214313][ T34] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1083.680454][T22014] FAULT_INJECTION: forcing a failure. [ 1083.680454][T22014] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.685724][T22014] CPU: 2 UID: 0 PID: 22014 Comm: syz.0.4117 Not tainted syzkaller #0 PREEMPT(full) [ 1083.685745][T22014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1083.685756][T22014] Call Trace: [ 1083.685763][T22014] [ 1083.685770][T22014] dump_stack_lvl+0x16c/0x1f0 [ 1083.685793][T22014] should_fail_ex+0x512/0x640 [ 1083.685817][T22014] ? fs_reclaim_acquire+0xae/0x150 [ 1083.685840][T22014] should_failslab+0xc2/0x120 [ 1083.685861][T22014] __kmalloc_noprof+0xdd/0x880 [ 1083.685890][T22014] ? tomoyo_encode2+0x100/0x3e0 [ 1083.685911][T22014] ? tomoyo_encode2+0x100/0x3e0 [ 1083.685929][T22014] tomoyo_encode2+0x100/0x3e0 [ 1083.685950][T22014] tomoyo_encode+0x29/0x50 [ 1083.685968][T22014] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1083.685994][T22014] tomoyo_path_number_perm+0x245/0x580 [ 1083.686017][T22014] ? tomoyo_path_number_perm+0x237/0x580 [ 1083.686038][T22014] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1083.686068][T22014] ? find_held_lock+0x2b/0x80 [ 1083.686079][T22014] ? hook_file_ioctl_common+0x145/0x410 [ 1083.686092][T22014] ? __fget_files+0x20e/0x3c0 [ 1083.686105][T22014] security_file_ioctl_compat+0x9b/0x240 [ 1083.686117][T22014] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1083.686137][T22014] __do_fast_syscall_32+0x7c/0x300 [ 1083.686151][T22014] do_fast_syscall_32+0x32/0x80 [ 1083.686164][T22014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1083.686178][T22014] RIP: 0023:0xf701d579 [ 1083.686186][T22014] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1083.686197][T22014] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1083.686207][T22014] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005646 [ 1083.686214][T22014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1083.686220][T22014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1083.686226][T22014] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1083.686232][T22014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1083.686246][T22014] [ 1083.686257][T22014] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1083.762677][T22014] vivid-000: ================= START STATUS ================= [ 1083.766017][T22014] vivid-000: Test Pattern: 100% Color Squares [ 1083.769243][T22014] vivid-000: Fill Percentage of Frame: 100 [ 1083.770706][T22015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4116'. [ 1083.771710][T22014] vivid-000: Horizontal Movement: [ 1083.775024][T22015] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4116'. [ 1083.777114][T22014] No Movement [ 1083.781824][T22014] vivid-000: Vertical Movement: No Movement [ 1083.783753][T22015] geneve2: entered promiscuous mode [ 1083.784161][T22014] vivid-000: OSD Text Mode: All [ 1083.785872][T22015] geneve2: entered allmulticast mode [ 1083.787726][T22014] vivid-000: Show Border: false [ 1083.790993][T22014] vivid-000: Show Square: false [ 1083.792851][T22014] vivid-000: Sensor Flipped Horizontally: false [ 1083.794862][T22014] vivid-000: Sensor Flipped Vertically: false [ 1083.796769][T22014] vivid-000: Insert SAV Code in Image: false [ 1083.798666][T22014] vivid-000: Insert EAV Code in Image: false [ 1083.800577][T22014] vivid-000: Insert Video Guard Band: false [ 1083.802671][T22014] vivid-000: Reduced Framerate: false [ 1083.804367][T22014] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1083.806750][T22014] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1083.809264][T22014] vivid-000: Enable Capture Cropping: false [ 1083.811500][T22014] vivid-000: Enable Capture Composing: true [ 1083.813660][T22014] vivid-000: Enable Capture Scaler: true [ 1083.815588][T22014] vivid-000: Timestamp Source: End of Frame [ 1083.817502][T22014] vivid-000: Colorspace: Rec. 709 [ 1083.819200][T22014] vivid-000: Transfer Function: Default [ 1083.821010][T22014] vivid-000: Y'CbCr Encoding: Default [ 1083.823020][T22014] vivid-000: HSV Encoding: Hue 0-179 [ 1083.825013][T22014] vivid-000: Quantization: Default [ 1083.826617][T22014] vivid-000: Apply Alpha To Red Only: false [ 1083.828479][T22014] vivid-000: Standard Aspect Ratio: 4x3 [ 1083.830357][T22014] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1083.833115][T22014] vivid-000: DV Timings: 640x480p59 inactive [ 1083.835111][T22014] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1083.837501][T22014] vivid-000: Maximum EDID Blocks: 2 [ 1083.839214][T22014] vivid-000: Limited RGB Range (16-235): true [ 1083.841857][T22014] vivid-000: Rx RGB Quantization Range: Automatic [ 1083.845786][T22014] vivid-000: Power Present: 0x00000001 [ 1083.847626][T22014] tpg source WxH: 1280x720 (Y'CbCr) [ 1083.849725][T22014] tpg field: 1 [ 1083.851180][T22014] tpg crop: (0,0)/1280x720 [ 1083.853456][T22014] tpg compose: (0,0)/1280x720 [ 1083.855467][T22014] tpg colorspace: 3 [ 1083.857206][T22014] tpg transfer function: 0/0 [ 1083.859164][T22014] tpg Y'CbCr encoding: 0/0 [ 1083.861062][T22014] tpg quantization: 0/0 [ 1083.862975][T22014] tpg RGB range: 0/1 [ 1083.864614][T22014] vivid-000: ================== END STATUS ================== [ 1083.886931][T22019] serio: Serial port ptm0 [ 1084.362925][T22030] fuse: Unknown parameter 'roŒ¶Zx•Óܦ•WOî0000000000000000040000' [ 1084.588526][T22036] binder: 22033:22036 ioctl 0 80000040 returned -22 [ 1085.817154][ T34] usb 10-1: USB disconnect, device number 80 [ 1086.866305][T22077] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 1086.871855][ T34] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1086.883646][T22077] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 1086.891184][T22077] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 1086.952741][T22077] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 1086.987940][T22077] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 1086.994461][T22077] kvm: requested 67885 ns i8254 timer period limited to 200000 ns [ 1087.006695][T22077] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 1087.015405][T22077] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 1087.022074][T22077] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1087.026719][T22077] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 1087.031971][ T34] usb 10-1: Using ep0 maxpacket: 16 [ 1087.042829][ T34] usb 10-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1087.045855][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.048495][ T34] usb 10-1: Product: syz [ 1087.049979][ T34] usb 10-1: Manufacturer: syz [ 1087.051906][ T34] usb 10-1: SerialNumber: syz [ 1087.056821][ T34] usb 10-1: config 0 descriptor?? [ 1087.062155][ T34] as10x_usb: device has been detected [ 1087.064952][ T34] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1087.078606][ T34] usb 10-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1087.098935][ T34] as10x_usb: error during firmware upload part1 [ 1087.102585][ T34] Registered device Sky IT Digital Key (green led) [ 1087.262056][T22074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.267039][T22074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.378224][T22074] random: crng reseeded on system resumption [ 1087.382908][T22074] FAULT_INJECTION: forcing a failure. [ 1087.382908][T22074] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.387059][T22074] CPU: 3 UID: 0 PID: 22074 Comm: syz.5.4132 Not tainted syzkaller #0 PREEMPT(full) [ 1087.387074][T22074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1087.387081][T22074] Call Trace: [ 1087.387094][T22074] [ 1087.387099][T22074] dump_stack_lvl+0x16c/0x1f0 [ 1087.387128][T22074] should_fail_ex+0x512/0x640 [ 1087.387153][T22074] should_failslab+0xc2/0x120 [ 1087.387168][T22074] __kmalloc_cache_noprof+0x72/0x780 [ 1087.387190][T22074] ? async_schedule_node_domain+0x54/0x120 [ 1087.387204][T22074] ? find_held_lock+0x2b/0x80 [ 1087.387216][T22074] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1087.387231][T22074] ? async_schedule_node_domain+0x54/0x120 [ 1087.387243][T22074] async_schedule_node_domain+0x54/0x120 [ 1087.387257][T22074] dev_cache_fw_image+0x38e/0x490 [ 1087.387270][T22074] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1087.387285][T22074] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1087.387297][T22074] dpm_for_each_dev+0x5d/0xb0 [ 1087.387309][T22074] fw_pm_notify+0x81/0x150 [ 1087.387319][T22074] notifier_call_chain+0xbc/0x410 [ 1087.387333][T22074] ? __pfx_fw_pm_notify+0x10/0x10 [ 1087.387346][T22074] blocking_notifier_call_chain_robust+0xc8/0x160 [ 1087.387362][T22074] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 1087.387381][T22074] pm_notifier_call_chain_robust+0x27/0x60 [ 1087.387397][T22074] snapshot_open+0x218/0x2b0 [ 1087.387410][T22074] ? __pfx_snapshot_open+0x10/0x10 [ 1087.387423][T22074] misc_open+0x26d/0x450 [ 1087.387439][T22074] ? __pfx_misc_open+0x10/0x10 [ 1087.387455][T22074] chrdev_open+0x234/0x6a0 [ 1087.387468][T22074] ? __pfx_apparmor_file_open+0x10/0x10 [ 1087.387484][T22074] ? __pfx_chrdev_open+0x10/0x10 [ 1087.387497][T22074] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1087.387512][T22074] do_dentry_open+0x982/0x1530 [ 1087.387525][T22074] ? __pfx_chrdev_open+0x10/0x10 [ 1087.387540][T22074] vfs_open+0x82/0x3f0 [ 1087.387557][T22074] path_openat+0x1de4/0x2cb0 [ 1087.387573][T22074] ? __pfx_path_openat+0x10/0x10 [ 1087.387588][T22074] do_filp_open+0x20b/0x470 [ 1087.387600][T22074] ? __pfx_do_filp_open+0x10/0x10 [ 1087.387621][T22074] ? _raw_spin_unlock+0x28/0x50 [ 1087.387631][T22074] ? alloc_fd+0x471/0x7d0 [ 1087.387646][T22074] do_sys_openat2+0x11b/0x1d0 [ 1087.387661][T22074] ? __pfx_do_sys_openat2+0x10/0x10 [ 1087.387678][T22074] ? __fget_files+0x20e/0x3c0 [ 1087.387691][T22074] __ia32_compat_sys_openat+0x16d/0x210 [ 1087.387708][T22074] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1087.387724][T22074] ? ksys_write+0x1ac/0x250 [ 1087.387737][T22074] ? rcu_is_watching+0x12/0xc0 [ 1087.387751][T22074] __do_fast_syscall_32+0x7c/0x300 [ 1087.387765][T22074] do_fast_syscall_32+0x32/0x80 [ 1087.387778][T22074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1087.387792][T22074] RIP: 0023:0xf7fa1579 [ 1087.387801][T22074] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1087.387812][T22074] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1087.387822][T22074] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800002c0 [ 1087.387829][T22074] RDX: 0000000000042801 RSI: 0000000000000000 RDI: 0000000000000000 [ 1087.387835][T22074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1087.387841][T22074] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1087.387847][T22074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1087.387861][T22074] [ 1087.389482][T22074] [ 1087.523805][T22074] ============================================ [ 1087.526237][T22074] WARNING: possible recursive locking detected [ 1087.528504][T22074] syzkaller #0 Not tainted [ 1087.530166][T22074] -------------------------------------------- [ 1087.533285][T22074] syz.5.4132/22074 is trying to acquire lock: [ 1087.536376][T22074] ffffffff8f2905a8 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x4e/0x640 [ 1087.539471][T22074] [ 1087.539471][T22074] but task is already holding lock: [ 1087.542359][T22074] ffffffff8f2905a8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 1087.545579][T22074] [ 1087.545579][T22074] other info that might help us debug this: [ 1087.548729][T22074] Possible unsafe locking scenario: [ 1087.548729][T22074] [ 1087.551769][T22074] CPU0 [ 1087.553118][T22074] ---- [ 1087.554477][T22074] lock(fw_lock); [ 1087.555982][T22074] lock(fw_lock); [ 1087.557484][T22074] [ 1087.557484][T22074] *** DEADLOCK *** [ 1087.557484][T22074] [ 1087.560639][T22074] May be due to missing lock nesting notation [ 1087.560639][T22074] [ 1087.564362][T22074] 5 locks held by syz.5.4132/22074: [ 1087.566443][T22074] #0: ffffffff8f0779e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 1087.569721][T22074] #1: ffffffff8e2878a8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 1087.573785][T22074] #2: ffffffff8e2c7b70 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 1087.578464][T22074] #3: ffffffff8f2905a8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 1087.581818][T22074] #4: ffffffff8f28afa8 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 1087.585431][T22074] [ 1087.585431][T22074] stack backtrace: [ 1087.587736][T22074] CPU: 3 UID: 0 PID: 22074 Comm: syz.5.4132 Not tainted syzkaller #0 PREEMPT(full) [ 1087.587755][T22074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1087.587766][T22074] Call Trace: [ 1087.587772][T22074] [ 1087.587777][T22074] dump_stack_lvl+0x116/0x1f0 [ 1087.587791][T22074] print_deadlock_bug+0x1e9/0x240 [ 1087.587804][T22074] __lock_acquire+0x1106/0x1c90 [ 1087.587819][T22074] ? __kasan_save_free_info+0x3b/0x60 [ 1087.587830][T22074] lock_acquire+0x179/0x350 [ 1087.587844][T22074] ? assign_fw+0x4e/0x640 [ 1087.587856][T22074] ? __pfx___might_resched+0x10/0x10 [ 1087.587867][T22074] ? do_filp_open+0x20b/0x470 [ 1087.587877][T22074] ? do_sys_openat2+0x11b/0x1d0 [ 1087.587892][T22074] ? __ia32_compat_sys_openat+0x16d/0x210 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1087.587908][T22074] ? assign_fw+0x4e/0x640 [ 1087.587918][T22074] __mutex_lock+0x193/0x1060 [ 1087.587935][T22074] ? assign_fw+0x4e/0x640 [ 1087.587947][T22074] ? __pfx___mutex_lock+0x10/0x10 [ 1087.587961][T22074] ? kasan_quarantine_put+0x10a/0x240 [ 1087.587972][T22074] ? lockdep_hardirqs_on+0x7c/0x110 [ 1087.587985][T22074] ? assign_fw+0x4e/0x640 [ 1087.587995][T22074] ? _request_firmware+0x957/0x1470 [ 1087.588006][T22074] assign_fw+0x4e/0x640 [ 1087.588018][T22074] _request_firmware+0x988/0x1470 [ 1087.588032][T22074] ? __pfx__request_firmware+0x10/0x10 [ 1087.588044][T22074] ? dump_stack_lvl+0x1a1/0x1f0 [ 1087.588056][T22074] __async_dev_cache_fw_image+0xb1/0x340 [ 1087.588068][T22074] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1087.588081][T22074] ? mark_held_locks+0x49/0x80 [ 1087.588094][T22074] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1087.588105][T22074] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1087.588118][T22074] async_schedule_node_domain+0xd4/0x120 [ 1087.588131][T22074] dev_cache_fw_image+0x38e/0x490 [ 1087.588143][T22074] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1087.588154][T22074] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1087.588165][T22074] dpm_for_each_dev+0x5d/0xb0 [ 1087.588177][T22074] fw_pm_notify+0x81/0x150 [ 1087.588187][T22074] notifier_call_chain+0xbc/0x410 [ 1087.588201][T22074] ? __pfx_fw_pm_notify+0x10/0x10 [ 1087.588212][T22074] blocking_notifier_call_chain_robust+0xc8/0x160 [ 1087.588226][T22074] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 1087.588243][T22074] pm_notifier_call_chain_robust+0x27/0x60 [ 1087.588258][T22074] snapshot_open+0x218/0x2b0 [ 1087.588270][T22074] ? __pfx_snapshot_open+0x10/0x10 [ 1087.588283][T22074] misc_open+0x26d/0x450 [ 1087.588299][T22074] ? __pfx_misc_open+0x10/0x10 [ 1087.588313][T22074] chrdev_open+0x234/0x6a0 [ 1087.588325][T22074] ? __pfx_apparmor_file_open+0x10/0x10 [ 1087.588341][T22074] ? __pfx_chrdev_open+0x10/0x10 [ 1087.588353][T22074] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1087.588366][T22074] do_dentry_open+0x982/0x1530 [ 1087.588377][T22074] ? __pfx_chrdev_open+0x10/0x10 [ 1087.588390][T22074] vfs_open+0x82/0x3f0 [ 1087.588405][T22074] path_openat+0x1de4/0x2cb0 [ 1087.588417][T22074] ? __pfx_path_openat+0x10/0x10 [ 1087.588429][T22074] do_filp_open+0x20b/0x470 [ 1087.588439][T22074] ? __pfx_do_filp_open+0x10/0x10 [ 1087.588454][T22074] ? _raw_spin_unlock+0x28/0x50 [ 1087.588463][T22074] ? alloc_fd+0x471/0x7d0 [ 1087.588474][T22074] do_sys_openat2+0x11b/0x1d0 [ 1087.588488][T22074] ? __pfx_do_sys_openat2+0x10/0x10 [ 1087.588504][T22074] ? __fget_files+0x20e/0x3c0 [ 1087.588514][T22074] __ia32_compat_sys_openat+0x16d/0x210 [ 1087.588530][T22074] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1087.588546][T22074] ? ksys_write+0x1ac/0x250 [ 1087.588557][T22074] ? rcu_is_watching+0x12/0xc0 [ 1087.588569][T22074] __do_fast_syscall_32+0x7c/0x300 [ 1087.588582][T22074] do_fast_syscall_32+0x32/0x80 [ 1087.588594][T22074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1087.588607][T22074] RIP: 0023:0xf7fa1579 [ 1087.588616][T22074] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1087.588626][T22074] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1087.588635][T22074] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800002c0 [ 1087.588641][T22074] RDX: 0000000000042801 RSI: 0000000000000000 RDI: 0000000000000000 [ 1087.588647][T22074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1087.588653][T22074] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1087.588659][T22074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1087.588668][T22074] VM DIAGNOSIS: 03:00:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88802b540460 RCX=ffffffff81b06901 RDX=ffff8880437d8000 RSI=ffffffff81b068db RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000d247870 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed10056a808d R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81bc6d8b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff888097810000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7340f18 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=3841 [ST=7] FTW=0e MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=c000000000000000 ffff FPR3=c000000000000000 ffff FPR4=c000000000000000 ffff FPR5=c000000000000000 ffff FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558e2e189c50 0000558e2e189c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc627201c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7263203a6d6f646e 6172205d34373032 32545b5d34323238 37332e3738303120 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030203030203030 2030302036322034 6220643820303020 3030203030203030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2036322034622064 3820303920303920 3039203039203363 203935206135203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64353c2030382064 6320343320663020 3565203938203535 2032352031352030 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020303020303020 3030203030203030 2030302030302030 3020303020303020 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000024a0314 RBX=0000000000000001 RCX=ffffffff8b5d42a9 RDX=ffffed1005666656 RSI=ffffffff8bf07540 RDI=ffffffff8191d11d RBP=ffffed1003b5d490 RSP=ffffc9000046fde8 R8 =0000000000000000 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=ffffffff9accef18 R12=0000000000000001 R13=ffff88801daea480 R14=ffffffff908239d0 R15=0000000000000000 RIP=ffffffff8b5d2d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff888097910000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5228cf2 CR3=0000000023306000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000cdc00000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000011d93e4 RBX=0000000000000002 RCX=ffffffff8b5d42a9 RDX=ffffed1005686656 RSI=ffffffff8bf07540 RDI=ffffffff8191d11d RBP=ffffed1003b5d920 RSP=ffffc9000047fde8 R8 =0000000000000000 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801daec900 R14=ffffffff908239d0 R15=0000000000000000 RIP=ffffffff8b5d2d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff888097a10000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7344558 CR3=0000000027915000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85267d75 RDI=ffffffff9adc2de0 RBP=ffffffff9adc2da0 RSP=ffffc9000d2cece0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=31342e352e7a7973 R12=0000000000000000 R13=000000000000007a R14=ffffffff9adc2da0 R15=ffffffff85267d10 RIP=ffffffff85267d9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c01300 GS =0063 ffff888097b10000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73cca7c CR3=000000006c281000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 eb1f1595186ecb39 d1125bf361f4f733 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 31ecb60a8997a1d8 155bec2f72b23b00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a252a0d2d4dc612b 5403304feb715413 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 58223f528059ebfc ec45eda7b2c41a85 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000068 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000028 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1784732d77cb57af 0000000100000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 038d4ad700000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f69e51b63a5ab105 525e5ea5fcd9ac46 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000aaa27a9e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc60f167e2a612fb 341a2947037d19b1 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ab77c569a2761e4 04a9fda0df0b827b ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000