last executing test programs: 12m31.960249226s ago: executing program 0 (id=2610): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786563203a007e142d901405008f51686a1b04e58da1c2aa2dc7674423031ceeaadd809e2f197b5315feba4faea17a2cde2d8f4b4e86679be4feae2f90d809000000000000008b3b46e9eec8d1b4510514e7a963283044375bcc42e1599905aeba00c4083184d608b0f09a98853bff5571393aafa2838864c0e5cf4614347d02b9b1857f78e6278c893827656ade3b2b0a31d415f951ac77cf53ed800c6b74eddb7c10bdbef19499e13f10dac7ed5b"], 0xb0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x1ad72f7) accept4$netrom(r5, 0x0, 0x0, 0x80800) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000300)={0xd, 0x1, 0x8, 0xfffffffc, 0x13, "8ee8d2c413b45b821be3737d3c94c0b33a1204"}) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10) write$vhost_msg_v2(r2, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000001380)=""/4092, 0xfffffffffffffe78, 0x0, 0x3, 0x2}}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 12m29.223800196s ago: executing program 0 (id=2619): ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, @short}, 0xa, &(0x7f0000000080)={0x0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000400)={0x1, 0x0, 0x1}) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12m28.30516204s ago: executing program 0 (id=2626): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x10, 0x80002, 0xfffffffe) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a001500060014262d878fabcb31000000001208000f0000000401a80000002000034004000200035c0461bf0500000008000000000000fb8000a0e408e8d8ef52a98516277ce06bba078017ecf60e84395829cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cca806000000000000000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dc4a14f056e952a44709d5e1cace81ed0bffece0", 0xe0}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2, 0x0, 0x34}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) syz_clone(0x2000211, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) 12m28.056360269s ago: executing program 0 (id=2627): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x20) 12m27.969282892s ago: executing program 0 (id=2629): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0xf0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4010) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x4, &(0x7f0000000180)=0x4) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000300)}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f0000000040)=0x4, 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, 0x0, &(0x7f0000001040)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000440)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x180a0040}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r5, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x1280, 0x150, 0x150, 0x0, 0xf8010000, 0x1348, 0x238, 0x238, 0x1348, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e2c882420"], 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r4}, 0x1c) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0xa1, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r8, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x28, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @tail_call, @call={0x85, 0x0, 0x0, 0xb7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x40f00, 0x20, '\x00', r8, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xc, 0x5, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r4, r4], &(0x7f0000000840)=[{0x0, 0x5, 0x10, 0x9}, {0x3, 0x5, 0x1, 0x1}], 0x10, 0xffffffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r11 = dup(r10) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BLKTRACESETUP(r11, 0xc0401273, &(0x7f0000000140)={'\x00', 0x1, 0x7ff, 0x6, 0x7, 0x7f}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r11, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0], 0x0) 12m27.696916334s ago: executing program 0 (id=2633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x58, &(0x7f0000000300)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "060100", 0x22, 0x11, 0xff, @remote, @local, {[], {0x3, 0xe22, 0x22, 0x0, @gue={{0x2, 0x0, 0x2, 0x8f}, "69d37c774af1d7d3f9122a5ef945cb95a22f"}}}}}}}, 0x0) r9 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000300)=r9, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) r10 = dup(0xffffffffffffffff) write$6lowpan_enable(r10, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00b4000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r12}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 12m27.652950122s ago: executing program 32 (id=2633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x58, &(0x7f0000000300)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "060100", 0x22, 0x11, 0xff, @remote, @local, {[], {0x3, 0xe22, 0x22, 0x0, @gue={{0x2, 0x0, 0x2, 0x8f}, "69d37c774af1d7d3f9122a5ef945cb95a22f"}}}}}}}, 0x0) r9 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000300)=r9, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) r10 = dup(0xffffffffffffffff) write$6lowpan_enable(r10, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00b4000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r12}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 4m26.472250176s ago: executing program 4 (id=5247): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/98, 0x62}], 0x1}}], 0x4, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) 4m25.602584091s ago: executing program 4 (id=5251): socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4m24.693025598s ago: executing program 4 (id=5256): syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@window={0x3, 0x3, 0x6}]}}}}}}}, 0x0) 4m24.638187494s ago: executing program 4 (id=5258): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 4m24.637992683s ago: executing program 4 (id=5259): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m24.3721423s ago: executing program 4 (id=5260): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000300)={{0x3001, 0xdddd1000, 0xd, 0x7, 0x2, 0x7, 0xc, 0x82, 0x0, 0xd, 0x1f, 0x5}, {0xeeee0000, 0x4000, 0xa, 0xa, 0x7, 0xf5, 0xf7, 0x2, 0x5, 0x6, 0x4, 0x9}, {0x64c38916b49bda64, 0xffff1000, 0x8, 0x8, 0x7, 0x2d, 0x3, 0x7f, 0x7, 0x6, 0x9, 0x80}, {0xeeee8000, 0x3000, 0xc, 0x4, 0x6, 0x2, 0x80, 0x0, 0x5, 0x3, 0x6, 0xe7}, {0x80a0000, 0x6000, 0x10, 0xbb, 0x7f, 0xad, 0x2, 0xfc, 0x10, 0x3, 0x1, 0x6}, {0x1, 0x8000000, 0xa, 0x9, 0x7f, 0xe8, 0x5, 0x7, 0x2, 0x25, 0x6, 0x9}, {0x8000000, 0xdddd0000, 0xb, 0x0, 0x6, 0x4, 0x2, 0xfc, 0xc6, 0x20, 0x0, 0x81}, {0xeeee0000, 0x2, 0xb, 0x51, 0x7f, 0x0, 0x2, 0x0, 0x5, 0x8, 0x5, 0x3}, {0xeeee0000, 0xebed}, {0xd000, 0x43}, 0x80000000, 0x0, 0x1, 0x0, 0x9, 0xb100, 0xdddd1000, 0x0, [0x40, 0xd4df, 0x8, 0x6bbb]}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) rseq(0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) syz_open_procfs(0x0, 0x0) getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) setns(0xffffffffffffffff, 0x8020000) open$dir(0x0, 0x400000, 0x100) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000000)="e6", 0x1, 0x24048000, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="01002dbd7000fddbdf2508000000b9bef018f66f40614c4bfaec05c5b1442949b75f0617073720bae6c9499c048158d3c604c9c4c2061f8f05f6bb0532233912fc47ac8d0f7324c4cbf633ddd2a2378a20e71af865490858488c3c76ca6e319b4197f98130ba964f7bb2b3a63663be3302b9cadb63614b354012cac422c4089379dc31dae3fbf9537bcf9ecdc8bb8310154be2ed3378c569f6d70e3d746fc9b43fe332ed5bbe48e5d40b402d6bdad328c2b2917990", @ANYRES16=r5, @ANYBLOB="14000000", @ANYRES8=r0, @ANYRES8=r2, @ANYRESOCT, @ANYRES16=r5, @ANYRES64=r5, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) 4m24.233211872s ago: executing program 33 (id=5260): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000300)={{0x3001, 0xdddd1000, 0xd, 0x7, 0x2, 0x7, 0xc, 0x82, 0x0, 0xd, 0x1f, 0x5}, {0xeeee0000, 0x4000, 0xa, 0xa, 0x7, 0xf5, 0xf7, 0x2, 0x5, 0x6, 0x4, 0x9}, {0x64c38916b49bda64, 0xffff1000, 0x8, 0x8, 0x7, 0x2d, 0x3, 0x7f, 0x7, 0x6, 0x9, 0x80}, {0xeeee8000, 0x3000, 0xc, 0x4, 0x6, 0x2, 0x80, 0x0, 0x5, 0x3, 0x6, 0xe7}, {0x80a0000, 0x6000, 0x10, 0xbb, 0x7f, 0xad, 0x2, 0xfc, 0x10, 0x3, 0x1, 0x6}, {0x1, 0x8000000, 0xa, 0x9, 0x7f, 0xe8, 0x5, 0x7, 0x2, 0x25, 0x6, 0x9}, {0x8000000, 0xdddd0000, 0xb, 0x0, 0x6, 0x4, 0x2, 0xfc, 0xc6, 0x20, 0x0, 0x81}, {0xeeee0000, 0x2, 0xb, 0x51, 0x7f, 0x0, 0x2, 0x0, 0x5, 0x8, 0x5, 0x3}, {0xeeee0000, 0xebed}, {0xd000, 0x43}, 0x80000000, 0x0, 0x1, 0x0, 0x9, 0xb100, 0xdddd1000, 0x0, [0x40, 0xd4df, 0x8, 0x6bbb]}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) rseq(0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) syz_open_procfs(0x0, 0x0) getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) setns(0xffffffffffffffff, 0x8020000) open$dir(0x0, 0x400000, 0x100) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000000)="e6", 0x1, 0x24048000, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="01002dbd7000fddbdf2508000000b9bef018f66f40614c4bfaec05c5b1442949b75f0617073720bae6c9499c048158d3c604c9c4c2061f8f05f6bb0532233912fc47ac8d0f7324c4cbf633ddd2a2378a20e71af865490858488c3c76ca6e319b4197f98130ba964f7bb2b3a63663be3302b9cadb63614b354012cac422c4089379dc31dae3fbf9537bcf9ecdc8bb8310154be2ed3378c569f6d70e3d746fc9b43fe332ed5bbe48e5d40b402d6bdad328c2b2917990", @ANYRES16=r5, @ANYBLOB="14000000", @ANYRES8=r0, @ANYRES8=r2, @ANYRESOCT, @ANYRES16=r5, @ANYRES64=r5, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) 3.249272108s ago: executing program 2 (id=6927): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 3.189390116s ago: executing program 2 (id=6928): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1, 0xa0008000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xb, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x3, 0xc, 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x100, 0x1, 0xaef}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.120165657s ago: executing program 2 (id=6929): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) 2.747979331s ago: executing program 5 (id=6935): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f00000ab000/0x3000)=nil) getpid() bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) 2.747403005s ago: executing program 3 (id=6936): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, 0x0, 0x0) 2.747256328s ago: executing program 3 (id=6937): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x819, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x3, 0x2}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @sack_perm, @mss={0x2, 0xffffffff}, @timestamp, @window={0x3, 0xfffe, 0xa}, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x40) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.669864909s ago: executing program 3 (id=6938): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300), 0x2, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f00000002c0)=[r3], 0x0, &(0x7f0000000240)=[r7], &(0x7f0000000340)}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x794}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffff6c}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 2.669093425s ago: executing program 3 (id=6939): syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3a3200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x470b923, 0x82000, {0x0, 0x0, 0x0, r6, {}, {0x5, 0xb}, {0xd, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x40000003, 0x3, 0x5, 0xffffffff, 0xfffffff5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.667112123s ago: executing program 1 (id=6940): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) 2.250230623s ago: executing program 2 (id=6941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4000, &(0x7f0000000180)=@caif=@rfm={0x25, 0x107ff, "6798c48f000000ec00"}, 0x80) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0x2020) 1.938038051s ago: executing program 3 (id=6942): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x20044000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) ioperm(0x0, 0x2, 0x7e) r3 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3e, 0x0) 1.839672757s ago: executing program 5 (id=6943): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1, 0x0, 0xa}, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$inet(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000140012800b0001006d6163736563000004000280"], 0x48}}, 0x8800) recvmmsg(r5, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0) 1.746199767s ago: executing program 1 (id=6944): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000300)=""/4096, 0x1000) 1.12016357s ago: executing program 2 (id=6945): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1d1000, 0x42) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000004) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="1695367704d10dd832678e4e2d01860484a69eaac410e2d6cf3b3d3925f9a3cb602592377170dffdc4de86f163e390e21d07459b0f058cfc248c4bcbe896f3c68006f3c2cbe07c55b87170871c1d364d740faeb750c8c8acb76aca18bc0c018ed341b55b0ef80cefe95b85756aac978a0e0b5ce59cae6657643e7ada0c1336bab310888351664553c2faa6dd39054e19e23cc7c4b4d33546407f880194aa0761f2a9360c4ba26de342328b92db81ae84fc9c1e9eefb4b7ec3f58a6d5d23b907327b14480a37f3c84305729a91c28807f8809b997235bfa2d4b6f45ee9568bb4a416df34f4140c5e272bfc068ea61a48b365490ccb02772a906dad457f5d2dd1a57cc1209e8897c8115049d7e4e3c756a7f5ad0c004ef66c8bf91f600910e73b4aa5f516bab5cd62ad93642960ab32b7fdaeacb1a9587a389a529c231f8a47a65fb6d27ba6a0eeb46660cd75dbf47df89e9f578eafa6992a12d9d7de56d69fd0e30b15caabd13c28d63921597466292f8c4e87f23d53d52e6e8f1c9295af0743c8c671a49273074ba44dbce9e9b1136a93dbc19d2b8e60cda5f50eba2d814822a68a0fd4ff5e6a25dd5346f96b26b5e1563ebb97829a76fd8c2aa467499fdced91b05b193b68316494f11f5ce97ed8e13d474b03c6f6eda4eff54b0ec362fda53003e6e2a3868a5d57e2426aed5adccdac8e162c6cc20361dd4709889b79b2810ba42f531fdd3746562a00da65b4211fb7d8f482a3610748d3b80d2942d8432471f98c6e9036cb57f3913b31dd8baddd6d85b44e8463b838fcfb6979628c5fa3dbd30688e10b9ede257ebc7b96d4092f38d11b9e6a4d10490a9df1387b3743cf51e206c7dbc0741c408bbebaae7f36d81b5ce5b21bb9fe992c8a0cb3a91ea2df21e571ff094b53b17c46fe22c0cead29144d203294eb42c984790a6b6348ed8b7b0317ee5b2353cc54bcfd808bf0f61f73917584e17bd9259c8a04d2ba3b4f931571947c77035975933471fb1203088dce478eb4e411ddb7b88caeb02e1cda741245df701a2b5c29c48a631eaf18549bd90c70222fd6dafe5550726bb58dd0fbf84ffeeae683a0379505f03740a652025add8e0e4e6b5bfb4bd0876dfe1ecb639acc110eba97294a4e4642aefbcad04ba50d830e945fd9900ee7e02488694041f43cbaa86280c1df64e8f1f81f7cd5130914efd19b58262f3bd2c43bd8b4a5beac09f1ba27020521994465e62c329debb50efe0716d22cf0056febc7cb95aa818e10639077e91cac3c80b37d6eebc6907dde971b578383ee04086a0dad18750ceff6b8d6d373afa93a51fee65fe1318c1ac291b784e45d66962c8b54571bc1e92a996c11561d94af6ecdd37948d35adbd1ad63c1c05c31c7f4afd707aa1956d1444fec1137fb6d81f56566887131777e5fe3e2fafe8af8f21ed34480afe74afb25d8d16f8089fcb851ac49dd826b7f273aa3d771856d712c62397d49c72d93e3c2a5e6b9767fcff0fc5b3d70dcd70ff8bad5dfd7f5a84c194f99450601f970104f9be026852ead21824152dd8f6536fcd01a69177a65f2af266e619d61d20de0c738680fbec29e7c594cad29f009d46d87908c951b2e4ad8d9a67db8be6f570fe5416d9e4dd22a108140a1c95369731807325ee7f4201209a795fa1609ce8fa27384677816f651a96cc08400e1b647bdddfb851313e3ccaa472b9a6a1da3a0936e119a6d7808f09de244d739c39df3ed36004b77cb54b6b1396b718c87fba28cb1439c7d1d140dae1ee2c2a7d647427b1e7472710c7ac4f1fb0fc0c9d15ecce28167d23e2e42474dbf1c63c0819606be9c9b6dc2eb59bf9932568ef408c20e9498cf105e84eee30460d4348f4cdfab623b416adadb4427887d9b1b6b8db75b224e8a55fa0351d21093b2b7e42e6685491cbfce100d602d0281f4bd086b50612f3ccf055fab1aad97a52695a233c3d458be4536b66b0acdda5ce0aaab48bb7d7f39a8af473c4478991f1c4569839eab0c1d684001ee1772290871653a2293bb7754c1eac178c60f86e2a98e1992dee198c76365f2d04d159d7c210c6cc58764e3b7dfb5bc15190555febd01c69cab8f55926c28a13fa4f9060dde1ca2df7e1f71fd99a0c350d7f0e341ece8e0685e9c205b486ef400910211b688f07fb05b542261c74b45f4ac23ff53e9e620ab12dad7b5131f67128bb8ed6a4a70caec437f2157f8bcb3d080091e5715dfc7d7539dd0320c90d0aab6a6d7a447ebeea893a0efa2176292c648c62cedd4138c9d0535ab0621855484fc43e0e3e84357db6951bb21fe2f4e99fa188ebecbc23f73ea879bd304408acd1c470fd112606ccfd7b7970e950ebd363afbba359a51877248a42845097094ff785dc82264225752f3aefa980d9ed5309b48f47a5b5ef49f69808b91bde955277b6525f55436ffeba0bfa8c13f6314c57ec97eea295afc66a9f4ec844474c0da6ff1ef0c6c65c035f3bb74a70ffa668359b58a46af97600c428626b45c81a4e372e198894c02e2bee8010fb4c2c075ea623a6ee24a99e225f809322df6ea6f39b1566b1aee5403d45ba648f94f70976013199b3241744458d030a5319360780897413289d89267c389e04f23de79adf4b864c5ca76efc225eb1ecf6424887f0d8b3ac13cbe9df4eb69f7b702e85fb396dc4a030d57a8c4edd227ee568fb11a9859935ad53dcfdb01727f106af352c569a020b7e405a1ad4c6b39e2e8796fe9f16db3794550f5ef3ecd6af2b2ab0383e6c198f17ada5840bde84ccbaa661d9c456d9ddaf92763ba450098cd5a971d847fd5030a4c9b066ab3b0096dfdf7e5ce2f8349165f94c493b7e4192e85239bb11552f910fb41c5e96ee10fc8dce711e88e0572ce0bbbd9c9f3b7c9dae89f1dfa6af309c4321755a5b19070c8731ac590c30fffb69feeb75f699aebb101d3a30f784f1745182cb4f0bf63a148b521f0a03c691925c94ee453b278523e3ed256c150098a932f62c90ac65faa4b9782c27a3ef6ca2b5ecae6a01d8a1d7096bf6a7d1b317a9eab22ef4907c631bcca224f723f5fb9a44d7e1295186cf37fd71343919aa167fa70a505a73e9f52a11cfbd40d8c1087d4ffdfe458d0ed5aebfa4b0c3622c78a914d68dd92f46478711437ff88803ab28cd9ce2223aa0fa37eb9d9a4a7866dec4ca6bb66e794ccac6bd19b11daa0b6d4d42cbcf7d6426b5718030ca51bf92b3d8ea0b11c46ec5c0c6e3805c88b39731b2b751d9928ed1ddba7c66bcc5273d709fd295aa0792384435b98c1f44575c028ff2869074156713931f7e62f8b0f8c7ee9dfeaeb2e096e77600586a47d6f6a2e13a17dfceae46ad84858bf8873f9f1e35fc700aef0a648af168ab0774a3441a203ef325577f2c76f5f0e5808acdc7965bc65e8ad1ca816bc3b67711ea42e619c957d0f26b394be1f3b0c4ac9af8558eaebf5c1c27b6549022513479b4c28dbe3f1c3131cc9211eee768f96a9c8b5e0e6425bef921a355faccf0072ba19b16d88b75feb5dc8fcfc1b7b5973eb9654ca3dcfd482831ff5d1fe09fe7ae43cf129c8c17a6686685a13ed076f34608b7ac16eb8e9de6a44418c4e3f8162e6a679bc9482df96a04b14575ebf093b99bf5cc26495f5dd6e571129d9760de3f801b001a1f3248d14f579bc519de2b656641a88da758a2ed3baf15fdf2739ddb44f0e5892de7ea48e9302129d0c939137b9d0687b296577675bcbf433a53f6a9816797cbfef1ba0caa2b8602387b5a8bae24d3e15d42b34d81708738fd269c3e8cbacdc3ff5ab1d4816a783d7be0f0a8086e345a6b4c231ffd61745f6c45cfceaf6089e70542aea1574e3c78740f77a08eb55b37f03549c1dd318cb5a76094210e8cf800c350d328fbf9442d0437e7affd54b3bfc33da3f24558f3ea8e59da8e61ae60e7e7b4de7179b8cf941d51d420c8eee69143966800dc4f7bcb50a033331fcac02a65e88de28ab219c68388a9da9196e044dd1ebbd3994bf8cc862f6f8b419fa1f4f4e5427f10866b498935fa28b8e6f9c5e48be8b74b9c2262823390480f71aff6cf72281f526265877d223eef9ad7a4be7438f9afb6aff0e80c5125c2c612ceb83f0470ea04479979c0a10fbbd0bed7379e949cc19fe36fbcbcc59a9fe30a2662d3e4d22862e8841b587b8995ef8482bc60fe0863b41752ef3dd44a387eff101595822bf1ce440ff9e5f73e560e4f7fbfe4754d9dabbcd92de02017eb43d3cf7c75e45ba04009a782a68ce11eefd52253c721daa5f37c6408e37b48d1f2e36d7c1793300f2c9039e69a52057486b63c0fa644d00528ce48f2e551ca88e356ac25ae74c73492ed3e6233490acfbe7ed8244f23e2af86e0ade6b78bb34a75a86f6cbadbd39762680cb0821d6d28f18d427df13d0e747f6da54be970e43ef8ca8285dc8bf44e3cecdbf2d8757a9800bb889b846d58cc636a2648809451a95736a0ecec6ea3fe61fb24dcd8a00ac0b8933918189cda555b17e431d99ee190d6d0d9f769e665ec193ba8889ae72a01e18b98cebb75d20ed778e5778ef657ce85d40eafa44b46f293d64023b877e8c5d58587c3abecf9a1ad8d874a4cdba0bfbea61b7eb19e81f7c932be12a83bacc51017b42dbe2931dc11c742a5a942cb6ed9bd9922ad78f55b0f6cbae0e8d4235140263ed8c83ab22e71a0f0a62b6920b5d5109e415254e527546546bd025cf1583e3e8d9d5bf735a4651fa2e5c3c86a185bb77e9b75224cdda8cb0eb21d9e3bb19e286832aa5dce19f055539a0a5caccfd752742a31d0af882c4f02c29cbd90ac2cdf5cc61c448cd09eb7b82b930ca99962c0e5ed84124fe37f7d30aad0296ee340377a7e0aa7413c495ac8ab0b482c4c5f59872efd5a1ceadbc7606e67d3c79a77d095bd82519db0893b9d2bbc2b2f3a7391826840e49424703c006399cde5f2a52a9383e89dfbfca284be4d75dd3aafd8a43dc6c71bd7fde9460647eb5c97707e96ddb9124d6020da38ee7ad743db8fd0377a8711905194c496e39a2132d7bbf35b79f920b6dcaa73625bf8b5320da250513cd45bf42c8072809ad59d69c02f0554cf82b79ff291e42d9227de1948352b0dba0281b69876ae0ca24972a5e75aee7e0a46bd4fc83f5a0dd3f22d666f2d950ca580c6da6dfaaa293beded10d1328613611b6e01d5d8567541e81466467302d8050a3ae4791fbddc1aec749edb68173be5341166c1d5c42d63e7368473e48bafa43459de3fa3a5550a4ac979711dd9a2d6796b0bcf9b5881124ade4b12bf64fa55724976a0da9d642e76a036c430f5fb2c06d599b0f78e978580f8eb763d2846177ff18b9b5cf8c76197ed809ef24212bc5563a1713214ce78e0e6cced6e41578d46a07839795c83c189610244bc1b680535fce39f290da90d719078015d90020b1d4567a97081b48514709df8e327d814e8c15496d90efacae6b13e297ed520d280203896bbc3a23f3b638adf594de03a782bb292a93ef0b14b8b3e13c01787a0b7bfb3abd8ab15eebbc651b7b054d3e56ebb7808de9b9bd067560ec6a6432455b37054292a3d9d32434506bf84b2907560017089de3f60c2deb4dfb7371f96d65a575d446aa1d2df81867135120df4e24e9227f72ff9f8f015a7754948704ecd084a1a93fbeb5a44af086ef73e9fc1c072b7d5473e92558fc2824acf27f1dbe9b019247d3074bf4256a966ceb674a2c4222632c8e4b6c0736de019ccfe4cca40b9b07f8c4df9753cdfb4ad66643ed71510983e29c2b5f9ae7db4913cb74d9dd0461a900810650d0da73f766aa6882385f3bb40644bf43f01faf2aa4cd187659edb0498527f201442b64349afa814b3dae5ce815971f3b11d177e3e1aaf90c7674c097d475640218ad27e63f9071c9081c06d9b5d1f3a070da3eed4f4080190a74063e7f97b5f35706dd1173dcbfa13a70d5362e50d57d0c5105c8d3beb926d93f61699e737ebe1a935839c3aa5b629dc93aa209d9e7774c40de7f59fca1eb274a8280022a15934e5dd2579a8cf5cd16a3b0a1ff3ea712c4258164fe2fa17a4cbfa5630f4041bad4204605eb2e762d610fa17dafa415ed8a678da1d4b5a6618d71d0066d66e3ac10b3ce65137a5a02344abc57f1be4ce0cbf1a2ac66dcb5e94495e863819c627e4704fb479c232b27aa4a5dfca8896a7eb8e0592b6b392ec9fa2767f569d5c1356d7ef7a909d8ee344ba017c75ca664d98f5288230b7f1ffa2fa7a5d07fab5f4b53b7f19c3fb361795fd632fa8a654004d931b4b7fc0890927aec727160cded3c01b7e40e6b81ce015796895f9c007762a1c22acfb9513eccd93c845e91ea8b0960b299b3ce788cbcce5bea9a94325289d2c3573975c512d56e19c4655f849b3652f8b5f9fa6f49e03202f2031debe3c299c3ceceb1febf4b285da9033493088a36f885ed6d3958b8d05cc6be00f3465de8bf6e41796d17e393067585b459b143d592cea102f584e48676a45f896cf662bd6b3b2309aa7f46d2b8ec6597a063f12bcc88922050c8c1e070134ce77ab1cb7a7f29983a0b30d9b2abeca5cfbfc55e941376c616c2834b1c1c9a9473b531c86c3b708478ee95923fe6a8108c2c4dc8a78a9d5e995f6c815b292b986cab0afa233ef10567a49d4e8dc17f438b90b620df4d291b52549ac8e1b69078b62011ed4bb0e288db740817ff07d01e779e11cb8e0606b5ca3aac6c7b262499f5a115acdad8a67b6eb77503318ef3bf0008347b270aa986d9e79e2af174f38a4743250c1091e6053a7a785464483161aad3ef3ad976e5329b71afe9bbfd93d7541a1014db4cc159ac266021e841c665217fa150e130f921ebd4cfb5accdb87f5f9bc0fd94b402289db4d0ac3f0906a689aef044c09fc2c5a00f7795ea935aeb943eb32826bd2176c1d1cb058195e3229d293595ebc07514c6b038a1d964199c59e59d4fc621c54b7bbd3410ccec22f7fb6751527c2aa0940ed2f0c9dcfc4e99ced91d09ba4a37042b5f48b127439cad24df2951ff1e769d3892dc4788dbbe27cce60f7f0138789444712e84e059ac0a4e87557f6c3369fc61b9a843c816df3cb4ec77a11e16390234da24dc0420f6a44554fc7954cc74d63ec030d4d964898e14500d0dacdbb2959f7a8a191773f66448348f36c3f4904187088bcfeafda7dd721236810d04469e93ca4e7926305c25b1ef1380d775008fd238e33e8dd2dc5a9783f97414487a7ef70eba3dcf71331803fad223f65aadfc87d79512bf311c14926d619a089f5e84c46f4a9ff393969f8eacc8fa20acaa9eb01a8aab625853e415d3871e555a11ee71ee93cba85ee9cde60b3962e294c2c840f0a1ba87714bac54f1ca0ebda74daa3e8e19d382b951d64a22da48c632ec5754f42129214a807427e69a93c128b6b0a8697c9ee375818dd79244a38287fe8f66c7cc3aa18aee2fbf804fc1aadcc7d2daf75be82a60276b6902a51f2bbb64c261915b80053fb9635f405f1fa855d1ec8adc0ebe9648b8151eda70ec5ad5f704fa2a337bcfb7ecbc845a11cae7a68d6bc58f107ac7bb0c2f6b83edc48703ba00c94036b9af4ada51d6d78bfe697df06f47573c14cd7191ec52dc0f208ecdcf54669529bba2c2fb7a6b38f6f2b5ec5fe876f03c096ae092b6f881a84b00edd1e9f67449069d876afaa99eb1a446f20656b5104c72ed28bd8553c724785f4e8bfdc33194409960de4969b708ce26e4cd608d21ace0c38e27d54b55369a9e807cfda9a6240466dd94f6150d4b0105f7b9ae392009b2cf146d1dad5d7c8664463d7d60d11b45f30d01db7364e21ac557d37a4c9ad88926c472e98710d2cbfc4b70d6a5dbb128d46909e634761c6f6952bf9021aa5282c391dcee3278a25e3e2ee31a7f6713979a546084fb2e598214c36a3b7618bf23c57bb23b33e9c98dfe5192ef257dc2d891a6f7c11be334fbdab015eedafe1c4aea95ff1fa6d340d0cade542f3f782c1589470fa64c6fd9ac0c31536ecee0ae312f992733beea6fcaf7562dd6e0f2c016f712ce14d93f02a54f577c75b444fd7f46e9bd2cd9cd1f89195781d88f984eca45c97355095d3b48b0d9bd730c7d6f63b1dc78d2344bdb0f18c4e1554822345c11efa2ba32bcef4f29ed05315cf44617a80d7d1392de077bbda08669c8c3cb6c0b12f872f1247bc1d07634bf5bf4acc3a4ecdae7e6acd7c4af9820147afe55500a7270d7eb511f907339e5af54cfaf33e2364f54091ebee2a245ba048452d383cd441604c4dd1c6376e4df8b83ebf6070d2be248174fc1dc0a1352c103325360aeb3ab71cb73bb646ac6247dd68155fd48b90250c3b0f250a74f827780367e117a94094e5005e2f926accaef0b3e36c25e315c1e80cd4c3481f3465d99025c7de91c45bb8dd0a5577174c1f366017d87d2033239a8b6f399a9095845b5fafe9cca113b93f455bb790709b6c93fcbbd0c4bd7b5d621088dca06802e241836291226ad56d40b3b4e90eb68bd5845742baf4cb4a69b4bdb07f02d0bd6fbb5a5fad3af030816b254725e6db4073b7a0536b884c8985c3a159cdb105c73f7e0e03546248336449eff6afeb96cf8ad3617df18ee2247bc2d11ebbe10e0379f5578c41611872c5461541fb4da5be3f3348e0592982a61c352315370a9b452306c9f31f9040ef755ad096a8733dd9daf6bdbcb7a3521ad2282ae4fa7bfdb9cda5997ba3a6652af46c6d0205bb356dfb411e2b931b357723bb70254211819b74a461ed5c126cec6573cda4f6107fc3ebc76483621e9ab5789a5575ea3a91463f7613d237f3ec9c44e1cddb2de59bef83333d235e922b920e267453676575b38e6415bd136534b8df2360ab489fb69eefd04b66758ab5dd105be7b0635f7194f9e4b158b22b21ac97fda4e804747a9718b40a32531cd5c3fd1d3c1dd8ba5ef9c86d3c8df8c71f81da1a9756e5db4dddf70755053f7129d656a8069fe83c39ab240cf7a73f0f880ec7a791c5115ab262184839b906c238eaabf2268dfcd6560c5bcb70fea00b580ad52e7de0333e6de63ae351952e6e5dee6edf284de0a2f53e2089db13bd5eca5f98883a24eb2e1a58ae199f8db9c60a5b6b85585b2d2a17d6b5406e5668685d95c4718c375db05f7953b363c25d2ed0906eda70eb659845acd31fec9b8e4d5951d12fd50bbb969dd824a78c72622c8311a980f0f2e6a1ddc368879a1f3a07d3c0780e85a4e5d13223a3424782e3f77bf6a1ebf823f468d41b777ff61345064f1096ed653c277bab90ca5afc8ad6d25f4447236cdd82950afff27763f3fef5308f034379f4ad4955cb8cc5280d51b5427de4eba374f64dde2f1e7a6ae628aa4696160a5cf0ae9fc70e307b4eb19c0a5af2c2855710c8e117211d73a7e7f3f7f2ba55d03a4b73d816c9c3fc1edb86ec95ddcd77884a913805ad6549e7a5f776a1c2385dd6d83877727f128207cda29f83462269a7f606fa31934d06a6e0efd238d0a180c754a9d2e85609fd20c880ea0e79cbe887c442f9f682801da783529e1e45eb3e70195fa2711fa291dca43ee0672b7afc14cf87b9506a7ebe223019c856777e1783f6ae1b0ed90486b32e3b6f7ff77be834c7b6676da6c8052fa49450e3e16a6f90ee33742bbfe3dc025832e0bbc7abeb625077b8c1ea07dee89c7dc26fa42514ff9ac21e848e32309bc2862a873fb57796e05923fce42fa2833c73866e22a04497ec13acebcdff6ae1df71dd8756f1febac04f2034c1f3e1d401ddbdb7f2ef676d5c85437830d527a5fb04c9bbf0d892ee1306d2d2df37008916a3a66e70f865cd6d25de16fdb4bb4f2616204cf86a3ffdbf147223968c092a46dc2aae4aedb32fb850b85d4adb87bfada328bce4c2c70ec42affde442179fcc1d3d9f5e4a848c8ba03b0df3065d1b2d5f1b08d8c25148c51bb54e191a87ea59903084000b4b520fffda111fe831d4bdcf62423c1fcd673b020c5f2c41973dd1b9698054368081f917715e1c1592bc78dd265e051bcda5bf5877821fedfcf7790a58b328cf780f71ee71491e59194504bc800d319251607e53ba0e1ed15cd4fd5c959eaff4d3a1c7cb28c479f2776256633ef7c0f0e98688b54e8c8634cf57e27e5c1ee1e43573ae23bfbb1ff1bef6cabd33c02ff165c44f0f190426ba8391ba4f03458be3351869c5c5c9d5fa5600edbcce523525b9cd9c3bb040e34771ea277d05cb76302c72fac5edc815412dbbbc651371d70d044c4f89a68da7abd836fb3a495e212b5fd13819c41c9a240405582ae69b7c35b30935af3085d457a4d76a94c9272c5eafcecc4c92dd4f314b04b4739864e626a5bab27fa2f345f052afe3bae2ff4c442c42a1c83091bfcc23a3b5e06a511d02cefcd618a6d9761de00af192cf1aacc902cf3ba98f898c48fbc74b6710db7ac890b4f7ed7377e0fa3b4c46a131e775130a80db5014a79e674c8fc8b45495066e88201d2e320320fa4561abab617d0e67e9e879b0080a8ab404f4eb007a088990aa6a7b29afce5b8dd038ce96d43e1271315f6070e761e759c44fba1ce78730e35ca31e0bf5840cc01289c81613a07c497f288ed70a6d10d9f58fe135558b2a862bd877fcc939d7536e7dc988409290cd73da04a3b1399b0a2637f737d5f86bba4a31019546e2000a3ca57f8291cd9af28299eb93909061200c9738cca998add04e7bb0137ecc460fc3ef72872e7d13c159914fcdf577910e6c5d7a1636b13b78c5088551c614e3c75befb0f37fb89b918f4aad0126a9efd3390d6a0cab97ed0e01c7eae0e798a4142345578beb10d6b61a90b4d1fe836022def90bb8e37e07428a4592e7bf30e935951e492234a8db96f081379e7c4e18c3b6ce4ed1f97698dc1da940f14217e877bb8e0f33b392d801a01c48ec62ce2774d2e4e55e9415c063e1bfa31a8f0633443ec19c5fab977c1485147e46c06f86742278fd071de4a165dff7eddd5390a1e031d80e3d44477f6009c9fc27a7d92b865a292b0d586083f681c2d92da7e7f42eabd076fa7d61eba0c2b406c75f1cec561b1a523dd4c6f344b02ed59bd473d7d30a24144e981fc8da434931adeb841d63bb705485f8f58a180da91af64bad1379356787b37467dc9b4a0d12496e5048e7ccb40a978eebee5eaac4e9dd96faf194aa93a22333d7f68cccde147dce26c9ff18d7c8ffe0d1377c70dd1057d54473b2c2b2b3eea82fb223952c0dc3796efd0cd94afea38341ab9a83c6a9ee77f26bf8dea8510dfc964f9b9b4942c08ade50e43f06e5101f2e6b68b6a7f9cc5443c862b1198627461938daf4bd1fc7b21d6d7fd3f775f0e4a1f60434a242b049f159dbe5de145e741c5c9b4e59a7f5d7de54a6d51cd87845dde819ca74e3abf60356fbcf18bfff3b6ae1c545e243c08f9f41b86e55ed6e71be453843e0bffc5b6bdcfeefd33075ee5110627d4f05e008e54ddd62fb6979d9c2a5e4a2cb45fad7b2d77bd17508952889b30df2124cdc2fe6a749a12c9f6dbbd01226cc4ba2693b7e6a858d3c36ac6519ee70e896588a6df81b0e3be3604bbbe1a845088cf1834a04368dde8b6ee76d0492911dc09b05cf6642e0003cd8faafd398872c1a8dc3e85d3658ec8", 0x2000, 0x0) sendmsg$unix(r2, 0x0, 0x24040800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) 1.059555544s ago: executing program 1 (id=6946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x819, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x3, 0x2}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @sack_perm, @mss={0x2, 0xffffffff}, @timestamp, @window={0x3, 0xfffe, 0xa}, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x40) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.053853285s ago: executing program 1 (id=6947): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000001f00)=""/4078, 0xfee}], 0x5}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) 866.689298ms ago: executing program 5 (id=6948): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000040000000800", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/27}, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0xffffffffffffffc0, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = io_uring_setup(0x2f00, &(0x7f000000c480)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r2 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r1], 0x1) 745.40393ms ago: executing program 5 (id=6949): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000040, 0xb96b, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xff], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 480.190347ms ago: executing program 5 (id=6950): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 479.748557ms ago: executing program 5 (id=6951): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f00000ab000/0x3000)=nil) getpid() bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) 420.27586ms ago: executing program 3 (id=6952): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) 244.160518ms ago: executing program 2 (id=6953): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x100000000) userfaultfd(0x80001) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x21001000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000ffdbdf25340000000a000600c3c99f08e6080000170034004cdbc304000000000000003bfbaa863c1099440008001f011c0000000600fd00070000000a00eaff0704349540d3000014005500d69474c0b76bcf6203e711a2901b24480600fd000300000014005500e5b0cfd6502aa70fa71f1c78b013b81f0a0006000802110000010000"], 0x90}}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, 0x0, 0x1) r6 = syz_pidfd_open(r5, 0x0) open_by_handle_at(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'bond_slave_1\x00', @random="0e00"}) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80007}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 67.639411ms ago: executing program 1 (id=6954): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300), 0x2, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f00000002c0)=[r3], &(0x7f0000000040), &(0x7f0000000240)=[r7], &(0x7f0000000340)}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x794}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffff6c}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 0s ago: executing program 1 (id=6955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): msg+0x8d1/0xdd0 [ 1142.928981][T24715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1142.929000][T24715] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1142.929018][T24715] ____sys_sendmsg+0xa95/0xc70 [ 1142.929033][T24715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1142.929044][T24715] ? get_compat_msghdr+0x11a/0x170 [ 1142.929064][T24715] ? __pfx_futex_wake_mark+0x10/0x10 [ 1142.929086][T24715] ___sys_sendmsg+0x134/0x1d0 [ 1142.929104][T24715] ? __pfx____sys_sendmsg+0x10/0x10 [ 1142.929129][T24715] ? find_held_lock+0x2b/0x80 [ 1142.929153][T24715] __sys_sendmsg+0x16d/0x220 [ 1142.929170][T24715] ? __pfx___sys_sendmsg+0x10/0x10 [ 1142.929187][T24715] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 1142.929212][T24715] ? rcu_is_watching+0x12/0xc0 [ 1142.929228][T24715] __do_fast_syscall_32+0x7c/0x3a0 [ 1142.929247][T24715] do_fast_syscall_32+0x32/0x80 [ 1142.929264][T24715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1142.929294][T24715] RIP: 0023:0xf7fd3579 [ 1142.929306][T24715] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1142.929319][T24715] RSP: 002b:00000000f54d555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1142.929333][T24715] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 1142.929341][T24715] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1142.929349][T24715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1142.929356][T24715] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1142.929364][T24715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1142.929380][T24715] [ 1142.929703][T24715] Mem-Info: [ 1143.049584][T24715] active_anon:2663 inactive_anon:1363 isolated_anon:0 [ 1143.049584][T24715] active_file:2236 inactive_file:332 isolated_file:0 [ 1143.049584][T24715] unevictable:1768 dirty:89 writeback:0 [ 1143.049584][T24715] slab_reclaimable:6414 slab_unreclaimable:62973 [ 1143.049584][T24715] mapped:21845 shmem:1768 pagetables:1171 [ 1143.049584][T24715] sec_pagetables:337 bounce:0 [ 1143.049584][T24715] kernel_misc_reclaimable:0 [ 1143.049584][T24715] free:69957 free_pcp:2023 free_cma:0 [ 1143.066048][T24715] Node 0 active_anon:604kB inactive_anon:116kB active_file:5528kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8428kB dirty:64kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7664kB pagetables:1080kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB [ 1143.078399][T24715] Node 1 active_anon:10360kB inactive_anon:5336kB active_file:3676kB inactive_file:1128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:79192kB dirty:292kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5872kB pagetables:3604kB sec_pagetables:192kB all_unreclaimable? no Balloon:0kB [ 1143.088413][T24715] Node 0 DMA free:2756kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1143.098256][T24715] lowmem_reserve[]: 0 288 288 288 288 [ 1143.100248][T24715] Node 0 DMA32 free:18492kB boost:2048kB min:15268kB low:18572kB high:21876kB reserved_highatomic:2048KB free_highatomic:32KB active_anon:600kB inactive_anon:112kB active_file:5524kB inactive_file:200kB unevictable:3536kB writepending:64kB present:1032196kB managed:295136kB mlocked:0kB bounce:0kB free_pcp:480kB local_pcp:56kB free_cma:0kB [ 1143.111154][T24715] lowmem_reserve[]: 0 0 0 0 0 [ 1143.113034][T24715] Node 1 DMA32 free:256476kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10760kB inactive_anon:5336kB active_file:3676kB inactive_file:1128kB unevictable:3536kB writepending:292kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:8880kB local_pcp:288kB free_cma:0kB [ 1143.124432][T24715] lowmem_reserve[]: 0 0 0 0 0 [ 1143.126788][T24715] Node 0 DMA: 65*4kB (U) 22*8kB (U) 13*16kB (U) 14*32kB (U) 2*64kB (U) 0*128kB 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2756kB [ 1143.132078][T24715] Node 0 DMA32: 9*4kB (UE) 83*8kB (ME) 70*16kB (UME) 87*32kB (UMEH) 77*64kB (UME) 40*128kB (UME) 15*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18492kB [ 1143.139329][T24715] Node 1 DMA32: 52*4kB (UME) 47*8kB (UME) 101*16kB (UME) 336*32kB (UME) 184*64kB (UME) 173*128kB (UME) 277*256kB (UME) 151*512kB (UM) 60*1024kB (UM) 0*2048kB 0*4096kB = 256536kB [ 1143.146460][T24715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1143.149807][T24715] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1143.153058][T24715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1143.156985][T24715] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1143.161465][T24715] 4831 total pagecache pages [ 1143.163425][T24715] 404 pages in swap cache [ 1143.166308][T24715] Free swap = 105584kB [ 1143.168223][T24715] Total swap = 124996kB [ 1143.169973][T24715] 524155 pages RAM [ 1143.171686][T24715] 0 pages HighMem/MovableOnly [ 1143.173390][T24715] 209476 pages reserved [ 1143.174864][T24715] 0 pages cma reserved [ 1145.075078][T24772] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5358'. [ 1147.002000][T24790] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5364'. [ 1147.030040][T24790] lo speed is unknown, defaulting to 1000 [ 1147.033898][T24790] lo speed is unknown, defaulting to 1000 [ 1147.158289][T24795] fuse: Unknown parameter 'fd0x0000000000000003' [ 1148.705145][ T839] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1148.858012][ T839] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1148.861900][ T839] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.867627][ T839] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1148.871741][ T839] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.878888][ T839] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1148.883565][ T839] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1148.887722][ T839] usb 6-1: Product: syz [ 1148.889531][ T839] usb 6-1: Manufacturer: syz [ 1148.897020][ T839] cdc_wdm 6-1:1.0: skipping garbage [ 1148.900449][ T839] cdc_wdm 6-1:1.0: skipping garbage [ 1148.902919][ T839] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1149.132569][ T10] usb 6-1: USB disconnect, device number 96 [ 1149.671189][T24820] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5373'. [ 1149.689322][T24820] lo speed is unknown, defaulting to 1000 [ 1149.691831][T24820] lo speed is unknown, defaulting to 1000 [ 1150.470571][T24843] gfs2: not a GFS2 filesystem [ 1151.491609][T24863] tipc: Started in network mode [ 1151.493309][T24863] tipc: Node identity 1e642ac0301c, cluster identity 4711 [ 1151.496762][T24863] tipc: Enabled bearer , priority 0 [ 1151.500127][T24863] syzkaller0: entered promiscuous mode [ 1151.501862][T24863] syzkaller0: entered allmulticast mode [ 1151.521583][T24863] tipc: Resetting bearer [ 1151.527320][T24862] tipc: Resetting bearer [ 1151.543824][T24862] tipc: Disabling bearer [ 1152.859313][T24887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5394'. [ 1153.330169][T24898] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5398'. [ 1153.352650][T24898] lo speed is unknown, defaulting to 1000 [ 1153.358493][T24898] lo speed is unknown, defaulting to 1000 [ 1154.418775][T24917] fuse: Bad value for 'fd' [ 1155.309536][T24928] lo speed is unknown, defaulting to 1000 [ 1155.313391][T24928] lo speed is unknown, defaulting to 1000 [ 1155.724164][T24939] random: crng reseeded on system resumption [ 1157.147520][T13889] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1157.298400][T13889] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1157.302119][T13889] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.310129][T13889] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1157.313980][T13889] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.320397][T13889] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1157.324254][T13889] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1157.328224][T13889] usb 8-1: Product: syz [ 1157.330048][T13889] usb 8-1: Manufacturer: syz [ 1157.337527][T13889] cdc_wdm 8-1:1.0: skipping garbage [ 1157.339778][T13889] cdc_wdm 8-1:1.0: skipping garbage [ 1157.341992][T13889] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1157.510952][T24960] lo speed is unknown, defaulting to 1000 [ 1157.514015][T24960] lo speed is unknown, defaulting to 1000 [ 1157.562328][ T6060] usb 8-1: USB disconnect, device number 101 [ 1159.396341][T24992] lo speed is unknown, defaulting to 1000 [ 1159.400449][T24992] lo speed is unknown, defaulting to 1000 [ 1159.825301][T13889] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1160.007872][T13889] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1160.012032][T13889] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.035470][T13889] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1160.045486][T13889] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.057086][T13889] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1160.065365][T13889] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1160.068929][T13889] usb 7-1: Product: syz [ 1160.071527][T13889] usb 7-1: Manufacturer: syz [ 1160.080503][T13889] cdc_wdm 7-1:1.0: skipping garbage [ 1160.082804][T13889] cdc_wdm 7-1:1.0: skipping garbage [ 1160.096010][T13889] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1160.119791][ T8822] libceph: connect (1)[c::]:6789 error -101 [ 1160.121833][ T8822] libceph: mon0 (1)[c::]:6789 connect error [ 1160.173368][T25004] ceph: No mds server is up or the cluster is laggy [ 1160.295923][T13889] usb 7-1: USB disconnect, device number 100 [ 1161.507765][T25030] lo speed is unknown, defaulting to 1000 [ 1161.510367][T25030] lo speed is unknown, defaulting to 1000 [ 1162.981211][T25055] lo speed is unknown, defaulting to 1000 [ 1162.985510][T25055] lo speed is unknown, defaulting to 1000 [ 1163.130818][ T6056] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 1163.286678][ T6056] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1163.290245][ T6056] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.294362][ T6056] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1163.298251][ T6056] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.303905][ T6056] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1163.307815][ T6056] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1163.311105][ T6056] usb 8-1: Product: syz [ 1163.312822][ T6056] usb 8-1: Manufacturer: syz [ 1163.319279][ T6056] cdc_wdm 8-1:1.0: skipping garbage [ 1163.321489][ T6056] cdc_wdm 8-1:1.0: skipping garbage [ 1163.323649][ T6056] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1163.541542][ T839] usb 8-1: USB disconnect, device number 102 [ 1164.753643][T25081] lo speed is unknown, defaulting to 1000 [ 1164.763765][T25081] lo speed is unknown, defaulting to 1000 [ 1165.855015][ T8822] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1166.021938][ T8822] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1166.035120][ T8822] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.038578][ T8822] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1166.041987][ T8822] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.056981][ T8822] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1166.060406][ T8822] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1166.063733][ T8822] usb 6-1: Product: syz [ 1166.065853][ T8822] usb 6-1: Manufacturer: syz [ 1166.071773][ T8822] cdc_wdm 6-1:1.0: skipping garbage [ 1166.073540][ T8822] cdc_wdm 6-1:1.0: skipping garbage [ 1166.075311][ T8822] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1166.235487][ T6038] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1166.290875][ T6060] usb 6-1: USB disconnect, device number 97 [ 1166.385392][ T6038] usb 10-1: Using ep0 maxpacket: 8 [ 1166.391064][ T6038] usb 10-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1166.393997][ T6038] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.398577][ T6038] usb 10-1: Product: syz [ 1166.400280][ T6038] usb 10-1: Manufacturer: syz [ 1166.402260][ T6038] usb 10-1: SerialNumber: syz [ 1166.409902][ T6038] usb 10-1: config 0 descriptor?? [ 1166.417608][ T6038] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1166.452660][T25106] lo speed is unknown, defaulting to 1000 [ 1166.456637][T25106] lo speed is unknown, defaulting to 1000 [ 1166.839034][T25114] tipc: Enabled bearer , priority 0 [ 1166.847632][T25114] syzkaller0: entered promiscuous mode [ 1166.849954][T25114] syzkaller0: entered allmulticast mode [ 1166.859762][T25114] tipc: Resetting bearer [ 1166.863169][T25113] tipc: Resetting bearer [ 1166.884011][T25113] tipc: Disabling bearer [ 1167.429159][ T6038] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 1167.431552][ T6038] sq905 10-1:0.0: probe with driver sq905 failed with error -71 [ 1167.439898][ T6038] usb 10-1: USB disconnect, device number 2 [ 1168.656220][T25134] lo speed is unknown, defaulting to 1000 [ 1168.658759][T25134] lo speed is unknown, defaulting to 1000 [ 1168.756746][T25140] tipc: Enabled bearer , priority 0 [ 1168.759547][T25140] syzkaller0: entered promiscuous mode [ 1168.761425][T25140] syzkaller0: entered allmulticast mode [ 1168.770448][T25140] tipc: Resetting bearer [ 1168.777410][T25139] tipc: Resetting bearer [ 1168.789689][T25139] tipc: Disabling bearer [ 1168.985086][T13889] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1169.137284][T13889] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1169.140103][T13889] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.147849][T13889] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1169.154391][T13889] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.166142][T13889] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1169.176083][T13889] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1169.178629][T13889] usb 7-1: Product: syz [ 1169.182898][T13889] usb 7-1: Manufacturer: syz [ 1169.198275][T13889] cdc_wdm 7-1:1.0: skipping garbage [ 1169.200252][T13889] cdc_wdm 7-1:1.0: skipping garbage [ 1169.202230][T13889] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1169.408769][ T6038] usb 7-1: USB disconnect, device number 101 [ 1170.544620][T25162] lo speed is unknown, defaulting to 1000 [ 1170.548195][T25162] lo speed is unknown, defaulting to 1000 [ 1172.095029][T13889] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1172.247534][T13889] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1172.250538][T13889] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.254059][T13889] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1172.257451][T13889] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.262769][T13889] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1172.267946][T13889] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1172.271064][T13889] usb 7-1: Product: syz [ 1172.272636][T13889] usb 7-1: Manufacturer: syz [ 1172.277949][T13889] cdc_wdm 7-1:1.0: skipping garbage [ 1172.279650][T13889] cdc_wdm 7-1:1.0: skipping garbage [ 1172.285493][T13889] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1172.297120][T25190] lo speed is unknown, defaulting to 1000 [ 1172.300839][T25190] lo speed is unknown, defaulting to 1000 [ 1172.490843][ T8822] usb 7-1: USB disconnect, device number 102 [ 1173.002253][T25201] fuse: Bad value for 'fd' [ 1173.881501][T25220] lo speed is unknown, defaulting to 1000 [ 1173.883955][T25220] lo speed is unknown, defaulting to 1000 [ 1175.138934][T25249] lo speed is unknown, defaulting to 1000 [ 1175.143874][T25249] lo speed is unknown, defaulting to 1000 [ 1176.848289][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.140970][T25286] lo speed is unknown, defaulting to 1000 [ 1177.144626][T25286] lo speed is unknown, defaulting to 1000 [ 1178.915140][ T5334] Bluetooth: hci2: command 0x0406 tx timeout [ 1181.252150][T25370] lo speed is unknown, defaulting to 1000 [ 1181.254713][T25370] lo speed is unknown, defaulting to 1000 [ 1181.357669][T25385] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5556'. [ 1181.362277][T25385] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5556'. [ 1182.625052][T21387] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1182.740932][T25422] trusted_key: encrypted_key: insufficient parameters specified [ 1182.744269][T25422] trusted_key: encrypted_key: keylen parameter is missing [ 1182.748135][T25422] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1182.751722][T25422] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1182.796860][T21387] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1182.799656][T21387] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1182.803779][T21387] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1182.807450][T21387] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1182.810917][T21387] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1182.815686][T21387] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1182.818554][T21387] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.822466][T21387] usb 10-1: config 0 descriptor?? [ 1182.825854][T25413] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1183.238079][T21387] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1183.240641][T21387] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1183.243081][T21387] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1183.245660][T21387] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1183.248064][T21387] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1183.250592][T21387] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1183.253540][T21387] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1183.256496][T21387] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1183.259056][T21387] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1183.261485][T21387] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1183.268041][T21387] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1183.497664][ T6060] usb 10-1: USB disconnect, device number 3 [ 1184.275062][ T6056] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1184.445063][ T6056] usb 10-1: Using ep0 maxpacket: 8 [ 1184.448573][ T6056] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1184.453429][ T6056] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1184.458215][ T6056] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.461303][ T6056] usb 10-1: Product: syz [ 1184.462704][ T6056] usb 10-1: Manufacturer: syz [ 1184.464255][ T6056] usb 10-1: SerialNumber: syz [ 1184.467591][ T6056] usb 10-1: config 0 descriptor?? [ 1184.471152][ T6056] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1184.473946][ T6056] usb 10-1: setting power ON [ 1184.475690][ T6056] dvb-usb: bulk message failed: -22 (2/0) [ 1184.480602][ T6056] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1184.484328][ T6056] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1184.487219][ T6056] usb 10-1: media controller created [ 1184.498849][ T6056] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1184.559484][ T6056] usb 10-1: selecting invalid altsetting 6 [ 1184.562760][ T6056] usb 10-1: digital interface selection failed (-22) [ 1184.568884][ T6056] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1184.575899][ T6056] usb 10-1: setting power OFF [ 1184.578257][ T6056] dvb-usb: bulk message failed: -22 (2/0) [ 1184.580737][ T6056] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1184.583895][ T6056] (NULL device *): no alternate interface [ 1184.617057][ T6056] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1184.710629][T25436] ALSA: mixer_oss: invalid OSS volume './file0' [ 1184.722212][T25441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.725708][T25441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.730336][T25441] netlink: 'syz.5.5576': attribute type 10 has an invalid length. [ 1184.733571][T25441] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5576'. [ 1184.757051][T25441] team0: Port device geneve0 added [ 1184.784605][T21387] usb 10-1: USB disconnect, device number 4 [ 1186.719030][T25493] ip6gre1: entered allmulticast mode [ 1187.511432][T25502] fuse: Bad value for 'fd' [ 1187.569644][T25504] binder: BC_ACQUIRE_RESULT not supported [ 1187.571966][T25504] binder: 25503:25504 ioctl c0306201 80000640 returned -22 [ 1187.687256][T25506] siw: device registration error -23 [ 1187.825670][T20007] usb 8-1: new full-speed USB device number 103 using dummy_hcd [ 1187.987247][T20007] usb 8-1: config 5 has an invalid interface number: 123 but max is 0 [ 1187.990618][T20007] usb 8-1: config 5 has no interface number 0 [ 1187.993219][T20007] usb 8-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1187.998968][T20007] usb 8-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1188.002969][T20007] usb 8-1: config 5 interface 123 has no altsetting 0 [ 1188.008399][T20007] usb 8-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1188.011984][T20007] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.016660][T20007] usb 8-1: Product: syz [ 1188.018452][T20007] usb 8-1: Manufacturer: syz [ 1188.020426][T20007] usb 8-1: SerialNumber: syz [ 1188.331933][T20007] ni6501 8-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1188.339437][T20007] usb 8-1: USB disconnect, device number 103 [ 1188.660481][T25519] team0: Device gtp0 is of different type [ 1188.907991][T25526] team0: Port device batadv1 removed [ 1188.910921][ T6038] lo speed is unknown, defaulting to 1000 [ 1190.135528][T20007] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 1190.295797][T20007] usb 8-1: Using ep0 maxpacket: 32 [ 1190.300536][T20007] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.304367][T20007] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.312222][T20007] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1190.318991][T20007] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.329381][T20007] usb 8-1: config 0 descriptor?? [ 1190.333276][T20007] hub 8-1:0.0: USB hub found [ 1190.535500][T20007] hub 8-1:0.0: 1 port detected [ 1191.139030][T20007] hub 8-1:0.0: activate --> -90 [ 1191.540657][ T24] usb 8-1: USB disconnect, device number 104 [ 1191.818474][T25557] fuse: Bad value for 'fd' [ 1191.945555][ T6060] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1192.119605][ T6060] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1192.123167][ T6060] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.126698][ T6060] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1192.130017][ T6060] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.135945][ T6060] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1192.139116][ T6060] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1192.141804][ T6060] usb 6-1: Product: syz [ 1192.143232][ T6060] usb 6-1: Manufacturer: syz [ 1192.154421][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 1192.156805][ T6060] cdc_wdm 6-1:1.0: skipping garbage [ 1192.159250][ T6060] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1192.367530][ T6060] usb 6-1: USB disconnect, device number 98 [ 1193.083058][T25575] input: syz1 as /devices/virtual/input/input148 [ 1193.225557][T25586] overlayfs: missing 'lowerdir' [ 1193.735567][T15770] IPVS: starting estimator thread 0... [ 1193.825892][T25603] IPVS: using max 43 ests per chain, 103200 per kthread [ 1194.374124][T25615] fuse: Bad value for 'group_id' [ 1194.376446][T25615] fuse: Bad value for 'group_id' [ 1194.453190][T25619] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5637'. [ 1195.504378][T25641] fuse: Bad value for 'group_id' [ 1195.506663][T25641] fuse: Bad value for 'group_id' [ 1195.846174][T20007] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 1195.996835][T20007] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1195.999678][T20007] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.004838][T20007] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1196.008493][T20007] usb 8-1: config 1 has no interface number 1 [ 1196.010476][T20007] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1196.026052][T20007] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1196.029426][T20007] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.032440][T20007] usb 8-1: Product: syz [ 1196.034103][T20007] usb 8-1: Manufacturer: syz [ 1196.037099][T20007] usb 8-1: SerialNumber: syz [ 1196.250858][T20007] usb 8-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1196.254706][T20007] usb 8-1: MIDIStreaming interface descriptor not found [ 1196.277312][T20007] usb 8-1: USB disconnect, device number 105 [ 1196.583863][T25672] netlink: 'syz.5.5657': attribute type 10 has an invalid length. [ 1196.602408][T25672] batman_adv: batadv0: Adding interface: team0 [ 1196.606808][T25672] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1196.616742][T25672] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1198.766179][T25723] vxcan1 speed is unknown, defaulting to 1000 [ 1198.773171][T25723] vxcan1 speed is unknown, defaulting to 1000 [ 1198.776902][T25723] vxcan1 speed is unknown, defaulting to 1000 [ 1198.849481][ T5973] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 1198.904109][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 1198.908389][T25723] infiniband syz2: set active [ 1198.911670][T25723] infiniband syz2: added vxcan1 [ 1198.952746][T25723] RDS/IB: syz2: added [ 1198.956987][T25723] smc: adding ib device syz2 with port count 1 [ 1198.959662][T25723] smc: ib device syz2 port 1 has pnetid [ 1198.966024][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 1198.972142][T25723] vxcan1 speed is unknown, defaulting to 1000 [ 1199.122656][T25723] vxcan1 speed is unknown, defaulting to 1000 [ 1199.230316][T25723] vxcan1 speed is unknown, defaulting to 1000 [ 1199.259084][T25733] fuse: Bad value for 'fd' [ 1199.315720][T25723] vxcan1 speed is unknown, defaulting to 1000 [ 1199.444180][T25723] vxcan1 speed is unknown, defaulting to 1000 [ 1199.594897][T25723] vxcan1 speed is unknown, defaulting to 1000 [ 1199.756339][T25758] fuse: Bad value for 'fd' [ 1202.347695][T25790] fuse: Bad value for 'fd' [ 1202.376637][T25794] overlayfs: missing 'lowerdir' [ 1202.740384][T25804] tipc: Enabled bearer , priority 0 [ 1202.744592][T25804] syzkaller0: entered promiscuous mode [ 1202.747645][T25804] syzkaller0: entered allmulticast mode [ 1202.809145][T25804] tipc: Resetting bearer [ 1202.819529][T25803] tipc: Resetting bearer [ 1202.838579][T25803] tipc: Disabling bearer [ 1203.023573][T25809] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5710'. [ 1203.705859][T25816] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5712'. [ 1204.260456][T25827] tipc: Enabled bearer , priority 0 [ 1204.263322][T25827] syzkaller0: entered promiscuous mode [ 1204.268843][T25827] syzkaller0: entered allmulticast mode [ 1204.285966][T25827] tipc: Resetting bearer [ 1204.289957][T25826] tipc: Resetting bearer [ 1204.302885][T25826] tipc: Disabling bearer [ 1205.542585][T25856] tipc: Started in network mode [ 1205.544210][T25856] tipc: Node identity 5ef8328be078, cluster identity 4711 [ 1205.546608][T25856] tipc: Enabled bearer , priority 0 [ 1205.549317][T25856] syzkaller0: entered promiscuous mode [ 1205.552653][T25856] syzkaller0: entered allmulticast mode [ 1205.572095][T25856] tipc: Resetting bearer [ 1205.577848][T25855] tipc: Resetting bearer [ 1205.590368][T25855] tipc: Disabling bearer [ 1206.422133][T25878] overlayfs: missing 'workdir' [ 1206.538159][T25882] fuse: Unknown parameter 'grou00000000000000000000' [ 1207.173396][T25904] netlink: 'syz.2.5744': attribute type 11 has an invalid length. [ 1207.595188][T25907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5745'. [ 1207.743601][T25910] fuse: Unknown parameter 'group_i00000000000000000000' [ 1207.949930][T25929] input: syz1 as /devices/virtual/input/input149 [ 1208.146592][T25931] bridge0: entered promiscuous mode [ 1208.149554][T25931] macvlan2: entered promiscuous mode [ 1208.348120][T25935] fuse: Unknown parameter 'group_i00000000000000000000' [ 1208.869607][T25954] fuse: Unknown parameter 'group_i00000000000000000000' [ 1209.588944][T25968] tipc: Enabled bearer , priority 0 [ 1209.592613][T25968] syzkaller0: entered promiscuous mode [ 1209.596111][T25968] syzkaller0: entered allmulticast mode [ 1209.620760][T25968] tipc: Resetting bearer [ 1209.626741][T25967] tipc: Resetting bearer [ 1209.643482][T25967] tipc: Disabling bearer [ 1209.883892][T25980] binder: 25977:25980 ioctl 4018620d 0 returned -22 [ 1209.977787][T25986] fuse: Unknown parameter 'group_id00000000000000000000' [ 1211.530793][T26017] fuse: Unknown parameter 'group_id00000000000000000000' [ 1211.782823][T26028] tipc: Enabled bearer , priority 0 [ 1211.786210][T26028] syzkaller0: entered promiscuous mode [ 1211.788478][T26028] syzkaller0: entered allmulticast mode [ 1211.817404][T26027] tipc: Resetting bearer [ 1211.835183][T26027] tipc: Disabling bearer [ 1211.939816][T26040] fuse: Bad value for 'user_id' [ 1211.941500][T26040] fuse: Bad value for 'user_id' [ 1211.943409][T26032] smc: net device bond0 applied user defined pnetid SYZ0 [ 1212.063700][T26054] tipc: Started in network mode [ 1212.065795][T26054] tipc: Node identity 82ec8259668f, cluster identity 4711 [ 1212.068114][T26054] tipc: Enabled bearer , priority 0 [ 1212.071276][T26054] syzkaller0: entered promiscuous mode [ 1212.073059][T26054] syzkaller0: entered allmulticast mode [ 1212.088338][T26053] tipc: Resetting bearer [ 1212.103178][T26053] tipc: Disabling bearer [ 1212.243829][T26064] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1212.357182][T26070] fuse: Bad value for 'user_id' [ 1212.359129][T26070] fuse: Bad value for 'user_id' [ 1213.575101][T15770] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1213.735091][T15770] usb 7-1: Using ep0 maxpacket: 8 [ 1213.739528][T15770] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1213.742957][T15770] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1213.755424][T15770] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1213.759766][T15770] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1213.764160][T15770] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.795151][T15770] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1213.799163][T15770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.025679][T15770] usb 7-1: GET_CAPABILITIES returned 0 [ 1214.027642][T15770] usbtmc 7-1:16.0: can't read capabilities [ 1214.237482][ T29] usb 7-1: USB disconnect, device number 103 [ 1215.383849][T26132] block nbd3: Attempted send on invalid socket [ 1215.386379][T26132] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.389832][T26132] block nbd3: Attempted send on invalid socket [ 1215.392239][T26132] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.405188][T26132] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1215.417763][T26132] block nbd3: Attempted send on invalid socket [ 1215.419851][T26132] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.422755][T26132] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1215.428978][T26132] block nbd3: Attempted send on invalid socket [ 1215.430946][T26132] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.434198][T26132] block nbd3: Attempted send on invalid socket [ 1215.438065][T26132] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.441271][T26132] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1215.444647][T26132] block nbd3: Attempted send on invalid socket [ 1215.446883][T26132] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.449866][T26132] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1215.453454][T26132] block nbd3: Attempted send on invalid socket [ 1215.457329][T26132] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.460841][T26132] block nbd3: Attempted send on invalid socket [ 1215.462835][T26132] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.466276][T26132] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1215.469474][T26132] block nbd3: Attempted send on invalid socket [ 1215.471618][T26132] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.475350][T26132] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1215.479689][T26132] block nbd3: Attempted send on invalid socket [ 1215.482140][T26132] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.486772][T26132] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1215.490102][T26132] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1215.493231][T26132] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1216.655907][T26157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5845'. [ 1217.065156][ T6060] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1217.245655][ T6060] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1217.252907][ T6060] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.259674][ T6060] usb 10-1: Product: syz [ 1217.261625][ T6060] usb 10-1: Manufacturer: syz [ 1217.263608][ T6060] usb 10-1: SerialNumber: syz [ 1218.789518][T26183] lo speed is unknown, defaulting to 1000 [ 1218.792259][T26183] lo speed is unknown, defaulting to 1000 [ 1218.795813][T26183] vxcan1 speed is unknown, defaulting to 1000 [ 1218.932279][ T10] usb 8-1: new full-speed USB device number 106 using dummy_hcd [ 1219.126762][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1219.129955][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1219.134053][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1219.137056][ T6060] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1219.141106][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.143774][ T6060] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1219.148423][ T6060] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1219.152893][ T6060] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1219.242237][ T6060] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1219.257890][ T6060] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1219.296342][ T6060] usb 10-1: USB disconnect, device number 5 [ 1219.372221][ T10] usb 8-1: usb_control_msg returned -32 [ 1219.374073][ T10] usbtmc 8-1:16.0: can't read capabilities [ 1221.754179][ T8822] usb 8-1: USB disconnect, device number 106 [ 1222.145047][ T8822] usb 8-1: new high-speed USB device number 107 using dummy_hcd [ 1222.325129][ T8822] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.328877][ T8822] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1222.331880][ T8822] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1222.339618][ T8822] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1222.342581][ T8822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.402537][ T8822] usb 8-1: Product: syz [ 1222.403960][ T8822] usb 8-1: Manufacturer: syz [ 1222.405739][ T8822] usb 8-1: SerialNumber: syz [ 1222.414664][ T8822] usb 8-1: bad CDC descriptors [ 1222.621567][ T6060] usb 8-1: USB disconnect, device number 107 [ 1222.645169][T15770] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1222.795140][T15770] usb 6-1: Using ep0 maxpacket: 8 [ 1222.799737][T15770] usb 6-1: config 8 has an invalid interface number: 49 but max is 0 [ 1222.802477][T15770] usb 6-1: config 8 has no interface number 0 [ 1222.804512][T15770] usb 6-1: config 8 interface 49 has no altsetting 0 [ 1222.811992][T15770] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice=ba.d7 [ 1222.815446][T15770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.818034][T15770] usb 6-1: Product: syz [ 1222.819567][T15770] usb 6-1: Manufacturer: syz [ 1222.821063][T15770] usb 6-1: SerialNumber: syz [ 1223.042542][T15770] uvcvideo 6-1:8.49: probe with driver uvcvideo failed with error -22 [ 1223.050211][T15770] usb 6-1: USB disconnect, device number 99 [ 1223.880149][T26295] input: syz1 as /devices/virtual/input/input150 [ 1224.640903][T26308] syz.5.5901: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1224.650405][T26308] CPU: 2 UID: 0 PID: 26308 Comm: syz.5.5901 Not tainted syzkaller #0 PREEMPT(full) [ 1224.650431][T26308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1224.650442][T26308] Call Trace: [ 1224.650447][T26308] [ 1224.650456][T26308] dump_stack_lvl+0x16c/0x1f0 [ 1224.650483][T26308] warn_alloc+0x248/0x3a0 [ 1224.650527][T26308] ? __pfx_warn_alloc+0x10/0x10 [ 1224.650547][T26308] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1224.650590][T26308] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 1224.650623][T26308] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1224.650643][T26308] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1224.650664][T26308] ? stack_depot_save_flags+0x3de/0x9c0 [ 1224.650693][T26308] ? kasan_save_stack+0x33/0x60 [ 1224.650710][T26308] ? kasan_save_track+0x14/0x30 [ 1224.650726][T26308] ? __kasan_kmalloc+0xaa/0xb0 [ 1224.650745][T26308] ? __kmalloc_noprof+0x223/0x510 [ 1224.650765][T26308] ? comedi_isadma_alloc+0x10d/0x6e0 [ 1224.650787][T26308] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1224.650816][T26308] __alloc_pages_noprof+0xb/0x1b0 [ 1224.650839][T26308] __dma_direct_alloc_pages.constprop.0+0x624/0x990 [ 1224.650868][T26308] ? __pfx___dma_direct_alloc_pages.constprop.0+0x10/0x10 [ 1224.650894][T26308] ? dma_alloc_from_dev_coherent+0x2e4/0x570 [ 1224.650921][T26308] dma_direct_alloc+0x8f/0x580 [ 1224.650946][T26308] dma_alloc_attrs+0x185/0x2b0 [ 1224.650967][T26308] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 1224.651007][T26308] ? trace_kmalloc+0x2b/0xd0 [ 1224.651035][T26308] ? dma_direct_supported+0xca/0x220 [ 1224.651062][T26308] comedi_isadma_alloc+0x3de/0x6e0 [ 1224.651088][T26308] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 1224.651108][T26308] ? request_threaded_irq+0x2c8/0x3e0 [ 1224.651138][T26308] pcl816_attach+0x901/0xb20 [ 1224.651169][T26308] comedi_device_attach+0x3b3/0x900 [ 1224.651205][T26308] do_devconfig_ioctl+0x1b1/0x710 [ 1224.651229][T26308] ? __mutex_lock+0x1c5/0x1060 [ 1224.651258][T26308] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1224.651291][T26308] ? kasan_save_stack+0x42/0x60 [ 1224.651311][T26308] ? kasan_save_stack+0x33/0x60 [ 1224.651332][T26308] ? kasan_save_track+0x14/0x30 [ 1224.651352][T26308] ? kasan_save_free_info+0x3b/0x60 [ 1224.651382][T26308] ? __kasan_slab_free+0x60/0x70 [ 1224.651405][T26308] ? kfree+0x2b4/0x4d0 [ 1224.651421][T26308] ? tomoyo_path_number_perm+0x470/0x580 [ 1224.651452][T26308] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1224.651482][T26308] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1224.651525][T26308] ? kasan_quarantine_put+0x10a/0x240 [ 1224.651547][T26308] ? lockdep_hardirqs_on+0x7c/0x110 [ 1224.651574][T26308] ? find_held_lock+0x2b/0x80 [ 1224.651595][T26308] ? tomoyo_path_number_perm+0x295/0x580 [ 1224.651624][T26308] ? tomoyo_path_number_perm+0x18d/0x580 [ 1224.651649][T26308] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1224.651677][T26308] comedi_compat_ioctl+0x1d0/0x990 [ 1224.651701][T26308] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1224.651725][T26308] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1224.651756][T26308] ? do_vfs_ioctl+0x128/0x14f0 [ 1224.651789][T26308] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1224.651827][T26308] ? find_held_lock+0x2b/0x80 [ 1224.651847][T26308] ? hook_file_ioctl_common+0x145/0x410 [ 1224.651880][T26308] ? __fget_files+0x20e/0x3c0 [ 1224.651908][T26308] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1224.651932][T26308] __ia32_compat_sys_ioctl+0x242/0x370 [ 1224.651967][T26308] __do_fast_syscall_32+0x7c/0x3a0 [ 1224.651997][T26308] do_fast_syscall_32+0x32/0x80 [ 1224.652024][T26308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1224.652048][T26308] RIP: 0023:0xf7fb6579 [ 1224.652063][T26308] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1224.652083][T26308] RSP: 002b:00000000f54b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1224.652102][T26308] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 1224.652114][T26308] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1224.652126][T26308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1224.652137][T26308] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1224.652149][T26308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1224.652177][T26308] [ 1224.652220][T26308] Mem-Info: [ 1224.829492][T26308] active_anon:2551 inactive_anon:244 isolated_anon:0 [ 1224.829492][T26308] active_file:835 inactive_file:1980 isolated_file:0 [ 1224.829492][T26308] unevictable:1768 dirty:41 writeback:0 [ 1224.829492][T26308] slab_reclaimable:6442 slab_unreclaimable:65140 [ 1224.829492][T26308] mapped:22028 shmem:1768 pagetables:1183 [ 1224.829492][T26308] sec_pagetables:339 bounce:0 [ 1224.829492][T26308] kernel_misc_reclaimable:0 [ 1224.829492][T26308] free:69699 free_pcp:0 free_cma:0 [ 1224.851169][T26308] Node 0 active_anon:304kB inactive_anon:532kB active_file:0kB inactive_file:6524kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8816kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7664kB pagetables:1080kB sec_pagetables:1160kB all_unreclaimable? no Balloon:0kB [ 1224.864580][T26308] Node 0 DMA free:2764kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1224.877634][T26308] lowmem_reserve[]: 0 288 288 288 288 [ 1224.880132][T26308] Node 0 DMA: 64*4kB (U) 20*8kB (U) 11*16kB (U) 14*32kB (U) 3*64kB (U) 0*128kB 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2768kB [ 1224.885988][T26308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1224.890246][T26308] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1224.894304][T26308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1224.898731][T26308] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1224.901757][T26308] 5094 total pagecache pages [ 1224.903278][T26308] 515 pages in swap cache [ 1224.906155][T26308] Free swap = 105400kB [ 1224.907811][T26308] Total swap = 124996kB [ 1224.909536][T26308] 524155 pages RAM [ 1224.911345][T26308] 0 pages HighMem/MovableOnly [ 1224.913296][T26308] 209476 pages reserved [ 1224.915963][T26308] 0 pages cma reserved [ 1225.508526][T26325] nbd_handle_cmd: 2 callbacks suppressed [ 1225.508553][T26325] block nbd2: Attempted send on invalid socket [ 1225.512969][T26325] blk_print_req_error: 2 callbacks suppressed [ 1225.512980][T26325] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1225.519792][T26325] block nbd2: Attempted send on invalid socket [ 1225.522566][T26325] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1225.526567][T26325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1225.530422][T26325] block nbd2: Attempted send on invalid socket [ 1225.532640][T26325] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1225.535822][T26325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1225.541268][T26325] block nbd2: Attempted send on invalid socket [ 1225.544233][T26325] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1225.552570][T26325] block nbd2: Attempted send on invalid socket [ 1225.554812][T26325] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1225.558152][T26325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1225.566042][T26325] block nbd2: Attempted send on invalid socket [ 1225.568385][T26325] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1225.571668][T26325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1225.576155][T26325] block nbd2: Attempted send on invalid socket [ 1225.578291][T26325] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1225.582581][T26325] block nbd2: Attempted send on invalid socket [ 1225.585529][T26325] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1225.590372][T26325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1225.596175][T26325] block nbd2: Attempted send on invalid socket [ 1225.600666][T26325] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1225.605673][T26325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1225.610286][T26325] block nbd2: Attempted send on invalid socket [ 1225.613520][T26325] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1225.618499][T26325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1225.622310][T26325] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1225.626448][T26325] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1226.702112][T26342] input: syz1 as /devices/virtual/input/input151 [ 1229.794527][T26397] binder: 26395:26397 ioctl c0306201 80000080 returned -14 [ 1230.405448][T26418] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1230.410785][T26418] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1231.222239][T26435] fuse: Invalid rootmode [ 1231.954043][T26447] netlink: 'syz.1.5950': attribute type 1 has an invalid length. [ 1232.830250][T26473] futex_wake_op: syz.5.5958 tries to shift op by 32; fix this program [ 1233.059470][T26476] input: syz1 as /devices/virtual/input/input152 [ 1233.076755][T20007] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1233.196098][T26482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5962'. [ 1233.239942][T20007] usb 10-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1233.244632][T20007] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.251509][T20007] usb 10-1: config 0 descriptor?? [ 1233.692047][T26492] fuse: Invalid rootmode [ 1233.718532][T20007] hid_parser_main: 5 callbacks suppressed [ 1233.718551][T20007] waltop 0003:172F:0037.0014: unknown main item tag 0x0 [ 1233.723954][T20007] waltop 0003:172F:0037.0014: unknown main item tag 0x0 [ 1233.727774][T20007] waltop 0003:172F:0037.0014: unknown main item tag 0x0 [ 1233.729492][ T5973] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 1233.730713][T20007] waltop 0003:172F:0037.0014: unknown main item tag 0x0 [ 1233.730744][T20007] waltop 0003:172F:0037.0014: unknown main item tag 0x0 [ 1233.743880][T20007] waltop 0003:172F:0037.0014: hidraw1: USB HID v1.01 Device [HID 172f:0037] on usb-dummy_hcd.5-1/input0 [ 1234.728350][T26510] ptrace attach of "/syz-executor exec"[23311] was attempted by "/syz-executor exec"[26510] [ 1235.225854][T26516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5974'. [ 1235.563778][T26520] fuse: Unknown parameter '00000000000000000000' [ 1235.749494][ T10] usb 10-1: USB disconnect, device number 6 [ 1236.805337][T13889] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1236.976380][T13889] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1236.982094][T13889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1236.985860][T13889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1236.990663][T13889] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1236.993613][T13889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.997248][T13889] usb 6-1: Product: syz [ 1236.998718][T13889] usb 6-1: Manufacturer: syz [ 1237.000278][T13889] usb 6-1: SerialNumber: syz [ 1237.003319][T13889] usb 6-1: config 0 descriptor?? [ 1237.214107][T13889] powermate: unknown product id 0240 [ 1237.216526][T13889] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 1237.220052][T13889] powermate 6-1:0.0: probe with driver powermate failed with error -5 [ 1237.224742][T13889] usb 6-1: USB disconnect, device number 100 [ 1237.690139][T26547] fuse: Unknown parameter '00000000000000000000' [ 1238.277136][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.219694][T26680] ptrace attach of "/syz-executor exec"[23311] was attempted by "/syz-executor exec"[26680] [ 1243.474052][T26684] overlayfs: failed to resolve './file0': -2 [ 1245.002018][T26723] ptrace attach of "/syz-executor exec"[24451] was attempted by "/syz-executor exec"[26723] [ 1245.402179][T26730] ptrace attach of "/syz-executor exec"[23311] was attempted by "/syz-executor exec"[26730] [ 1245.624715][T26734] overlayfs: failed to resolve './file1': -2 [ 1245.822138][T26749] wg2 speed is unknown, defaulting to 1000 [ 1245.824188][T26749] wg2 speed is unknown, defaulting to 1000 [ 1245.829515][T26749] wg2 speed is unknown, defaulting to 1000 [ 1245.842247][T26749] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1245.863101][T26749] wg2 speed is unknown, defaulting to 1000 [ 1245.869414][T26749] wg2 speed is unknown, defaulting to 1000 [ 1245.873184][T26749] wg2 speed is unknown, defaulting to 1000 [ 1245.876155][T26749] wg2 speed is unknown, defaulting to 1000 [ 1245.885881][T26749] wg2 speed is unknown, defaulting to 1000 [ 1245.897478][T26749] wg2 speed is unknown, defaulting to 1000 [ 1246.361440][T26766] fuse: Unknown parameter 'user_id00000000000000000000' [ 1248.119257][ T5973] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 1248.532673][T17724] erspan0: left allmulticast mode [ 1248.535471][T17724] erspan0: left promiscuous mode [ 1248.537471][T17724] bridge0: port 3(erspan0) entered disabled state [ 1248.541160][T17724] bridge_slave_1: left allmulticast mode [ 1248.543064][T17724] bridge_slave_1: left promiscuous mode [ 1248.545202][T17724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.562199][T17724] bridge_slave_0: left allmulticast mode [ 1248.565625][T17724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.240316][T17724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.249057][T17724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.255763][T17724] bond0 (unregistering): (slave team0): Releasing backup interface [ 1249.260782][T17724] bond0 (unregistering): Released all slaves [ 1249.384067][T17724] bond1 (unregistering): (slave veth3): Releasing active interface [ 1249.391477][T17724] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1249.399211][T17724] bond1 (unregistering): Released all slaves [ 1249.553253][T17724] bond2 (unregistering): (slave veth5): Releasing active interface [ 1249.558836][T17724] bond2 (unregistering): Released all slaves [ 1249.629945][T26850] syz.2.6091: page allocation failure: order:9, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1249.637918][T26850] CPU: 1 UID: 0 PID: 26850 Comm: syz.2.6091 Not tainted syzkaller #0 PREEMPT(full) [ 1249.637937][T26850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1249.637945][T26850] Call Trace: [ 1249.637951][T26850] [ 1249.637956][T26850] dump_stack_lvl+0x16c/0x1f0 [ 1249.637985][T26850] warn_alloc+0x248/0x3a0 [ 1249.638002][T26850] ? __pfx_warn_alloc+0x10/0x10 [ 1249.638017][T26850] ? psi_memstall_leave+0x1e6/0x2d0 [ 1249.638033][T26850] ? __alloc_pages_direct_compact+0x466/0x580 [ 1249.638049][T26850] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 1249.638062][T26850] ? psi_memstall_leave+0x1e1/0x2d0 [ 1249.638076][T26850] ? psi_memstall_leave+0x1e6/0x2d0 [ 1249.638093][T26850] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 1249.638117][T26850] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1249.638141][T26850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1249.638159][T26850] ? policy_nodemask+0xea/0x4e0 [ 1249.638175][T26850] alloc_pages_mpol+0x1fb/0x550 [ 1249.638192][T26850] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1249.638211][T26850] ? rds_info_getsockopt+0x377/0x4f0 [ 1249.638227][T26850] ___kmalloc_large_node+0xed/0x160 [ 1249.638246][T26850] ? rds_info_getsockopt+0x377/0x4f0 [ 1249.638273][T26850] __kmalloc_large_node_noprof+0x1c/0x70 [ 1249.638290][T26850] ? __might_fault+0xe3/0x190 [ 1249.638305][T26850] __kmalloc_noprof.cold+0xc/0x61 [ 1249.638325][T26850] rds_info_getsockopt+0x377/0x4f0 [ 1249.638340][T26850] ? irqentry_exit+0x3b/0x90 [ 1249.638357][T26850] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1249.638372][T26850] ? __pfx_rds_getsockopt+0x10/0x10 [ 1249.638393][T26850] ? rds_getsockopt+0x79/0x2d0 [ 1249.638411][T26850] rds_getsockopt+0x173/0x2d0 [ 1249.638430][T26850] ? __pfx_rds_getsockopt+0x10/0x10 [ 1249.638447][T26850] do_sock_getsockopt+0x34a/0x440 [ 1249.638467][T26850] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1249.638484][T26850] ? __fget_files+0x204/0x3c0 [ 1249.638504][T26850] __sys_getsockopt+0x123/0x1b0 [ 1249.638523][T26850] __ia32_sys_getsockopt+0xbc/0x160 [ 1249.638537][T26850] ? lockdep_hardirqs_on+0x7c/0x110 [ 1249.638552][T26850] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1249.638568][T26850] __do_fast_syscall_32+0x7c/0x3a0 [ 1249.638585][T26850] do_fast_syscall_32+0x32/0x80 [ 1249.638601][T26850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1249.638616][T26850] RIP: 0023:0xf7fd3579 [ 1249.638626][T26850] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1249.638638][T26850] RSP: 002b:00000000f54d555c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 1249.638650][T26850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000114 [ 1249.638657][T26850] RDX: 0000000000002710 RSI: 0000000080c35fff RDI: 0000000080000000 [ 1249.638665][T26850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1249.638671][T26850] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1249.638679][T26850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1249.638693][T26850] [ 1249.638712][T26850] Mem-Info: [ 1249.739466][T26850] active_anon:2818 inactive_anon:2666 isolated_anon:0 [ 1249.739466][T26850] active_file:726 inactive_file:1592 isolated_file:0 [ 1249.739466][T26850] unevictable:1768 dirty:242 writeback:0 [ 1249.739466][T26850] slab_reclaimable:6401 slab_unreclaimable:65383 [ 1249.739466][T26850] mapped:27074 shmem:5818 pagetables:1223 [ 1249.739466][T26850] sec_pagetables:340 bounce:0 [ 1249.739466][T26850] kernel_misc_reclaimable:0 [ 1249.739466][T26850] free:66841 free_pcp:2375 free_cma:0 [ 1249.754686][T26850] Node 0 active_anon:2336kB inactive_anon:12kB active_file:2432kB inactive_file:16kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8532kB dirty:324kB writeback:0kB shmem:5436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7664kB pagetables:1080kB sec_pagetables:1164kB all_unreclaimable? yes Balloon:0kB [ 1249.765052][T26850] Node 1 active_anon:8936kB inactive_anon:10652kB active_file:472kB inactive_file:6352kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99764kB dirty:644kB writeback:0kB shmem:17836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5912kB pagetables:3812kB sec_pagetables:196kB all_unreclaimable? no Balloon:0kB [ 1249.775500][T26850] Node 0 DMA free:2632kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1249.785233][T26850] lowmem_reserve[]: 0 288 288 288 288 [ 1249.787289][T26850] Node 0 DMA32 free:15524kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:2336kB inactive_anon:8kB active_file:2428kB inactive_file:16kB unevictable:3536kB writepending:324kB present:1032196kB managed:295136kB mlocked:0kB bounce:0kB free_pcp:2060kB local_pcp:0kB free_cma:0kB [ 1249.797180][T26850] lowmem_reserve[]: 0 0 0 0 0 [ 1249.799309][T26850] Node 1 DMA32 free:249208kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8936kB inactive_anon:10652kB active_file:472kB inactive_file:6352kB unevictable:3536kB writepending:644kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:7440kB local_pcp:0kB free_cma:0kB [ 1249.812637][T26850] lowmem_reserve[]: 0 0 0 0 0 [ 1249.815661][T26850] Node 0 DMA: 64*4kB (UM) 19*8kB (UM) 11*16kB (UM) 10*32kB (UM) 3*64kB (M) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2632kB [ 1249.820807][T26850] Node 0 DMA32: 40*4kB (UME) 17*8kB (UME) 28*16kB (UME) 78*32kB (UME) 65*64kB (UM) 39*128kB (UM) 12*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 15464kB [ 1249.827501][T26850] Node 1 DMA32: 76*4kB (UME) 498*8kB (UE) 271*16kB (UE) 289*32kB (UME) 76*64kB (UE) 103*128kB (UME) 267*256kB (UME) 159*512kB (UM) 62*1024kB (UM) 0*2048kB 0*4096kB = 249168kB [ 1249.835411][T26850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1249.839579][T26850] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1249.842615][T26850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1249.845947][T26850] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1249.849094][T26850] 8793 total pagecache pages [ 1249.850644][T26850] 666 pages in swap cache [ 1249.852401][T26850] Free swap = 105452kB [ 1249.852933][T17724] bond3 (unregistering): (slave veth7): Releasing active interface [ 1249.853900][T26850] Total swap = 124996kB [ 1249.853912][T26850] 524155 pages RAM [ 1249.859835][T26850] 0 pages HighMem/MovableOnly [ 1249.861451][T26850] 209476 pages reserved [ 1249.862459][T17724] bond3 (unregistering): Released all slaves [ 1249.863230][T26850] 0 pages cma reserved [ 1250.002485][T17724] bond4 (unregistering): Released all slaves [ 1250.161870][T17724] bond5 (unregistering): (slave veth11): Releasing active interface [ 1250.167641][T17724] bond5 (unregistering): Released all slaves [ 1250.359209][T17724] tipc: Left network mode [ 1250.597338][ T5334] Bluetooth: hci1: command 0x0406 tx timeout [ 1250.809663][T17724] hsr_slave_0: left promiscuous mode [ 1250.812236][T17724] hsr_slave_1: left promiscuous mode [ 1250.818059][T17724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1250.821813][T17724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.829750][T17724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1250.832752][T17724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.870945][T17724] veth1_macvtap: left promiscuous mode [ 1250.872747][T17724] veth0_macvtap: left promiscuous mode [ 1250.874521][T17724] veth1_vlan: left promiscuous mode [ 1250.877644][T17724] veth0_vlan: left promiscuous mode [ 1252.199007][ T5973] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1252.203600][ T5973] Bluetooth: hci1: Injecting HCI hardware error event [ 1252.208665][ T5334] Bluetooth: hci1: hardware error 0x00 [ 1252.271754][ T93] Bluetooth: (null): Invalid header checksum [ 1252.279608][ T46] Bluetooth: (null): Invalid header checksum [ 1252.384438][ T93] Bluetooth: (null): Invalid header checksum [ 1252.485779][ T1141] Bluetooth: (null): Invalid header checksum [ 1253.138918][T17724] team0 (unregistering): Port device team_slave_1 removed [ 1253.262798][T17724] team0 (unregistering): Port device team_slave_0 removed [ 1254.275598][ T5334] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1254.525250][T21387] usb 7-1: new full-speed USB device number 104 using dummy_hcd [ 1254.662373][T17724] IPVS: stop unused estimator thread 0... [ 1254.697219][T21387] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1254.701769][T21387] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1254.711385][T21387] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1254.726507][T21387] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.941495][T21387] usb 7-1: usb_control_msg returned -32 [ 1254.943913][T21387] usbtmc 7-1:16.0: can't read capabilities [ 1254.953795][T21387] usb 7-1: USB disconnect, device number 104 [ 1255.972980][T26935] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6117'. [ 1256.192003][T26945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6119'. [ 1257.306346][T26975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1257.625754][T26982] 9pnet_fd: Insufficient options for proto=fd [ 1259.422104][T27007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6133'. [ 1259.850929][T27021] trusted_key: encrypted_key: keylen parameter is missing [ 1259.889958][T27021] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1261.177679][T27046] fuse: Unknown parameter 'fd0x0000000000000003' [ 1261.521762][ T5334] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1261.526806][ T5334] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 1265.945515][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1266.105101][ T24] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1266.115432][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 1266.119685][ T10] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1266.123870][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1266.127482][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1266.130781][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1266.136266][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1266.140699][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.256719][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1266.259546][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.262790][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1266.266182][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1266.271740][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1266.274638][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1266.277740][ T24] usb 7-1: Product: syz [ 1266.279098][ T24] usb 7-1: Manufacturer: syz [ 1266.282740][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 1266.284432][ T24] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1266.354532][ T10] usb 10-1: GET_CAPABILITIES returned 0 [ 1266.358291][ T10] usbtmc 10-1:16.0: can't read capabilities [ 1266.506878][ T24] usb 7-1: USB disconnect, device number 105 [ 1266.556854][T20007] usb 10-1: USB disconnect, device number 7 [ 1266.965083][T21387] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1267.137806][T21387] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.143183][T21387] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.147657][T21387] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1267.153123][T21387] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1267.157516][T21387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.163008][T21387] usb 6-1: config 0 descriptor?? [ 1267.215479][T27163] blktrace: Concurrent blktraces are not allowed on sg0 [ 1267.221559][T27164] ptrace attach of "/syz-executor exec"[22649] was attempted by "/syz-executor exec"[27164] [ 1267.252826][T27165] input: syz1 as /devices/virtual/input/input156 [ 1267.597453][T21387] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1267.967476][T27170] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 1268.372588][T27179] nbd_handle_cmd: 2 callbacks suppressed [ 1268.372604][T27179] block nbd2: Attempted send on invalid socket [ 1268.379299][T27179] blk_print_req_error: 2 callbacks suppressed [ 1268.379922][T27179] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1268.386649][T27179] hfsplus: unable to find HFS+ superblock [ 1269.184571][T27191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6194'. [ 1269.391673][T27199] ptrace attach of "/syz-executor exec"[22649] was attempted by "/syz-executor exec"[27199] [ 1269.589845][T27202] input: syz1 as /devices/virtual/input/input157 [ 1269.699757][ T29] usb 6-1: USB disconnect, device number 101 [ 1270.265120][ T6056] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1270.425100][ T6056] usb 10-1: Using ep0 maxpacket: 8 [ 1270.447347][ T6056] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1270.451320][ T6056] usb 10-1: config 0 has no interface number 0 [ 1270.454456][ T6056] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1270.459276][ T6056] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1270.465095][ T6056] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1270.469794][ T6056] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1270.476074][ T6056] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1270.479951][ T6056] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.489752][ T6056] usb 10-1: config 0 descriptor?? [ 1270.494218][ T6056] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1270.708456][T20007] usb 10-1: USB disconnect, device number 8 [ 1270.714030][T20007] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1270.935118][ T6056] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1271.095094][ T6056] usb 6-1: Using ep0 maxpacket: 16 [ 1271.099698][ T6056] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 1271.103459][ T6056] usb 6-1: config 0 has no interface number 0 [ 1271.108733][ T6056] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1271.113348][ T6056] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.119006][ T6056] usb 6-1: Product: syz [ 1271.120949][ T6056] usb 6-1: Manufacturer: syz [ 1271.123281][ T6056] usb 6-1: SerialNumber: syz [ 1271.127556][ T6056] usb 6-1: config 0 descriptor?? [ 1271.131956][ T6056] hub 6-1:0.145: bad descriptor, ignoring hub [ 1271.134492][ T6056] hub 6-1:0.145: probe with driver hub failed with error -5 [ 1271.140597][ T6056] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.145/input/input158 [ 1271.384555][T27225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6206'. [ 1272.058847][T27234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6209'. [ 1272.082595][T27234] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1272.088574][T27234] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6209'. [ 1272.155542][T15770] usb 6-1: USB disconnect, device number 102 [ 1272.366187][T13889] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1272.546776][T13889] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1272.550101][T13889] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.553746][T13889] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1272.557030][T13889] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1272.563484][T13889] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1272.913151][T13889] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1272.916669][T13889] usb 10-1: Product: syz [ 1272.918642][T13889] usb 10-1: Manufacturer: syz [ 1272.925674][T13889] cdc_wdm 10-1:1.0: skipping garbage [ 1272.927963][T13889] cdc_wdm 10-1:1.0: skipping garbage [ 1272.930181][T13889] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1272.983465][T27267] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1273.149347][ T6056] usb 10-1: USB disconnect, device number 9 [ 1273.474480][ T5334] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1273.477952][ T5334] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 1273.767925][T27286] nfs: Deprecated parameter 'nointr' [ 1273.773011][T27286] ntfs3(loop5): try to read out of volume at offset 0x0 [ 1275.599777][T27321] trusted_key: syz.1.6238 sent an empty control message without MSG_MORE. [ 1275.921941][T27339] tipc: Cannot configure node identity twice [ 1277.014869][T27370] No source specified [ 1277.025189][T27370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6254'. [ 1277.101351][T27371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6252'. [ 1277.181420][T27374] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6252'. [ 1277.184309][T27374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6252'. [ 1277.208028][T27374] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6252'. [ 1277.212102][T27374] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6252'. [ 1277.219246][T27374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6252'. [ 1277.555210][ T5334] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1277.560006][ T5334] Bluetooth: hci2: Injecting HCI hardware error event [ 1277.567135][ T5973] Bluetooth: hci2: hardware error 0x00 [ 1277.605791][T27381] overlayfs: missing 'lowerdir' [ 1278.976947][ T10] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1279.137320][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1279.140038][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.143144][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1279.147498][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1279.152675][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1279.156292][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1279.159203][ T10] usb 6-1: Product: syz [ 1279.160527][ T10] usb 6-1: Manufacturer: syz [ 1279.164309][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 1279.166462][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 1279.168144][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 1279.169836][ T10] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1279.383303][ T6056] usb 6-1: USB disconnect, device number 103 [ 1279.635711][ T5973] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1279.922576][T27430] loop2: detected capacity change from 0 to 7 [ 1279.931058][T27430] Dev loop2: unable to read RDB block 7 [ 1279.933419][T27430] loop2: unable to read partition table [ 1279.935932][T27430] loop2: partition table beyond EOD, truncated [ 1279.938536][T27430] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1281.828402][T27447] ptrace attach of "/syz-executor exec"[24451] was attempted by "/syz-executor exec"[27447] [ 1282.771816][T27464] openvswitch: netlink: ct_state flags 00020009 unsupported [ 1283.045093][ T6060] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1283.195049][ T6060] usb 7-1: Using ep0 maxpacket: 8 [ 1283.198318][ T6060] usb 7-1: config index 0 descriptor too short (expected 26, got 10) [ 1283.200980][ T6060] usb 7-1: config 5 descriptor has 1 excess byte, ignoring [ 1283.203377][ T6060] usb 7-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1283.209722][ T6060] usb 7-1: New USB device found, idVendor=0403, idProduct=e0f0, bcdDevice=d5.e2 [ 1283.213296][ T6060] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.216523][ T6060] usb 7-1: Product: syz [ 1283.218065][ T6060] usb 7-1: Manufacturer: syz [ 1283.219629][ T6060] usb 7-1: SerialNumber: syz [ 1283.425815][ T6056] usb 7-1: USB disconnect, device number 106 [ 1284.079671][T27482] overlayfs: missing 'lowerdir' [ 1284.177444][T27492] overlayfs: missing 'lowerdir' [ 1284.659657][T27512] overlayfs: missing 'workdir' [ 1285.781703][T27537] ptrace attach of "/syz-executor exec"[24451] was attempted by "/syz-executor exec"[27537] [ 1285.890685][T27540] ipvlan2: left promiscuous mode [ 1285.893198][T20007] wg2 speed is unknown, defaulting to 1000 [ 1286.345114][T15770] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1286.595128][T15770] usb 10-1: Using ep0 maxpacket: 32 [ 1286.617346][T15770] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1286.621512][T15770] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1286.624776][T15770] usb 10-1: can't read configurations, error -71 [ 1287.438163][T27578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6325'. [ 1288.156363][T27592] input: syz1 as /devices/virtual/input/input159 [ 1290.210353][T27626] ptrace attach of "/syz-executor exec"[23311] was attempted by "/syz-executor exec"[27626] [ 1291.617173][T27654] ptrace attach of "/syz-executor exec"[24451] was attempted by "/syz-executor exec"[27654] [ 1292.570269][T27679] netlink: 'syz.2.6359': attribute type 15 has an invalid length. [ 1292.573249][T27679] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6359'. [ 1293.726710][T27701] tipc: Enabled bearer , priority 0 [ 1293.729892][T27701] syzkaller0: entered promiscuous mode [ 1293.731903][T27701] syzkaller0: entered allmulticast mode [ 1293.739701][T27701] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1293.758338][T27701] tipc: Resetting bearer [ 1293.766189][T27700] tipc: Resetting bearer [ 1293.779857][T27700] tipc: Disabling bearer [ 1294.596089][ T5334] Bluetooth: hci3: sending frame failed (-49) [ 1294.601702][ T5973] Bluetooth: hci3: Entering manufacturer mode failed (-49) [ 1294.680447][T27713] sp0: Synchronizing with TNC [ 1296.678704][T27752] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:328x2160 (0x33424752, 8, 0, 0, 0) [ 1297.145122][T15770] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1297.296897][T15770] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.300698][T15770] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.303861][T15770] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1297.308560][T15770] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1297.311784][T15770] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.317262][T15770] usb 10-1: config 0 descriptor?? [ 1297.435080][ T29] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1297.585127][ T29] usb 6-1: device descriptor read/64, error -71 [ 1297.743149][T15770] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1297.825074][ T29] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 1297.955115][ T29] usb 6-1: device descriptor read/64, error -71 [ 1297.996183][T27757] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1298.075025][ T29] usb usb6-port1: attempt power cycle [ 1298.475108][ T29] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 1298.505857][ T29] usb 6-1: device descriptor read/8, error -71 [ 1298.755304][ T29] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 1298.775758][ T29] usb 6-1: device descriptor read/8, error -71 [ 1298.895480][ T29] usb usb6-port1: unable to enumerate USB device [ 1299.465510][ T24] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1299.617037][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1299.619787][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.622962][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1299.626215][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1299.630691][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1299.633866][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1299.636920][ T24] usb 7-1: Product: syz [ 1299.638267][ T24] usb 7-1: Manufacturer: syz [ 1299.641996][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 1299.643702][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 1299.646054][ T24] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1299.716776][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.737298][ T6038] usb 10-1: USB disconnect, device number 12 [ 1299.851492][ T10] usb 7-1: USB disconnect, device number 107 [ 1299.867502][T27792] block device autoloading is deprecated and will be removed. [ 1300.732955][T27808] netlink: 'syz.5.6402': attribute type 1 has an invalid length. [ 1300.736985][T27808] netlink: 'syz.5.6402': attribute type 4 has an invalid length. [ 1300.739872][T27808] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6402'. [ 1300.743946][T27808] netlink: 'syz.5.6402': attribute type 1 has an invalid length. [ 1300.747110][T27808] netlink: 'syz.5.6402': attribute type 4 has an invalid length. [ 1300.750128][T27808] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6402'. [ 1301.115090][T13889] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1301.266969][T13889] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1301.270043][T13889] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.273257][T13889] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1301.276275][T13889] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.281023][T13889] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1301.284335][T13889] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1301.287835][T13889] usb 10-1: Product: syz [ 1301.289605][T13889] usb 10-1: Manufacturer: syz [ 1301.293354][T13889] cdc_wdm 10-1:1.0: skipping garbage [ 1301.295097][T13889] cdc_wdm 10-1:1.0: skipping garbage [ 1301.296832][T13889] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1301.518103][ T24] usb 10-1: USB disconnect, device number 13 [ 1304.163870][T27886] ptrace attach of "/syz-executor exec"[22406] was attempted by "/syz-executor exec"[27886] [ 1304.193481][T27887] fuse: Bad value for 'fd' [ 1304.490175][T27896] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:328x2160 (0x33424752, 8, 0, 0, 0) [ 1305.215064][ T29] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1305.355157][ T29] usb 10-1: device descriptor read/64, error -71 [ 1305.615151][ T29] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1305.755053][ T29] usb 10-1: device descriptor read/64, error -71 [ 1305.865318][ T29] usb usb10-port1: attempt power cycle [ 1306.215106][ T29] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1306.235734][ T29] usb 10-1: device descriptor read/8, error -71 [ 1306.475109][ T29] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1306.496987][ T29] usb 10-1: device descriptor read/8, error -71 [ 1306.608627][ T29] usb usb10-port1: unable to enumerate USB device [ 1306.759178][T27930] input: syz1 as /devices/virtual/input/input163 [ 1308.026493][T27939] tipc: Enabled bearer , priority 0 [ 1308.030498][T27939] syzkaller0: entered promiscuous mode [ 1308.033094][T27939] syzkaller0: entered allmulticast mode [ 1308.040913][T27939] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1308.058764][T27939] tipc: Resetting bearer [ 1308.063106][T27938] tipc: Resetting bearer [ 1308.076122][T27938] tipc: Disabling bearer [ 1308.153708][T27943] ptrace attach of "/syz-executor exec"[22406] was attempted by "/syz-executor exec"[27943] [ 1308.675144][T15770] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1308.792937][T27951] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1308.847239][T15770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.850902][T15770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.854131][T15770] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1308.858507][T15770] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1308.861460][T15770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.866102][T15770] usb 6-1: config 0 descriptor?? [ 1309.295684][T15770] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1310.446755][T27971] loop2: detected capacity change from 0 to 6 [ 1310.449706][T27971] Dev loop2: unable to read RDB block 6 [ 1310.451666][T27971] loop2: AHDI p1 [ 1310.452924][T27971] loop2: partition table partially beyond EOD, truncated [ 1311.349100][ T8822] usb 6-1: USB disconnect, device number 108 [ 1311.465730][T27993] tipc: Enabled bearer , priority 0 [ 1311.469680][T27993] syzkaller0: entered promiscuous mode [ 1311.471986][T27993] syzkaller0: entered allmulticast mode [ 1311.478274][T27993] tipc: Resetting bearer [ 1311.482438][T27992] tipc: Resetting bearer [ 1311.497463][T27992] tipc: Disabling bearer [ 1312.027409][ T8822] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1312.187003][ T8822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.191562][ T8822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.195828][ T8822] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1312.201155][ T8822] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1312.205534][ T8822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.215378][ T8822] usb 6-1: config 0 descriptor?? [ 1312.452975][T15770] lo speed is unknown, defaulting to 1000 [ 1312.458096][T13889] vxcan1 speed is unknown, defaulting to 1000 [ 1312.462043][T15770] 3yz0: Port: 1 Link DOWN [ 1312.466028][T13889] syz2: Port: 1 Link DOWN [ 1312.466404][T28009] : entered promiscuous mode [ 1312.472415][T17724] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.481451][T13889] vxcan1 speed is unknown, defaulting to 1000 [ 1312.484407][T17724] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.488702][T17724] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.492384][T17724] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.638948][ T8822] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1313.429119][T28028] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1313.432036][T28028] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1313.435693][T28028] vhci_hcd vhci_hcd.0: Device attached [ 1313.490256][T28029] vhci_hcd: connection closed [ 1313.490559][T17724] vhci_hcd: stop threads [ 1313.494493][T17724] vhci_hcd: release socket [ 1313.499080][T17724] vhci_hcd: disconnect device [ 1314.535396][T28051] lo speed is unknown, defaulting to 1000 [ 1314.537935][T28051] vxcan1 speed is unknown, defaulting to 1000 [ 1314.655528][T28051] wg2 speed is unknown, defaulting to 1000 [ 1314.677365][T13889] usb 6-1: USB disconnect, device number 109 [ 1316.425485][ T29] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1316.584324][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.594249][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1316.598914][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1316.604525][ T29] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1316.607923][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.612008][ T29] usb 10-1: config 0 descriptor?? [ 1316.807950][T28091] netlink: 'syz.3.6500': attribute type 1 has an invalid length. [ 1316.811468][T28091] netlink: 'syz.3.6500': attribute type 4 has an invalid length. [ 1316.814748][T28091] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6500'. [ 1316.870083][T28093] tipc: Enabled bearer , priority 0 [ 1316.876998][T28093] syzkaller0: entered promiscuous mode [ 1316.879490][T28093] syzkaller0: entered allmulticast mode [ 1316.888631][T28093] tipc: Resetting bearer [ 1316.904334][T28092] tipc: Resetting bearer [ 1316.917306][T28092] tipc: Disabling bearer [ 1317.029659][ T29] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1317.285704][T28074] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1317.976348][ T8822] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1317.986395][ T8822] hid-generic 0000:0000:0000.001A: hidraw2: HID v0.00 Device [syz1] on syz0 [ 1319.265886][ T10] usb 10-1: USB disconnect, device number 18 [ 1320.480403][T28172] fuse: Bad value for 'fd' [ 1320.542165][T28173] trusted_key: encrypted_key: insufficient parameters specified [ 1320.855061][ T8822] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1321.005141][ T8822] usb 7-1: Using ep0 maxpacket: 16 [ 1321.015774][ T8822] usb 7-1: config 0 has an invalid interface number: 10 but max is 0 [ 1321.019247][ T8822] usb 7-1: config 0 has no interface number 0 [ 1321.021813][ T8822] usb 7-1: config 0 interface 10 has no altsetting 0 [ 1321.036459][ T8822] usb 7-1: New USB device found, idVendor=1199, idProduct=9063, bcdDevice= b.d6 [ 1321.040292][ T8822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.043636][ T8822] usb 7-1: Product: syz [ 1321.045615][ T8822] usb 7-1: Manufacturer: syz [ 1321.047145][ T8822] usb 7-1: SerialNumber: syz [ 1321.050862][ T8822] usb 7-1: config 0 descriptor?? [ 1321.057192][ T8822] qmi_wwan 7-1:0.10: probe with driver qmi_wwan failed with error -22 [ 1321.259557][ T29] usb 7-1: USB disconnect, device number 108 [ 1322.012726][T28208] input: syz1 as /devices/virtual/input/input164 [ 1322.627459][T28217] trusted_key: encrypted_key: insufficient parameters specified [ 1323.307780][T28238] batadv_slave_0: entered promiscuous mode [ 1323.521849][T28241] siw: device registration error -23 [ 1323.923758][T28249] tipc: Enabled bearer , priority 0 [ 1323.927082][T28249] syzkaller0: entered promiscuous mode [ 1323.929267][T28249] syzkaller0: entered allmulticast mode [ 1323.938954][T28249] tipc: Resetting bearer [ 1323.947024][T28248] tipc: Resetting bearer [ 1323.961947][T28248] tipc: Disabling bearer [ 1324.775836][ T6038] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 1324.927820][ T6038] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.931931][ T6038] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1324.938311][ T6038] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1324.942430][ T6038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.948604][ T6038] usbtmc 6-1:16.0: bulk endpoints not found [ 1327.571343][ T24] usb 6-1: USB disconnect, device number 110 [ 1328.265656][ T24] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1328.415407][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1328.418637][ T24] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1328.421617][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.427534][ T24] usb 7-1: config 0 descriptor?? [ 1328.565115][T13889] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1328.636067][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1328.654759][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1328.662480][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1328.666313][ T24] usb 7-1: media controller created [ 1328.727089][T13889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.731216][T13889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.733767][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1328.738759][T13889] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1328.744737][T13889] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1328.748313][T13889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.754799][T13889] usb 10-1: config 0 descriptor?? [ 1328.838870][ T24] az6027: usb out operation failed. (-71) [ 1328.841971][ T24] az6027: usb out operation failed. (-71) [ 1328.844476][ T24] stb0899_attach: Driver disabled by Kconfig [ 1328.847792][ T24] az6027: no front-end attached [ 1328.847792][ T24] [ 1328.851644][ T24] az6027: usb out operation failed. (-71) [ 1328.854314][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1328.864171][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input165 [ 1328.878606][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 1328.881737][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1328.890088][ T24] usb 7-1: USB disconnect, device number 109 [ 1328.980953][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1329.190233][T13889] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1329.703013][T28365] fuse: Unknown parameter '0x0000000000000003' [ 1329.865748][ T24] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1330.331934][ T24] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1330.341357][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.345008][ T24] usb 7-1: Product: syz [ 1330.346721][ T24] usb 7-1: Manufacturer: syz [ 1330.349442][ T24] usb 7-1: SerialNumber: syz [ 1330.353876][ T24] usb 7-1: config 0 descriptor?? [ 1331.267885][T15770] usb 10-1: USB disconnect, device number 19 [ 1332.252451][T28417] fuse: Bad value for 'fd' [ 1332.665242][T12789] usb 7-1: USB disconnect, device number 110 [ 1332.697555][T28435] trusted_key: encrypted_key: key user:syz not found [ 1332.941803][T28443] netlink: 'syz.2.6617': attribute type 1 has an invalid length. [ 1332.954997][T28443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6617'. [ 1333.617746][T28452] fuse: Bad value for 'fd' [ 1334.028522][T15770] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1334.179107][T15770] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1334.182844][T15770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.186601][T15770] usb 7-1: Product: syz [ 1334.188377][T15770] usb 7-1: Manufacturer: syz [ 1334.189925][T15770] usb 7-1: SerialNumber: syz [ 1334.194541][T15770] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1334.235408][T15770] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1334.335060][T12789] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1334.536495][T12789] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1334.541156][T12789] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1334.545514][T12789] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1334.549597][T12789] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.556579][T28469] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1334.561330][T12789] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1334.750168][ T10] usb 7-1: USB disconnect, device number 111 [ 1334.754630][ C3] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1334.774546][ T60] usb 10-1: USB disconnect, device number 20 [ 1335.328049][T15770] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1335.339039][T15770] ath9k_htc: Failed to initialize the device [ 1335.345632][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 1338.279224][T28556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6648'. [ 1338.834871][T28561] binder: BINDER_SET_CONTEXT_MGR already set [ 1338.837980][T28561] binder: 28560:28561 ioctl 4018620d 80000100 returned -16 [ 1338.846111][T28561] binder: BINDER_SET_CONTEXT_MGR already set [ 1338.848690][T28561] binder: 28560:28561 ioctl 4018620d 80004a80 returned -16 [ 1338.853391][T28561] binder: 28560:28561 ioctl 80047437 0 returned -22 [ 1339.913253][T28583] tipc: Enabled bearer , priority 0 [ 1339.916518][T28583] syzkaller0: entered promiscuous mode [ 1339.918544][T28583] syzkaller0: entered allmulticast mode [ 1339.924271][T28583] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1339.946540][T28581] tipc: Resetting bearer [ 1339.967343][T28581] tipc: Disabling bearer [ 1340.551727][T28587] syzkaller0: entered allmulticast mode [ 1340.688325][ T93] erspan0: left allmulticast mode [ 1340.691672][ T93] erspan0: left promiscuous mode [ 1340.694442][ T93] bridge0: port 3(erspan0) entered disabled state [ 1340.707892][ T93] bridge_slave_1: left allmulticast mode [ 1340.709721][ T93] bridge_slave_1: left promiscuous mode [ 1340.711851][ T93] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.717483][ T93] bridge_slave_0: left allmulticast mode [ 1340.719296][ T93] bridge_slave_0: left promiscuous mode [ 1340.721145][ T93] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.955261][T27786] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 1341.109099][T27786] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.114171][T27786] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1341.118917][T27786] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1341.124702][T27786] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1341.129256][T27786] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.139609][T27786] usbtmc 10-1:16.0: bulk endpoints not found [ 1341.231332][ T93] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.236562][ T93] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.241240][ T93] bond0 (unregistering): (slave team0): Releasing backup interface [ 1341.244381][ T93] bond0 (unregistering): Released all slaves [ 1341.415548][ T93] bond1 (unregistering): (slave veth3): Releasing active interface [ 1341.422019][ T93] bond1 (unregistering): Released all slaves [ 1341.595574][ T93] bond2 (unregistering): (slave veth5): Releasing active interface [ 1341.598771][ T93] vlan2: entered promiscuous mode [ 1341.602176][ T93] bond2 (unregistering): (slave vlan2): Releasing active interface [ 1341.606074][ T93] bond2 (unregistering): Released all slaves [ 1341.744559][ T93] bond3 (unregistering): (slave veth7): Releasing active interface [ 1341.749328][ T93] bond3 (unregistering): Released all slaves [ 1341.890922][ T93] bond4 (unregistering): (slave veth9): Releasing active interface [ 1341.896993][ T93] bond4 (unregistering): Released all slaves [ 1342.048886][ T93] bond5 (unregistering): (slave veth11): Releasing active interface [ 1342.052611][ T93] bond5 (unregistering): Released all slaves [ 1342.180727][ T93] : left promiscuous mode [ 1342.269587][ T93] tipc: Left network mode [ 1342.532010][ T93] hsr_slave_0: left promiscuous mode [ 1342.535216][ T93] hsr_slave_1: left promiscuous mode [ 1342.538192][ T93] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.542139][ T93] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.574495][ T93] pim6reg (unregistering): left allmulticast mode [ 1343.734482][ T60] usb 10-1: USB disconnect, device number 21 [ 1344.320723][ T93] team0 (unregistering): Port device team_slave_1 removed [ 1344.498772][ T93] team0 (unregistering): Port device team_slave_0 removed [ 1345.405583][ T93] team0 (unregistering): Port device dummy0 removed [ 1345.561839][T28614] tipc: Enabled bearer , priority 0 [ 1345.566850][T28615] syzkaller0: entered promiscuous mode [ 1345.569183][T28615] syzkaller0: entered allmulticast mode [ 1345.576913][T28611] tipc: Resetting bearer [ 1345.595507][T28611] tipc: Disabling bearer [ 1346.113281][ T93] IPVS: stop unused estimator thread 0... [ 1346.353549][T28660] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:328x2160 (0x33424752, 8, 0, 0, 0) [ 1346.550707][T28665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6681'. [ 1346.723214][T28670] /dev/nullb0: Can't open blockdev [ 1346.806255][T28674] new mount options do not match the existing superblock, will be ignored [ 1346.810658][T28674] option changes via remount are deprecated (pid=28666 comm=syz.1.6682) [ 1347.976415][T28703] binder: BINDER_SET_CONTEXT_MGR already set [ 1347.978993][T28703] binder: 28701:28703 ioctl 4018620d 800000c0 returned -16 [ 1347.989035][T28703] binder: BINDER_SET_CONTEXT_MGR already set [ 1347.991063][T28703] binder: 28701:28703 ioctl 4018620d 80000040 returned -16 [ 1348.035146][T28706] netlink: 'syz.5.6694': attribute type 1 has an invalid length. [ 1348.038529][T28706] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.6694'. [ 1348.551427][T28711] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:328x2160 (0x33424752, 8, 0, 0, 0) [ 1349.051947][T28723] tipc: Enabled bearer , priority 0 [ 1349.055782][T28723] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1349.060613][T28723] tipc: Resetting bearer [ 1349.079367][T28722] tipc: Disabling bearer [ 1349.650673][T28732] netlink: 'syz.3.6703': attribute type 1 has an invalid length. [ 1349.653243][T28732] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.6703'. [ 1349.674703][T28734] netlink: 'syz.1.6704': attribute type 4 has an invalid length. [ 1349.693433][T28734] netlink: 'syz.1.6704': attribute type 4 has an invalid length. [ 1350.589927][T28757] tipc: Enabling of bearer <™>h:s> rejected, media not registered [ 1351.223845][T28767] tipc: Enabled bearer , priority 0 [ 1351.228228][T28767] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1351.233814][T28767] tipc: Resetting bearer [ 1351.249590][T28766] tipc: Disabling bearer [ 1352.032275][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6718'. [ 1353.567897][T28804] syzkaller0: entered promiscuous mode [ 1353.570050][T28806] netlink: 'syz.2.6727': attribute type 1 has an invalid length. [ 1353.570254][T28804] syzkaller0: entered allmulticast mode [ 1353.572771][T28806] netlink: 16134 bytes leftover after parsing attributes in process `syz.2.6727'. [ 1353.581113][T28804] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1353.715217][T13889] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1353.866506][T13889] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1353.869258][T13889] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.872770][T13889] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1353.876775][T13889] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1353.881397][T13889] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1353.884379][T13889] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1353.887254][T13889] usb 10-1: Product: syz [ 1353.888620][T13889] usb 10-1: Manufacturer: syz [ 1353.892476][T13889] cdc_wdm 10-1:1.0: skipping garbage [ 1353.894542][T13889] cdc_wdm 10-1:1.0: skipping garbage [ 1353.897300][T13889] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1354.097404][T28819] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1354.101951][T28819] overlayfs: maximum fs stacking depth exceeded [ 1354.105902][T13889] usb 10-1: USB disconnect, device number 22 [ 1354.264138][T28829] netlink: 'syz.2.6737': attribute type 1 has an invalid length. [ 1354.267494][T28829] netlink: 16134 bytes leftover after parsing attributes in process `syz.2.6737'. [ 1354.414908][T28835] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1354.421508][T17724] Bluetooth: hci3: Frame reassembly failed (-84) [ 1354.424373][T17724] Bluetooth: hci3: Frame reassembly failed (-84) [ 1354.668515][T28842] usb usb1: usbfs: process 28842 (syz.5.6741) did not claim interface 0 before use [ 1355.157945][T28849] ip6gre1: entered allmulticast mode [ 1355.469114][T28858] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1355.472032][T28858] tipc: Enabled bearer , priority 10 [ 1355.605170][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1355.745050][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1355.786878][T28864] binder: BINDER_SET_CONTEXT_MGR already set [ 1355.789377][T28864] binder: 28863:28864 ioctl 4018620d 80000280 returned -16 [ 1355.792958][T28864] binder: BINDER_SET_CONTEXT_MGR already set [ 1355.795202][T28864] binder: 28863:28864 ioctl 4018620d 80000040 returned -16 [ 1355.885095][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1356.025124][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1356.165134][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1356.289973][T28881] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6754'. [ 1356.293368][T28881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6754'. [ 1356.305172][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1356.435227][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1356.445078][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1356.595229][T13889] tipc: Node number set to 779627200 [ 1356.705038][ T6012] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1356.735037][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1356.866840][ T6012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1356.871619][ T6012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1356.876240][ T6012] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1356.881673][ T6012] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1356.886110][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.891772][ T6012] usb 6-1: config 0 descriptor?? [ 1356.963877][T28890] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:328x2160 (0x33424752, 8, 0, 0, 0) [ 1357.005024][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1357.265043][T28899] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 1357.313250][ T6012] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1357.526522][T28903] input: syz1 as /devices/virtual/input/input166 [ 1358.373154][T28914] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1358.381136][T28914] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1358.607668][ T1139] Bluetooth: (null): Invalid header checksum [ 1358.610472][ T46] Bluetooth: (null): Invalid header checksum [ 1358.715471][ T61] Bluetooth: (null): Invalid header checksum [ 1358.828513][ T93] Bluetooth: (null): Invalid header checksum [ 1358.935276][ T61] Bluetooth: (null): Invalid header checksum [ 1359.046780][ T61] Bluetooth: (null): Invalid header checksum [ 1359.438397][ T839] usb 6-1: USB disconnect, device number 111 [ 1360.075542][T28942] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:328x2160 (0x33424752, 8, 0, 0, 0) [ 1360.675056][ C3] net_ratelimit: 3 callbacks suppressed [ 1360.675125][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1360.929403][T28955] input: syz1 as /devices/virtual/input/input167 [ 1361.158713][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.714998][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1362.685177][T15770] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1362.755222][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1362.838004][T15770] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1362.840798][T15770] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.844147][T15770] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1362.847877][T15770] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.853896][T15770] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1362.857932][T15770] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1362.860621][T15770] usb 7-1: Product: syz [ 1362.861975][T15770] usb 7-1: Manufacturer: syz [ 1362.866609][T15770] cdc_wdm 7-1:1.0: skipping garbage [ 1362.868715][T15770] cdc_wdm 7-1:1.0: skipping garbage [ 1362.870674][T15770] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1363.090257][T15770] usb 7-1: USB disconnect, device number 112 [ 1363.430929][T28995] tmpfs: Bad value for 'nr_blocks' [ 1363.738802][T28998] input: syz1 as /devices/virtual/input/input168 [ 1363.795030][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1364.835061][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1365.198511][T29027] lo speed is unknown, defaulting to 1000 [ 1365.201370][T29027] vxcan1 speed is unknown, defaulting to 1000 [ 1365.296929][T29027] wg2 speed is unknown, defaulting to 1000 [ 1365.885023][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1366.915102][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1367.225137][T13889] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1367.395032][T13889] usb 6-1: Using ep0 maxpacket: 16 [ 1367.404728][T13889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1367.408297][T13889] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 1367.411172][T13889] usb 6-1: config 0 has no interface number 0 [ 1367.413388][T13889] usb 6-1: config 0 interface 48 has no altsetting 0 [ 1367.419199][T13889] usb 6-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 1367.422490][T13889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.425599][T13889] usb 6-1: Product: syz [ 1367.427292][T13889] usb 6-1: Manufacturer: syz [ 1367.429819][T13889] usb 6-1: SerialNumber: syz [ 1367.433847][T13889] usb 6-1: config 0 descriptor?? [ 1367.645728][T13889] usb-storage 6-1:0.48: USB Mass Storage device detected [ 1367.725217][T15770] usb 7-1: new full-speed USB device number 113 using dummy_hcd [ 1367.757434][T29086] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:328x2160 (0x33424752, 8, 0, 0, 0) [ 1367.782134][T13889] usb 6-1: USB disconnect, device number 112 [ 1367.877227][T15770] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1367.880375][T15770] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1367.883506][T15770] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1367.888066][T15770] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1367.891451][T15770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.899397][T15770] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 1367.955121][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1368.687849][T29110] IPVS: Error joining to the multicast group [ 1369.005047][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1369.847271][T29125] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:328x2160 (0x33424752, 8, 0, 0, 0) [ 1370.045048][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1370.520493][ T839] usb 7-1: USB disconnect, device number 113 [ 1371.075180][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1371.758784][T29167] tipc: Enabled bearer , priority 0 [ 1371.764261][T29167] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1371.770109][T29167] tipc: Resetting bearer [ 1371.786112][T29166] tipc: Disabling bearer [ 1371.911442][T29174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6837'. [ 1372.115124][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1372.791923][T29190] random: crng reseeded on system resumption [ 1373.155061][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1373.864233][T29207] tipc: Enabled bearer , priority 0 [ 1373.869751][T29207] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1373.879651][T29207] tipc: Resetting bearer [ 1373.893007][T29206] tipc: Disabling bearer [ 1374.205131][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1374.278650][T29210] input: syz1 as /devices/virtual/input/input169 [ 1375.235073][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1375.478143][T29230] fuse: Unknown parameter 'group_id00000000000000000000' [ 1375.752517][T29233] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:328x2160 (0x33424752, 8, 0, 0, 0) [ 1376.275071][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1376.768496][T29240] tipc: Enabled bearer , priority 0 [ 1376.789043][T29240] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1376.802529][T29240] tipc: Resetting bearer [ 1376.845455][T29239] tipc: Disabling bearer [ 1377.315203][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1377.365059][ T10] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 1377.541828][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 1377.555097][ T10] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1377.559624][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1377.571535][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 1377.574655][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.578743][ T10] usb 6-1: Product: syz [ 1377.580538][ T10] usb 6-1: SerialNumber: syz [ 1377.970823][T29251] syz.2.6865 (29251): drop_caches: 1 [ 1378.101729][T29251] syz.2.6865 (29251): drop_caches: 1 [ 1378.355212][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1378.370158][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 1378.374674][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1378.381012][ T10] usb 6-1: USB disconnect, device number 113 [ 1378.530641][T29265] fuse: Bad value for 'user_id' [ 1378.532447][T29265] fuse: Bad value for 'user_id' [ 1378.727607][T29270] tipc: Enabled bearer , priority 0 [ 1378.732192][T29270] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1378.748420][T29270] tipc: Resetting bearer [ 1378.805481][T29269] tipc: Disabling bearer [ 1379.395118][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1379.620172][T29286] fuse: Bad value for 'user_id' [ 1379.622314][T29286] fuse: Bad value for 'user_id' [ 1379.905124][ T24] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1380.065143][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1380.069077][ T24] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.072175][ T24] usb 10-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1380.079577][ T24] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1380.084171][ T24] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1380.087993][ T24] usb 10-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1380.092037][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1380.094602][ T24] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1380.099239][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.104625][ T24] usb 10-1: config 0 descriptor?? [ 1380.435209][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1380.518337][ T24] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 1380.520878][ T24] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 1380.523528][ T24] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 1380.526435][ T24] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 1380.529357][ T24] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 1380.537884][ T24] hid-thrustmaster 0003:044F:B65D.001D: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 1380.541909][ T24] hid-thrustmaster 0003:044F:B65D.001D: setup data couldn't be sent [ 1380.716252][ C2] hid-thrustmaster 0003:044F:B65D.001D: URB to get model id failed with error -71 [ 1380.717383][T13889] usb 10-1: USB disconnect, device number 23 [ 1381.475075][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1381.590957][T29312] fuse: Bad value for 'user_id' [ 1381.592960][T29312] fuse: Bad value for 'user_id' [ 1382.135329][T29332] fuse: Bad value for 'fd' [ 1382.155056][ T29] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1382.277329][T29336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6894'. [ 1382.334206][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.344738][ T29] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1382.350067][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.363685][ T29] usb 6-1: config 0 descriptor?? [ 1382.370367][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 1382.525015][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1382.831843][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1382.834507][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 1382.837629][ T29] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1382.840295][ T29] pwc: recv_control_msg error -32 req 04 val 1000 [ 1382.843387][ T29] pwc: recv_control_msg error -32 req 04 val 1300 [ 1382.845958][ T29] pwc: recv_control_msg error -32 req 04 val 1400 [ 1382.848418][ T29] pwc: recv_control_msg error -32 req 02 val 2000 [ 1382.850896][ T29] pwc: recv_control_msg error -32 req 02 val 2100 [ 1383.053975][ T29] pwc: recv_control_msg error -71 req 02 val 2500 [ 1383.057385][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 1383.060659][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 1383.063791][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 1383.067457][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 1383.071693][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 1383.074855][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 1383.083261][ T29] pwc: Registered as video103. [ 1383.086536][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb6/6-1/input/input170 [ 1383.097245][ T29] usb 6-1: USB disconnect, device number 114 [ 1383.555146][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1384.082952][T29373] syzkaller1: entered promiscuous mode [ 1384.085128][T29373] syzkaller1: entered allmulticast mode [ 1384.605069][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1384.879770][T29393] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:328x2160 (0x33424752, 8, 0, 0, 0) [ 1385.275153][T13889] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1385.425186][T13889] usb 10-1: Using ep0 maxpacket: 16 [ 1385.428319][T13889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.431853][T13889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.435150][T13889] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1385.438063][T13889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.441666][T13889] usb 10-1: config 0 descriptor?? [ 1385.466655][T29399] autofs: Unknown parameter './file0' [ 1385.635076][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1385.755514][ T6012] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1385.856726][T13889] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 1385.859892][T13889] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 1385.862135][T13889] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 1385.864498][T13889] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 1385.867181][T13889] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 1385.869408][T13889] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 1385.871685][T13889] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 1385.873932][T13889] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 1385.876574][T13889] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 1385.878971][T13889] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 1385.881618][T13889] hid-led 0003:0FC5:B080.001E: reserved main item tag 0xe [ 1385.884153][T13889] hid-led 0003:0FC5:B080.001E: unexpected long global item [ 1385.886883][T13889] hid-led 0003:0FC5:B080.001E: probe with driver hid-led failed with error -22 [ 1385.965182][ T6012] usb 7-1: Using ep0 maxpacket: 8 [ 1385.970469][ T6012] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 1385.974432][ T6012] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.979065][ T6012] usb 7-1: config 0 has no interfaces? [ 1385.986158][ T6012] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1385.989731][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.993485][ T6012] usb 7-1: Product: syz [ 1385.995428][ T6012] usb 7-1: Manufacturer: syz [ 1385.998044][ T6012] usb 7-1: SerialNumber: syz [ 1386.010144][ T6012] usb 7-1: config 0 descriptor?? [ 1386.056584][T27786] usb 10-1: USB disconnect, device number 24 [ 1386.351546][T27786] usb 7-1: USB disconnect, device number 114 [ 1386.511441][T29413] fuse: Bad value for 'fd' [ 1386.627185][T29423] tipc: Enabling of bearer rejected, failed to enable media [ 1386.675049][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1387.289232][T29444] fuse: Bad value for 'fd' [ 1387.611889][T29465] tipc: Enabling of bearer rejected, failed to enable media [ 1387.715054][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1388.351018][T29481] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6942'. [ 1388.755075][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1389.611127][T29502] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1389.639920][T29502] kvm: pic: non byte read [ 1389.654182][T29502] kvm: pic: level sensitive irq not supported [ 1389.655343][T29502] kvm: pic: non byte read [ 1389.795053][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1390.297945][T29521] netlink: 'syz.2.6953': attribute type 1 has an invalid length. [ 1390.437483][T23311] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 1390.440274][T23311] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 23311, name: syz-executor [ 1390.446435][T23311] preempt_count: 1, expected: 0 [ 1390.448440][T23311] RCU nest depth: 0, expected: 0 [ 1390.450481][T23311] no locks held by syz-executor/23311. [ 1390.452270][T23311] Preemption disabled at: [ 1390.452276][T23311] [] schedule+0xe0/0x3a0 [ 1390.455982][T23311] CPU: 3 UID: 0 PID: 23311 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1390.455998][T23311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1390.456005][T23311] Call Trace: [ 1390.456009][T23311] [ 1390.456013][T23311] dump_stack_lvl+0x16c/0x1f0 [ 1390.456030][T23311] __might_resched+0x3c0/0x5e0 [ 1390.456042][T23311] ? __pfx___might_resched+0x10/0x10 [ 1390.456052][T23311] ? pcpu_block_update+0x562/0x660 [ 1390.456069][T23311] ? find_held_lock+0x2b/0x80 [ 1390.456081][T23311] vfree+0x75/0xb50 [ 1390.456106][T23311] ? rcu_is_watching+0x12/0xc0 [ 1390.456118][T23311] ? kfree+0x24f/0x4d0 [ 1390.456128][T23311] ? free_percpu+0x6db/0x13c0 [ 1390.456141][T23311] futex_hash_free+0x98/0xc0 [ 1390.456155][T23311] __mmdrop+0x33f/0x580 [ 1390.456167][T23311] ? rcu_is_watching+0x12/0xc0 [ 1390.456178][T23311] finish_task_switch.isra.0+0x7a4/0xc10 [ 1390.456190][T23311] ? __switch_to+0x7a5/0x11a0 [ 1390.456205][T23311] __schedule+0x1198/0x5de0 [ 1390.456217][T23311] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1390.456237][T23311] ? __pfx___schedule+0x10/0x10 [ 1390.456252][T23311] ? find_held_lock+0x2b/0x80 [ 1390.456262][T23311] ? schedule+0x2d7/0x3a0 [ 1390.456276][T23311] schedule+0xe7/0x3a0 [ 1390.456288][T23311] do_nanosleep+0x21a/0x570 [ 1390.456300][T23311] ? __pfx_do_nanosleep+0x10/0x10 [ 1390.456311][T23311] ? __asan_memset+0x23/0x50 [ 1390.456322][T23311] ? __hrtimer_setup+0x176/0x280 [ 1390.456339][T23311] hrtimer_nanosleep+0x155/0x380 [ 1390.456351][T23311] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1390.456363][T23311] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1390.456380][T23311] ? get_old_timespec32+0xda/0x130 [ 1390.456394][T23311] ? __pfx_get_old_timespec32+0x10/0x10 [ 1390.456409][T23311] common_nsleep+0xa1/0xd0 [ 1390.456423][T23311] __ia32_sys_clock_nanosleep_time32+0x33d/0x4f0 [ 1390.456436][T23311] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 1390.456448][T23311] ? rcu_is_watching+0x12/0xc0 [ 1390.456461][T23311] __do_fast_syscall_32+0x7c/0x3a0 [ 1390.456476][T23311] do_fast_syscall_32+0x32/0x80 [ 1390.456491][T23311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1390.456504][T23311] RIP: 0023:0xf7fb2579 [ 1390.456514][T23311] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1390.456524][T23311] RSP: 002b:00000000ffd78430 EFLAGS: 00000293 ORIG_RAX: 000000000000010b [ 1390.456535][T23311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1390.456541][T23311] RDX: 00000000ffd78464 RSI: 00000000ffd7845c RDI: 00000000ffd78464 [ 1390.456548][T23311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1390.456554][T23311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1390.456562][T23311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1390.456581][T23311] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1390.835092][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1391.337790][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.454074][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.546091][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.654900][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.845521][ T13] bridge_slave_1: left allmulticast mode [ 1391.847964][ T13] bridge_slave_1: left promiscuous mode [ 1391.850785][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.878040][ T13] bridge_slave_0: left allmulticast mode [ 1391.879851][ T13] bridge_slave_0: left promiscuous mode [ 1391.883232][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.885266][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1392.170218][ T13] team0: Port device geneve0 removed [ 1392.372989][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.379230][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.384424][ T13] bond0 (unregistering): Released all slaves [ 1394.048641][ T13] tipc: Left network mode [ 1394.096612][ T13] IPVS: stopping backup sync thread 28899 ... [ 1394.347949][ T13] hsr_slave_0: left promiscuous mode [ 1394.350675][ T13] hsr_slave_1: left promiscuous mode [ 1394.352720][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1394.355579][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1394.358771][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1394.361218][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.364154][ T13] batman_adv: batadv0: Removing interface: team0 [ 1394.386189][ T13] veth1_macvtap: left promiscuous mode [ 1394.387951][ T13] veth0_macvtap: left promiscuous mode [ 1394.389829][ T13] veth1_vlan: left promiscuous mode [ 1394.391496][ T13] veth0_vlan: left promiscuous mode [ 1395.529571][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1395.665591][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1397.374590][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.483500][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.607140][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.700933][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.729252][T12789] wg2 speed is unknown, defaulting to 1000 [ 1397.731175][T12789] syz1: Port: 1 Link DOWN [ 1397.865326][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.944648][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.048641][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.141266][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.222020][ T13] bridge_slave_1: left allmulticast mode [ 1398.223932][ T13] bridge_slave_1: left promiscuous mode [ 1398.226102][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.229613][ T13] bridge_slave_0: left allmulticast mode [ 1398.231495][ T13] bridge_slave_0: left promiscuous mode [ 1398.233388][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.239560][ T13] bridge_slave_1: left allmulticast mode [ 1398.241422][ T13] bridge_slave_1: left promiscuous mode [ 1398.243417][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.248443][ T13] bridge_slave_0: left allmulticast mode [ 1398.250389][ T13] bridge_slave_0: left promiscuous mode [ 1398.252248][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.712496][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.717952][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1398.721516][ T13] bond0 (unregistering): Released all slaves [ 1399.170879][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1399.175426][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1399.179252][ T13] bond0 (unregistering): Released all slaves [ 1399.347803][ T13] tipc: Disabling bearer [ 1399.350245][ T13] tipc: Left network mode [ 1399.374486][ T13] tipc: Left network mode [ 1399.389314][ T13] IPVS: stopping master sync thread 27170 ... [ 1399.897664][ T13] hsr_slave_0: left promiscuous mode [ 1399.901526][ T13] hsr_slave_1: left promiscuous mode [ 1399.903661][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.906240][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.914739][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.917561][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.927536][ T13] hsr_slave_0: left promiscuous mode [ 1399.930464][ T13] hsr_slave_1: left promiscuous mode [ 1399.932827][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.935637][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.938798][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.941224][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.980848][ T13] veth1_macvtap: left promiscuous mode [ 1399.982689][ T13] veth0_macvtap: left promiscuous mode [ 1399.984491][ T13] veth1_vlan: left promiscuous mode [ 1399.986734][ T13] veth0_vlan: left promiscuous mode [ 1399.989149][ T13] veth1_macvtap: left promiscuous mode [ 1399.990886][ T13] veth0_macvtap: left promiscuous mode [ 1399.994332][ T13] veth1_vlan: left promiscuous mode [ 1399.996212][ T13] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 00:01:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8e2982b0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8de2771d RDI=ffffffff8c162d00 RBP=ffff88802b23a458 RSP=ffffffff8e207b68 R8 =000000000000000a R9 =000000000000258b R10=0000000000000001 R11=0000000000000001 R12=ffffffff8e2977c0 R13=0000000000000001 R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff8b90b3a5 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff8880974c3000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000034604ffc CR3=000000005a9ca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000004a043bf RBX=0000000000000001 RCX=ffffffff8b90abf9 RDX=0000000000000000 RSI=ffffffff8de4cbd1 RDI=ffffffff8c162d00 RBP=ffffed1003bd8488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90ab8390 R15=0000000000000000 RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080202018 CR3=0000000060c0f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000022aa29d RBX=0000000000000002 RCX=ffffffff8b90abf9 RDX=0000000000000000 RSI=ffffffff8de4cbd1 RDI=ffffffff8c162d00 RBP=ffffed1003bd8910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801dec4880 R14=ffffffff90ab8390 R15=0000000000000000 RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005609502c5980 CR3=0000000060c0f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=e2025dbef28fb70a d73447a8614d42dd e2025dbef28fb70a d73447a8614d42dd e2025dbef28fb70a d73447a8614d42dd e2025dbef28fb70a d73447a8614d42dd ZMM18=51216a9f6591aaf6 cb2f89ad51dd1dbe 51216a9f6591aaf6 cb2f89ad51dd1dbe 51216a9f6591aaf6 cb2f89ad51dd1dbe 51216a9f6591aaf6 cb2f89ad51dd1dbe ZMM19=b030000000000000 0000000000000004 b030000000000000 0000000000000003 b030000000000000 0000000000000002 b030000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000da2030002000d a0030008000d9803 0008000d900304de 04000d8c03600400 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d88032808000d80 030d800201de8003 01de800201df9003 00080001df88030f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0201df80 033c0000052c0000 001c000000180000 0011000000140000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060c0168d8800000 d82c79b4ff0cecd1 51a359233542b9bd e9fedb1c464ad95a ZMM25=cb2f89adcb2f89ad cb2f89adcb2f89ad cb2f89adcb2f89ad cb2f89adcb2f89ad cb2f89adcb2f89ad cb2f89adcb2f89ad cb2f89adcb2f89ad cb2f89adcb2f89ad ZMM26=6591aaf66591aaf6 6591aaf66591aaf6 6591aaf66591aaf6 6591aaf66591aaf6 6591aaf66591aaf6 6591aaf66591aaf6 6591aaf66591aaf6 6591aaf66591aaf6 ZMM27=51216a9f51216a9f 51216a9f51216a9f 51216a9f51216a9f 51216a9f51216a9f 51216a9f51216a9f 51216a9f51216a9f 51216a9f51216a9f 51216a9f51216a9f ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=af300000af300000 af300000af300000 af300000af300000 af300000af300000 af300000af300000 af300000af300000 af300000af300000 af300000af300000 info registers vcpu 3 CPU#3 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617075 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc90004e4f3f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000000a R14=ffffffff9b0f96c0 R15=ffffffff85617010 RIP=ffffffff8561709f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3ee80a CR3=000000005dab6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000