last executing test programs: 7m55.198861645s ago: executing program 3 (id=338): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/221], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8110, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f00000004c0)=0x58, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r2 = userfaultfd(0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 7m53.471621342s ago: executing program 3 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='100000', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x413, &(0x7f0000000340)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 7m50.992163027s ago: executing program 3 (id=346): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) fallocate(r1, 0x0, 0x0, 0x10000) pwrite64(r1, &(0x7f0000000100)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c532ba90100"/251, 0xfb, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x2000c198) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='md123', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1.1\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)='7:0\x00', 0x4) write(0xffffffffffffffff, &(0x7f0000000900)='active\x00', 0x7) 7m49.78027714s ago: executing program 3 (id=347): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x5) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_vhci(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) 7m49.127986211s ago: executing program 3 (id=350): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_vhci(0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) 7m48.120042753s ago: executing program 3 (id=353): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r3, &(0x7f0000005400)=[{&(0x7f0000000780)="4669d044962b", 0x6}, {&(0x7f0000005440)="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", 0x1000}], 0x2) 7m30.53193255s ago: executing program 32 (id=353): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r3, &(0x7f0000005400)=[{&(0x7f0000000780)="4669d044962b", 0x6}, {&(0x7f0000005440)="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", 0x1000}], 0x2) 5m40.089884455s ago: executing program 4 (id=628): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_open_procfs$userns(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xff5, &(0x7f0000001840)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x81) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r2 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x3c7, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000001080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/157, 0x9d}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) r8 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r8) close(r8) r9 = socket$unix(0x1, 0x2, 0x0) socketpair(0x2a, 0x2, 0x1, 0x0) bind$unix(r9, 0x0, 0x0) 5m37.578836102s ago: executing program 4 (id=631): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001e00010029bd7000fbdbdf25e0000001000000000000000000000000000004d502002b00200100000000000000000000000000000f0000000735000008000c000700000081bc30b60129fa4f1243e19366e4489e6a6f430664edc8669565a6fd5aa10862d0fd797f9618776987cf3916f8ae60438f4565b3a895be57831ffc214b9b77d3e1466682dea13de0a3e726db2356795c4ef258c60edf690ce5f6b8aef57f2b0c285ae1d2e77aafb0b8b8cb1c28ec"], 0x48}, 0x1, 0x0, 0x0, 0x10000084}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0\n', 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x2e, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ccefffffff00"}}, 0x48}}, 0x20008044) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000005a00)=@ethtool_gstrings={0x1b, 0x6, 0x1, "83"}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='dummy_udc.0', 0xb) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0x43, 0x0, 0x0) 5m37.298907094s ago: executing program 4 (id=634): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/252], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8110, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f00000004c0)=0x58, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r2 = userfaultfd(0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 5m34.147228935s ago: executing program 4 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) write(r1, 0x0, 0x0) write$binfmt_register(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x0, 0xb1fe, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, r1}, 0x94) socket$inet(0x2, 0xa, 0x400) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prlimit64(r4, 0xd, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) fstat(r0, 0x0) 5m32.043847718s ago: executing program 4 (id=644): syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x186c1) syz_emit_ethernet(0x82, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @generic={0x7, 0x2}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private, 0xfffffffe}]}]}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r1, @ANYBLOB="0006000000000000240012800b00010067656e65766500001400028006000500"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x53f, 0x3a, '![@.\x88!.,+Z](\xb7\x7f\xbc,U\xbe\x17VI\x8a]\xb9\xf6\x9da\xf1)\xa4\x16\bx0\xd0E\x8c\xd9\x81\xbd\x8cDZ&\xe9\xa5.\xd0\xa4Lj\x99V\x017\xc8{m\xf8\xf3o\x00\xdd\xff\xf5\x89\x9b\x8a\xc5\xdc\x00\n\xec\xcd+\xf2\xf5l\xa7\xf6\xb8\x1e\xccV\xc0\x85\xce\x9e\x9f|m[ \x91h::8bM\'\xb3c\xd4\xf6\xe6\x06C#J\x06\x91\x81\x827\x83\xce\xb1\x8b\xac\x10\xe0\xe9&\xd5\xc8\x88\xcf\xb7)j%3bk\xb7\xcd\f\xe9$\xf6\x99\xa2\x97\xd3\xd3~\xea\x8e\xacGw%<\"`P\xbb\xefd\x96\x11\xad\xb9[\xbdp\x0e\xb298:\v\x80\x1et\x10\xdcE\xa1\x0f\xb6\xf1\x1d\x1dj\x1d\x869\xfc\xef\xfdG?\x14v\xb9\x84\xbfHL\x18\b\xd6\xdf\x8e\x8f\x16}8m\xea\xac\xb5#\x8e\xfb\xf8{w\x0e\xd2|F', 0x3a, '4\xdb\xb7o\xb7F\x86\xcdDTf\xcf]\x13\x9d\xf7z\xe2\'>\x8e\x0e\xcd8\x88\xedks\xa0Y\x17\x89\b\x9a`\xde\x96\x02`}A\xdf\x94\xf9\x9b@d1\xef\xc7\xc3\x1eu*\x9d\xcf\xd6\x8f\xb4\xba\b\xb4K\x87\x9d\x14\xa0\xfc\x13\xe6\x83\x9fE\x12', 0x3a, '\xe9\x1fq\x89Y\x1e\x923aK'}, 0x12a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, &(0x7f0000000000)={0xf, 0x8}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000001c0), 0x1000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x2ac, r6, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="54529aacbba6d7bde7947c905c85b79442331cad220b4111"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36b79241d8985407"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8e7a53991c410ea8bd1b5a107b82f35c138e4ede6f5a7381"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9d}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b6d2e84ffe3da33d91e009ddf2306b1c39850ee2f71e997df7e6b9e5d46788ed"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9c39fe83459fb4a3160f05537808bc0e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d6c701dd7152e03be102404f7a4004f1"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="70ba4b8234bdd341a1782061effdb731"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6f1d00"}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f1bf540980097b41"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="dfbc32fcc09b726adb3880c56e5b3ae7d15201962afc287d94b822c8ca4fb9d5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "24ad00"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b207057fecbef31f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2f36f74748a2de69fec3fa093c789962"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="04900d15fd929dd242822bca539f3abd587f8ec0dfeeedfd6bd6a8374a96f9a9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="70767e7cd7f46b24a63fb1a484e5c8f0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b689f9f3ae2f2075"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5df1c25aad7fc4c2"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "21837c9be6d0a0af"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b2616b8e96394d32f118d93fbfabaf05804343515b14bbbc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97eae2298af606a5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cf91e4f9a10f64ea"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5c0af290ad15166f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a274bdc0a7189dd20dc040fcebae0a3d6007d2dc594ac46b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a881831d1fe756e4c03851e5377efd29"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffcf}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "50960c70c218a89b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "85f6310bec50c2be"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e6e6782c95cec300"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b2fa3d389b966774"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="67e20085939d5c13401669e80fb0e5b0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="487bba0803e0a8158c8a6292833e2a17"}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40000}, 0x4801) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5m29.778438664s ago: executing program 4 (id=649): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/252], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8110, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f00000004c0)=0x58, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r2 = userfaultfd(0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 5m28.656212596s ago: executing program 33 (id=649): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/252], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8110, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f00000004c0)=0x58, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r2 = userfaultfd(0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 3m7.571211313s ago: executing program 5 (id=978): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x9640, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 3m2.662443664s ago: executing program 5 (id=982): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff06a660001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m2.128478706s ago: executing program 5 (id=986): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x114f0c3a338dd13, 0x6, 0x33f6, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x11) setuid(0xee01) prctl$PR_SET_SECUREBITS(0x1c, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2m59.203484173s ago: executing program 5 (id=992): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$FUSE_GETXATTR(r3, &(0x7f0000002400)={0x18, 0x0, 0x0, {0xffff}}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(r7, r7) ioprio_get$pid(0x2, r7) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r6, 0x13}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2m58.544402448s ago: executing program 5 (id=994): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff06a660001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m57.534975948s ago: executing program 5 (id=997): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbbd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10012}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200080d1}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) 2m56.753984464s ago: executing program 34 (id=997): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbbd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10012}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200080d1}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) 15.650362565s ago: executing program 0 (id=1325): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) mlock(&(0x7f0000f47000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) keyctl$search(0xa, r2, &(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0xfffffffffffffffa) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x7ff, 0x5, 0x2}, 0x8) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x7}, 0x4) 14.504255375s ago: executing program 0 (id=1329): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x186c1) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @generic={0x7, 0x2}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {@dev}, {@private, 0xfffffffe}]}]}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0006000000000000240012800b00010067656e65766500001400028006000500"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x53f, 0x3a, '![@.\x88!.,+Z](\xb7\x7f\xbc,U\xbe\x17VI\x8a]\xb9\xf6\x9da\xf1)\xa4\x16\bx0\xd0E\x8c\xd9\x81\xbd\x8cDZ&\xe9\xa5.\xd0\xa4Lj\x99V\x017\xc8{m\xf8\xf3o\x00\xdd\xff\xf5\x89\x9b\x8a\xc5\xdc\x00\n\xec\xcd+\xf2\xf5l\xa7\xf6\xb8\x1e\xccV\xc0\x85\xce\x9e\x9f|m[ \x91h::8bM\'\xb3c\xd4\xf6\xe6\x06C#J\x06\x91\x81\x827\x83\xce\xb1\x8b\xac\x10\xe0\xe9&\xd5\xc8\x88\xcf\xb7)j%3bk\xb7\xcd\f\xe9$\xf6\x99\xa2\x97\xd3\xd3~\xea\x8e\xacGw%<\"`P\xbb\xefd\x96\x11\xad\xb9[\xbdp\x0e\xb298:\v\x80\x1et\x10\xdcE\xa1\x0f\xb6\xf1\x1d\x1dj\x1d\x869\xfc\xef\xfdG?\x14v\xb9\x84\xbfHL\x18\b\xd6\xdf\x8e\x8f\x16}8m\xea\xac\xb5#\x8e\xfb\xf8{w\x0e\xd2|F', 0x3a, '4\xdb\xb7o\xb7F\x86\xcdDTf\xcf]\x13\x9d\xf7z\xe2\'>\x8e\x0e\xcd8\x88\xedks\xa0Y\x17\x89\b\x9a`\xde\x96\x02`}A\xdf\x94\xf9\x9b@d1\xef\xc7\xc3\x1eu*\x9d\xcf\xd6\x8f\xb4\xba\b\xb4K\x87\x9d\x14\xa0\xfc\x13\xe6\x83\x9fE\x12', 0x3a, '\xe9\x1fq\x89Y\x1e\x923aK'}, 0x12a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r6, 0x89e6, &(0x7f0000000000)={0xf, 0x8}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000001c0), 0x1000) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x2ac, r7, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="54529aacbba6d7bde7947c905c85b79442331cad220b4111"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36b79241d8985407"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8e7a53991c410ea8bd1b5a107b82f35c138e4ede6f5a7381"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9d}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b6d2e84ffe3da33d91e009ddf2306b1c39850ee2f71e997df7e6b9e5d46788ed"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9c39fe83459fb4a3160f05537808bc0e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d6c701dd7152e03be102404f7a4004f1"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="70ba4b8234bdd341a1782061effdb731"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6f1d00"}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f1bf540980097b41"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="dfbc32fcc09b726adb3880c56e5b3ae7d15201962afc287d94b822c8ca4fb9d5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "24ad00"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b207057fecbef31f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2f36f74748a2de69fec3fa093c789962"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="04900d15fd929dd242822bca539f3abd587f8ec0dfeeedfd6bd6a8374a96f9a9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="70767e7cd7f46b24a63fb1a484e5c8f0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b689f9f3ae2f2075"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5df1c25aad7fc4c2"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "21837c9be6d0a0af"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b2616b8e96394d32f118d93fbfabaf05804343515b14bbbc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97eae2298af606a5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cf91e4f9a10f64ea"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5c0af290ad15166f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a274bdc0a7189dd20dc040fcebae0a3d6007d2dc594ac46b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a881831d1fe756e4c03851e5377efd29"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffcf}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "50960c70c218a89b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "85f6310bec50c2be"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e6e6782c95cec300"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b2fa3d389b966774"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="67e20085939d5c13401669e80fb0e5b0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="487bba0803e0a8158c8a6292833e2a17"}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40000}, 0x4801) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, 0x0}) 12.374739996s ago: executing program 0 (id=1331): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xefa9, 0x800, 0x43, 0x161}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x492182, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xffff}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {0x82}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x101}, {}, {}, {}, {}, {0x10, 0x0, 0x0, 0x3}, {0x0, 0x3}, {0x3ff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x400000}, {0x5}, {}, {}, {0x0, 0x0, 0x9, 0xfffffffd}, {}, {0x0, 0xb}, {}, {0x0, 0x0, 0x7}, {0x0, 0x2000000, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xc16}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x400000}, {0x100}, {0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x70}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x6, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8a}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) syz_clone3(0x0, 0x0) read$FUSE(r0, &(0x7f0000002f40)={0x2020}, 0xfffffd24) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r6, 0x6, 0x2, 0x0, &(0x7f0000000500)) write(r5, &(0x7f0000000600)='1', 0x1) 11.136557319s ago: executing program 1 (id=1333): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 9.42508682s ago: executing program 6 (id=1334): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010601"], 0x1c}}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x28) unshare(0x40000000) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000180)={0x16, 0x110, 0xfa00, {r6, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r6}}, 0x120) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 9.390374066s ago: executing program 2 (id=1335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$DVB_DVR_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000040)={0x1, 0x20000000, 0x9, 0xb, 0x8, 0x6}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x91ff, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r6, &(0x7f0000000280)='1', 0x1) 8.672044489s ago: executing program 6 (id=1336): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 8.548239518s ago: executing program 1 (id=1337): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) mlock(&(0x7f0000f47000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) keyctl$search(0xa, r2, &(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0xfffffffffffffffa) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x7ff, 0x5, 0x2}, 0x8) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x7}, 0x4) 8.274300885s ago: executing program 1 (id=1338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000440)="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", 0x0, 0x17b}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x25dfdbfe, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x1, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304, 0x36}, "00257059cb008000", "8b3de2aabceef22f419e59f30000000004000000000200", "07350080", "000000d900"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "b398a992143a240d", "d036788c4aaf9c6ef96dda7201d2d2a5", "1a13ecde", "0597b7f1463f0f33"}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getresgid(&(0x7f0000000000), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './proc\x00'}) stat(&(0x7f0000000240)='./proc\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r7, &(0x7f0000000140)='./proc\x00', 0x0, r8, 0x100) setresgid(r6, 0x0, r8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 8.021891879s ago: executing program 2 (id=1339): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) setns(0xc9, 0x0) r1 = socket(0x2d, 0x2, 0x0) setsockopt(r1, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000000000008011800020000000600"}, 0x80, 0x0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, &(0x7f0000000740)) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd0b, &(0x7f0000002000)="040000000000000000000000a101") timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) 7.852273472s ago: executing program 0 (id=1340): socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e77, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r11 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x6, r11, 0x80000}) syz_ublk_setup_queues(r11, r10, &(0x7f0000000540)={0x0, 0xfa81, 0x0, 0x3, 0x86, 0x0, r4}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x0, 0x330, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x20, 0x0, 0x20, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fe, 0x0, r12}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r11, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r9, '\x00', {0x2, 0xb55, 0x0, 0x0}}, &(0x7f0000001fc0)) socket$l2tp6(0xa, 0x2, 0x73) 7.791869296s ago: executing program 2 (id=1341): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x44, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffff5d4}}, './file0\x00'}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r3, r4+60000000}, &(0x7f0000000280)={0x0}) fsopen(0x0, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl(r7, 0x4048aecb, &(0x7f0000000200)) 7.588603154s ago: executing program 1 (id=1342): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x79}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)="44001d000000000000ffff0100006bddc65b99fba9d5c8ef68ff58efbe93a0629498d350fee76658d4aa1d0e2d8f1d3c7405171a2c2065144cf5de98818512ac0ff961817366b82d6754b7ef2e2cb1a114d1c7df", 0x54, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xd, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000005c0), 0x4d) r1 = syz_open_dev$usbmon(&(0x7f0000000680), 0x9, 0x6c0882) ioctl$MON_IOCX_MFETCH(r1, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000580)=[0x0], 0x1, 0x8001}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) readv(r1, &(0x7f0000001b80), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x1, 0x40) r4 = open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x40280, 0x6f) linkat(r4, &(0x7f0000000400)='./file0\x00', r3, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1400) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000540)={0x76, 0xff, {}, {0xee00}, 0x4, 0x9}) mount$binder(0x0, &(0x7f0000000480)='./config\x00', &(0x7f0000000500), 0x1014484, &(0x7f0000001a00)=ANY=[@ANYRES8=r4, @ANYRES16=r3, @ANYBLOB="2c736d01000000003acf006e736d7574651b6fb7d41a8ece4cf674657873797374656d5f752c000000"]) write(r3, &(0x7f00000001c0)='my_midi_interface\x00', 0x12) 7.536625027s ago: executing program 6 (id=1343): socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x81}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.076630176s ago: executing program 2 (id=1344): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='user\x00', &(0x7f00000001c0)) add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000002c0), 0x0, r0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) pipe(0x0) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='vd', 0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000000)='192.168.100.100:/export\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2ad3770bd15179746c6889ded43c633b31b5aeec7be045fbe28ebb34e89ce7ea16eee9ac9d7d09ba91dd468954fb02b37ef11e18d22b20e151ab8a138d616fc9da4b99c376c5123fac7e193fd2cd04b3b90d4d9557a93c0aaea54421df0f71c7a713230122b211acbabfa7e396c42b6da3eb905f13827c50614c2410e02192ed943b66699d084e01de8e982af6aa40d53dabbc98b763a2a32b8876b8e7172981e00e7b3907c1b4d014f752ad13ccdf984f299d85aad92a0e72d32dcd7291165f484e00000800000000000069894d8fa410ddb018d77fd940a8ec69d45b1847ba2e3acb70c00b412bd8edc04a0800f10950ceb582ee"]) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x3, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xeeee8000}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x40, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="56b4", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000070000008307040003000000555a886d6c2228717b8ec638a5b44e4a6ad61c60f70d78673222dee98106687a4e8b97e9a05d5a162d2c93aab7c51b1cc8958222341fb71bcc78e4d397a37f6326f41bc2000000"], 0x14}, 0x88800) close(0x3) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.012095923s ago: executing program 1 (id=1345): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00\x00'], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8243, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x10, 0x4}}}}}]}}]}}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) write$binfmt_misc(r2, &(0x7f00000001c0)="a38b9e1dfad9ed91038ccc99e7683de3ad32de6be60eeeb0369598c0f00be02cea0ea14abb9da8b2af16688689327dab21c9ff0c13350d703a8a79318fac33ac326bcc737f6579905b9c427f1b81d840e17591f5d289da80fbd3f97c80200cf742de3804a6ba33846c9cbd6ce729200968032c1b8c65437d08a7f0dd", 0x7c) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e08091b0c"], 0xb) write(r4, &(0x7f0000001400)='2\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='1', 0x1) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000c40)={0x84, &(0x7f00000006c0)={0x0, 0xa, 0x3, "3846e2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r6, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x0, 0xf, 0x2, "8cff"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) 2.452859989s ago: executing program 6 (id=1346): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) sendmmsg$sock(r1, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d0d38cd6", 0x4}], 0x1, &(0x7f0000000040)=[@txtime={{0x14, 0x1, 0x3d, 0x80000001}}], 0x14}}], 0x1, 0x20000000) r2 = openat$uhid(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_INPUT(r2, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0xdf9, &(0x7f00000000c0)}) lsm_get_self_attr(0x65, &(0x7f0000000000)={0x0, 0x0, 0xb0, 0x90, ""/144}, &(0x7f00000000c0)=0xb0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x5d, 0x47314356, 0x31424752, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x5, 0x400004}], 0x8, 0x8, 0x8, 0x0, 0x7}}) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x1) 1.856348105s ago: executing program 2 (id=1347): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r8 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}}) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r9 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r9, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r7, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 1.855381711s ago: executing program 0 (id=1348): socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e77, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r11 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x6, r11, 0x80000}) syz_ublk_setup_queues(r11, r10, &(0x7f0000000540)={0x0, 0xfa81, 0x0, 0x3, 0x86, 0x0, r4}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x0, 0x330, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x20, 0x0, 0x20, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fe, 0x0, r12}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r11, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r9, '\x00', {0x2, 0xb55, 0x0, 0x0}}, &(0x7f0000001fc0)) socket$l2tp6(0xa, 0x2, 0x73) 1.681052118s ago: executing program 6 (id=1349): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) mlock(&(0x7f0000f47000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) keyctl$search(0xa, r2, &(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0xfffffffffffffffa) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x7ff, 0x5, 0x2}, 0x8) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x7}, 0x4) 1.175249867s ago: executing program 2 (id=1350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d04, 0x0, 0x3}]}) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0xcd0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x92e}, 0x1c, 0x0}}], 0x2, 0xff00) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000001c0)=0x7000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280), &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r6 = gettid() rt_tgsigqueueinfo(r6, r6, 0x39, &(0x7f0000000380)={0x24, 0xd0, 0x7fff}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000030a010800000000000000000a0000070900010073797a3100"], 0x84}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 1.00307494s ago: executing program 6 (id=1351): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 315.041466ms ago: executing program 1 (id=1352): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 0s ago: executing program 0 (id=1353): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x80800) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4000) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000040)) kernel console output (not intermixed with test programs): id=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 292.973710][ T43] audit: type=1326 audit(2000000215.329:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 292.974893][ T43] audit: type=1326 audit(2000000215.339:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 292.975154][ T43] audit: type=1326 audit(2000000215.339:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 292.975848][ T43] audit: type=1326 audit(2000000215.339:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 292.975885][ T43] audit: type=1326 audit(2000000215.339:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 292.975922][ T43] audit: type=1326 audit(2000000215.339:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 292.976588][ T43] audit: type=1326 audit(2000000215.339:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 293.184988][ T43] audit: type=1326 audit(2000000215.549:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 293.195953][ T43] audit: type=1326 audit(2000000215.549:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.1.586" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 293.955229][ T8584] usb 7-1: failed to restore interface 0 altsetting 251 (error=-110) [ 293.978301][ T7222] usb 7-1: USB disconnect, device number 9 [ 294.731561][ T8655] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.752093][ T8658] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 294.752888][ T8658] CIFS mount error: No usable UNC path provided in device string! [ 294.752888][ T8658] [ 294.753131][ T8658] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 294.928216][ T8655] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.095561][ T8655] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.324260][ T8655] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.383012][ T5748] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 295.383170][ T5748] Bluetooth: hci4: Injecting HCI hardware error event [ 295.387949][ T5748] Bluetooth: hci4: hardware error 0x00 [ 295.999529][ T5797] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.999602][ T5797] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.999668][ T5797] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.999715][ T5797] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.972894][ T8691] batadv_slave_1: entered promiscuous mode [ 297.625451][ T5748] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 299.242564][ T8708] netlink: 468 bytes leftover after parsing attributes in process `syz.4.607'. [ 299.413685][ T8708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.416953][ T8708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.423546][ T8708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.438671][ T8708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.821116][ T8732] input: syz0 as /devices/virtual/input/input22 [ 306.451804][ T1170] Bluetooth: hci3: Frame reassembly failed (-84) [ 306.580488][ T8745] netlink: 'syz.2.617': attribute type 1 has an invalid length. [ 306.799337][ T8745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.924566][ T8750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.925071][ T8750] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 306.929519][ T8750] bond2: (slave gre1): Error -95 calling set_mac_address [ 307.106952][ T8753] gretap1: entered promiscuous mode [ 307.127527][ T8753] bond2: (slave gretap1): making interface the new active one [ 307.135616][ T8753] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 307.226427][ T8745] 8021q: adding VLAN 0 to HW filter on device bond3 [ 307.231284][ T8745] bond2: (slave bond3): Enslaving as an active interface with a down link [ 307.251897][ T8755] bond2 (unregistering): (slave gretap1): Releasing active interface [ 307.343233][ T8755] bond2 (unregistering): (slave bond3): Releasing active interface [ 307.371406][ T8755] bond2 (unregistering): Released all slaves [ 307.947682][ T8725] net_ratelimit: 384 callbacks suppressed [ 307.947778][ T8725] Set syz0 is full, maxelem 65536 reached [ 308.499427][ T5748] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 311.526332][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 311.535444][ T43] audit: type=1326 audit(2000000233.889:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.2.626" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf701efec code=0x7ffc0000 [ 311.551300][ T43] audit: type=1326 audit(2000000233.919:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.2.626" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf701f017 code=0x7ffc0000 [ 311.566263][ T43] audit: type=1326 audit(2000000233.929:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.2.626" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf701efec code=0x7ffc0000 [ 311.580015][ T43] audit: type=1326 audit(2000000233.939:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.2.626" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf701f017 code=0x7ffc0000 [ 311.592883][ T43] audit: type=1326 audit(2000000233.959:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.2.626" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf701efec code=0x7ffc0000 [ 311.607187][ T43] audit: type=1326 audit(2000000233.969:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.2.626" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf701f017 code=0x7ffc0000 [ 311.620591][ T43] audit: type=1326 audit(2000000233.969:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.2.626" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf701efec code=0x7ffc0000 [ 311.620684][ T43] audit: type=1326 audit(2000000233.989:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.2.626" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf701f017 code=0x7ffc0000 [ 311.620768][ T43] audit: type=1326 audit(2000000233.989:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.2.626" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf701efec code=0x7ffc0000 [ 311.620828][ T43] audit: type=1326 audit(2000000233.989:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8785 comm="syz.2.626" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf701f017 code=0x7ffc0000 [ 315.041136][ T8822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.636'. [ 316.144052][ T8833] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 317.225325][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.225446][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.240124][ T43] kauditd_printk_skb: 376 callbacks suppressed [ 322.243837][ T43] audit: type=1326 audit(2000000244.609:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8873 comm="syz.0.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 322.255517][ T43] audit: type=1326 audit(2000000244.619:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8873 comm="syz.0.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 322.266949][ T43] audit: type=1326 audit(2000000244.639:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8873 comm="syz.0.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 322.278155][ T43] audit: type=1326 audit(2000000244.649:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8873 comm="syz.0.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 322.287517][ T43] audit: type=1326 audit(2000000244.649:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8873 comm="syz.0.646" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf700efec code=0x7ffc0000 [ 322.299283][ T43] audit: type=1326 audit(2000000244.659:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8873 comm="syz.0.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 322.299360][ T43] audit: type=1326 audit(2000000244.659:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8873 comm="syz.0.646" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 322.324746][ T43] audit: type=1326 audit(2000000244.689:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8873 comm="syz.0.646" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 322.623786][ T5797] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.830688][ T5797] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.001332][ T5797] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.850885][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.867961][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.891108][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.895464][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.901015][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.962960][ T5797] vlan2: left promiscuous mode [ 323.963017][ T5797] dummy0: left promiscuous mode [ 323.975417][ T5797] bridge0: port 3(vlan2) entered disabled state [ 324.002414][ T5797] bridge_slave_1: left allmulticast mode [ 324.005922][ T5797] bridge_slave_1: left promiscuous mode [ 324.010463][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.075303][ T5797] bridge_slave_0: left allmulticast mode [ 324.080234][ T5797] bridge_slave_0: left promiscuous mode [ 324.084235][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.588930][ T5797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.607218][ T5797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.650737][ T5797] bond0 (unregistering): Released all slaves [ 325.507455][ T5454] 8021q: adding VLAN 0 to HW filter on device eth6 [ 325.647797][ T5797] hsr_slave_0: left promiscuous mode [ 325.653376][ T5797] hsr_slave_1: left promiscuous mode [ 325.697040][ T5797] batadv_slave_1: left allmulticast mode [ 325.697188][ T5797] batadv_slave_1: left promiscuous mode [ 325.697284][ T5797] veth1_macvtap: left promiscuous mode [ 325.697313][ T5797] veth0_macvtap: left promiscuous mode [ 325.697405][ T5797] veth1_vlan: left promiscuous mode [ 325.697461][ T5797] veth0_vlan: left promiscuous mode [ 325.949857][ T5099] Bluetooth: hci3: command tx timeout [ 326.922732][ T8934] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 326.922776][ T8934] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 326.922884][ T8934] vhci_hcd vhci_hcd.0: Device attached [ 327.249145][ T42] usb 42-1: SetAddress Request (2) to port 0 [ 327.255118][ T42] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 327.351183][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 327.990720][ T8935] vhci_hcd: connection reset by peer [ 327.993817][ T5824] vhci_hcd vhci_hcd.2: stop threads [ 328.003508][ T5824] vhci_hcd vhci_hcd.2: release socket [ 328.014196][ T5824] vhci_hcd vhci_hcd.2: disconnect device [ 328.039425][ T5099] Bluetooth: hci3: command tx timeout [ 328.414506][ T8938] pim6reg: entered allmulticast mode [ 328.435209][ T8939] pim6reg: left allmulticast mode [ 328.486078][ T5454] 8021q: adding VLAN 0 to HW filter on device eth7 [ 328.978237][ T8889] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.978491][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.978610][ T8889] bridge_slave_0: entered allmulticast mode [ 328.983519][ T8889] bridge_slave_0: entered promiscuous mode [ 328.986056][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.986204][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.986311][ T8889] bridge_slave_1: entered allmulticast mode [ 328.987845][ T8889] bridge_slave_1: entered promiscuous mode [ 329.025070][ T8889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.027240][ T8889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.041319][ T8889] team0: Port device team_slave_0 added [ 329.042810][ T8889] team0: Port device team_slave_1 added [ 329.055750][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.055825][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.056071][ T8889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.057769][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.057782][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.057803][ T8889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.124981][ T8889] hsr_slave_0: entered promiscuous mode [ 329.125859][ T8889] hsr_slave_1: entered promiscuous mode [ 329.176095][ T5454] 8021q: adding VLAN 0 to HW filter on device eth8 [ 329.324770][ T8889] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 329.343862][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.345199][ T8889] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 329.354276][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.359630][ T8889] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 329.363855][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.372604][ T8889] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 329.378417][ T8889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.407490][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.407705][ T8889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.408674][ T8889] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.408769][ T8889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.457129][ T8889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.477417][ T236] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.481289][ T236] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.513442][ T8889] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.519934][ T236] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.520059][ T236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.525600][ T236] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.525745][ T236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.641099][ T5454] 8021q: adding VLAN 0 to HW filter on device eth9 [ 330.005526][ T8889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.099436][ T5099] Bluetooth: hci3: command tx timeout [ 330.327896][ T8889] veth0_vlan: entered promiscuous mode [ 330.348820][ T8889] veth1_vlan: entered promiscuous mode [ 330.390031][ T8889] veth0_macvtap: entered promiscuous mode [ 330.397922][ T8889] veth1_macvtap: entered promiscuous mode [ 330.413208][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.432447][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.529864][ T5797] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.530164][ T5797] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.530497][ T5797] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.530683][ T5797] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.568013][ T123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.568067][ T123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.594757][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.594861][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.054945][ T2355] hid-generic 0005:0007:0009.0005: item fetching failed at offset 0/1 [ 331.055260][ T2355] hid-generic 0005:0007:0009.0005: probe with driver hid-generic failed with error -22 [ 331.121381][ T9000] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 331.163580][ T9000] md: couldn't update array info. -22 [ 331.227985][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 331.233333][ T9000] md: could not open device unknown-block(1,1). [ 331.233408][ T9000] md: md_import_device returned -16 [ 332.179689][ T5099] Bluetooth: hci3: command tx timeout [ 332.347471][ T42] usb 42-1: device descriptor read/8, error -110 [ 332.563355][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 332.623327][ T9021] dlm: no local IP address has been set [ 332.623406][ T9021] dlm: cannot start dlm midcomms -107 [ 332.656832][ T9021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.743689][ T42] usb usb42-port1: attempt power cycle [ 333.381351][ T42] usb usb42-port1: unable to enumerate USB device [ 335.398182][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 335.463954][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 335.468796][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 335.481556][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 336.689380][ T9049] netlink: 468 bytes leftover after parsing attributes in process `syz.5.667'. [ 336.699036][ T9049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.702231][ T9049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.715343][ T9037] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 336.715379][ T9037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 336.723820][ T9037] vhci_hcd vhci_hcd.0: Device attached [ 336.733196][ T9050] vhci_hcd: connection closed [ 336.738176][ T5824] vhci_hcd vhci_hcd.0: stop threads [ 336.750919][ T5824] vhci_hcd vhci_hcd.0: release socket [ 336.752904][ T5824] vhci_hcd vhci_hcd.0: disconnect device [ 336.913863][ T9049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.913932][ T9049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.189893][ T9074] pim6reg: entered allmulticast mode [ 338.449005][ T9074] pim6reg: left allmulticast mode [ 338.678689][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 340.095605][ T9077] hsr_slave_1 (unregistering): left promiscuous mode [ 341.799617][ T9099] 9p: Bad value for 'rfdno' [ 341.812013][ T9098] netlink: 'syz.1.676': attribute type 4 has an invalid length. [ 341.812094][ T9098] netlink: 152 bytes leftover after parsing attributes in process `syz.1.676'. [ 341.815046][ T9098] .`: renamed from bond0 [ 342.295323][ T9109] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 342.414767][ T9109] md: couldn't update array info. -22 [ 342.649384][ T9109] md: could not open device unknown-block(1,1). [ 342.649485][ T9109] md: md_import_device returned -16 [ 343.668774][ T9129] batadv_slave_1: left promiscuous mode [ 348.394639][ T9182] block2mtd: error: cannot open device /dev/loop0 [ 348.703967][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.689'. [ 350.525225][ T9205] jffs2: notice: (9205) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 353.543321][ T9233] comedi comedi3: comedi_config --init_data is deprecated [ 356.580984][ T9252] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 356.649418][ T9252] md: couldn't update array info. -22 [ 356.790804][ T9256] md: could not open device unknown-block(1,1). [ 356.790916][ T9256] md: md_import_device returned -16 [ 357.357844][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.702'. [ 357.372228][ T43] audit: type=1326 audit(2000000279.739:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9259 comm="syz.1.705" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 357.386611][ T43] audit: type=1326 audit(2000000279.749:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9259 comm="syz.1.705" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 358.477907][ T9268] Console: switching to colour dummy device 80x25 [ 361.322919][ T9269] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 361.373053][ T9269] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 361.373247][ T9269] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 361.382215][ T9269] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 361.386389][ T9269] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 361.400772][ T9269] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 14211 usecs [ 361.418724][ T9269] pci 0000:00:01.0: Adding to iommu group 1 [ 361.430799][ T9269] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 361.430836][ T9269] pci 0000:00:01.0: vgaarb: bridge control possible [ 361.430851][ T9269] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 361.448463][ T9269] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 361.448669][ T9269] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 361.459807][ T9269] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 361.478076][ T9269] [drm] Found bochs VGA, ID 0xb0c5. [ 361.478136][ T9269] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 361.495830][ T9269] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 361.831290][ T9272] loop5: detected capacity change from 0 to 7 [ 361.836334][ T9272] Dev loop5: unable to read RDB block 7 [ 361.836453][ T9272] loop5: unable to read partition table [ 361.836645][ T9272] loop5: partition table beyond EOD, truncated [ 361.836662][ T9272] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 361.969298][ T5981] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 362.160615][ T5981] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 362.167445][ T5981] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 362.172879][ T5981] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 362.180448][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.195532][ T9277] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 362.212715][ T5981] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.527744][ T9289] overlayfs: missing 'workdir' [ 363.580887][ T9290] CacheFiles: Empty directory specified [ 363.588201][ T9290] CacheFiles: No cache directory specified [ 363.650869][ T43] audit: type=1326 audit(2000000286.019:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.5.709" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc5fec code=0x0 [ 364.030343][ T42] usb 7-1: USB disconnect, device number 11 [ 364.039354][ T5982] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 364.190284][ T5982] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 364.196692][ T5982] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 364.202787][ T5982] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 364.210644][ T5982] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 364.220129][ T5982] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 364.227821][ T5982] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 364.239106][ T5982] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 364.242929][ T5982] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 364.248369][ T5982] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 364.254996][ T5982] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 364.255027][ T5982] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 364.270062][ T5982] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 364.270163][ T5982] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 364.270234][ T5982] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 364.270285][ T5982] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 364.270335][ T5982] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 364.377377][ T5982] usb 6-1: string descriptor 0 read error: -22 [ 364.380453][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.402809][ T5982] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 364.461466][ T9298] XFS (mtdblock0): Invalid superblock magic number [ 364.834042][ T9295] orangefs_mount: mount request failed with -4 [ 365.998201][ T1175] IPVS: starting estimator thread 0... [ 366.084725][ T9324] IPVS: using max 26 ests per chain, 62400 per kthread [ 367.315097][ T5859] usb 6-1: USB disconnect, device number 4 [ 367.402876][ T9323] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 367.492968][ T9323] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 367.493156][ T9323] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 367.493439][ T9323] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 367.493948][ T9323] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 367.528619][ T9323] pci 0000:00:01.0: Adding to iommu group 1 [ 367.550643][ T9323] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 367.550680][ T9323] pci 0000:00:01.0: vgaarb: bridge control possible [ 367.550694][ T9323] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 367.587296][ T9323] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 367.587559][ T9323] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 367.595687][ T9323] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 367.635779][ T9323] [drm] Found bochs VGA, ID 0xb0c5. [ 367.635867][ T9323] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 367.800475][ T9323] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 369.585415][ T9323] Console: switching to colour frame buffer device 160x50 [ 369.638236][ T9323] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 369.749315][ T42] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 369.899918][ T42] usb 10-1: Using ep0 maxpacket: 16 [ 369.903274][ T42] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 369.908996][ T42] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 369.909050][ T42] usb 10-1: config 0 has no interface number 0 [ 369.909107][ T42] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 369.909141][ T42] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 369.928541][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.928590][ T42] usb 10-1: Product: syz [ 369.928629][ T42] usb 10-1: Manufacturer: syz [ 369.928658][ T42] usb 10-1: SerialNumber: syz [ 369.943591][ T42] usb 10-1: config 0 descriptor?? [ 369.946565][ T9349] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 369.946739][ T9349] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 370.157641][ T9349] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 370.157859][ T9349] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 370.366624][ T42] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 370.367143][ T42] asix 10-1:0.34: probe with driver asix failed with error -61 [ 371.216720][ T9374] block device autoloading is deprecated and will be removed. [ 372.160243][ T5981] usb 10-1: USB disconnect, device number 2 [ 377.377178][ T9464] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 378.207890][ T9473] netlink: 'syz.2.751': attribute type 10 has an invalid length. [ 378.692568][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.692673][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.982753][ T9473] team0 (unregistering): Port device team_slave_0 removed [ 378.990712][ T9473] team0 (unregistering): Port device team_slave_1 removed [ 379.169805][ T9473] team0 (unregistering): Port device bond0 removed [ 382.135982][ T7222] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 382.427444][ T7222] usb 7-1: Using ep0 maxpacket: 32 [ 382.489291][ T7222] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 382.607450][ T7222] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 382.607524][ T7222] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 382.607576][ T7222] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 382.607639][ T7222] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 382.607678][ T7222] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 382.607720][ T7222] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 382.607760][ T7222] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 382.607801][ T7222] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 382.607865][ T7222] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.654920][ T7222] usb 7-1: config 0 descriptor?? [ 382.939199][ T7222] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 382.941736][ T7222] usb 7-1: USB disconnect, device number 12 [ 382.955906][ T7222] usblp0: removed [ 383.595135][ T7222] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 384.083476][ T7222] usb 7-1: Using ep0 maxpacket: 32 [ 384.093670][ T7222] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 384.215811][ T7222] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 384.215877][ T7222] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 384.215923][ T7222] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 384.216018][ T7222] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 384.216057][ T7222] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 384.216097][ T7222] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 384.216133][ T7222] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 384.216196][ T7222] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 384.216251][ T7222] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.262153][ T7222] usb 7-1: config 0 descriptor?? [ 384.634964][ T7222] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 384.713958][ T9511] syz.1.762 (9511): drop_caches: 2 [ 385.915979][ T9518] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 386.198913][ T7222] usb 7-1: USB disconnect, device number 13 [ 386.212125][ T7222] usblp0: removed [ 389.813198][ T9568] Console: switching to colour dummy device 80x25 [ 390.204915][ T9571] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 390.253030][ T9571] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 390.253254][ T9571] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 390.253725][ T9571] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 390.254319][ T9571] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 390.330313][ T9571] pci 0000:00:01.0: Adding to iommu group 1 [ 390.389648][ T9571] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 390.389687][ T9571] pci 0000:00:01.0: vgaarb: bridge control possible [ 390.389702][ T9571] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 390.427108][ T9571] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 390.427315][ T9571] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 390.438191][ T9571] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 390.468973][ T9571] [drm] Found bochs VGA, ID 0xb0c5. [ 390.469055][ T9571] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 390.789307][ T9571] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 391.278101][ T9571] Console: switching to colour frame buffer device 160x50 [ 391.347261][ T9571] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 392.735391][ T7222] kernel read not supported for file /usbmon0 (pid: 7222 comm: kworker/0:4) [ 392.878509][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 393.162931][ T9] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 393.276139][ T9] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 393.276200][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.276243][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 393.276299][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.426671][ T9] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 393.426836][ T9] usb 10-1: Product: syz [ 393.427000][ T9] usb 10-1: Manufacturer: syz [ 393.523301][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 393.530249][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 393.541510][ T9] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 393.544235][ T9] cdc_wdm 10-1:1.0: Unknown control protocol [ 393.757444][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.786'. [ 393.767686][ T9600] netlink: 28 bytes leftover after parsing attributes in process `syz.5.786'. [ 393.943156][ T9] usb 10-1: USB disconnect, device number 3 [ 394.458657][ T9623] netlink: 17 bytes leftover after parsing attributes in process `syz.1.798'. [ 394.508367][ T9626] netlink: 56 bytes leftover after parsing attributes in process `syz.0.791'. [ 394.798816][ T9628] geneve2: entered promiscuous mode [ 394.819451][ T5797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.819531][ T5797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.819593][ T5797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.819640][ T5797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.909627][ T9647] binder: 9646:9647 ioctl c00c6211 0 returned -14 [ 397.624025][ T9655] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 397.624074][ T9655] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 397.627067][ T9655] vhci_hcd vhci_hcd.0: Device attached [ 397.904537][ T9] usb 48-1: SetAddress Request (2) to port 0 [ 397.904858][ T9] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 399.188672][ T9656] vhci_hcd: connection reset by peer [ 399.220977][ T5824] vhci_hcd vhci_hcd.5: stop threads [ 399.221031][ T5824] vhci_hcd vhci_hcd.5: release socket [ 399.221102][ T5824] vhci_hcd vhci_hcd.5: disconnect device [ 401.285414][ T9696] netlink: 'syz.2.810': attribute type 2 has an invalid length. [ 401.292582][ T9696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.810'. [ 401.312084][ T9696] : entered promiscuous mode [ 402.904204][ T9710] batadv_slave_1: entered promiscuous mode [ 402.999727][ T9] usb 48-1: device descriptor read/8, error -110 [ 403.424247][ T9] usb usb48-port1: attempt power cycle [ 404.110667][ T9] usb usb48-port1: unable to enumerate USB device [ 405.040284][ T9745] netlink: 80 bytes leftover after parsing attributes in process `syz.0.822'. [ 405.040378][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 406.471327][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.474005][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.527304][ T9775] syzkaller1: entered promiscuous mode [ 406.527388][ T9775] syzkaller1: entered allmulticast mode [ 410.828377][ T43] audit: type=1326 audit(2000000333.189:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 410.828499][ T43] audit: type=1326 audit(2000000333.189:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 410.828575][ T43] audit: type=1326 audit(2000000333.189:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.840" exe="/syz-executor" sig=0 arch=40000003 syscall=122 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 410.828645][ T43] audit: type=1326 audit(2000000333.189:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 410.828689][ T43] audit: type=1326 audit(2000000333.189:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 410.828729][ T43] audit: type=1326 audit(2000000333.189:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.840" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 410.828767][ T43] audit: type=1326 audit(2000000333.189:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 410.828803][ T43] audit: type=1326 audit(2000000333.189:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 410.828827][ T43] audit: type=1326 audit(2000000333.189:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.840" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 410.830742][ T43] audit: type=1326 audit(2000000333.189:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 411.568185][ T7222] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 411.949684][ T7222] usb 7-1: not running at top speed; connect to a high speed hub [ 411.949772][ T7222] usb 7-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 412.067603][ T7222] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 412.310551][ T7222] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.310613][ T7222] usb 7-1: Product: syz [ 412.310653][ T7222] usb 7-1: Manufacturer: syz [ 412.310667][ T7222] usb 7-1: SerialNumber: syz [ 412.448507][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.5.845'. [ 412.637176][ T9838] 9pnet_virtio: no channels available for device syz [ 413.151063][ T7222] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 413.151217][ T7222] usb 7-1: MIDIStreaming interface descriptor not found [ 413.258255][ T7222] usb 7-1: USB disconnect, device number 14 [ 413.324221][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 415.759808][ T42] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 415.920661][ T42] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 415.921724][ T42] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 415.921850][ T42] usb 10-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 415.922761][ T42] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 415.922780][ T42] usb 10-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 415.923706][ T42] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 415.923724][ T42] usb 10-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 415.926473][ T42] usb 10-1: string descriptor 0 read error: -22 [ 415.926580][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.214751][ T9889] netlink: 56 bytes leftover after parsing attributes in process `syz.5.858'. [ 418.939388][ T5981] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 419.012046][ T42] usb 10-1: USB disconnect, device number 4 [ 419.101909][ T5981] usb 7-1: Using ep0 maxpacket: 8 [ 419.103843][ T5981] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 419.105948][ T5981] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 419.105969][ T5981] usb 7-1: config 0 has no interface number 0 [ 419.105995][ T5981] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.106066][ T5981] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 419.106086][ T5981] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 419.106168][ T5981] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 419.106199][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.123031][ T5981] usb 7-1: config 0 descriptor?? [ 420.360085][ T5981] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 420.369987][ T7222] usb 7-1: USB disconnect, device number 15 [ 420.372788][ T7222] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 420.957824][ T9942] CIFS mount error: No usable UNC path provided in device string! [ 420.957824][ T9942] [ 420.957893][ T9942] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 421.327593][ T43] audit: type=1326 audit(2000000343.689:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9952 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 421.330006][ T43] audit: type=1326 audit(2000000343.689:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9952 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701efec code=0x7ffc0000 [ 421.331719][ T43] audit: type=1326 audit(2000000343.689:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9952 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 421.332712][ T43] audit: type=1326 audit(2000000343.689:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9952 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf701efec code=0x7ffc0000 [ 421.332741][ T43] audit: type=1326 audit(2000000343.689:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9952 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 421.332763][ T43] audit: type=1326 audit(2000000343.689:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9952 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf701efec code=0x7ffc0000 [ 421.332954][ T43] audit: type=1326 audit(2000000343.689:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9952 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 421.333762][ T43] audit: type=1326 audit(2000000343.689:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9952 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efec code=0x7ffc0000 [ 421.333804][ T43] audit: type=1326 audit(2000000343.689:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9952 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 421.341452][ T43] audit: type=1326 audit(2000000343.689:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9952 comm="syz.2.870" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf701efec code=0x7ffc0000 [ 422.451650][ T9967] jffs2: notice: (9967) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 422.660574][ T9976] ªªªªª»: renamed from dummy0 (while UP) [ 424.420831][ T9964] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 424.547685][ T1347] hid-generic 0005:0007:0009.0006: item fetching failed at offset 0/1 [ 424.566221][ T1347] hid-generic 0005:0007:0009.0006: probe with driver hid-generic failed with error -22 [ 424.605828][ T9988] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 424.662415][ T9988] md: couldn't update array info. -22 [ 424.857004][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 424.909089][ T9990] md: could not open device unknown-block(1,1). [ 424.913757][ T9990] md: md_import_device returned -16 [ 426.383616][T10010] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.384340][T10010] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.212955][T10022] block2mtd: error: cannot open device /dev/loop0 [ 429.497837][T10055] tipc: Started in network mode [ 429.497905][T10055] tipc: Node identity ac14140f, cluster identity 4711 [ 429.498223][T10055] tipc: New replicast peer: 255.255.255.255 [ 429.498959][T10055] tipc: Enabled bearer , priority 10 [ 430.231689][T10040] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 430.519512][ T35] tipc: Node number set to 2886997007 [ 435.051564][T10118] netlink: 80 bytes leftover after parsing attributes in process `syz.1.903'. [ 435.051651][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 435.486009][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.5.905'. [ 438.268222][ T7222] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 438.287975][T10174] netlink: 36 bytes leftover after parsing attributes in process `syz.0.912'. [ 438.621412][ T7222] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 438.715589][ T7222] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.716605][ T7222] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.827822][ T7222] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 438.827882][ T7222] usb 7-1: SerialNumber: syz [ 439.129607][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'. [ 439.134569][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'. [ 439.145192][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 439.155654][T10162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.910'. [ 440.103232][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.103356][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.627540][ T7222] usb 7-1: USB disconnect, device number 16 [ 441.950793][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 441.955095][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'. [ 441.982168][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 441.992273][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'. [ 442.009614][ T5797] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.009725][ T5797] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.009787][ T5797] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.009814][ T5797] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.249303][ T7222] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 443.515066][ T7222] usb 10-1: Using ep0 maxpacket: 8 [ 443.573588][ T7222] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 443.693146][ T7222] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.693198][ T7222] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.693240][ T7222] usb 10-1: config 0 interface 0 has no altsetting 0 [ 443.693285][ T7222] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.695464][ T7222] usb 10-1: config 0 descriptor?? [ 443.899963][T10229] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 443.900007][T10229] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 443.906890][T10229] vhci_hcd vhci_hcd.0: Device attached [ 444.047561][ T123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.051311][ T123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.206083][ T2355] usb 40-1: SetAddress Request (2) to port 0 [ 444.206196][ T2355] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 444.238354][ T7222] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 444.238426][ T7222] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 444.238467][ T7222] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 444.238496][ T7222] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 444.238525][ T7222] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 444.238888][ T7222] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 444.891101][T10237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.923'. [ 444.891919][T10237] netlink: 32 bytes leftover after parsing attributes in process `syz.5.923'. [ 444.891960][T10237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.923'. [ 444.892117][T10237] netlink: 32 bytes leftover after parsing attributes in process `syz.5.923'. [ 445.446917][ T7222] usb 10-1: reset high-speed USB device number 5 using dummy_hcd [ 445.567657][T10229] orangefs_mount: mount request failed with -4 [ 445.624605][T10230] vhci_hcd: connection reset by peer [ 445.627525][ T7040] vhci_hcd vhci_hcd.1: stop threads [ 445.627551][ T7040] vhci_hcd vhci_hcd.1: release socket [ 445.629190][ T7040] vhci_hcd vhci_hcd.1: disconnect device [ 447.231941][ T9] usb 10-1: USB disconnect, device number 5 [ 447.653819][T10280] 9p: Bad value for 'rfdno' [ 448.746979][T10293] 9p: Bad value for 'rfdno' [ 449.319944][ T2355] usb 40-1: device descriptor read/8, error -110 [ 449.485704][T10295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.486866][T10295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.739241][ T2355] usb usb40-port1: attempt power cycle [ 449.748351][T10295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.792853][T10295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.337946][ T2355] usb usb40-port1: unable to enumerate USB device [ 451.509690][T10329] 9p: Bad value for 'rfdno' [ 453.057617][T10347] 9p: Bad value for 'rfdno' [ 455.300367][T10375] loop5: detected capacity change from 0 to 7 [ 455.320403][T10375] Dev loop5: unable to read RDB block 7 [ 455.323445][T10375] loop5: unable to read partition table [ 455.326186][T10375] loop5: partition table beyond EOD, truncated [ 455.332164][T10375] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 455.641565][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.949'. [ 455.805536][T10389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.952'. [ 455.857141][T10390] 9p: Bad value for 'rfdno' [ 455.860892][T10388] netlink: 'syz.2.953': attribute type 4 has an invalid length. [ 455.860945][T10388] netlink: 152 bytes leftover after parsing attributes in process `syz.2.953'. [ 455.863290][T10388] .`: renamed from bond0 [ 457.482689][T10401] netlink: 80 bytes leftover after parsing attributes in process `syz.2.957'. [ 457.487675][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 457.495743][T10403] overlayfs: missing 'workdir' [ 457.515508][T10403] CacheFiles: Empty directory specified [ 457.515750][T10403] CacheFiles: No cache directory specified [ 457.733310][T10267] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 458.157381][T10267] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 458.275781][T10267] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 458.275875][T10267] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 458.275934][T10267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.305972][T10400] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 458.336291][T10267] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.901152][ T43] kauditd_printk_skb: 1063 callbacks suppressed [ 459.902159][ T43] audit: type=1326 audit(2000000382.259:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 459.902212][ T43] audit: type=1326 audit(2000000382.259:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 459.931930][ T43] audit: type=1326 audit(2000000382.289:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 459.932949][ T43] audit: type=1326 audit(2000000382.289:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 459.933002][ T43] audit: type=1326 audit(2000000382.289:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 459.933047][ T43] audit: type=1326 audit(2000000382.289:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 459.982808][ T43] audit: type=1326 audit(2000000382.329:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 459.982915][ T43] audit: type=1326 audit(2000000382.329:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 460.022501][T10430] kvm [10429]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 460.126922][ T43] audit: type=1326 audit(2000000382.489:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 460.127034][ T43] audit: type=1326 audit(2000000382.489:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.5.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 460.155689][ T5981] usb 6-1: USB disconnect, device number 5 [ 460.530934][ T2355] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 460.668543][T10437] pci_bus 0000:01: busn_res: [bus 01] is released [ 460.721878][T10438] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 460.741199][T10438] pci 0000:00:04.0: PCI bridge to [bus 01] [ 460.741466][T10438] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 460.760338][T10438] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 460.763102][T10438] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 460.763850][T10438] pci 0000:00:04.0: enabling Extended Tags [ 460.770980][ T2355] usb 7-1: Using ep0 maxpacket: 16 [ 460.815556][T10438] pci 0000:00:04.0: Adding to iommu group 4 [ 460.828991][ T2355] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 460.835867][T10438] pci 0000:00:04.0: PCI bridge to [bus 01] [ 460.846192][T10438] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 460.846322][T10438] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 460.847297][T10438] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff]: assigned [ 460.847335][T10438] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 460.847367][T10438] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 460.847499][T10438] pci 0000:00:04.0: PCI bridge to [bus 01] [ 460.847626][T10438] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 460.851109][T10438] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 460.852808][T10438] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 460.945201][ T2355] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 460.977551][T10438] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 461.000651][T10438] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 461.093680][ T5859] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 461.103330][ T2355] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.103395][ T2355] usb 7-1: Product: syz [ 461.103474][ T2355] usb 7-1: Manufacturer: syz [ 461.103510][ T2355] usb 7-1: SerialNumber: syz [ 461.114347][ T2355] usb 7-1: config 0 descriptor?? [ 461.154892][T10448] netlink: 80 bytes leftover after parsing attributes in process `syz.5.969'. [ 461.154970][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.969'. [ 461.164626][ T2355] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 461.164666][ T2355] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 461.279703][ T5859] usb 6-1: Using ep0 maxpacket: 32 [ 461.280572][ T5859] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 461.281908][ T5859] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 461.281932][ T5859] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 461.281951][ T5859] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 461.282536][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 461.282558][ T5859] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 461.282579][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 461.282598][ T5859] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 461.282617][ T5859] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 461.282650][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.295076][ T5859] usb 6-1: config 0 descriptor?? [ 461.532261][ T5859] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 461.546456][ T5859] usb 6-1: USB disconnect, device number 6 [ 461.562076][ T5859] usblp0: removed [ 461.764808][T10452] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 462.102182][ T2355] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 462.139729][ T5859] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 462.309417][ T5859] usb 6-1: Using ep0 maxpacket: 32 [ 462.312779][ T5859] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 462.321901][ T5859] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 462.321959][ T5859] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 462.322005][ T5859] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 462.322064][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 462.322102][ T5859] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 462.322144][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 462.322182][ T5859] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 462.322220][ T5859] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 462.322274][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.364985][ T5859] usb 6-1: config 0 descriptor?? [ 462.579320][ T5859] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 462.744800][ T2355] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 462.750074][ T2355] em28xx 7-1:0.0: board has no eeprom [ 462.859948][T10433] em28xx 7-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 463.741400][ T2355] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 463.741508][ T2355] em28xx 7-1:0.0: dvb set to bulk mode. [ 463.743266][T10267] em28xx 7-1:0.0: Binding DVB extension [ 463.751279][ T2355] usb 7-1: USB disconnect, device number 17 [ 463.752907][ T2355] em28xx 7-1:0.0: Disconnecting em28xx [ 464.171002][ T1347] usb 6-1: USB disconnect, device number 7 [ 464.176348][ T1347] usblp0: removed [ 464.326485][T10267] em28xx 7-1:0.0: Registering input extension [ 464.338366][ T2355] em28xx 7-1:0.0: Closing input extension [ 464.498022][ T2355] em28xx: Freeing device [ 465.193529][T10487] netlink: 80 bytes leftover after parsing attributes in process `syz.1.979'. [ 465.193587][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'. [ 472.156017][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 473.182690][T10558] netlink: 12 bytes leftover after parsing attributes in process `syz.5.992'. [ 474.901899][ T7040] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.166354][ T7040] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.322376][ T7040] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.542649][T10513] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 475.567099][T10513] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 475.581270][T10513] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 475.590413][T10513] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 475.591222][T10513] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 475.660356][ T7040] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.079844][ T7040] bridge_slave_1: left allmulticast mode [ 476.079915][ T7040] bridge_slave_1: left promiscuous mode [ 476.080577][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.093233][ T7040] bridge_slave_0: left allmulticast mode [ 476.093322][ T7040] bridge_slave_0: left promiscuous mode [ 476.093852][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.392437][ T7040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.415448][ T7040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.449141][ T7040] bond0 (unregistering): Released all slaves [ 476.466788][T10601] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1008'. [ 476.466911][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 477.325435][ T5454] 8021q: adding VLAN 0 to HW filter on device eth10 [ 477.650358][T10513] Bluetooth: hci3: command tx timeout [ 478.343583][T10590] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.379539][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.384789][T10590] bridge_slave_0: entered allmulticast mode [ 478.387753][T10590] bridge_slave_0: entered promiscuous mode [ 478.447928][T10590] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.470997][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.471140][T10590] bridge_slave_1: entered allmulticast mode [ 478.472712][T10590] bridge_slave_1: entered promiscuous mode [ 478.484469][ T5454] 8021q: adding VLAN 0 to HW filter on device eth12 [ 478.578818][ T7040] hsr_slave_0: left promiscuous mode [ 478.591810][ T7040] hsr_slave_1: left promiscuous mode [ 478.668948][ T7040] veth1_macvtap: left promiscuous mode [ 478.669047][ T7040] veth0_macvtap: left promiscuous mode [ 478.669832][ T7040] veth1_vlan: left promiscuous mode [ 478.669905][ T7040] veth0_vlan: left promiscuous mode [ 479.731610][T10513] Bluetooth: hci3: command tx timeout [ 479.947161][ T7040] team0 (unregistering): Port device team_slave_1 removed [ 479.969299][ T7040] team0 (unregistering): Port device team_slave_0 removed [ 480.178501][T10590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.185784][T10590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.234982][T10590] team0: Port device team_slave_0 added [ 480.242092][T10590] team0: Port device team_slave_1 added [ 480.325752][T10590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.325839][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.325910][T10590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.343583][T10590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.343600][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.343625][T10590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.500072][T10590] hsr_slave_0: entered promiscuous mode [ 480.506199][T10590] hsr_slave_1: entered promiscuous mode [ 480.951045][ T5454] 8021q: adding VLAN 0 to HW filter on device eth11 [ 480.980507][T10664] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1010'. [ 480.980592][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 481.801269][T10513] Bluetooth: hci3: command tx timeout [ 483.132399][T10590] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 483.170859][T10590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.174785][T10590] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 483.335145][T10590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.336609][T10590] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 483.420327][T10590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 483.422006][T10590] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 483.517107][T10590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.759127][ T5454] 8021q: adding VLAN 0 to HW filter on device eth13 [ 483.883611][T10513] Bluetooth: hci3: command tx timeout [ 484.339066][T10590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.387536][T10590] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.426049][ T236] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.426178][ T236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.483446][ T236] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.483583][ T236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.232508][T10590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.493124][T10590] veth0_vlan: entered promiscuous mode [ 486.502677][T10590] veth1_vlan: entered promiscuous mode [ 486.555561][T10590] veth0_macvtap: entered promiscuous mode [ 486.565076][T10590] veth1_macvtap: entered promiscuous mode [ 486.623465][T10590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.635447][T10590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.670504][ T5797] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.670605][ T5797] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.670663][ T5797] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.670712][ T5797] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.828467][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.828520][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.859911][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.859964][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.729868][T10765] syz.6.1021 (10765): drop_caches: 2 [ 488.799466][ T50] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 489.009496][ T50] usb 7-1: Using ep0 maxpacket: 32 [ 489.017411][ T50] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 489.027133][ T50] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 489.027186][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 489.027289][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 489.027447][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 489.027596][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 489.052521][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.053349][ T50] usb 7-1: Product: syz [ 489.053546][ T50] usb 7-1: Manufacturer: syz [ 489.053584][ T50] usb 7-1: SerialNumber: syz [ 489.225594][ T50] usb 7-1: config 0 descriptor?? [ 489.366542][T10778] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1025'. [ 489.397612][T10778] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1025'. [ 489.609798][ T5859] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 489.837307][ T5859] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.843711][ T5859] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 489.847970][ T5859] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 489.853239][T10786] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1027'. [ 489.853406][T10786] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 489.870733][ T5859] usb 6-1: string descriptor 0 read error: -22 [ 489.874395][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.162353][ T5859] cdc_ncm 6-1:1.0: bind() failure [ 490.191994][ T5859] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 490.192106][ T5859] cdc_ncm 6-1:1.1: bind() failure [ 490.221782][ T5859] usb 6-1: USB disconnect, device number 8 [ 490.760923][ T50] iforce 7-1:0.0: usb_submit_urb failed: -110 [ 490.761346][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.762801][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.765672][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.768560][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.769070][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.772734][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.773153][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.773535][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.773917][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.774294][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.774674][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.775056][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.775468][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.775843][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.780604][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.780980][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.783834][ T50] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 490.783882][ T50] input input25: Timeout waiting for response from device. [ 491.456578][T10766] [U] ¹ÉMÙ­ÕÁQ& [ 491.459122][ T5859] usb 7-1: USB disconnect, device number 18 [ 491.644629][T10797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 491.834210][T10797] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 493.619980][ T2355] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 494.222845][T10833] 9p: Bad value for 'rfdno' [ 494.453645][ T2355] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 494.456605][ T2355] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 494.573145][ T2355] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.573270][ T2355] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 494.573299][ T2355] usb 11-1: config 0 interface 0 has no altsetting 0 [ 494.587760][T10851] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 494.690255][ T2355] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.690365][ T2355] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 494.690388][ T2355] usb 11-1: config 0 interface 0 has no altsetting 0 [ 494.811004][ T2355] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.811131][ T2355] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 494.811219][ T2355] usb 11-1: config 0 interface 0 has no altsetting 0 [ 494.928946][ T2355] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.929060][ T2355] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 494.929090][ T2355] usb 11-1: config 0 interface 0 has no altsetting 0 [ 495.050279][ T2355] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 495.050380][ T2355] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 495.050454][ T2355] usb 11-1: config 0 interface 0 has no altsetting 0 [ 495.168984][ T2355] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 495.169106][ T2355] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 495.169179][ T2355] usb 11-1: config 0 interface 0 has no altsetting 0 [ 495.287186][ T2355] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 495.287327][ T2355] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 495.287387][ T2355] usb 11-1: config 0 interface 0 has no altsetting 0 [ 495.408858][ T2355] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 495.408970][ T2355] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 495.409044][ T2355] usb 11-1: config 0 interface 0 has no altsetting 0 [ 495.598543][ T2355] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 495.598706][ T2355] usb 11-1: Product: syz [ 495.599045][ T2355] usb 11-1: Manufacturer: syz [ 495.599523][ T2355] usb 11-1: SerialNumber: syz [ 495.704765][ T2355] usb 11-1: config 0 descriptor?? [ 495.896006][ T2355] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 497.348447][T10897] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1048'. [ 497.431075][ C0] usb 11-1: yurex_control_callback - control failed: -2 [ 497.493504][T10267] usb 11-1: USB disconnect, device number 2 [ 497.499867][T10267] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 497.928770][T10905] binder: 10904:10905 ioctl c00c6211 0 returned -14 [ 498.008499][T10906] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 499.169458][ T5797] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.171495][ T5797] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.172988][ T5797] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.173155][ T5797] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.173227][ T5797] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.173271][ T5797] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.173315][ T5797] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.173344][ T5797] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.541666][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.544848][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.749954][T11007] futex_wake_op: syz.1.1070 tries to shift op by 144; fix this program [ 509.549951][T11057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.555194][T11057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.141619][T11063] ªªªªªª: renamed from vlan0 [ 512.627267][T11103] uhci_hcd 0000:00:1d.0: remove, state 1 [ 512.627529][T11103] usb usb1: USB disconnect, device number 1 [ 512.674642][T11103] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 513.143973][T11113] Unsupported ieee802154 address type: 0 [ 515.971877][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 523.259960][ T43] kauditd_printk_skb: 1088 callbacks suppressed [ 523.261379][ T43] audit: type=1326 audit(2000000445.629:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 523.261422][ T43] audit: type=1326 audit(2000000445.629:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 523.261625][ T43] audit: type=1326 audit(2000000445.629:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 523.261650][ T43] audit: type=1326 audit(2000000445.629:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 523.261801][ T43] audit: type=1326 audit(2000000445.629:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf701efec code=0x7ffc0000 [ 523.262115][ T43] audit: type=1326 audit(2000000445.629:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 523.262561][ T43] audit: type=1326 audit(2000000445.629:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701efec code=0x7ffc0000 [ 523.262787][ T43] audit: type=1326 audit(2000000445.629:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 523.262895][ T43] audit: type=1326 audit(2000000445.629:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 523.263292][ T43] audit: type=1326 audit(2000000445.629:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11210 comm="syz.2.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701efec code=0x7ffc0000 [ 523.655858][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 527.785196][T11270] bridge_slave_0: left allmulticast mode [ 527.785263][T11270] bridge_slave_0: left promiscuous mode [ 527.785820][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.791017][T11270] bridge_slave_1: left allmulticast mode [ 527.791032][T11270] bridge_slave_1: left promiscuous mode [ 527.791223][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.794427][T11270] bond0: (slave bond_slave_0): Releasing backup interface [ 527.823795][T11270] bond0: (slave bond_slave_1): Releasing backup interface [ 527.833701][T11270] team0: Port device team_slave_0 removed [ 527.837183][T11270] team0: Port device team_slave_1 removed [ 527.837651][T11270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.842723][T11270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.846838][T11270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 529.199293][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 530.972738][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 531.040899][T11331] dlm: no local IP address has been set [ 531.040966][T11331] dlm: cannot start dlm midcomms -107 [ 531.068139][T11331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.750643][ T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 531.910438][ T25] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 531.915315][ T25] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 531.919308][ T25] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 531.924812][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 531.924868][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 531.924897][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 531.941569][ T25] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 531.941608][ T25] usb 6-1: Product: syz [ 531.941638][ T25] usb 6-1: Manufacturer: syz [ 531.957560][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 531.959497][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 531.969388][ T25] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 531.969430][ T25] cdc_wdm 6-1:1.0: Unknown control protocol [ 532.039895][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 534.384812][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 534.384900][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 534.384899][ T1347] usb 6-1: USB disconnect, device number 9 [ 534.384912][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 536.243575][T11391] jffs2: notice: (11391) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 536.455494][T11390] dlm: Unknown command passed to DLM device : 0 [ 536.455494][T11390] [ 537.820514][T11438] netlink: 'syz.6.1157': attribute type 11 has an invalid length. [ 539.126969][T11438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.400057][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 540.569454][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 540.575021][ T25] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 540.581188][ T25] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 540.581558][ T25] usb 6-1: config 0 has no interface number 0 [ 540.584332][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.584358][ T25] usb 6-1: Product: syz [ 540.584373][ T25] usb 6-1: Manufacturer: syz [ 540.584389][ T25] usb 6-1: SerialNumber: syz [ 540.587670][ T25] usb 6-1: config 0 descriptor?? [ 540.601888][ T25] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 541.243009][ T25] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 541.254853][ T25] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 541.639952][T11446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.648192][T11446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.660496][ C2] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 541.664425][ T35] usb 6-1: USB disconnect, device number 10 [ 541.676259][ T35] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 541.704614][ T35] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 541.712143][ T35] quatech2 6-1:0.51: device disconnected [ 543.942653][ T50] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 544.125425][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 544.128542][ T43] audit: type=1326 audit(2000000466.479:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 544.147323][ T43] audit: type=1326 audit(2000000466.489:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 544.197586][ T43] audit: type=1326 audit(2000000466.549:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 544.201846][ T43] audit: type=1326 audit(2000000466.569:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 544.231829][ T43] audit: type=1326 audit(2000000466.579:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 544.271447][ T43] audit: type=1326 audit(2000000466.629:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 544.271679][ T43] audit: type=1326 audit(2000000466.629:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 544.271903][ T43] audit: type=1326 audit(2000000466.629:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 544.301465][ T43] audit: type=1326 audit(2000000466.659:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 544.304544][ T43] audit: type=1326 audit(2000000466.669:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.1.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 544.572132][T11495] netlink: 'syz.0.1171': attribute type 11 has an invalid length. [ 544.582222][ T50] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 544.583757][ T50] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 544.583781][ T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.583797][ T50] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 544.583831][ T50] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.585383][ T50] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 544.585408][ T50] usb 7-1: Product: syz [ 544.585425][ T50] usb 7-1: Manufacturer: syz [ 544.597894][ T50] cdc_wdm 7-1:1.0: skipping garbage [ 544.597914][ T50] cdc_wdm 7-1:1.0: skipping garbage [ 544.601588][ T50] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 544.601607][ T50] cdc_wdm 7-1:1.0: Unknown control protocol [ 544.663206][T11495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.667069][T11495] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.674523][T11495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.738824][T11495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 544.738892][T11495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 544.748600][T11495] veth1_vlan: left promiscuous mode [ 544.750512][T11495] veth0_vlan: left promiscuous mode [ 544.752168][T11495] veth0_vlan: entered promiscuous mode [ 544.758969][T11495] veth1_vlan: entered promiscuous mode [ 544.765225][T11495] veth1_macvtap: left promiscuous mode [ 544.767595][T11495] veth0_macvtap: left promiscuous mode [ 544.773339][T11495] veth0_macvtap: entered promiscuous mode [ 544.775277][T11495] veth1_macvtap: entered promiscuous mode [ 544.786145][T11495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.787885][T11495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.788620][T11495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.790079][T11495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.114509][T11497] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 545.114610][T11497] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 545.496190][T11496] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 546.711220][ T42] usb 7-1: USB disconnect, device number 19 [ 551.129438][T11549] netlink: 'syz.1.1182': attribute type 8 has an invalid length. [ 551.129491][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 552.428205][T11564] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 552.638626][T11564] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 552.648297][T11564] overlayfs: failed to look up (tracing) for ino (-66) [ 553.600786][ T43] kauditd_printk_skb: 3452 callbacks suppressed [ 553.601242][ T43] audit: type=1326 audit(2000000475.969:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.1197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 553.602608][ T43] audit: type=1326 audit(2000000475.969:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.1197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 553.611978][ T43] audit: type=1326 audit(2000000475.979:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.1197" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700efec code=0x7ffc0000 [ 553.612020][ T43] audit: type=1326 audit(2000000475.979:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.1197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 553.612056][ T43] audit: type=1326 audit(2000000475.979:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.1197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 553.613471][ T43] audit: type=1326 audit(2000000475.979:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.1197" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf700efec code=0x7ffc0000 [ 553.613511][ T43] audit: type=1326 audit(2000000475.979:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.1197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 553.613547][ T43] audit: type=1326 audit(2000000475.979:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.1197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 553.614041][ T43] audit: type=1326 audit(2000000475.979:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.1197" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf700efec code=0x7ffc0000 [ 553.614354][ T43] audit: type=1326 audit(2000000475.979:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.1197" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 555.489025][T11585] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 556.403739][T11599] loop5: detected capacity change from 0 to 7 [ 556.542032][T11599] Dev loop5: unable to read RDB block 7 [ 556.542340][T11599] loop5: unable to read partition table [ 556.543537][T11599] loop5: partition table beyond EOD, truncated [ 556.543655][T11599] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 558.347932][T11630] comedi comedi3: pcl818: I/O base address or length out of range [ 558.487614][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1193'. [ 558.488771][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1193'. [ 558.488979][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1193'. [ 558.495548][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1193'. [ 559.693196][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 560.964108][T11670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1208'. [ 561.408184][T11676] ªªªªª»: renamed from dummy0 [ 562.208177][T11679] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1210'. [ 563.055952][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.082454][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.015252][T11676] overlayfs: missing 'lowerdir' [ 567.460017][T11710] netlink: 'syz.2.1215': attribute type 11 has an invalid length. [ 567.515374][T11710] netlink: 'syz.2.1215': attribute type 10 has an invalid length. [ 567.515447][T11710] syz_tun: entered promiscuous mode [ 567.522141][T11710] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 567.565681][T11710] 8021q: adding VLAN 0 to HW filter on device .` [ 567.867356][T11710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 567.963511][T11710] veth1_macvtap: left promiscuous mode [ 567.993313][T11710] veth0_macvtap: left promiscuous mode [ 568.000813][T11710] veth0_macvtap: entered promiscuous mode [ 568.001854][T11710] veth1_macvtap: entered promiscuous mode [ 568.015537][T11710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 568.126099][T11710] bond1: entered allmulticast mode [ 568.126307][T11710] bridge2: entered allmulticast mode [ 568.137679][T11710] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 568.150939][T11710] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 568.161731][T11710] bridge2: entered promiscuous mode [ 568.166725][T11710] 8021q: adding VLAN 0 to HW filter on device eth0 [ 568.170156][T11710] 8021q: adding VLAN 0 to HW filter on device eth1 [ 568.174356][T11710] 8021q: adding VLAN 0 to HW filter on device eth2 [ 568.180116][T11710] 8021q: adding VLAN 0 to HW filter on device eth3 [ 568.183781][T11710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 568.187402][T11710] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 568.200221][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.200307][ T1164] bridge0: port 1(bridge_slave_0) entered listening state [ 568.207882][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.208060][ T1164] bridge0: port 2(bridge_slave_1) entered listening state [ 568.280012][ T7040] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.280178][ T7040] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.280276][ T7040] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.280333][ T7040] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.280506][ T7040] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.280562][ T7040] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.280770][ T7040] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.280825][ T7040] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.898214][ T50] openvswitch: cpu_id mismatch with handler threads [ 569.432984][ T50] openvswitch: cpu_id mismatch with handler threads [ 569.569126][T11727] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1223'. [ 569.578780][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 569.699511][ T5797] openvswitch: cpu_id mismatch with handler threads [ 572.296113][ T5797] openvswitch: cpu_id mismatch with handler threads [ 572.900729][ T43] kauditd_printk_skb: 1394 callbacks suppressed [ 572.906780][ T43] audit: type=1800 audit(2000000495.269:7781): pid=11741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1226" name="westwood" dev="sda1" ino=2042 res=0 errno=0 [ 574.307300][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'. [ 574.530648][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'. [ 575.368841][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'. [ 575.388400][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'. [ 575.557858][T11767] lo speed is unknown, defaulting to 1000 [ 575.557979][T11767] lo speed is unknown, defaulting to 1000 [ 575.558683][T11767] lo speed is unknown, defaulting to 1000 [ 575.559529][T11767] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 575.559554][T11767] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 575.559583][T11767] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 575.683098][T11767] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 575.758625][T11767] lo speed is unknown, defaulting to 1000 [ 575.768120][T11767] lo speed is unknown, defaulting to 1000 [ 575.775424][T11767] lo speed is unknown, defaulting to 1000 [ 575.777452][T11767] lo speed is unknown, defaulting to 1000 [ 575.779109][T11767] lo speed is unknown, defaulting to 1000 [ 576.120019][ T1347] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 576.389944][ T1347] usb 11-1: Using ep0 maxpacket: 16 [ 576.392408][ T1347] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 576.397294][ T1347] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 576.406502][ T1347] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.410120][ T1347] usb 11-1: Product: syz [ 576.412369][ T1347] usb 11-1: Manufacturer: syz [ 576.412418][ T1347] usb 11-1: SerialNumber: syz [ 576.419408][ T1347] usb 11-1: config 0 descriptor?? [ 576.427953][ T1347] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 576.435425][ T1347] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 577.651599][ T1347] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 578.029186][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.029443][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.463999][ T1347] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 578.481195][ T1347] em28xx 11-1:0.0: board has no eeprom [ 578.545295][T11772] em28xx 11-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 579.649251][ T1347] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 579.649307][ T1347] em28xx 11-1:0.0: dvb set to bulk mode. [ 579.656164][ T35] em28xx 11-1:0.0: Binding DVB extension [ 580.213444][ T1347] usb 11-1: USB disconnect, device number 3 [ 580.218403][ T1347] em28xx 11-1:0.0: Disconnecting em28xx [ 580.799578][ T35] em28xx 11-1:0.0: Registering input extension [ 580.902414][ T1347] em28xx 11-1:0.0: Closing input extension [ 581.014842][ T1347] em28xx: Freeing device [ 582.715690][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'. [ 583.278516][T11816] lo speed is unknown, defaulting to 1000 [ 583.360528][T11824] siw: device registration error -23 [ 590.367906][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 590.627831][T11865] lo speed is unknown, defaulting to 1000 [ 595.339929][ T35] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 595.491997][ T35] usb 11-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 595.504258][ T35] usb 11-1: config 0 has no interfaces? [ 595.509044][ T35] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.509097][ T35] usb 11-1: Product: syz [ 595.509125][ T35] usb 11-1: Manufacturer: syz [ 595.509680][ T35] usb 11-1: SerialNumber: syz [ 595.526224][ T35] usb 11-1: config 0 descriptor?? [ 596.380756][ T1347] usb 11-1: USB disconnect, device number 4 [ 597.138126][T11929] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1266'. [ 597.478420][T11935] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1276'. [ 597.494310][T11935] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1276'. [ 597.565760][T11929] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.571303][T11929] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.472310][T11929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.487281][T11929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.823560][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 598.824415][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 601.610775][T11933] geneve2: entered promiscuous mode [ 603.903213][T11975] netlink: 'syz.1.1287': attribute type 3 has an invalid length. [ 603.968858][T11975] FAULT_INJECTION: forcing a failure. [ 603.968858][T11975] name failslab, interval 1, probability 0, space 0, times 1 [ 603.975549][T11975] CPU: 3 UID: 0 PID: 11975 Comm: syz.1.1287 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.975583][T11975] Tainted: [L]=SOFTLOCKUP [ 603.975590][T11975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 603.975598][T11975] Call Trace: [ 603.975603][T11975] [ 603.975608][T11975] dump_stack_lvl+0x100/0x190 [ 603.975682][T11975] should_fail_ex.cold+0x5/0xa [ 603.975699][T11975] should_failslab+0xc2/0x120 [ 603.975735][T11975] __kmalloc_noprof+0xfc/0x840 [ 603.975755][T11975] ? kvm_io_bus_register_dev+0x1d2/0x710 [ 603.975772][T11975] kvm_io_bus_register_dev+0x1d2/0x710 [ 603.975790][T11975] kvm_pic_init+0x22f/0x380 [ 603.975809][T11975] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 603.975830][T11975] ? is_bpf_text_address+0x94/0x1a0 [ 603.975848][T11975] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 603.975867][T11975] ? __kernel_text_address+0xd/0x30 [ 603.975881][T11975] ? unwind_get_return_address+0x59/0xa0 [ 603.975897][T11975] ? __lock_acquire+0x4c5/0x1ec0 [ 603.975913][T11975] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 603.975930][T11975] ? rb_read_data_buffer.isra.0+0x174/0x470 [ 603.975946][T11975] ? check_buffer+0x13f/0x820 [ 603.975958][T11975] ? register_lock_class+0x3f/0x7b0 [ 603.975975][T11975] ? __pfx_check_buffer+0x10/0x10 [ 603.975990][T11975] ? __lock_acquire+0x4c5/0x1ec0 [ 603.976013][T11975] ? __lock_acquire+0x4c5/0x1ec0 [ 603.976031][T11975] ? __lock_acquire+0x4c5/0x1ec0 [ 603.976047][T11975] ? lock_acquire+0x1d1/0x380 [ 603.976061][T11975] ? unwind_next_frame+0xbd/0x2090 [ 603.976077][T11975] ? lock_acquire+0x1d1/0x380 [ 603.976092][T11975] ? is_bpf_text_address+0x25/0x1a0 [ 603.976108][T11975] ? find_held_lock+0x2b/0x80 [ 603.976119][T11975] ? is_bpf_text_address+0x8a/0x1a0 [ 603.976134][T11975] ? is_bpf_text_address+0x8a/0x1a0 [ 603.976149][T11975] ? bpf_ksym_find+0x124/0x1c0 [ 603.976160][T11975] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 603.976175][T11975] ? is_bpf_text_address+0x94/0x1a0 [ 603.976190][T11975] ? kernel_text_address+0x8d/0x100 [ 603.976204][T11975] ? __pfx_widen_string+0x10/0x10 [ 603.976237][T11975] ? __kernel_text_address+0xd/0x30 [ 603.976254][T11975] ? unwind_get_return_address+0x59/0xa0 [ 603.976271][T11975] kvm_vm_ioctl+0x167d/0x42d0 [ 603.976285][T11975] ? tomoyo_path_number_perm+0x46d/0x580 [ 603.976302][T11975] ? stack_trace_save+0x8e/0xc0 [ 603.976316][T11975] ? __pfx_stack_trace_save+0x10/0x10 [ 603.976332][T11975] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 603.976343][T11975] ? __lock_acquire+0x4c5/0x1ec0 [ 603.976359][T11975] ? tomoyo_path_number_perm+0x46d/0x580 [ 603.976374][T11975] ? kasan_save_stack+0x3f/0x50 [ 603.976386][T11975] ? kasan_save_stack+0x30/0x50 [ 603.976398][T11975] ? kasan_save_track+0x14/0x30 [ 603.976410][T11975] ? kasan_save_free_info+0x3b/0x70 [ 603.976427][T11975] ? __kasan_slab_free+0x5f/0x80 [ 603.976440][T11975] ? kfree+0x22b/0x6d0 [ 603.976455][T11975] ? tomoyo_path_number_perm+0x46d/0x580 [ 603.976469][T11975] ? security_file_ioctl_compat+0xd3/0x230 [ 603.976484][T11975] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 603.976501][T11975] ? __do_fast_syscall_32+0x13a/0x8b0 [ 603.976515][T11975] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 603.976532][T11975] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 603.976562][T11975] ? kasan_quarantine_put+0x104/0x240 [ 603.976574][T11975] ? lockdep_hardirqs_on+0x7d/0x110 [ 603.976589][T11975] ? find_held_lock+0x2b/0x80 [ 603.976600][T11975] ? tomoyo_path_number_perm+0x28f/0x580 [ 603.976630][T11975] ? tomoyo_path_number_perm+0x28f/0x580 [ 603.976648][T11975] ? tomoyo_path_number_perm+0x188/0x580 [ 603.976664][T11975] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 603.976678][T11975] ? futex_wait+0x11e/0x370 [ 603.976696][T11975] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 603.976714][T11975] ? do_vfs_ioctl+0x226/0x13e0 [ 603.976732][T11975] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 603.976755][T11975] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 603.976767][T11975] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 603.976778][T11975] ? __fget_files+0x34/0x3d0 [ 603.976792][T11975] ? find_held_lock+0x2b/0x80 [ 603.976803][T11975] ? __fget_files+0x215/0x3d0 [ 603.976814][T11975] ? hook_file_ioctl_common+0x140/0x440 [ 603.976834][T11975] ? __fget_files+0x21f/0x3d0 [ 603.976850][T11975] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 603.976863][T11975] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 603.976883][T11975] __do_fast_syscall_32+0x13a/0x8b0 [ 603.976901][T11975] do_fast_syscall_32+0x32/0x70 [ 603.976917][T11975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 603.976932][T11975] RIP: 0023:0xf7fb5fec [ 603.976946][T11975] Code: Unable to access opcode bytes at 0xf7fb5fc2. [ 603.976952][T11975] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 603.976964][T11975] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000ae60 [ 603.976971][T11975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 603.976977][T11975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 603.976983][T11975] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 603.976990][T11975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 603.977004][T11975] [ 604.439554][T11963] syz.2.1273 (11963): drop_caches: 2 [ 605.132782][T11990] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 605.431720][T11987] pi3usb30532 0-0059: Error reading config register -6 [ 605.436295][T11987] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x59 [ 610.726132][T12015] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.726482][T12015] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.731162][T12040] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 614.588900][T12053] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 614.604084][T12015] bond1: left allmulticast mode [ 614.608177][T12015] bridge2: left allmulticast mode [ 614.608301][T12015] bridge2: left promiscuous mode [ 614.622125][T12053] input: syz0 as /devices/virtual/input/input28 [ 614.908008][ T50] lo speed is unknown, defaulting to 1000 [ 614.914538][ T50] syz0: Port: 1 Link DOWN [ 614.919611][ T5797] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.924041][ T5797] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.926736][ T5797] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.929837][ T5797] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.932926][ T5797] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.936467][ T5797] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.940087][ T5797] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.943441][ T5797] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.085296][T12061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1300'. [ 617.588937][ T43] audit: type=1800 audit(2000000539.949:7782): pid=12073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1301" name="idProduct" dev="configfs" ino=40909 res=0 errno=0 [ 617.609410][ T43] audit: type=1800 audit(2000000539.969:7783): pid=12073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1301" name="serialnumber" dev="configfs" ino=40911 res=0 errno=0 [ 617.642160][ T43] audit: type=1800 audit(2000000540.009:7784): pid=12073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1301" name="configuration" dev="configfs" ino=40913 res=0 errno=0 [ 620.369975][ T2355] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 620.732644][ T2355] usb 6-1: Using ep0 maxpacket: 8 [ 620.784551][ T2355] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 621.515102][ T2355] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 621.517089][ T2355] usb 6-1: config 0 has no interface number 0 [ 621.519087][ T2355] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 621.520392][ T2355] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 621.520527][ T2355] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 621.520692][ T2355] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 621.520957][ T2355] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.696659][ T2355] usb 6-1: config 0 descriptor?? [ 621.897368][ T2355] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 623.652711][ T1015] usb 6-1: USB disconnect, device number 11 [ 623.804234][ T1015] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 624.465208][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.557325][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.573514][ T43] audit: type=1326 audit(2000000546.749:7785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.0.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 624.573809][ T43] audit: type=1326 audit(2000000546.909:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.0.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 624.807944][ T43] audit: type=1326 audit(2000000547.169:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.0.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 624.808204][ T43] audit: type=1326 audit(2000000547.169:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.0.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 624.808415][ T43] audit: type=1326 audit(2000000547.169:7789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.0.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf700efec code=0x7ffc0000 [ 624.808732][ T43] audit: type=1326 audit(2000000547.169:7790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.0.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 624.808924][ T43] audit: type=1326 audit(2000000547.169:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.0.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 624.809060][ T43] audit: type=1326 audit(2000000547.169:7792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.0.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 624.809812][ T43] audit: type=1326 audit(2000000547.169:7793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.0.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 624.810077][ T43] audit: type=1326 audit(2000000547.179:7794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz.0.1306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 624.893603][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 624.921609][T12102] lo speed is unknown, defaulting to 1000 [ 625.082885][T12103] siw: device registration error -23 [ 627.727874][T12131] netlink: 'syz.1.1314': attribute type 4 has an invalid length. [ 627.727985][T12131] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1314'. [ 632.509614][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 632.509683][ T43] audit: type=1326 audit(2000000554.869:7798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.0.1320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 632.522300][ T43] audit: type=1326 audit(2000000554.889:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.0.1320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 632.737060][T12158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.750956][T12158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.815987][ T43] audit: type=1326 audit(2000000555.179:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.0.1320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 636.131886][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 636.163666][T12167] lo speed is unknown, defaulting to 1000 [ 636.213728][T12168] siw: device registration error -23 [ 636.345345][T12171] lo speed is unknown, defaulting to 1000 [ 639.241211][T12191] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1329'. [ 639.241441][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 640.508065][T12203] pci_bus 0000:01: busn_res: [bus 01] is released [ 641.475603][T12206] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 641.539500][T12206] pci 0000:00:04.0: PCI bridge to [bus 01] [ 641.546316][T12206] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 641.560141][T12206] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 641.583738][T12206] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 641.604117][T12206] pci 0000:00:04.0: enabling Extended Tags [ 642.234790][T12206] pci 0000:00:04.0: Adding to iommu group 4 [ 642.463794][T12206] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 642.468236][T12206] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 642.581716][T12206] pci 0000:00:1d.0: Adding to iommu group 7 [ 642.597232][T12206] pci 0000:00:04.0: PCI bridge to [bus 01] [ 642.621323][T12206] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 642.638466][T12206] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 642.638654][T12206] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff]: assigned [ 642.638709][T12206] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 642.638758][T12206] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 642.638804][T12206] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 642.653607][T12206] pci 0000:00:04.0: PCI bridge to [bus 01] [ 642.653734][T12206] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 642.664846][T12206] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 642.666384][T12206] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 642.852750][T12206] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 642.904887][T12206] aer 0000:00:04.0:pcie002: error -EINTR: request_irq(26) aer_irq aer_isr aerdrv [ 642.905149][T12206] pcieport 0000:00:04.0: AER: request AER IRQ 26 failed [ 642.905280][T12206] aer 0000:00:04.0:pcie002: probe with driver aer failed with error -4 [ 643.010466][T12219] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 643.055948][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1334'. [ 643.120244][T12219] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock [ 643.140405][T12213] lo speed is unknown, defaulting to 1000 [ 643.141024][T12222] siw: device registration error -23 [ 643.285423][T12206] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 350746 usecs [ 643.331253][T12206] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 643.493433][T12206] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 643.494257][T12206] uhci_hcd 0000:00:1d.0: detected 2 ports [ 643.546434][T12206] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 643.584910][T12206] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 643.601946][T12206] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 643.602243][T12206] usb usb1: Product: UHCI Host Controller [ 643.602340][T12206] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 643.602436][T12206] usb usb1: SerialNumber: 0000:00:1d.0 [ 643.709383][T12206] hub 1-0:1.0: USB hub found [ 643.733151][T12206] hub 1-0:1.0: 2 ports detected [ 646.572690][T12247] binder: Unknown parameter 'ÿ' [ 646.958515][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1343'. [ 647.315429][T12257] nfs4: Unknown parameter '*Ów ÑQytlh‰ÞÔ [ 652.603855][ T56] dump_stack_lvl+0x100/0x190 [ 652.603871][ T56] print_report+0x13d/0x4b0 [ 652.603889][ T56] ? __virt_addr_valid+0x239/0x430 [ 652.603907][ T56] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 652.603923][ T56] kasan_report+0xdf/0x1c0 [ 652.603938][ T56] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 652.603955][ T56] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 652.603972][ T56] ? preempt_schedule_common+0x3c/0xb0 [ 652.603986][ T56] ? preempt_schedule_thunk+0x16/0x40 [ 652.603999][ T56] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 652.604016][ T56] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 652.604030][ T56] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 652.604047][ T56] drm_atomic_helper_commit_tail+0xff/0x130 [ 652.604063][ T56] commit_tail+0x338/0x430 [ 652.604080][ T56] process_one_work+0xac7/0x1b10 [ 652.604096][ T56] ? __pfx_process_one_work+0x10/0x10 [ 652.604110][ T56] ? lock_acquire+0x1d1/0x380 [ 652.604127][ T56] ? __pfx_commit_work+0x10/0x10 [ 652.604142][ T56] worker_thread+0x5ef/0xe50 [ 652.604157][ T56] ? __pfx_worker_thread+0x10/0x10 [ 652.604171][ T56] ? kthread+0x13a/0x450 [ 652.604182][ T56] ? __pfx_worker_thread+0x10/0x10 [ 652.604195][ T56] kthread+0x373/0x450 [ 652.604206][ T56] ? __pfx_kthread+0x10/0x10 [ 652.604218][ T56] ret_from_fork+0x730/0xd60 [ 652.604236][ T56] ? __pfx_ret_from_fork+0x10/0x10 [ 652.604254][ T56] ? __switch_to+0x800/0x10f0 [ 652.604268][ T56] ? __pfx_kthread+0x10/0x10 [ 652.604280][ T56] ret_from_fork_asm+0x1a/0x30 [ 652.604293][ T56] [ 652.604297][ T56] [ 652.604299][ T56] Allocated by task 12301: [ 652.604306][ T56] kasan_save_stack+0x30/0x50 [ 652.604317][ T56] kasan_save_track+0x14/0x30 [ 652.604328][ T56] __kasan_kmalloc+0xaa/0xb0 [ 652.604339][ T56] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 652.604355][ T56] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 652.604372][ T56] drm_atomic_get_crtc_state+0x1de/0x690 [ 652.604384][ T56] page_flip_common+0x59/0x320 [ 652.604395][ T56] drm_atomic_helper_page_flip+0xb6/0x180 [ 652.604410][ T56] drm_mode_page_flip_ioctl+0x1095/0x14a0 [ 652.604425][ T56] drm_ioctl_kernel+0x1f3/0x3e0 [ 652.604438][ T56] drm_ioctl+0x5e6/0xc60 [ 652.604450][ T56] drm_compat_ioctl+0x386/0x4c0 [ 652.604465][ T56] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 652.604481][ T56] __do_fast_syscall_32+0x13a/0x8b0 [ 652.604495][ T56] do_fast_syscall_32+0x32/0x70 [ 652.604509][ T56] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 652.604522][ T56] [ 652.604524][ T56] Freed by task 5982: [ 652.604529][ T56] kasan_save_stack+0x30/0x50 [ 652.604545][ T56] kasan_save_track+0x14/0x30 [ 652.604556][ T56] kasan_save_free_info+0x3b/0x70 [ 652.604573][ T56] __kasan_slab_free+0x5f/0x80 [ 652.604584][ T56] kfree+0x22b/0x6d0 [ 652.604598][ T56] drm_atomic_commit_default_clear+0x465/0x10c0 [ 652.604612][ T56] __drm_atomic_commit_free+0x185/0x2f0 [ 652.604625][ T56] drm_atomic_helper_dirtyfb+0x578/0x790 [ 652.604636][ T56] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 652.604646][ T56] drm_fb_helper_damage_work+0x4c8/0xab0 [ 652.604661][ T56] process_one_work+0xac7/0x1b10 [ 652.604672][ T56] worker_thread+0x5ef/0xe50 [ 652.604684][ T56] kthread+0x373/0x450 [ 652.604694][ T56] ret_from_fork+0x730/0xd60 [ 652.604709][ T56] ret_from_fork_asm+0x1a/0x30 [ 652.604718][ T56] [ 652.604720][ T56] The buggy address belongs to the object at ffff8880571cd000 [ 652.604720][ T56] which belongs to the cache kmalloc-512 of size 512 [ 652.604729][ T56] The buggy address is located 9 bytes inside of [ 652.604729][ T56] freed 512-byte region [ffff8880571cd000, ffff8880571cd200) [ 652.604739][ T56] [ 652.604743][ T56] The buggy address belongs to the physical page: [ 652.604748][ T56] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880571cf000 pfn:0x571cc [ 652.604758][ T56] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 652.604767][ T56] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 652.604778][ T56] page_type: f5(slab) [ 652.604787][ T56] raw: 04fff00000000240 ffff88801c042c80 ffff8880404007c8 ffffea0001c26910 [ 652.604797][ T56] raw: ffff8880571cf000 000000000010000e 00000000f5000000 0000000000000000 [ 652.604807][ T56] head: 04fff00000000240 ffff88801c042c80 ffff8880404007c8 ffffea0001c26910 [ 652.604816][ T56] head: ffff8880571cf000 000000000010000e 00000000f5000000 0000000000000000 [ 652.604826][ T56] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 652.604835][ T56] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 652.604841][ T56] page dumped because: kasan: bad access detected [ 652.604847][ T56] page_owner tracks the page as allocated [ 652.604851][ T56] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10667, tgid 10665 (syz.0.1007), ts 481003021685 [ 652.604869][ T56] post_alloc_hook+0xfd/0x120 [ 652.604884][ T56] get_page_from_freelist+0x110d/0x35d0 [ 652.604901][ T56] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 652.604918][ T56] new_slab+0xa9/0x6e0 [ 652.604933][ T56] refill_objects+0xe3/0x410 [ 652.604948][ T56] __pcs_replace_empty_main+0x35e/0x650 [ 652.604964][ T56] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 652.604979][ T56] snd_seq_create_port+0xcd/0x4f0 [ 652.604993][ T56] snd_seq_ioctl_create_port+0x250/0x9e0 [ 652.605005][ T56] call_seq_client_ctl+0xa3/0x130 [ 652.605016][ T56] snd_seq_kernel_client_ctl+0x35/0x50 [ 652.605029][ T56] create_port+0x19b/0x270 [ 652.605041][ T56] snd_seq_oss_open+0x292/0xa10 [ 652.605054][ T56] odev_open+0x6f/0x90 [ 652.605065][ T56] soundcore_open+0x2e3/0x5a0 [ 652.605078][ T56] chrdev_open+0x234/0x6a0 [ 652.605089][ T56] page last free pid 7040 tgid 7040 ts 480944297042 stack trace: [ 652.605096][ T56] __free_frozen_pages+0x79f/0x10f0 [ 652.605110][ T56] ops_undo_list+0x4c2/0xab0 [ 652.605123][ T56] cleanup_net+0x499/0x920 [ 652.605136][ T56] process_one_work+0xac7/0x1b10 [ 652.605147][ T56] worker_thread+0x5ef/0xe50 [ 652.605159][ T56] kthread+0x373/0x450 [ 652.605169][ T56] ret_from_fork+0x730/0xd60 [ 652.605184][ T56] ret_from_fork_asm+0x1a/0x30 [ 652.605193][ T56] [ 652.605195][ T56] Memory state around the buggy address: [ 652.605200][ T56] ffff8880571ccf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 652.605208][ T56] ffff8880571ccf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 652.605215][ T56] >ffff8880571cd000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 652.605221][ T56] ^ [ 652.605226][ T56] ffff8880571cd080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 652.605234][ T56] ffff8880571cd100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 652.605240][ T56] ================================================================== [ 652.615159][ T56] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 652.885443][ T56] CPU: 2 UID: 0 PID: 56 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.888646][ T56] Tainted: [L]=SOFTLOCKUP [ 652.890079][ T56] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 652.892961][ T56] Workqueue: events_unbound commit_work [ 652.894579][ T56] Call Trace: [ 652.895657][ T56] [ 652.896773][ T56] dump_stack_lvl+0x100/0x190 [ 652.898584][ T56] vpanic+0x553/0x970 [ 652.900193][ T56] ? __pfx_vpanic+0x10/0x10 [ 652.902287][ T56] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 652.905557][ T56] panic+0xd1/0xe0 [ 652.907023][ T56] ? __pfx_panic+0x10/0x10 [ 652.908733][ T56] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 652.911518][ T56] ? preempt_schedule_common+0x3c/0xb0 [ 652.913615][ T56] check_panic_on_warn.cold+0x19/0x34 [ 652.915902][ T56] end_report.part.0+0x3a/0x90 [ 652.918022][ T56] kasan_report.cold+0xe/0x18 [ 652.920052][ T56] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 652.922990][ T56] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 652.925654][ T56] ? preempt_schedule_common+0x3c/0xb0 [ 652.927759][ T56] ? preempt_schedule_thunk+0x16/0x40 [ 652.929820][ T56] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 652.933011][ T56] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 652.935910][ T56] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 652.939018][ T56] drm_atomic_helper_commit_tail+0xff/0x130 [ 652.941300][ T56] commit_tail+0x338/0x430 [ 652.943028][ T56] process_one_work+0xac7/0x1b10 [ 652.944934][ T56] ? __pfx_process_one_work+0x10/0x10 [ 652.946952][ T56] ? lock_acquire+0x1d1/0x380 [ 652.948572][ T56] ? __pfx_commit_work+0x10/0x10 [ 652.950270][ T56] worker_thread+0x5ef/0xe50 [ 652.951887][ T56] ? __pfx_worker_thread+0x10/0x10 [ 652.953644][ T56] ? kthread+0x13a/0x450 [ 652.955140][ T56] ? __pfx_worker_thread+0x10/0x10 [ 652.956897][ T56] kthread+0x373/0x450 [ 652.958154][ T56] ? __pfx_kthread+0x10/0x10 [ 652.959654][ T56] ret_from_fork+0x730/0xd60 [ 652.961392][ T56] ? __pfx_ret_from_fork+0x10/0x10 [ 652.963338][ T56] ? __switch_to+0x800/0x10f0 [ 652.965045][ T56] ? __pfx_kthread+0x10/0x10 [ 652.966379][ T56] ret_from_fork_asm+0x1a/0x30 [ 652.967778][ T56] [ 652.969260][ T56] Kernel Offset: disabled [ 652.970525][ T56] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:50:27 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88801c768000 RSI=ffffffff81e98c9e RDI=ffff88801c768000 RBP=ffffc9000042fda8 RSP=ffffc9000042fa40 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=1ffff92000085f53 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bd08660 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096967000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffe45ff8 CR3=000000004b238000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801cb14b00 RSI=ffffffff81b64e9e RDI=ffff88801cb14b00 RBP=0000000000000001 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=0000000000000000 RIP=ffffffff81b64e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c388e80 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae24d5 RDI=ffffffff9bc501e0 RBP=ffffffff9bc501a0 RSP=ffffc9000077f220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=362e32353620205b R12=0000000000000000 R13=0000000000000064 R14=0000000000000003 R15=ffffc9000077f538 RIP=ffffffff85ae24ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003280eff8 CR3=0000000052a5b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f809ffffffff829b f7d9ffffffff829b f74cffffffff829b da67ffffffff829b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f9a8ffffffff829b f98cffffffff829b f8eaffffffff829b f868ffffffff829b ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fb40ffffffff829b fad9ffffffff829b fa2bffffffff829b f9e8ffffffff829b ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5153ffffffff84d8 5149ffffffff84d8 513fffffffff84d8 5135ffffffff84d8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 512bffffffff84d8 5121ffffffff84d8 5113ffffffff829c 6b4effffffff829c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b27ffffffff829c 6b1dffffffff829b feedffffffff829b fc51ffffffff829b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc3fffffffff829b fc29ffffffff829b fbbbffffffff829b fb97ffffffff829b ZMM24=8305ff9d8305ff9d 8305ff9d8305ff9d 8305ff9d8305ff9d 8305ff9d8305ff9d 8305ff9d8305ff9d 8305ff9d8305ff9d 8305ff9d8305ff9d 8305ff9d8305ff9d ZMM25=5f8f7cff5f8f7cff 5f8f7cff5f8f7cff 5f8f7cff5f8f7cff 5f8f7cff5f8f7cff 5f8f7cff5f8f7cff 5f8f7cff5f8f7cff 5f8f7cff5f8f7cff 5f8f7cff5f8f7cff ZMM26=9b91ee779b91ee77 9b91ee779b91ee77 9b91ee779b91ee77 9b91ee779b91ee77 9b91ee779b91ee77 9b91ee779b91ee77 9b91ee779b91ee77 9b91ee779b91ee77 ZMM27=df417d68df417d68 df417d68df417d68 df417d68df417d68 df417d68df417d68 df417d68df417d68 df417d68df417d68 df417d68df417d68 df417d68df417d68 ZMM28=000001800000017f 0000017e0000017d 0000017c0000017b 0000017a00000179 0000017800000177 0000017600000175 0000017400000173 0000017200000171 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8b1900008b190000 8b1900008b190000 8b1900008b190000 8b1900008b190000 8b1900008b190000 8b1900008b190000 8b1900008b190000 8b1900008b190000 info registers vcpu 3 CPU#3 EAX=f6c4bf38 EBX=f6c4c0b8 ECX=820dbf07 EDX=f6c4c0b8 ESI=820dbf07 EDI=ffffffff EBP=ffffffff ESP=ffb5d6b0 EIP=f708b410 EFL=00000282 [--S----] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 573bc480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032806ff8 CR3=00000000746dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000006806 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000