last executing test programs: 17m45.925275827s ago: executing program 32 (id=2530): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4004050) socket(0x400000000010, 0x3, 0x0) r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000600)={0x101, 0x1, 0x1, 0x80, 0x400, 0x56b}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000940)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x2, 0x7f, 0x2b, 0x20, 0x5}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2423}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x0, 0x0}]}) r2 = gettid() process_vm_writev(r2, &(0x7f0000001200)=[{&(0x7f0000001240)=""/247, 0xf7}], 0x1, &(0x7f0000001340)=[{&(0x7f0000001380)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 15m26.654583553s ago: executing program 0 (id=3859): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x17) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000002000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x7005}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240), 0x8) 15m26.528035514s ago: executing program 0 (id=3861): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@index_on}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, r1, 0x1, 0x2070bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) mount(0x0, &(0x7f0000000b00)='./dev\x00', &(0x7f0000000b40)='devtmpfs\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)={0x24, 0x2d, 0x1, 0x70bd2a, 0x0, "", [@typed={0x6, 0x0, 0x0, 0x0, @str=':\x00'}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x7, 0xfb, 0x0, 0x1, [@generic="33a368"]}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x2000c000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/md0\x00', 0x4002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ff0000) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r6 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000840)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000880)={0x15, 0x110, 0xfa00, {r8, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f00000009c0)={0x7, 0x8, 0xfa00, {r8, 0x4734}}, 0x10) open_by_handle_at(r0, &(0x7f0000000a80)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x8000, 0x1, 0x0, 0xff, 0x1, 0xe}}, 0xa000) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000a00)={0x1, 0x10, 0xfa00, {&(0x7f0000000a40), r8}}, 0x18) sendmsg$NFT_BATCH(r6, 0x0, 0x80c0) ioctl(r5, 0x301, &(0x7f0000000500)="2aaf5361185996e215ce0cd2d8cc52c37587fbe7406f3d0b91653b73113300a64b19fca6b66195700700000090585ac82b681b79348a8f9915fbf7d8c7a2233999622efb7e8b911f65b05400f3dfef7700999f0b78ef091feb77e01a46641d0b43977267391730d85e7436223390739e03fbe4c0f676b7f4b3e202d3ae4ab06ebc7235f33884071144d9ec94a300000000000000000000000000bc954f48e8b2d0458efe56d24404e3ae7fc8c973e3d123bfa0b27770e51fd6f58795e8c0d3702029f9391d677cd029942616fa27cb5fe8c04cd8") 15m26.364515337s ago: executing program 0 (id=3862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 15m26.229894076s ago: executing program 0 (id=3863): r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000100000114000400000000000000"], 0xb8}}, 0x0) r3 = inotify_init1(0x80000) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, 0x0) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, 0x0, 0x0) shutdown(r4, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000680)="38f518", 0x3}], 0x1) 15m26.036947264s ago: executing program 0 (id=3865): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x4, 0x3}, 0xfffffffe, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x80000001}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000002c0)={0xc, @multicast1, 0x4e21, 0x1, 'wlc\x00', 0xb, 0x5, 0x38}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2, 0x4000010, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000003aa956e52392b62b85e1fb9fe9711500000000"], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000ec0)='./config\x00', &(0x7f0000000f00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r6, &(0x7f0000001040)="aa", 0x1) symlinkat(&(0x7f0000001080)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r7, &(0x7f0000001140)='dummy_udc.0', 0xb) sendmsg$nl_route(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4048050}, 0x4000) getpid() 15m25.075375967s ago: executing program 0 (id=3874): pipe(&(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000640)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000840)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000880)='bridge_slave_1\x00', 0x10) sendmmsg(r3, &(0x7f00000008c0), 0x800001d, 0x810) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x700, &(0x7f0000000500)={&(0x7f0000000540)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc02, {0x7, 0x0, 0x0, r5, 0x2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 15m24.869510058s ago: executing program 33 (id=3874): pipe(&(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000640)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000840)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000880)='bridge_slave_1\x00', 0x10) sendmmsg(r3, &(0x7f00000008c0), 0x800001d, 0x810) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x700, &(0x7f0000000500)={&(0x7f0000000540)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc02, {0x7, 0x0, 0x0, r5, 0x2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 14m51.324090419s ago: executing program 1 (id=4306): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20048800) 14m51.184125194s ago: executing program 1 (id=4309): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x30, r1, 0x1, 0x70bd2c, 0x1, {{0x2}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2000004, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 14m51.123669175s ago: executing program 1 (id=4311): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./cifs\x00', 0x1ed) mount(0x0, &(0x7f00000002c0)='./cifs\x00', &(0x7f0000000380)='cifs\x00', 0x0, 0x0) 14m51.091048821s ago: executing program 1 (id=4312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) close(0x3) 14m51.0042453s ago: executing program 1 (id=4313): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='auto', 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndctrl(0x0, 0x20000dcb4, 0x80080) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000dc0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000e80)="b9ff03076044238cb89e36e9080047e0ffff00004000632f77fb8035140cac14140c", 0x0, 0x100fe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x6, &(0x7f00000002c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @exit], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ec0), 0x101001, 0x0) ppoll(&(0x7f0000000f00)=[{r5, 0x20}], 0x1, &(0x7f0000000f40), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000340), 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='reconnec', 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x2000008, 0x10010, r6, 0x0) 14m49.658642972s ago: executing program 1 (id=4326): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='tcp 2', 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 14m34.598476446s ago: executing program 34 (id=4326): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='tcp 2', 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 10m18.50959907s ago: executing program 2 (id=7226): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@gettaction={0x48, 0x32, 0x605, 0x70bd27, 0x25dfdbf9, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffff820}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x200, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x48}}, 0x8840) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e28, @dev={0xac, 0x14, 0x14, 0x10}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0x400000d2, 0x4) shutdown(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0xa20, 0x8000c65) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f3aa6ea) 10m18.017929211s ago: executing program 2 (id=7228): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000019c0)=[{{&(0x7f0000001a00)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x50008000) 10m17.793846828s ago: executing program 2 (id=7231): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa0b41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 10m14.061241593s ago: executing program 2 (id=7240): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000001d00)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f000001ad00)=0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086203, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x2) r5 = fsopen(&(0x7f000001ad40)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x1) fchdir(r6) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) getpriority(0x1, 0x0) 10m12.88219506s ago: executing program 2 (id=7246): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/softnet_stat\x00') preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000a80)=""/196, 0xc4}], 0x1, 0x87, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) epoll_create1(0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000200)={0x200000000000001}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYRES16=r1], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000000b80)=""/102392, 0x18ff8) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019b80)='rdma.current\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000019c00)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) connect$inet6(r1, &(0x7f0000019d40)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000019d80)=[{{0x0, 0x0, &(0x7f0000019dc0), 0x171}}], 0x400000000000172, 0x4000000) 10m9.963830658s ago: executing program 6 (id=7253): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r0, &(0x7f0000000240)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x0, 0xffffffff, 0x7ff, {0x6, 0x8000}, 0xd5, 0xa14}) 10m9.75222327s ago: executing program 6 (id=7254): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000100)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000380)={0x0, 0x8, 0x0, 0x8, 0x0, 0x10001, 0x5, 0x5, 0x1, 0x1, 0x2, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000440)={0x0, &(0x7f0000000480)="a1", 0x1}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace\x00', 0x1ff) 10m9.551506494s ago: executing program 6 (id=7255): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000194c0)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f0000019500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x6, &(0x7f0000019580)=0x7fffffff) ioctl$int_in(r5, 0x5452, &(0x7f00000195c0)=0x1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private2, @in=@loopback, 0x0, 0x3, 0x7fff, 0x7, 0x2, 0x0, 0xa0}, {0x9, 0x3ff800000000000, 0x3, 0x8, 0x4, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8) 10m6.425993631s ago: executing program 4 (id=7256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[0x0]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) sendmsg$key(0xffffffffffffffff, 0x0, 0x40408c0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) 10m5.872727297s ago: executing program 4 (id=7257): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x16f) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/console\x00', 0x1, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)="c2b91024f2c0371e5cff992b790f729e68dd540c04bd2e8a6d9846cfb8312616245b6e308d4b18e280f3b6f8da737f54be6f0bfbfe0922e0aac829a0760a", 0xfdef}], 0x1) 10m5.811083211s ago: executing program 4 (id=7258): ioperm(0x0, 0x62ee, 0x2000000000000006) r0 = syz_create_resource$futex(&(0x7f00000001c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000200)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xc, 0x1, 0x0, r1, 0x1) 10m5.661785986s ago: executing program 4 (id=7259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2000035, 0x7, 0x4, 0x200000180, 0x2, 0x29, 0xf1, 0x100000001, 0x10, 0x5, 0x0, 0x29, 0x0, 0x3, 0x9, 0xbd9], 0x9000, 0x4f100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7ff, 0x6, 0x1, 0x200000000000043, 0x2000004, 0x0, 0x40000000002004cb, 0x0, 0xa7c, 0x9, 0x20000008, 0x8000000009, 0x803, 0x0, 0x4, 0x2000009], 0x30000}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x2000, 0x9, 0x0, 0x3f, 0x5, 0x55, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0x9000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0xa4, 0x3, 0x5}, {0x60000, 0x8000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0x1, 0xdddd0000, 0xf, 0x3, 0x80, 0x7, 0x4, 0x8, 0xdc, 0x9, 0xf7, 0x97}, {0x200000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0x6, 0x82, 0x0, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x31, 0xff, 0x9, 0x2, 0x2c, 0xb0, 0x1}, {0xa000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x50000, 0x2024, 0x2, 0x0, 0x1ff8, [0x6800000000000000, 0x5, 0x2, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m5.514979462s ago: executing program 6 (id=7260): r0 = syz_open_dev$usbfs(&(0x7f0000003a00), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000003a40)=@urb_type_control={0x2, {0x1, 0x1}, 0x1, 0x40, 0x0, 0x0, 0x3, 0x81c2, 0x0, 0x7ffd, 0xfffffffc, 0x0}) 10m5.514761777s ago: executing program 4 (id=7261): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0xb12002, 0x0) syz_usb_connect$midi(0x5, 0x52, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x5, 0x30, 0x46, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0x6, [], [{{0x9, 0x5, 0xe, 0xc, 0x8, 0x81, 0x6, 0x1c, {0x7, 0x25, 0x1, 0x3, "6ea0dd"}}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x6, 0x8, 0x3, {0x4}}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x9, 0x7, 0x0, {0x8, 0x25, 0x1, 0x4, "991dcb01"}}}]}}}}}]}}, 0x0) 10m5.351488092s ago: executing program 6 (id=7262): io_setup(0x1, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) socket(0x2, 0x3, 0x6) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x21, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x4, 0xf7, 0x1, 0x8}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xe7}}}}}}, 0x0) 10m4.811408614s ago: executing program 6 (id=7263): keyctl$clear(0x5, 0xfffffffffffffffe) syz_clone(0x8ac680, &(0x7f0000000180)="5a2ed97970038362c2dac17324f869acbba4ce6f9af594e072bd1d9d1eefa5b5cdbb998b43e01ebed079d0bdbc226478a746759db1479b56c5f33b", 0x3b, 0x0, &(0x7f0000000200), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_setup(0xb34, 0x0, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = add_key(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000780)='asymmetric\x00', 0x0, &(0x7f0000000ec0)="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", 0x559, r0) 10m4.663742614s ago: executing program 4 (id=7264): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)='A', 0x1}], 0x1}}, {{&(0x7f0000000640)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000006c0)="3d3ae39933472ecf3569f3c68e1b015e03c87b676c08", 0x16}, {0x0}], 0x2}}, {{&(0x7f0000000780)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x3, 0x4000801) 10m4.187818717s ago: executing program 2 (id=7265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r4 = creat(&(0x7f0000000800)='./bus\x00', 0xe2) io_setup(0x5, &(0x7f0000000840)=0x0) io_submit(r5, 0x1, &(0x7f0000000880)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0, 0x23, 0x0, 0x0, 0x0, r4}]) 9m44.706552879s ago: executing program 35 (id=7263): keyctl$clear(0x5, 0xfffffffffffffffe) syz_clone(0x8ac680, &(0x7f0000000180)="5a2ed97970038362c2dac17324f869acbba4ce6f9af594e072bd1d9d1eefa5b5cdbb998b43e01ebed079d0bdbc226478a746759db1479b56c5f33b", 0x3b, 0x0, &(0x7f0000000200), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_setup(0xb34, 0x0, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = add_key(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000780)='asymmetric\x00', 0x0, &(0x7f0000000ec0)="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", 0x559, r0) 9m44.631559545s ago: executing program 36 (id=7265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r4 = creat(&(0x7f0000000800)='./bus\x00', 0xe2) io_setup(0x5, &(0x7f0000000840)=0x0) io_submit(r5, 0x1, &(0x7f0000000880)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0, 0x23, 0x0, 0x0, 0x0, r4}]) 9m44.540304556s ago: executing program 37 (id=7264): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)='A', 0x1}], 0x1}}, {{&(0x7f0000000640)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000006c0)="3d3ae39933472ecf3569f3c68e1b015e03c87b676c08", 0x16}, {0x0}], 0x2}}, {{&(0x7f0000000780)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x3, 0x4000801) 9m21.098790194s ago: executing program 7 (id=7290): setns(0xc9, 0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x50, r1, 0x1, 0x70bd28, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="1211e13bb1b1"}, @NL80211_ATTR_IE={0x1e, 0x2a, [@peer_mgmt={0x75, 0x18, {0x0, 0x7f, @val=0x100, @val=0x16, @val="717bad736bbddd019e47ef2002f43c5f"}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0xc00) 9m20.761844541s ago: executing program 7 (id=7292): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000900)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev/console\x00', 0x2282, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 9m18.779748192s ago: executing program 7 (id=7295): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d0, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) geteuid() 9m15.350368448s ago: executing program 7 (id=7312): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x8002, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={[], 0x1000000}, 0x0, 0x800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000001c0)="dc", 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="850000002e0000006c0a000000000000450000000000"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x99, &(0x7f0000000400)=""/153, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000580)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680), 0x318, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000000200)=""/16, &(0x7f0000000240)=0x2b) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x6) 9m9.388509655s ago: executing program 7 (id=7321): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/msr/parameters/allow_writes\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='o', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000400)="f700000000000000", 0x8, 0x83f) openat(0xffffffffffffff9c, &(0x7f0000000700)='./trace/trace\x00', 0x0, 0x0) 9m9.097826147s ago: executing program 7 (id=7324): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000400)={0xc0007f, 0x858, 0xc63f, 0xeffffff8, 0x43, 0x558}) 8m42.432819815s ago: executing program 38 (id=7324): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000400)={0xc0007f, 0x858, 0xc63f, 0xeffffff8, 0x43, 0x558}) 15.81524332s ago: executing program 8 (id=8451): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x37, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab2874"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) write(r0, &(0x7f0000000cc0), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x0, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x7, 0x5, 0xb, 0x3, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x4}}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 13.850376769s ago: executing program 8 (id=8454): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f00000006c0)=0x10001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24008044) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xd, 0x8, 0xcdc, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0xa, 0xffffff4a}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x2400c800}, 0x40000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 13.677565332s ago: executing program 3 (id=8455): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x2, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r7 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x2000, 0x2100, 0x348, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0xa1, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000e0603000000000000000000000000020900020073797a300000d60009000200"], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) 13.086955512s ago: executing program 5 (id=8456): r0 = openat$autofs(0xffffff9c, &(0x7f0000001a00), 0x210000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001a40), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0), 0x404, &(0x7f0000001b00)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000001b80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000003bc0)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000003c40)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000005c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005cc0)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r3, r4, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000005d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './sys/bus/platform\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform\x00', 0x0, 0x0) syz_io_uring_setup(0x3383, &(0x7f00000001c0)={0x0, 0xd3f7, 0x2, 0x4, 0x223}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x1e0, 0x50, 0x300, 0x40, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x1, 0x1, 0x4, 0x4, 0x3, 0x1ff, 0x803d, 0x1, 0x9, 0x5f, 0x202, 0x1, 0x3}) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0x63}, {0x6, 0xf7, 0x8, 0x9, 0x10, 0x8000}}}}, 0xf) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000005dc0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0185647, &(0x7f0000005e00)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000005e40)={0x98f90b, 0x8000000, '\x00', @string=&(0x7f0000005e80)=0xfe}}) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000001840)={&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7, 0x2}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)="1a028e195b26e9e7749bc939005b1bc31445786b04115e65c91d0e0bacd61bcb873b661ebdbfde6e36783add38e919d25902994208eac881b2086af37c72367db35b50541f699e374126971b0758343196b0d4531cbc02d2a33484244000ee7446466d14cb83ddcb922c95ce3ad6be88cd4f2caea82276483a554c34cafafc7fdbf329d0928dc09c19a190e2431953c46cee285cd5c663b0db7b099738afc1d8dd7b51fe53979987e45e252be69f17e923c31c1eff4b72429332b2e58621273b4ca17a12865a55ff036d36ef936a22a8a15f741baa7a8e91e0f6248f8dbebe055dc62e2b0101e0c2d39c", 0xea}, {&(0x7f0000000640)="3776a3117005f9528f7ce6660769b3f5b41c9180971b336a", 0x18}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1164}, 0x81) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000005f40)={0x2c, 0x140f, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000940) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001880)={'veth0_virt_wifi\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x3, 0x9, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x20, 0x8, 0x100, 0x4632}}) 11.773771709s ago: executing program 5 (id=8458): r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x37, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab2874"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) write(r0, &(0x7f0000000cc0), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x0, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x7, 0x5, 0xb, 0x3, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x4}}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 11.247197313s ago: executing program 3 (id=8460): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f00000006c0)=0x10001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24008044) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xd, 0x8, 0xcdc, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0xa, 0xffffff4a}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x2400c800}, 0x40000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 11.186369124s ago: executing program 8 (id=8461): setns(0xc9, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000e8fffffff52affff000000000000"], 0x98) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0086438, &(0x7f0000000100)={0x3}) 10.239295111s ago: executing program 5 (id=8462): syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket(0x28, 0x5, 0x0) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) setuid(0xee00) 9.555025144s ago: executing program 9 (id=8463): r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x37, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab2874"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) write(r0, &(0x7f0000000cc0), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x0, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x7, 0x5, 0xb, 0x3, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x4}}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 9.554209437s ago: executing program 8 (id=8464): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x37, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab2874"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) write(r0, &(0x7f0000000cc0), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x0, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x7, 0x5, 0xb, 0x3, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x4}}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 8.03659331s ago: executing program 9 (id=8465): r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x37, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab2874"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) write(r0, &(0x7f0000000cc0), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x0, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x7, 0x5, 0xb, 0x3, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x4}}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 8.011274814s ago: executing program 3 (id=8466): r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x37, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab2874"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) write(r0, &(0x7f0000000cc0), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x0, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x7, 0x5, 0xb, 0x3, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x4}}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 6.268505427s ago: executing program 9 (id=8467): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f00000006c0)=0x10001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24008044) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xd, 0x8, 0xcdc, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0xa, 0xffffff4a}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400c800}, 0x40000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 5.744627396s ago: executing program 3 (id=8468): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x2, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r7 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x2000, 0x2100, 0x348, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0xa1, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000e0603000000000000000000000000020900020073797a300000d60009000200"], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) 5.617415148s ago: executing program 9 (id=8469): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x2, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r7 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x2000, 0x2100, 0x348, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0xa1, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000e0603000000000000000000000000020900020073797a300000d60009000200"], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) 5.524848011s ago: executing program 5 (id=8470): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x2, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r7 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x2000, 0x2100, 0x348, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0xa1, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000e0603000000000000000000000000020900020073797a300000d60009000200"], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) 4.789530867s ago: executing program 8 (id=8471): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x2, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r6 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x2000, 0x2100, 0x348, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0xa1, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000e0603000000000000000000000000020900020073797a300000d60009000200"], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) 3.958612601s ago: executing program 5 (id=8472): setns(0xc9, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x98) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0086438, &(0x7f0000000100)={0x3}) 2.598206177s ago: executing program 3 (id=8473): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x2, 0x1, 0xfff7fffd, 0x2, 0x0, 0x0, 0x7}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) 2.385710931s ago: executing program 9 (id=8474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x37, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab2874"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000cc0), 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x0, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x7, 0x5, 0xb, 0x3, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x4}}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 1.080873282s ago: executing program 3 (id=8475): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x2, 0x1, 0xfff7fffd, 0x2, 0x0, 0x0, 0x7}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) setuid(0xee00) 1.03985314s ago: executing program 5 (id=8476): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f00000006c0)=0x10001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24008044) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xd, 0x8, 0xcdc, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0xa, 0xffffff4a}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x58, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c800}, 0x40000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 108.40609ms ago: executing program 9 (id=8477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f00000006c0)=0x10001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24008044) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xd, 0x8, 0xcdc, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0xa, 0xffffff4a}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, 0x0, 0x40000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 8 (id=8478): setns(0xc9, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000e8fffffff52affff00000000"], 0x98) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0086438, &(0x7f0000000100)={0x3}) kernel console output (not intermixed with test programs): pped ** ** 114 printk messages dropped ** ** 145 printk messages dropped ** ** 212 printk messages dropped ** ** 133 printk messages dropped ** ** 120 printk messages dropped ** ** 124 printk messages dropped ** ** 116 printk messages dropped ** ** 117 printk messages dropped ** ** 108 printk messages dropped ** ** 120 printk messages dropped ** ** 116 printk messages dropped ** ** 118 printk messages dropped ** ** 120 printk messages dropped ** ** 126 printk messages dropped ** ** 125 printk messages dropped ** ** 118 printk messages dropped ** ** 112 printk messages dropped ** ** 115 printk messages dropped ** ** 120 printk messages dropped ** ** 110 printk messages dropped ** ** 180 printk messages dropped ** ** 111 printk messages dropped ** ** 118 printk messages dropped ** ** 113 printk messages dropped ** ** 116 printk messages dropped ** ** 120 printk messages dropped ** ** 111 printk messages dropped ** ** 103 printk messages dropped ** ** 115 printk messages dropped ** ** 124 printk messages dropped ** ** 113 printk messages dropped ** ** 124 printk messages dropped ** ** 119 printk messages dropped ** ** 154 printk messages dropped ** ** 154 printk messages dropped ** ** 141 printk messages dropped ** ** 137 printk messages dropped ** ** 131 printk messages dropped ** ** 207 printk messages dropped ** ** 141 printk messages dropped ** ** 164 printk messages dropped ** ** 131 printk messages dropped ** ** 156 printk messages dropped ** ** 142 printk messages dropped ** ** 149 printk messages dropped ** ** 142 printk messages dropped ** ** 135 printk messages dropped ** ** 139 printk messages dropped ** ** 145 printk messages dropped ** ** 149 printk messages dropped ** ** 16 printk messages dropped ** [ 1433.684801][T25453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.684846][T25453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.684929][T25453] bridge_slave_0: entered allmulticast mode [ 1433.685715][T25453] bridge_slave_0: entered promiscuous mode [ 1433.687229][T25453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.687272][T25453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.687344][T25453] bridge_slave_1: entered allmulticast mode [ 1433.688707][T25453] bridge_slave_1: entered promiscuous mode [ 1433.801476][T25453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.813587][T25453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.009296][T25453] team0: Port device team_slave_0 added [ 1434.014339][T25453] team0: Port device team_slave_1 added [ 1434.150209][T25453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1434.150218][T25453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.150239][T25453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1434.151823][T25453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1434.151833][T25453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.151854][T25453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active ** 3228 printk messages dropped ** ** 140 printk messages dropped ** ** 162 printk messages dropped ** ** 134 printk messages dropped ** ** 132 printk messages dropped ** ** 141 printk messages dropped ** ** 155 printk messages dropped ** ** 147 printk messages dropped ** ** 158 printk messages dropped ** ** 134 printk messages dropped ** ** 147 printk messages dropped ** ** 107 printk messages dropped ** ** 107 printk messages dropped ** ** 143 printk messages dropped ** ** 150 printk messages dropped ** ** 139 printk messages dropped ** ** 145 printk messages dropped ** ** 140 printk messages dropped ** ** 149 printk messages dropped ** ** 138 printk messages dropped ** ** 148 printk messages dropped ** ** 139 printk messages dropped ** ** 161 printk messages dropped ** ** 143 printk messages dropped ** ** 140 printk messages dropped ** ** 139 printk messages dropped ** ** 154 printk messages dropped ** ** 600 printk messages dropped ** ** 92 printk messages dropped ** ** 127 printk messages dropped ** ** 134 printk messages dropped ** ** 129 printk messages dropped ** ** 116 printk messages dropped ** ** 229 printk messages dropped ** ** 146 printk messages dropped ** ** 149 printk messages dropped ** ** 154 printk messages dropped ** ** 148 printk messages dropped ** ** 191 printk messages dropped ** ** 159 printk messages dropped ** ** 145 printk messages dropped ** ** 134 printk messages dropped ** ** 154 printk messages dropped ** ** 143 printk messages dropped ** ** 151 printk messages dropped ** ** 139 printk messages dropped ** ** 154 printk messages dropped ** ** 144 printk messages dropped ** ** 145 printk messages dropped ** ** 54 printk messages dropped ** ** 2914 printk messages dropped ** [ 1434.580498][T25453] hsr_slave_0: entered promiscuous mode [ 1434.583188][T25453] hsr_slave_1: entered promiscuous mode [ 1434.583601][T25453] debugfs: 'hsr0' already exists in 'hsr' [ 1434.583612][T25453] Cannot create hsr debugfs directory [ 1434.584228][ T5452] 8021q: adding VLAN 0 to HW filter on device eth26 ** 2907 printk messages dropped ** ** 257 printk messages dropped ** ** 214 printk messages dropped ** ** 194 printk messages dropped ** ** 171 printk messages dropped ** ** 174 printk messages dropped ** ** 115 printk messages dropped ** ** 97 printk messages dropped ** ** 87 printk messages dropped ** ** 84 printk messages dropped ** ** 132 printk messages dropped ** ** 89 printk messages dropped ** ** 241 printk messages dropped ** ** 183 printk messages dropped ** ** 217 printk messages dropped ** ** 204 printk messages dropped ** ** 192 printk messages dropped ** ** 180 printk messages dropped ** ** 149 printk messages dropped ** ** 716 printk messages dropped ** ** 162 printk messages dropped ** ** 153 printk messages dropped ** ** 153 printk messages dropped ** ** 261 printk messages dropped ** ** 168 printk messages dropped ** ** 162 printk messages dropped ** ** 163 printk messages dropped ** ** 168 printk messages dropped ** ** 164 printk messages dropped ** ** 159 printk messages dropped ** ** 168 printk messages dropped ** ** 212 printk messages dropped ** ** 162 printk messages dropped ** ** 154 printk messages dropped ** [ 1435.339487][ T5746] Bluetooth: hci0: command tx timeout [ 1435.407648][T25533] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input45 [ 1435.409507][ T5452] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1435.906626][ T5452] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1437.177662][ C2] net_ratelimit: 866 callbacks suppressed [ 1437.449242][ T5746] Bluetooth: hci0: command tx timeout [ 1438.801930][ T5452] 8021q: adding VLAN 0 to HW filter on device eth29 [ 1439.223340][T25608] msr: Write to unrecognized MSR 0x83f by syz.5.7394 (pid: 25608), tainting CPU_OUT_OF_SPEC. [ 1439.223353][T25608] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 1439.497470][ T5746] Bluetooth: hci0: command tx timeout [ 1439.916718][T25453] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1439.918062][T25627] Console: switching to colour dummy device 80x25 [ 1439.923263][T25453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1439.923707][T25453] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1439.988210][T25453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1440.009522][T25453] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1440.064708][T25453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1440.065670][T25453] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1440.131976][T25453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1440.254494][T25453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.283809][T25453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.297883][T23565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.298015][T23565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.311491][T23565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.311572][T23565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1440.400113][T25631] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 1440.495003][T25631] pci 0000:00:00.0: Adding to iommu group 0 [ 1440.530915][T25631] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1440.630425][T25631] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 1440.630569][T25631] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 1440.630817][T25631] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1440.633596][T25631] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1440.681182][T25631] pci 0000:00:01.0: Adding to iommu group 1 [ 1440.684820][T25631] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1440.684831][T25631] pci 0000:00:01.0: vgaarb: bridge control possible [ 1440.684839][T25631] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1440.702261][T25631] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1440.704635][T25631] pci 0000:00:01.0: BAR 2 [mem 0x80001000-0x80001fff]: assigned [ 1440.720780][T25631] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1440.734693][T25631] [drm] Found bochs VGA, ID 0xb0c5. [ 1440.734702][T25631] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80001000. [ 1440.745507][T25631] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 1441.592432][T25453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1441.752556][T25453] veth0_vlan: entered promiscuous mode [ 1441.769511][T25453] veth1_vlan: entered promiscuous mode [ 1441.833968][T25453] veth0_macvtap: entered promiscuous mode [ 1441.846417][T25453] veth1_macvtap: entered promiscuous mode [ 1441.883397][T25453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1441.896810][T25453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1441.906764][T12557] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1442.012343][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.012368][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.012386][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.012404][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.071184][T12557] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1442.071210][T12557] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1442.073842][T12557] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.073855][T12557] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1442.073896][T12557] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1442.073914][T12557] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1442.073933][T12557] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1442.073948][T12557] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1442.079016][T12557] usb 10-1: string descriptor 0 read error: -22 [ 1442.079466][T12557] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.205656][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.205669][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.246670][ T8915] net_ratelimit: 1128 callbacks suppressed [ 1442.393538][T23565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.393553][T23565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.626456][ T8915] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 1442.797271][ T8915] usb 14-1: Using ep0 maxpacket: 8 [ 1442.798402][ T8915] usb 14-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1442.799275][ T8915] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 1442.799334][ T8915] usb 14-1: config 179 has no interface number 0 [ 1442.799356][ T8915] usb 14-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1442.799370][ T8915] usb 14-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1442.799384][ T8915] usb 14-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1442.799397][ T8915] usb 14-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1442.799410][ T8915] usb 14-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1442.799427][ T8915] usb 14-1: config 179 interface 65 has no altsetting 0 [ 1442.799499][ T8915] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.917192][ T8915] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:179.65/input/input46 [ 1443.009506][ T5134] input input46: unable to receive magic message: -110 [ 1443.026297][ T854] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 1443.078218][ T5134] input input46: unable to receive magic message: -32 [ 1443.215572][T12557] usb 10-1: USB disconnect, device number 22 [ 1443.285870][ T854] usb 13-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1443.307396][ T854] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.307466][ T854] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1443.307690][ T854] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.340871][ T854] uvcvideo 13-1:1.0: Found UVC 1.00 device (046d:0825) [ 1443.341012][ T854] uvcvideo 13-1:1.0: No streaming interface found for terminal 32770. [ 1443.341304][T25369] input input46: unable to receive magic message: -32 [ 1443.505774][ T5134] input input46: unable to receive magic message: -32 [ 1443.528605][ T5134] input input46: unable to receive magic message: -32 [ 1443.543017][ T5134] input input46: unable to receive magic message: -32 [ 1443.548201][T11849] usb 13-1: USB disconnect, device number 2 [ 1443.804143][ T42] usb 14-1: USB disconnect, device number 3 [ 1443.804317][ C0] xpad 14-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1444.756139][ T854] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 1444.916701][ T854] usb 14-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1444.918328][ T854] usb 14-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.918342][ T854] usb 14-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1444.918355][ T854] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1444.918380][ T854] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.924039][ T854] usb 14-1: config 0 descriptor?? [ 1445.390746][ T854] hid-multitouch 0003:0EEF:72C4.0014: hidraw1: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.9-1/input0 [ 1445.585353][ T854] usb 14-1: USB disconnect, device number 4 ** 2036 printk messages dropped ** ** 143 printk messages dropped ** ** 129 printk messages dropped ** ** 133 printk messages dropped ** ** 130 printk messages dropped ** ** 97 printk messages dropped ** ** 78 printk messages dropped ** ** 80 printk messages dropped ** ** 87 printk messages dropped ** ** 145 printk messages dropped ** ** 140 printk messages dropped ** ** 157 printk messages dropped ** ** 110 printk messages dropped ** ** 81 printk messages dropped ** ** 78 printk messages dropped ** ** 85 printk messages dropped ** ** 43 printk messages dropped ** ** 936 printk messages dropped ** ** 131 printk messages dropped ** ** 100 printk messages dropped ** ** 106 printk messages dropped ** ** 100 printk messages dropped ** ** 102 printk messages dropped ** ** 121 printk messages dropped ** ** 108 printk messages dropped ** ** 111 printk messages dropped ** ** 98 printk messages dropped ** ** 116 printk messages dropped ** ** 160 printk messages dropped ** ** 157 printk messages dropped ** ** 111 printk messages dropped ** ** 104 printk messages dropped ** ** 99 printk messages dropped ** ** 100 printk messages dropped ** ** 107 printk messages dropped ** ** 176 printk messages dropped ** ** 185 printk messages dropped ** ** 181 printk messages dropped ** ** 161 printk messages dropped ** ** 115 printk messages dropped ** ** 120 printk messages dropped ** ** 122 printk messages dropped ** ** 187 printk messages dropped ** ** 190 printk messages dropped ** ** 165 printk messages dropped ** ** 135 printk messages dropped ** ** 180 printk messages dropped ** ** 197 printk messages dropped ** ** 175 printk messages dropped ** ** 199 printk messages dropped ** ** 109 printk messages dropped ** [ 1447.303814][ C2] net_ratelimit: 1330 callbacks suppressed ** 2626 printk messages dropped ** ** 487 printk messages dropped ** ** 106 printk messages dropped ** ** 108 printk messages dropped ** ** 121 printk messages dropped ** ** 100 printk messages dropped ** ** 106 printk messages dropped ** ** 103 printk messages dropped ** ** 99 printk messages dropped ** ** 102 printk messages dropped ** ** 101 printk messages dropped ** ** 101 printk messages dropped ** ** 117 printk messages dropped ** ** 106 printk messages dropped ** ** 99 printk messages dropped ** ** 97 printk messages dropped ** ** 103 printk messages dropped ** ** 106 printk messages dropped ** ** 145 printk messages dropped ** ** 172 printk messages dropped ** ** 342 printk messages dropped ** ** 178 printk messages dropped ** ** 105 printk messages dropped ** ** 99 printk messages dropped ** ** 104 printk messages dropped ** ** 126 printk messages dropped ** ** 118 printk messages dropped ** ** 134 printk messages dropped ** ** 111 printk messages dropped ** ** 105 printk messages dropped ** ** 109 printk messages dropped ** ** 106 printk messages dropped ** ** 99 printk messages dropped ** ** 109 printk messages dropped ** ** 116 printk messages dropped ** ** 144 printk messages dropped ** ** 128 printk messages dropped ** ** 122 printk messages dropped ** ** 125 printk messages dropped ** ** 174 printk messages dropped ** ** 185 printk messages dropped ** ** 207 printk messages dropped ** ** 241 printk messages dropped ** ** 212 printk messages dropped ** ** 200 printk messages dropped ** ** 214 printk messages dropped ** ** 198 printk messages dropped ** ** 165 printk messages dropped ** ** 169 printk messages dropped ** ** 197 printk messages dropped ** ** 25 printk messages dropped ** ** 2557 printk messages dropped ** ** 79 printk messages dropped ** ** 76 printk messages dropped ** ** 75 printk messages dropped ** ** 74 printk messages dropped ** ** 75 printk messages dropped ** ** 66 printk messages dropped ** ** 71 printk messages dropped ** ** 79 printk messages dropped ** ** 97 printk messages dropped ** ** 79 printk messages dropped ** ** 92 printk messages dropped ** ** 79 printk messages dropped ** ** 77 printk messages dropped ** ** 80 printk messages dropped ** ** 82 printk messages dropped ** ** 10 printk messages dropped ** ** 2099 printk messages dropped ** ** 176 printk messages dropped ** ** 10247 printk messages dropped ** ** 116 printk messages dropped ** ** 3975 printk messages dropped ** ** 170 printk messages dropped ** ** 14 printk messages dropped ** ** 3540 printk messages dropped ** ** 83 printk messages dropped ** ** 68 printk messages dropped ** ** 87 printk messages dropped ** ** 94 printk messages dropped ** ** 92 printk messages dropped ** ** 91 printk messages dropped ** ** 71 printk messages dropped ** ** 68 printk messages dropped ** ** 98 printk messages dropped ** ** 84 printk messages dropped ** ** 87 printk messages dropped ** ** 78 printk messages dropped ** ** 78 printk messages dropped ** ** 105 printk messages dropped ** ** 115 printk messages dropped ** ** 88 printk messages dropped ** ** 80 printk messages dropped ** ** 91 printk messages dropped ** ** 86 printk messages dropped ** ** 106 printk messages dropped ** ** 112 printk messages dropped ** ** 88 printk messages dropped ** ** 75 printk messages dropped ** ** 88 printk messages dropped ** ** 92 printk messages dropped ** ** 112 printk messages dropped ** ** 85 printk messages dropped ** ** 84 printk messages dropped ** ** 100 printk messages dropped ** ** 92 printk messages dropped ** ** 106 printk messages dropped ** ** 106 printk messages dropped ** ** 89 printk messages dropped ** ** 99 printk messages dropped ** ** 115 printk messages dropped ** ** 109 printk messages dropped ** ** 108 printk messages dropped ** ** 106 printk messages dropped ** ** 106 printk messages dropped ** ** 88 printk messages dropped ** ** 80 printk messages dropped ** ** 93 printk messages dropped ** ** 90 printk messages dropped ** ** 85 printk messages dropped ** ** 102 printk messages dropped ** ** 101 printk messages dropped ** ** 101 printk messages dropped ** ** 121 printk messages dropped ** ** 117 printk messages dropped ** ** 95 printk messages dropped ** ** 108 printk messages dropped ** ** 11 printk messages dropped ** ** 5565 printk messages dropped ** ** 165 printk messages dropped ** ** 163 printk messages dropped ** ** 141 printk messages dropped ** ** 156 printk messages dropped ** ** 203 printk messages dropped ** ** 191 printk messages dropped ** ** 133 printk messages dropped ** ** 146 printk messages dropped ** ** 136 printk messages dropped ** ** 173 printk messages dropped ** ** 136 printk messages dropped ** ** 122 printk messages dropped ** ** 3 printk messages dropped ** ** 9930 printk messages dropped ** ** 341 printk messages dropped ** ** 148 printk messages dropped ** ** 146 printk messages dropped ** ** 136 printk messages dropped ** ** 483 printk messages dropped ** ** 134 printk messages dropped ** ** 208 printk messages dropped ** ** 164 printk messages dropped ** ** 134 printk messages dropped ** ** 177 printk messages dropped ** ** 207 printk messages dropped ** ** 127 printk messages dropped ** ** 126 printk messages dropped ** ** 142 printk messages dropped ** ** 179 printk messages dropped ** ** 160 printk messages dropped ** ** 103 printk messages dropped ** ** 152 printk messages dropped ** ** 143 printk messages dropped ** ** 153 printk messages dropped ** ** 179 printk messages dropped ** ** 162 printk messages dropped ** ** 166 printk messages dropped ** ** 148 printk messages dropped ** ** 180 printk messages dropped ** ** 156 printk messages dropped ** ** 152 printk messages dropped ** ** 145 printk messages dropped ** ** 164 printk messages dropped ** ** 92 printk messages dropped ** ** 86 printk messages dropped ** ** 157 printk messages dropped ** ** 161 printk messages dropped ** ** 95 printk messages dropped ** ** 107 printk messages dropped ** ** 148 printk messages dropped ** ** 159 printk messages dropped ** ** 184 printk messages dropped ** ** 126 printk messages dropped ** ** 125 printk messages dropped ** ** 169 printk messages dropped ** ** 130 printk messages dropped ** ** 15 printk messages dropped ** ** 17 printk messages dropped ** ** 105 printk messages dropped ** ** 112 printk messages dropped ** ** 120 printk messages dropped ** ** 108 printk messages dropped ** ** 119 printk messages dropped ** ** 113 printk messages dropped ** ** 104 printk messages dropped ** ** 137 printk messages dropped ** ** 110 printk messages dropped ** ** 111 printk messages dropped ** ** 116 printk messages dropped ** ** 118 printk messages dropped ** ** 108 printk messages dropped ** ** 111 printk messages dropped ** ** 94 printk messages dropped ** ** 86 printk messages dropped ** ** 105 printk messages dropped ** ** 92 printk messages dropped ** ** 99 printk messages dropped ** ** 91 printk messages dropped ** ** 91 printk messages dropped ** ** 92 printk messages dropped ** ** 99 printk messages dropped ** ** 93 printk messages dropped ** ** 92 printk messages dropped ** ** 93 printk messages dropped ** ** 107 printk messages dropped ** ** 100 printk messages dropped ** ** 96 printk messages dropped ** ** 91 printk messages dropped ** ** 90 printk messages dropped ** ** 98 printk messages dropped ** ** 220 printk messages dropped ** ** 170 printk messages dropped ** ** 116 printk messages dropped ** ** 104 printk messages dropped ** ** 97 printk messages dropped ** ** 99 printk messages dropped ** ** 98 printk messages dropped ** ** 94 printk messages dropped ** ** 94 printk messages dropped ** ** 95 printk messages dropped ** ** 105 printk messages dropped ** ** 97 printk messages dropped ** ** 97 printk messages dropped ** ** 92 printk messages dropped ** ** 93 printk messages dropped ** ** 100 printk messages dropped ** ** 100 printk messages dropped ** ** 98 printk messages dropped ** ** 93 printk messages dropped ** ** 100 printk messages dropped ** ** 115 printk messages dropped ** ** 105 printk messages dropped ** ** 105 printk messages dropped ** ** 102 printk messages dropped ** ** 127 printk messages dropped ** ** 128 printk messages dropped ** ** 127 printk messages dropped ** ** 126 printk messages dropped ** ** 141 printk messages dropped ** ** 96 printk messages dropped ** ** 105 printk messages dropped ** ** 108 printk messages dropped ** ** 133 printk messages dropped ** ** 147 printk messages dropped ** ** 138 printk messages dropped ** ** 111 printk messages dropped ** ** 106 printk messages dropped ** ** 68 printk messages dropped ** ** 10750 printk messages dropped ** ** 149 printk messages dropped ** ** 129 printk messages dropped ** ** 118 printk messages dropped ** ** 125 printk messages dropped ** ** 2 printk messages dropped ** ** 7927 printk messages dropped ** ** 7751 printk messages dropped ** ** 136 printk messages dropped ** ** 119 printk messages dropped ** ** 123 printk messages dropped ** ** 125 printk messages dropped ** ** 132 printk messages dropped ** ** 162 printk messages dropped ** ** 119 printk messages dropped ** ** 125 printk messages dropped ** ** 125 printk messages dropped ** ** 121 printk messages dropped ** ** 119 printk messages dropped ** ** 111 printk messages dropped ** ** 119 printk messages dropped ** ** 130 printk messages dropped ** ** 127 printk messages dropped ** ** 110 printk messages dropped ** ** 108 printk messages dropped ** ** 119 printk messages dropped ** ** 124 printk messages dropped ** ** 143 printk messages dropped ** ** 134 printk messages dropped ** ** 136 printk messages dropped ** ** 125 printk messages dropped ** ** 120 printk messages dropped ** ** 114 printk messages dropped ** ** 112 printk messages dropped ** ** 118 printk messages dropped ** ** 122 printk messages dropped ** ** 144 printk messages dropped ** ** 138 printk messages dropped ** ** 119 printk messages dropped ** ** 121 printk messages dropped ** ** 118 printk messages dropped ** ** 108 printk messages dropped ** ** 11555 printk messages dropped ** ** 160 printk messages dropped ** ** 164 printk messages dropped ** ** 187 printk messages dropped ** ** 200 printk messages dropped ** ** 194 printk messages dropped ** ** 208 printk messages dropped ** ** 199 printk messages dropped ** ** 194 printk messages dropped ** ** 193 printk messages dropped ** ** 191 printk messages dropped ** ** 215 printk messages dropped ** ** 218 printk messages dropped ** ** 214 printk messages dropped ** ** 213 printk messages dropped ** ** 215 printk messages dropped ** ** 201 printk messages dropped ** ** 179 printk messages dropped ** ** 161 printk messages dropped ** ** 8008 printk messages dropped ** ** 108 printk messages dropped ** ** 99 printk messages dropped ** ** 104 printk messages dropped ** ** 108 printk messages dropped ** ** 104 printk messages dropped ** ** 101 printk messages dropped ** ** 190 printk messages dropped ** ** 112 printk messages dropped ** ** 94 printk messages dropped ** ** 2256 printk messages dropped ** ** 75 printk messages dropped ** ** 105 printk messages dropped ** ** 99 printk messages dropped ** ** 80 printk messages dropped ** ** 75 printk messages dropped ** ** 69 printk messages dropped ** ** 81 printk messages dropped ** ** 67 printk messages dropped ** ** 25 printk messages dropped ** ** 4433 printk messages dropped ** ** 204 printk messages dropped ** ** 182 printk messages dropped ** ** 187 printk messages dropped ** ** 186 printk messages dropped ** ** 186 printk messages dropped ** ** 203 printk messages dropped ** ** 191 printk messages dropped ** ** 187 printk messages dropped ** ** 185 printk messages dropped ** ** 67 printk messages dropped ** ** 10644 printk messages dropped ** ** 144 printk messages dropped ** ** 136 printk messages dropped ** ** 153 printk messages dropped ** ** 135 printk messages dropped ** ** 138 printk messages dropped ** ** 132 printk messages dropped ** ** 135 printk messages dropped ** ** 124 printk messages dropped ** ** 120 printk messages dropped ** ** 156 printk messages dropped ** ** 100 printk messages dropped ** ** 99 printk messages dropped ** ** 95 printk messages dropped ** ** 96 printk messages dropped ** ** 106 printk messages dropped ** ** 106 printk messages dropped ** ** 106 printk messages dropped ** ** 102 printk messages dropped ** ** 107 printk messages dropped ** ** 109 printk messages dropped ** ** 104 printk messages dropped ** ** 112 printk messages dropped ** ** 110 printk messages dropped ** ** 105 printk messages dropped ** ** 102 printk messages dropped ** ** 101 printk messages dropped ** ** 108 printk messages dropped ** ** 164 printk messages dropped ** ** 112 printk messages dropped ** ** 112 printk messages dropped ** ** 104 printk messages dropped ** ** 189 printk messages dropped ** ** 108 printk messages dropped ** ** 108 printk messages dropped ** ** 118 printk messages dropped ** ** 128 printk messages dropped ** ** 144 printk messages dropped ** ** 140 printk messages dropped ** ** 109 printk messages dropped ** ** 104 printk messages dropped ** ** 105 printk messages dropped ** ** 116 printk messages dropped ** ** 101 printk messages dropped ** ** 105 printk messages dropped ** ** 3476 printk messages dropped ** ** 6615 printk messages dropped ** ** 13540 printk messages dropped ** ** 172 printk messages dropped ** ** 154 printk messages dropped ** ** 108 printk messages dropped ** ** 4098 printk messages dropped ** ** 172 printk messages dropped ** ** 134 printk messages dropped ** ** 147 printk messages dropped ** ** 137 printk messages dropped ** ** 137 printk messages dropped ** ** 143 printk messages dropped ** ** 134 printk messages dropped ** ** 136 printk messages dropped ** ** 175 printk messages dropped ** ** 171 printk messages dropped ** ** 174 printk messages dropped ** ** 170 printk messages dropped ** ** 174 printk messages dropped ** ** 145 printk messages dropped ** ** 136 printk messages dropped ** ** 136 printk messages dropped ** ** 135 printk messages dropped ** ** 154 printk messages dropped ** ** 144 printk messages dropped ** ** 133 printk messages dropped ** ** 140 printk messages dropped ** ** 137 printk messages dropped ** ** 134 printk messages dropped ** ** 132 printk messages dropped ** ** 136 printk messages dropped ** ** 141 printk messages dropped ** ** 136 printk messages dropped ** ** 132 printk messages dropped ** ** 133 printk messages dropped ** ** 142 printk messages dropped ** ** 151 printk messages dropped ** ** 151 printk messages dropped ** ** 155 printk messages dropped ** ** 150 printk messages dropped ** ** 135 printk messages dropped ** ** 113 printk messages dropped ** ** 102 printk messages dropped ** ** 87 printk messages dropped ** ** 90 printk messages dropped ** ** 89 printk messages dropped ** ** 94 printk messages dropped ** ** 89 printk messages dropped ** ** 90 printk messages dropped ** ** 85 printk messages dropped ** ** 81 printk messages dropped ** ** 84 printk messages dropped ** ** 83 printk messages dropped ** ** 96 printk messages dropped ** ** 86 printk messages dropped ** ** 93 printk messages dropped ** ** 85 printk messages dropped ** ** 87 printk messages dropped ** ** 83 printk messages dropped ** ** 91 printk messages dropped ** ** 89 printk messages dropped ** ** 87 printk messages dropped ** ** 85 printk messages dropped ** ** 52 printk messages dropped ** ** 3561 printk messages dropped ** ** 167 printk messages dropped ** ** 121 printk messages dropped ** ** 9 printk messages dropped ** ** 170 printk messages dropped ** ** 210 printk messages dropped ** ** 118 printk messages dropped ** ** 118 printk messages dropped ** ** 122 printk messages dropped ** ** 107 printk messages dropped ** ** 102 printk messages dropped ** ** 162 printk messages dropped ** ** 113 printk messages dropped ** ** 103 printk messages dropped ** ** 94 printk messages dropped ** ** 99 printk messages dropped ** ** 100 printk messages dropped ** ** 105 printk messages dropped ** ** 177 printk messages dropped ** ** 158 printk messages dropped ** ** 117 printk messages dropped ** ** 108 printk messages dropped ** ** 102 printk messages dropped ** ** 103 printk messages dropped ** ** 103 printk messages dropped ** ** 102 printk messages dropped ** ** 103 printk messages dropped ** ** 107 printk messages dropped ** ** 104 printk messages dropped ** ** 95 printk messages dropped ** ** 98 printk messages dropped ** ** 107 printk messages dropped ** ** 120 printk messages dropped ** ** 135 printk messages dropped ** ** 110 printk messages dropped ** ** 143 printk messages dropped ** ** 39 printk messages dropped ** ** 5674 printk messages dropped ** ** 116 printk messages dropped ** ** 118 printk messages dropped ** ** 125 printk messages dropped ** ** 130 printk messages dropped ** ** 133 printk messages dropped ** ** 180 printk messages dropped ** ** 228 printk messages dropped ** ** 204 printk messages dropped ** ** 189 printk messages dropped ** ** 8717 printk messages dropped ** ** 173 printk messages dropped ** ** 169 printk messages dropped ** ** 10098 printk messages dropped ** ** 9356 printk messages dropped ** ** 172 printk messages dropped ** ** 201 printk messages dropped ** ** 230 printk messages dropped ** ** 203 printk messages dropped ** ** 123 printk messages dropped ** ** 109 printk messages dropped ** ** 121 printk messages dropped ** ** 113 printk messages dropped ** ** 92 printk messages dropped ** ** 166 printk messages dropped ** ** 220 printk messages dropped ** ** 101 printk messages dropped ** ** 114 printk messages dropped ** ** 122 printk messages dropped ** ** 210 printk messages dropped ** ** 210 printk messages dropped ** ** 194 printk messages dropped ** ** 217 printk messages dropped ** ** 108 printk messages dropped ** ** 94 printk messages dropped ** ** 107 printk messages dropped ** ** 114 printk messages dropped ** ** 121 printk messages dropped ** ** 220 printk messages dropped ** ** 200 printk messages dropped ** ** 124 printk messages dropped ** ** 114 printk messages dropped ** ** 124 printk messages dropped ** ** 182 printk messages dropped ** ** 197 printk messages dropped ** ** 212 printk messages dropped ** ** 261 printk messages dropped ** ** 116 printk messages dropped ** ** 102 printk messages dropped ** ** 110 printk messages dropped ** ** 116 printk messages dropped ** ** 171 printk messages dropped ** ** 158 printk messages dropped ** ** 104 printk messages dropped ** ** 116 printk messages dropped ** ** 104 printk messages dropped ** ** 117 printk messages dropped ** ** 175 printk messages dropped ** ** 204 printk messages dropped ** ** 204 printk messages dropped ** ** 125 printk messages dropped ** ** 86 printk messages dropped ** ** 102 printk messages dropped ** ** 115 printk messages dropped ** ** 120 printk messages dropped ** ** 80 printk messages dropped ** ** 6982 printk messages dropped ** ** 103 printk messages dropped ** ** 92 printk messages dropped ** ** 108 printk messages dropped ** ** 73 printk messages dropped ** ** 9374 printk messages dropped ** ** 214 printk messages dropped ** ** 202 printk messages dropped ** ** 180 printk messages dropped ** ** 152 printk messages dropped ** ** 90 printk messages dropped ** ** 81 printk messages dropped ** ** 83 printk messages dropped ** ** 88 printk messages dropped ** ** 172 printk messages dropped ** ** 117 printk messages dropped ** ** 87 printk messages dropped ** ** 89 printk messages dropped ** ** 90 printk messages dropped ** ** 138 printk messages dropped ** ** 155 printk messages dropped ** ** 212 printk messages dropped ** ** 166 printk messages dropped ** ** 209 printk messages dropped ** ** 184 printk messages dropped ** ** 179 printk messages dropped ** ** 136 printk messages dropped ** ** 133 printk messages dropped ** ** 150 printk messages dropped ** ** 420 printk messages dropped ** ** 161 printk messages dropped ** ** 113 printk messages dropped ** ** 127 printk messages dropped ** ** 151 printk messages dropped ** ** 109 printk messages dropped ** ** 259 printk messages dropped ** ** 150 printk messages dropped ** ** 107 printk messages dropped ** ** 210 printk messages dropped ** ** 118 printk messages dropped ** ** 126 printk messages dropped ** ** 112 printk messages dropped ** ** 108 printk messages dropped ** ** 114 printk messages dropped ** ** 172 printk messages dropped ** ** 74 printk messages dropped ** ** 9594 printk messages dropped ** ** 89 printk messages dropped ** ** 79 printk messages dropped ** ** 95 printk messages dropped ** ** 144 printk messages dropped ** ** 138 printk messages dropped ** ** 147 printk messages dropped ** ** 49 printk messages dropped ** ** 3531 printk messages dropped ** ** 119 printk messages dropped ** ** 156 printk messages dropped ** ** 170 printk messages dropped ** ** 239 printk messages dropped ** ** 132 printk messages dropped ** ** 25 printk messages dropped ** ** 152 printk messages dropped ** ** 136 printk messages dropped ** ** 125 printk messages dropped ** ** 173 printk messages dropped ** ** 133 printk messages dropped ** ** 174 printk messages dropped ** ** 181 printk messages dropped ** ** 117 printk messages dropped ** ** 98 printk messages dropped ** ** 138 printk messages dropped ** ** 164 printk messages dropped ** ** 161 printk messages dropped ** ** 143 printk messages dropped ** ** 126 printk messages dropped ** ** 134 printk messages dropped ** ** 162 printk messages dropped ** ** 227 printk messages dropped ** ** 121 printk messages dropped ** ** 115 printk messages dropped ** ** 113 printk messages dropped ** ** 117 printk messages dropped ** ** 113 printk messages dropped ** ** 103 printk messages dropped ** ** 139 printk messages dropped ** ** 94 printk messages dropped ** ** 104 printk messages dropped ** ** 171 printk messages dropped ** ** 186 printk messages dropped ** ** 189 printk messages dropped ** ** 197 printk messages dropped ** ** 266 printk messages dropped ** ** 182 printk messages dropped ** ** 195 printk messages dropped ** ** 176 printk messages dropped ** ** 168 printk messages dropped ** ** 154 printk messages dropped ** ** 151 printk messages dropped ** ** 136 printk messages dropped ** ** 129 printk messages dropped ** ** 168 printk messages dropped ** ** 137 printk messages dropped ** ** 144 printk messages dropped ** ** 137 printk messages dropped ** ** 154 printk messages dropped ** ** 145 printk messages dropped ** ** 77 printk messages dropped ** ** 4067 printk messages dropped ** ** 158 printk messages dropped ** ** 136 printk messages dropped ** ** 103 printk messages dropped ** ** 122 printk messages dropped ** ** 128 printk messages dropped ** ** 140 printk messages dropped ** ** 147 printk messages dropped ** ** 165 printk messages dropped ** ** 156 printk messages dropped ** ** 145 printk messages dropped ** ** 146 printk messages dropped ** ** 125 printk messages dropped ** ** 89 printk messages dropped ** ** 98 printk messages dropped ** ** 190 printk messages dropped ** ** 147 printk messages dropped ** ** 2 printk messages dropped ** ** 5951 printk messages dropped ** ** 105 printk messages dropped ** ** 109 printk messages dropped ** ** 84 printk messages dropped ** ** 79 printk messages dropped ** ** 83 printk messages dropped ** ** 105 printk messages dropped ** ** 82 printk messages dropped ** ** 87 printk messages dropped ** ** 85 printk messages dropped ** ** 84 printk messages dropped ** ** 82 printk messages dropped ** ** 80 printk messages dropped ** ** 698 printk messages dropped ** ** 121 printk messages dropped ** ** 117 printk messages dropped ** ** 122 printk messages dropped ** ** 120 printk messages dropped ** ** 115 printk messages dropped ** ** 115 printk messages dropped ** ** 119 printk messages dropped ** ** 148 printk messages dropped ** ** 86 printk messages dropped ** ** 89 printk messages dropped ** ** 86 printk messages dropped ** ** 81 printk messages dropped ** ** 82 printk messages dropped ** ** 79 printk messages dropped ** ** 81 printk messages dropped ** ** 81 printk messages dropped ** ** 81 printk messages dropped ** ** 81 printk messages dropped ** ** 144 printk messages dropped ** ** 170 printk messages dropped ** ** 165 printk messages dropped ** ** 151 printk messages dropped ** ** 140 printk messages dropped ** ** 127 printk messages dropped ** ** 136 printk messages dropped ** ** 134 printk messages dropped ** ** 111 printk messages dropped ** ** 102 printk messages dropped ** ** 85 printk messages dropped ** ** 5762 printk messages dropped ** ** 135 printk messages dropped ** ** 127 printk messages dropped ** ** 121 printk messages dropped ** ** 145 printk messages dropped ** ** 153 printk messages dropped ** ** 150 printk messages dropped ** ** 187 printk messages dropped ** ** 134 printk messages dropped ** ** 134 printk messages dropped ** ** 152 printk messages dropped ** ** 153 printk messages dropped ** ** 145 printk messages dropped ** ** 128 printk messages dropped ** ** 147 printk messages dropped ** ** 146 printk messages dropped ** ** 122 printk messages dropped ** ** 124 printk messages dropped ** ** 122 printk messages dropped ** ** 122 printk messages dropped ** ** 120 printk messages dropped ** ** 167 printk messages dropped ** ** 123 printk messages dropped ** ** 127 printk messages dropped ** ** 119 printk messages dropped ** ** 122 printk messages dropped ** ** 118 printk messages dropped ** ** 117 printk messages dropped ** ** 117 printk messages dropped ** ** 118 printk messages dropped ** ** 27 printk messages dropped ** ** 6192 printk messages dropped ** ** 118 printk messages dropped ** ** 92 printk messages dropped ** ** 92 printk messages dropped ** ** 93 printk messages dropped ** ** 98 printk messages dropped ** ** 103 printk messages dropped ** ** 93 printk messages dropped ** ** 91 printk messages dropped ** ** 88 printk messages dropped ** ** 89 printk messages dropped ** ** 130 printk messages dropped ** ** 95 printk messages dropped ** ** 92 printk messages dropped ** ** 93 printk messages dropped ** ** 92 printk messages dropped ** ** 87 printk messages dropped ** ** 80 printk messages dropped ** ** 77 printk messages dropped ** ** 78 printk messages dropped ** ** 83 printk messages dropped ** ** 91 printk messages dropped ** ** 96 printk messages dropped ** ** 95 printk messages dropped ** ** 88 printk messages dropped ** ** 77 printk messages dropped ** ** 77 printk messages dropped ** ** 77 printk messages dropped ** ** 78 printk messages dropped ** ** 87 printk messages dropped ** ** 125 printk messages dropped ** ** 92 printk messages dropped ** ** 1 printk messages dropped ** ** 11027 printk messages dropped ** ** 170 printk messages dropped ** ** 155 printk messages dropped ** ** 153 printk messages dropped ** ** 153 printk messages dropped ** ** 151 printk messages dropped ** ** 148 printk messages dropped ** ** 153 printk messages dropped ** ** 134 printk messages dropped ** ** 136 printk messages dropped ** ** 140 printk messages dropped ** ** 146 printk messages dropped ** ** 152 printk messages dropped ** ** 154 printk messages dropped ** ** 220 printk messages dropped ** ** 157 printk messages dropped ** ** 158 printk messages dropped ** ** 151 printk messages dropped ** ** 151 printk messages dropped ** ** 154 printk messages dropped ** ** 153 printk messages dropped ** ** 151 printk messages dropped ** ** 147 printk messages dropped ** ** 169 printk messages dropped ** ** 156 printk messages dropped ** ** 157 printk messages dropped ** ** 149 printk messages dropped ** ** 4 printk messages dropped ** [ 1452.398498][ C2] net_ratelimit: 1019 callbacks suppressed ** 5512 printk messages dropped ** ** 159 printk messages dropped ** ** 138 printk messages dropped ** ** 29 printk messages dropped ** [ 1454.906075][ T854] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 1454.926126][T12557] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 1455.062343][ T854] usb 13-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1455.086291][T12557] usb 14-1: Using ep0 maxpacket: 32 [ 1455.087439][T12557] usb 14-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1455.089139][T12557] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.136707][ T854] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.136728][ T854] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1455.136773][ T854] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.140895][ T854] usb 13-1: config 0 descriptor?? [ 1455.214942][T12557] usb 14-1: config 0 descriptor?? [ 1455.273760][T12557] gspca_main: vc032x-2.14.0 probing 0ac8:0321 ** 135 printk messages dropped ** ** 2512 printk messages dropped ** ** 124 printk messages dropped ** ** 126 printk messages dropped ** ** 132 printk messages dropped ** ** 130 printk messages dropped ** ** 126 printk messages dropped ** ** 125 printk messages dropped ** ** 126 printk messages dropped ** ** 122 printk messages dropped ** ** 182 printk messages dropped ** ** 134 printk messages dropped ** ** 138 printk messages dropped ** ** 121 printk messages dropped ** ** 128 printk messages dropped ** ** 143 printk messages dropped ** ** 842 printk messages dropped ** ** 134 printk messages dropped ** ** 128 printk messages dropped ** ** 126 printk messages dropped ** ** 111 printk messages dropped ** ** 114 printk messages dropped ** ** 117 printk messages dropped ** ** 117 printk messages dropped ** ** 134 printk messages dropped ** ** 127 printk messages dropped ** ** 124 printk messages dropped ** ** 122 printk messages dropped ** ** 115 printk messages dropped ** ** 166 printk messages dropped ** ** 120 printk messages dropped ** ** 189 printk messages dropped ** ** 183 printk messages dropped ** ** 124 printk messages dropped ** ** 2227 printk messages dropped ** ** 1545 printk messages dropped ** ** 50 printk messages dropped ** [ 1457.576119][ C0] net_ratelimit: 1234 callbacks suppressed [ 1457.716307][T10455] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1457.867205][T10455] usb 10-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1457.870968][T10455] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.870987][T10455] usb 10-1: Product: syz [ 1457.871000][T10455] usb 10-1: Manufacturer: syz [ 1457.871012][T10455] usb 10-1: SerialNumber: syz [ 1457.880454][T10455] usb 10-1: USB2VGA dongle found at address 23 [ 1457.882780][T10455] usb 10-1: Allocated 8 output buffers [ 1457.891039][T10455] usb 10-1: Failed to early initialize device [ 1458.098034][T25915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.098494][T25915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.117908][T25915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.119546][T25915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.122076][T25915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.132875][T25915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.136854][T25915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.140738][T25915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.251785][T10455] usb 13-1: USB disconnect, device number 3 [ 1458.347641][T25915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.347983][T25915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.381507][T25915] usb 10-1: Failed to initialize device [ 1458.382644][T22154] usb 10-1: USB disconnect, device number 23 [ 1458.567242][T12557] gspca_vc032x: reg_r err -71 [ 1458.567250][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567255][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567260][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567264][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567269][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567273][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567278][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567282][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567287][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567291][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567296][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567300][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567304][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567309][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567313][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567317][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567322][T12557] gspca_vc032x: I2c Bus Busy Wait 00 [ 1458.567327][T12557] gspca_vc032x: Unknown sensor... [ 1458.567359][T12557] vc032x 14-1:0.0: probe with driver vc032x failed with error -22 [ 1458.570151][T12557] usb 14-1: USB disconnect, device number 5 [ 1458.629476][T10455] usb 13-1: new full-speed USB device number 4 using dummy_hcd [ 1458.776594][T10455] usb 13-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1458.777442][T10455] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.777469][T10455] usb 13-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1458.779303][T10455] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.779317][T10455] usb 13-1: Product: syz [ 1458.779327][T10455] usb 13-1: Manufacturer: syz [ 1458.779336][T10455] usb 13-1: SerialNumber: syz [ 1459.190229][T25934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.192070][T25934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.206840][T22154] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1459.346096][T25395] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 1459.356637][T22154] usb 10-1: Using ep0 maxpacket: 32 [ 1459.357190][T22154] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1459.360238][T22154] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.360249][T22154] usb 10-1: Product: syz [ 1459.360257][T22154] usb 10-1: Manufacturer: syz [ 1459.360266][T22154] usb 10-1: SerialNumber: syz [ 1459.364047][T22154] usb 10-1: config 0 descriptor?? [ 1459.371091][T22154] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1459.371530][T22154] dvb-usb: bulk message failed: -22 (2/0) [ 1459.392289][T22154] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1459.392921][T22154] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1459.392994][T22154] usb 10-1: media controller created [ 1459.406822][T25934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.408409][T25934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.411582][T25934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.411910][T25934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.424038][T22154] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1459.431843][ C2] usb 13-1: received EP1 urb->status = -71 [ 1459.446558][T10455] input: as /devices/platform/dummy_hcd.8/usb13/13-1/input/input47 [ 1459.499110][T25395] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1459.499132][T25395] usb 14-1: too many configurations: 13, using maximum allowed: 8 [ 1459.499590][T22154] usb 10-1: selecting invalid altsetting 7 [ 1459.499599][T22154] cxusb: set interface failed [ 1459.499604][T22154] dvb-usb: bulk message failed: -22 (1/0) [ 1459.500314][T25395] usb 14-1: config 0 has no interfaces? [ 1459.500886][T25395] usb 14-1: config 0 has no interfaces? [ 1459.501285][T25395] usb 14-1: config 0 has no interfaces? [ 1459.502348][T25395] usb 14-1: config 0 has no interfaces? [ 1459.503317][T25395] usb 14-1: config 0 has no interfaces? [ 1459.503704][T25395] usb 14-1: config 0 has no interfaces? [ 1459.504604][T25395] usb 14-1: config 0 has no interfaces? [ 1459.505577][T25395] usb 14-1: config 0 has no interfaces? [ 1459.511697][T25395] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.511708][T25395] usb 14-1: Product: syz [ 1459.511715][T25395] usb 14-1: Manufacturer: syz [ 1459.511723][T25395] usb 14-1: SerialNumber: syz [ 1459.517940][T25395] usb 14-1: config 0 descriptor?? [ 1459.556231][T22154] DVB: Unable to find symbol lgdt330x_attach() [ 1459.556239][T22154] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1459.617491][T22154] rc_core: IR keymap rc-dvico-portable not found [ 1459.617501][T22154] Registered IR keymap rc-empty [ 1459.620975][T22154] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 1459.625724][T22154] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input48 [ 1459.664879][T22154] dvb-usb: schedule remote query interval to 100 msecs. [ 1459.664892][T22154] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1459.666219][T10455] usb 13-1: USB disconnect, device number 4 [ 1459.678932][T22154] usb 10-1: USB disconnect, device number 24 [ 1459.800578][T13519] usb 14-1: USB disconnect, device number 6 [ 1459.917437][T22154] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1460.084612][T25970] udevd[25970]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1460.436570][T22154] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1460.476217][ T42] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 1460.486143][T10455] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 1460.586890][T22154] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1460.587956][T22154] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.590122][T22154] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.590141][T22154] usb 10-1: Product: syz [ 1460.590155][T22154] usb 10-1: Manufacturer: syz [ 1460.590170][T22154] usb 10-1: SerialNumber: syz [ 1460.627234][ T42] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1460.627271][ T42] usb 14-1: too many configurations: 13, using maximum allowed: 8 [ 1460.628067][ T42] usb 14-1: config 0 has no interfaces? [ 1460.628912][ T42] usb 14-1: config 0 has no interfaces? [ 1460.629632][ T42] usb 14-1: config 0 has no interfaces? [ 1460.630350][ T42] usb 14-1: config 0 has no interfaces? [ 1460.631047][ T42] usb 14-1: config 0 has no interfaces? [ 1460.631739][ T42] usb 14-1: config 0 has no interfaces? [ 1460.632434][ T42] usb 14-1: config 0 has no interfaces? [ 1460.633143][ T42] usb 14-1: config 0 has no interfaces? [ 1460.635810][ T42] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.635827][ T42] usb 14-1: Product: syz [ 1460.635840][ T42] usb 14-1: Manufacturer: syz [ 1460.635903][ T42] usb 14-1: SerialNumber: syz [ 1460.637388][T10455] usb 13-1: Using ep0 maxpacket: 8 [ 1460.647388][T10455] usb 13-1: New USB device found, idVendor=1645, idProduct=8093, bcdDevice=9d.91 [ 1460.659907][T10455] usb 13-1: config 7 has an invalid interface number: 141 but max is 0 [ 1460.659929][T10455] usb 13-1: config 7 has no interface number 0 [ 1460.678673][T10455] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.678691][T10455] usb 13-1: Product: syz [ 1460.678704][T10455] usb 13-1: Manufacturer: syz [ 1460.678716][T10455] usb 13-1: SerialNumber: syz [ 1460.707218][ T42] usb 14-1: config 0 descriptor?? [ 1460.798515][T22154] usb 10-1: Cannot retrieve CPort count: -71 [ 1460.798583][T22154] usb 10-1: Cannot retrieve CPort count: -71 [ 1460.798599][T22154] es2_ap_driver 10-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1460.803003][T22154] usb 10-1: USB disconnect, device number 25 [ 1460.915916][ T42] usb 14-1: USB disconnect, device number 7 [ 1461.120948][T10455] keyspan_pda 13-1:7.141: Keyspan PDA - (prerenumeration) converter detected [ 1461.121880][T10455] usb 13-1: ezusb_set_reset-1 failed: -71 [ 1461.138693][T10455] usb 13-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 1461.138705][T10455] usb 13-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 1461.556271][ T42] usb 14-1: new full-speed USB device number 8 using dummy_hcd [ 1461.576334][T25395] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1461.706841][ T42] usb 14-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1461.707834][ T42] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.707862][ T42] usb 14-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1461.709394][ T42] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.709404][ T42] usb 14-1: Product: syz [ 1461.709411][ T42] usb 14-1: Manufacturer: syz [ 1461.709419][ T42] usb 14-1: SerialNumber: syz [ 1461.715228][ T42] usb 14-1: selecting invalid altsetting 1 [ 1461.715237][ T42] snd-usb-caiaq 14-1:1.0: can't set alt interface. [ 1461.715244][ T42] usb 14-1: unable to init card! (ret=-5) [ 1461.715476][ T42] snd-usb-caiaq 14-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 1461.744243][T25395] usb 10-1: Using ep0 maxpacket: 32 [ 1461.745191][T25395] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1461.745677][T25395] usb 10-1: config 0 has no interfaces? [ 1461.745705][T25395] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.756718][T25395] usb 10-1: config 0 descriptor?? [ 1461.924917][T19073] usb 14-1: USB disconnect, device number 8 [ 1461.964881][T25977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.965532][T25977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.966806][T25977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.967106][T25977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.979468][T25977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.979788][T25977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.980916][T25395] usb 10-1: USB disconnect, device number 26 [ 1462.416589][T25395] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1462.567241][T25395] usb 10-1: Using ep0 maxpacket: 32 [ 1462.569404][T25395] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1462.569433][T25395] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.00 [ 1462.570494][T25395] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1462.570526][T25395] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1462.572653][T25395] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.572668][T25395] usb 10-1: Product: syz [ 1462.572679][T25395] usb 10-1: Manufacturer: syz [ 1462.572690][T25395] usb 10-1: SerialNumber: syz [ 1462.580007][T25395] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1462.616038][ C2] net_ratelimit: 1085 callbacks suppressed [ 1462.696182][ T42] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 1462.778966][T24225] usb 10-1: Failed to submit usb control message: -71 [ 1462.778990][T24225] usb 10-1: unable to send the bmi data to the device: -71 [ 1462.779005][T24225] usb 10-1: unable to get target info from device [ 1462.779017][T24225] usb 10-1: could not get target info (-71) [ 1462.779194][T19073] usb 10-1: USB disconnect, device number 27 [ 1462.779285][T24225] usb 10-1: could not probe fw (-71) [ 1462.847278][ T42] usb 14-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1462.848196][ T42] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1462.848212][ T42] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1462.848226][ T42] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1462.849842][ T42] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.849853][ T42] usb 14-1: Product: syz [ 1462.849860][ T42] usb 14-1: Manufacturer: syz [ 1462.849868][ T42] usb 14-1: SerialNumber: syz [ 1462.851545][ T42] usb 14-1: config 0 descriptor?? [ 1462.854175][ T42] iguanair 14-1:0.0: probe with driver iguanair failed with error -12 [ 1463.060069][T19073] usb 14-1: USB disconnect, device number 9 [ 1463.546559][T25395] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1463.696158][T25395] usb 10-1: Using ep0 maxpacket: 32 [ 1463.696653][T25395] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1463.697501][T25395] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.697515][T25395] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.697544][T25395] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.699541][T25395] usb 10-1: config 0 descriptor?? [ 1463.705260][T25395] hub 10-1:0.0: USB hub found [ 1463.836084][ T42] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 1463.905779][T25395] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1463.987522][ T42] usb 14-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1463.989495][ T42] usb 14-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1463.989536][ T42] usb 14-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1463.992984][ T42] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.993001][ T42] usb 14-1: Product: syz [ 1463.993013][ T42] usb 14-1: Manufacturer: syz [ 1463.993026][ T42] usb 14-1: SerialNumber: syz [ 1464.062527][T13519] usb 14-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1464.295203][ T42] usb 14-1: USB disconnect, device number 10 [ 1464.311158][T25395] hid-generic 0003:046D:C31C.0015: unknown main item tag 0x0 [ 1464.334008][T25395] hid-generic 0003:046D:C31C.0015: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 1464.676571][ T5835] usb 10-1: USB disconnect, device number 28 [ 1465.006164][ T5835] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1465.096274][T13519] ath9k_htc 14-1:1.0: ath9k_htc: Target is unresponsive [ 1465.096434][T13519] ath9k_htc: Failed to initialize the device [ 1465.101204][ T42] usb 14-1: ath9k_htc: USB layer deinitialized [ 1465.166136][ T5835] usb 10-1: Using ep0 maxpacket: 32 [ 1465.166968][ T5835] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1465.168053][ T5835] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.168078][ T5835] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.168127][ T5835] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.171120][ T5835] usb 10-1: config 0 descriptor?? [ 1465.175237][ T5835] hub 10-1:0.0: USB hub found [ 1465.378648][ T5835] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1465.406062][ T42] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 1465.557274][ T42] usb 14-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1465.558838][ T42] usb 14-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1465.558863][ T42] usb 14-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1465.560554][ T42] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.560570][ T42] usb 14-1: Product: syz [ 1465.560582][ T42] usb 14-1: Manufacturer: syz [ 1465.560593][ T42] usb 14-1: SerialNumber: syz [ 1465.783305][T25990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.784458][T25990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.799954][ T42] usb 14-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1465.842687][ T42] usb 14-1: ath9k_htc: USB layer deinitialized [ 1465.874391][T22154] usb 14-1: USB disconnect, device number 11 [ 1465.987310][T25990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.987865][T25990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.191579][T25990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.192026][T25990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.204530][T25990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.213187][T25990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.217524][ T5835] usbhid 10-1:0.0: can't add hid device: -71 [ 1466.217616][ T5835] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1466.246980][ T5835] usb 10-1: USB disconnect, device number 29 [ 1466.596188][T22154] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 1466.746586][T22154] usb 14-1: Using ep0 maxpacket: 32 [ 1466.747072][T22154] usb 14-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1466.748135][T22154] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1466.748155][T22154] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1466.748195][T22154] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.750270][T22154] usb 14-1: config 0 descriptor?? [ 1466.752709][T22154] hub 14-1:0.0: USB hub found [ 1466.961773][T22154] hub 14-1:0.0: 1 port detected [ 1467.016344][ T5835] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1467.176847][ T5835] usb 10-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 1467.178560][ T5835] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1467.178574][ T5835] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.178603][ T5835] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.180122][ T5835] usb 10-1: config 0 descriptor?? [ 1467.365612][T26002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.367462][T26002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.574498][T22154] hub 14-1:0.0: activate --> -90 [ 1467.597615][ T5835] wacom 0003:056A:5012.0016: unknown main item tag 0x0 [ 1467.597639][ T5835] wacom 0003:056A:5012.0016: unknown main item tag 0x0 [ 1467.597652][ T5835] wacom 0003:056A:5012.0016: unknown main item tag 0x0 [ 1467.597665][ T5835] wacom 0003:056A:5012.0016: unknown main item tag 0x0 [ 1467.597678][ T5835] wacom 0003:056A:5012.0016: unknown main item tag 0x0 [ 1467.597690][ T5835] wacom 0003:056A:5012.0016: unknown main item tag 0x0 [ 1467.597703][ T5835] wacom 0003:056A:5012.0016: unknown main item tag 0x0 [ 1467.597715][ T5835] wacom 0003:056A:5012.0016: unknown main item tag 0x0 [ 1467.597726][ T5835] wacom 0003:056A:5012.0016: unknown main item tag 0x0 [ 1467.597928][ T5835] wacom 0003:056A:5012.0016: ignoring exceeding usage max [ 1467.603729][ T5835] wacom 0003:056A:5012.0016: reserved main item tag 0xd [ 1467.606561][ T5835] wacom 0003:056A:5012.0016: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 1467.736107][ C2] net_ratelimit: 969 callbacks suppressed [ 1467.792887][ T42] usb 10-1: USB disconnect, device number 30 [ 1467.995472][ T42] usb 14-1: USB disconnect, device number 12 [ 1467.997562][T22154] hub_port_connect: 29 callbacks suppressed [ 1467.997569][T22154] usb 14-1-port1: connect-debounce failed [ 1468.324429][T26010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7491'. [ 1468.460261][T26015] tipc: Enabling of bearer rejected, failed to enable media [ 1468.528867][T26021] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7494'. [ 1469.016683][T22154] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1469.166195][T22154] usb 10-1: Using ep0 maxpacket: 8 [ 1469.168402][T22154] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1469.171112][T22154] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1469.171171][T22154] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1469.171192][T22154] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1469.171213][T22154] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1469.171230][T22154] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1469.171276][T22154] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.398587][T22154] usb 10-1: usb_control_msg returned -32 [ 1469.398624][T22154] usbtmc 10-1:16.0: can't read capabilities [ 1469.564821][T26039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7498'. [ 1469.634290][T26041] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7499'. [ 1469.693066][T26043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7500'. [ 1469.964799][ T8915] usb 10-1: USB disconnect, device number 31 [ 1469.967780][T26044] usbtmc 10-1:16.0: usbtmc_ioctl_request failed -71 [ 1470.299367][T26052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7503'. [ 1470.566151][ T8915] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1470.794334][T26055] tipc: Started in network mode [ 1470.794349][T26055] tipc: Node identity cad4480ec0d4, cluster identity 4711 [ 1470.799544][T26055] tipc: Enabled bearer , priority 0 [ 1470.802077][T26055] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1470.821172][T26055] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1470.855769][T26054] tipc: Disabling bearer [ 1470.982678][ T8915] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1470.982704][ T8915] usb 10-1: New USB device found, idVendor=04b4, idProduct=931f, bcdDevice= 0.40 [ 1470.983241][T26059] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7506'. [ 1470.983447][ T8915] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1470.983462][ T8915] usb 10-1: can't read configurations, error -71 [ 1471.085579][T26061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7508'. [ 1473.096110][ C2] net_ratelimit: 1317 callbacks suppressed [ 1473.396791][T26089] tipc: Enabled bearer , priority 0 [ 1473.397343][T26089] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1473.398580][T26089] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1473.417502][T26088] tipc: Disabling bearer [ 1473.449529][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7515'. [ 1473.769644][T26097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7517'. [ 1476.190683][T26127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7525'. [ 1476.367004][T26129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7526'. [ 1476.471672][T26131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7527'. [ 1476.505414][T26133] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7528'. [ 1476.768750][T26135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7529'. [ 1476.802854][T26137] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7530'. [ 1476.883453][T26139] filter_write: 3 callbacks suppressed [ 1476.883462][T26139] msr: Write to unrecognized MSR 0x83f by syz.8.7531 (pid: 26139), tainting CPU_OUT_OF_SPEC. [ 1476.883471][T26139] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 1477.020266][T26141] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7532'. [ 1477.095342][T26143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7534'. ** 2309 printk messages dropped ** ** 2 printk messages dropped ** ** 3609 printk messages dropped ** ** 146 printk messages dropped ** ** 100 printk messages dropped ** ** 99 printk messages dropped ** ** 102 printk messages dropped ** ** 95 printk messages dropped ** ** 98 printk messages dropped ** ** 35 printk messages dropped ** ** 50 printk messages dropped ** ** 102 printk messages dropped ** ** 100 printk messages dropped ** ** 103 printk messages dropped ** ** 99 printk messages dropped ** ** 34 printk messages dropped ** ** 1954 printk messages dropped ** [ 1478.146082][ C0] net_ratelimit: 1558 callbacks suppressed ** 396 printk messages dropped ** [ 1478.578384][T26165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7541'. [ 1478.581990][T26166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7540'. [ 1479.594492][T26176] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7544'. ** 999 printk messages dropped ** ** 157 printk messages dropped ** ** 147 printk messages dropped ** ** 143 printk messages dropped ** ** 129 printk messages dropped ** ** 122 printk messages dropped ** ** 74 printk messages dropped ** ** 2240 printk messages dropped ** [ 1481.420980][T26184] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1481.450832][T26184] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! ** 2136 printk messages dropped ** [ 1482.940998][T26207] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7552'. [ 1483.110006][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7554'. [ 1483.416083][ C0] net_ratelimit: 1201 callbacks suppressed ** 1527 printk messages dropped ** [ 1484.243489][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.243523][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.782162][ T5746] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1485.961824][T26239] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7563'. [ 1486.036811][T26242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7562'. [ 1488.546210][ C0] net_ratelimit: 965 callbacks suppressed ** 372 printk messages dropped ** [ 1491.485585][T26272] Bluetooth: hci3: command 0x0406 tx timeout [ 1491.485666][T26272] Bluetooth: hci2: command 0x0406 tx timeout ** 618 printk messages dropped ** [ 1492.139790][T26296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7578'. [ 1493.576402][ C2] net_ratelimit: 965 callbacks suppressed ** 1458 printk messages dropped ** ** 1166 printk messages dropped ** ** 579 printk messages dropped ** ** 157 printk messages dropped ** ** 136 printk messages dropped ** ** 156 printk messages dropped ** ** 145 printk messages dropped ** ** 173 printk messages dropped ** ** 158 printk messages dropped ** ** 156 printk messages dropped ** ** 151 printk messages dropped ** ** 168 printk messages dropped ** ** 153 printk messages dropped ** ** 174 printk messages dropped ** ** 155 printk messages dropped ** ** 167 printk messages dropped ** ** 162 printk messages dropped ** ** 185 printk messages dropped ** ** 168 printk messages dropped ** ** 157 printk messages dropped ** ** 159 printk messages dropped ** ** 136 printk messages dropped ** ** 194 printk messages dropped ** ** 175 printk messages dropped ** ** 153 printk messages dropped ** ** 147 printk messages dropped ** ** 2761 printk messages dropped ** ** 154 printk messages dropped ** ** 139 printk messages dropped ** ** 150 printk messages dropped ** ** 149 printk messages dropped ** ** 153 printk messages dropped ** ** 124 printk messages dropped ** ** 247 printk messages dropped ** ** 156 printk messages dropped ** ** 145 printk messages dropped ** ** 137 printk messages dropped ** ** 154 printk messages dropped ** ** 127 printk messages dropped ** ** 206 printk messages dropped ** ** 148 printk messages dropped ** ** 157 printk messages dropped ** ** 154 printk messages dropped ** ** 160 printk messages dropped ** ** 181 printk messages dropped ** ** 190 printk messages dropped ** ** 200 printk messages dropped ** ** 164 printk messages dropped ** ** 163 printk messages dropped ** ** 139 printk messages dropped ** ** 147 printk messages dropped ** ** 97 printk messages dropped ** ** 124 printk messages dropped ** ** 144 printk messages dropped ** ** 188 printk messages dropped ** ** 134 printk messages dropped ** ** 130 printk messages dropped ** ** 5627 printk messages dropped ** ** 1 printk messages dropped ** [ 1494.569316][T26316] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1494.570087][T26316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7583'. [ 1494.609349][ T42] hid-generic 0005:0007:0009.0017: item fetching failed at offset 0/1 [ 1494.610314][ T42] hid-generic 0005:0007:0009.0017: probe with driver hid-generic failed with error -22 ** 85 printk messages dropped ** ** 104 printk messages dropped ** ** 173 printk messages dropped ** ** 179 printk messages dropped ** ** 148 printk messages dropped ** ** 171 printk messages dropped ** ** 148 printk messages dropped ** ** 147 printk messages dropped ** ** 197 printk messages dropped ** ** 166 printk messages dropped ** ** 157 printk messages dropped ** ** 165 printk messages dropped ** ** 184 printk messages dropped ** ** 166 printk messages dropped ** ** 173 printk messages dropped ** ** 161 printk messages dropped ** ** 165 printk messages dropped ** ** 165 printk messages dropped ** ** 169 printk messages dropped ** ** 144 printk messages dropped ** ** 194 printk messages dropped ** ** 161 printk messages dropped ** ** 179 printk messages dropped ** ** 183 printk messages dropped ** ** 71 printk messages dropped ** ** 147 printk messages dropped ** ** 163 printk messages dropped ** ** 161 printk messages dropped ** ** 205 printk messages dropped ** ** 161 printk messages dropped ** ** 163 printk messages dropped ** ** 97 printk messages dropped ** ** 104 printk messages dropped ** ** 104 printk messages dropped ** ** 98 printk messages dropped ** ** 89 printk messages dropped ** ** 122 printk messages dropped ** ** 106 printk messages dropped ** ** 122 printk messages dropped ** ** 114 printk messages dropped ** ** 120 printk messages dropped ** ** 125 printk messages dropped ** ** 102 printk messages dropped ** ** 74 printk messages dropped ** ** 144 printk messages dropped ** ** 164 printk messages dropped ** ** 116 printk messages dropped ** ** 95 printk messages dropped ** ** 90 printk messages dropped ** ** 91 printk messages dropped ** ** 120 printk messages dropped ** ** 146 printk messages dropped ** ** 136 printk messages dropped ** ** 179 printk messages dropped ** ** 188 printk messages dropped ** ** 136 printk messages dropped ** ** 2719 printk messages dropped ** ** 1953 printk messages dropped ** ** 1311 printk messages dropped ** ** 1386 printk messages dropped ** [ 1495.344014][T26325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7586'. ** 1982 printk messages dropped ** [ 1496.923009][T26342] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7590'. ** 1839 printk messages dropped ** ** 1929 printk messages dropped ** ** 232 printk messages dropped ** ** 175 printk messages dropped ** ** 67 printk messages dropped ** ** 217 printk messages dropped ** ** 186 printk messages dropped ** ** 278 printk messages dropped ** ** 144 printk messages dropped ** ** 133 printk messages dropped ** ** 170 printk messages dropped ** ** 213 printk messages dropped ** ** 140 printk messages dropped ** ** 124 printk messages dropped ** ** 175 printk messages dropped ** ** 184 printk messages dropped ** ** 124 printk messages dropped ** ** 119 printk messages dropped ** ** 190 printk messages dropped ** ** 194 printk messages dropped ** ** 131 printk messages dropped ** ** 778 printk messages dropped ** ** 172 printk messages dropped ** ** 145 printk messages dropped ** ** 497 printk messages dropped ** ** 146 printk messages dropped ** ** 274 printk messages dropped ** ** 155 printk messages dropped ** ** 124 printk messages dropped ** ** 170 printk messages dropped ** ** 175 printk messages dropped ** ** 113 printk messages dropped ** ** 125 printk messages dropped ** ** 204 printk messages dropped ** ** 172 printk messages dropped ** ** 122 printk messages dropped ** ** 161 printk messages dropped ** ** 192 printk messages dropped ** ** 182 printk messages dropped ** ** 131 printk messages dropped ** ** 115 printk messages dropped ** [ 1497.209258][T26347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7592'. [ 1497.323783][T26351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7594'. [ 1498.217571][T26362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7597'. [ 1498.273265][T26364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7598'. [ 1498.696318][ C0] net_ratelimit: 1085 callbacks suppressed [ 1500.823334][T26384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7604'. [ 1500.845036][T26385] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7603'. [ 1502.058622][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7608'. [ 1502.460922][T26408] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7610'. [ 1502.469245][T26409] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7611'. [ 1503.736103][ C2] net_ratelimit: 615 callbacks suppressed [ 1504.174173][T26427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7615'. [ 1504.438692][T26429] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7616'. [ 1504.516378][T26434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7618'. [ 1506.182922][T26453] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7621'. [ 1506.803807][T26459] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7623'. [ 1506.982046][T26464] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7625'. [ 1507.375380][T26468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7626'. [ 1508.034348][T26474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7628'. [ 1508.697198][T26480] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7629'. [ 1508.774721][T26482] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7631'. [ 1508.785705][T26482] net_ratelimit: 1111 callbacks suppressed [ 1508.804967][T26485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7632'. [ 1509.138045][T26489] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7633'. [ 1511.474073][T26513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7640'. [ 1512.623067][T11788] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1514.369482][ T1163] net_ratelimit: 520 callbacks suppressed [ 1514.499995][T26543] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7648'. [ 1514.518674][T26544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7647'. [ 1515.213828][T26552] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7650'. [ 1515.626739][T26555] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7651'. [ 1515.758430][T26558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7652'. [ 1515.769558][T26559] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7653'. [ 1516.596629][T26568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7654'. [ 1516.982828][T26574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7658'. [ 1517.631071][T26578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7659'. [ 1519.416137][ C0] net_ratelimit: 739 callbacks suppressed [ 1521.496251][T26624] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7670'. [ 1522.743698][ T5149] udevd[5149]: worker [25369] /devices/platform/dummy_hcd.8/usb13/13-1 is taking a long time [ 1523.356358][T26639] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7673'. [ 1524.591452][T25103] net_ratelimit: 533 callbacks suppressed [ 1525.274932][T10455] usb 13-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1525.274948][T10455] usb 13-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1525.275074][T10455] keyspan_pda 13-1:7.141: probe with driver keyspan_pda failed with error -2 [ 1525.309586][T10455] usb 13-1: USB disconnect, device number 5 [ 1525.730523][T26661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7680'. [ 1525.958610][T11788] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1527.456868][T26679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7684'. [ 1529.356345][T11788] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1529.380223][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7689'. [ 1529.427373][T26700] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7690'. [ 1529.469333][T26702] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7691'. [ 1529.656078][ C2] net_ratelimit: 732 callbacks suppressed [ 1531.358477][T26720] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7696'. [ 1531.544542][T26726] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7698'. [ 1531.578654][T25395] hid-generic 0005:0007:0009.0018: item fetching failed at offset 0/1 [ 1531.578959][T25395] hid-generic 0005:0007:0009.0018: probe with driver hid-generic failed with error -22 [ 1531.604695][T26725] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1532.825289][T26743] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7703'. [ 1532.868467][T26745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7704'. [ 1534.677171][T11788] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1534.780126][T26761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7709'. [ 1534.782219][T26761] net_ratelimit: 528 callbacks suppressed [ 1535.337473][T26774] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7712'. [ 1537.643238][T26791] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7715'. [ 1537.733062][T26793] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7717'. [ 1537.896543][T26796] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7718'. [ 1537.931337][T26797] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7719'. [ 1537.950024][T26799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7720'. [ 1539.843587][ T74] net_ratelimit: 393 callbacks suppressed [ 1540.114725][T26823] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7726'. [ 1540.350535][T26827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7728'. [ 1540.398351][T26829] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7727'. [ 1540.567891][T11788] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1540.599107][T26834] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7730'. [ 1540.613443][T26836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7731'. [ 1540.717139][T26841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7733'. [ 1540.995687][T26849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7735'. [ 1543.421284][T26870] __nla_validate_parse: 1 callbacks suppressed [ 1543.421300][T26870] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7740'. [ 1544.017293][T26878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7743'. [ 1544.856905][ T74] net_ratelimit: 847 callbacks suppressed [ 1545.276320][T26891] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1545.277453][T26891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7745'. [ 1545.697125][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.697155][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.764350][T10455] hid-generic 0005:0007:0009.0019: item fetching failed at offset 0/1 [ 1545.764631][T10455] hid-generic 0005:0007:0009.0019: probe with driver hid-generic failed with error -22 [ 1545.884982][T22154] hid-generic 0005:0007:0009.001A: item fetching failed at offset 0/1 [ 1545.885243][T22154] hid-generic 0005:0007:0009.001A: probe with driver hid-generic failed with error -22 [ 1545.925602][T26898] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1545.956204][T26900] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1545.959029][T26900] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7747'. [ 1547.410418][T26917] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7752'. [ 1547.472495][T26920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7753'. [ 1547.687190][T26925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7754'. [ 1548.251881][T22154] hid-generic 0005:0007:0009.001B: item fetching failed at offset 0/1 [ 1548.254453][T22154] hid-generic 0005:0007:0009.001B: probe with driver hid-generic failed with error -22 [ 1548.356682][T26930] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1548.366270][T26930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7756'. [ 1548.584975][T26936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7757'. [ 1548.777839][T26945] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7762'. [ 1548.832262][ T8915] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 1549.148274][T10455] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1549.196530][ T8915] usb 14-1: Using ep0 maxpacket: 8 [ 1549.197100][ T8915] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1549.198096][ T8915] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1549.198130][ T8915] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1549.198141][ T8915] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1549.198153][ T8915] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1549.198165][ T8915] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1549.198194][ T8915] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.296358][T10455] usb 10-1: Using ep0 maxpacket: 8 [ 1549.297249][T10455] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1549.298177][T10455] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1549.298211][T10455] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1549.298223][T10455] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1549.298236][T10455] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1549.298249][T10455] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1549.298280][T10455] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.445172][ T8915] usb 14-1: usb_control_msg returned -32 [ 1549.445211][ T8915] usbtmc 14-1:16.0: can't read capabilities [ 1549.504454][T10455] usb 10-1: usb_control_msg returned -32 [ 1549.504484][T10455] usbtmc 10-1:16.0: can't read capabilities [ 1550.132769][ T38] net_ratelimit: 848 callbacks suppressed [ 1550.365707][T26960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.368970][T26960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.390568][ T8915] usb 14-1: USB disconnect, device number 13 [ 1551.031468][T26972] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7767'. [ 1551.716537][ T8915] usb 10-1: USB disconnect, device number 34 [ 1551.864107][T26981] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7769'. [ 1553.058740][T25395] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 1553.206572][T25395] usb 14-1: Using ep0 maxpacket: 8 [ 1553.207031][T25395] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1553.207867][T25395] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1553.207899][T25395] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1553.207911][T25395] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1553.207923][T25395] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1553.207934][T25395] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1553.207963][T25395] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.544793][T25395] usb 14-1: usb_control_msg returned -32 [ 1553.544814][T25395] usbtmc 14-1:16.0: can't read capabilities [ 1554.742338][T27009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7776'. [ 1555.485585][T27015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7778'. [ 1555.693812][T27015] net_ratelimit: 521 callbacks suppressed [ 1555.858687][ T5835] usb 14-1: USB disconnect, device number 14 [ 1558.311530][T11788] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1558.648031][T27051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7788'. [ 1558.710739][T27054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7789'. [ 1559.250590][T11788] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1559.960512][T27075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7795'. [ 1560.205729][T27078] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7796'. [ 1560.856432][ C2] net_ratelimit: 625 callbacks suppressed [ 1561.089414][T27092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7799'. [ 1562.424587][T27102] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7802'. [ 1562.524691][T27104] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7804'. [ 1563.407538][T27120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7808'. [ 1565.245810][T27130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7812'. [ 1565.514428][T27137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7813'. [ 1565.976842][ C2] net_ratelimit: 740 callbacks suppressed [ 1567.872464][T27158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7819'. [ 1568.244713][T27162] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7820'. [ 1568.341433][T27166] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7822'. [ 1568.795520][T27174] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7824'. [ 1568.960810][T27177] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7825'. [ 1570.461055][T27195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7829'. [ 1571.016094][ C0] net_ratelimit: 500 callbacks suppressed [ 1571.467474][T27204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7831'. [ 1571.775285][T27206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7832'. [ 1575.182880][T27253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7844'. [ 1576.209451][T25642] net_ratelimit: 622 callbacks suppressed [ 1576.657097][T11788] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1578.976284][T25395] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 1579.598817][T25395] usb 13-1: Using ep0 maxpacket: 8 [ 1579.599894][T25395] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1579.600971][T25395] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 1579.601025][T25395] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1579.601043][T25395] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1579.601086][T25395] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1579.601105][T25395] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1579.601152][T25395] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.245008][T27305] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7858'. [ 1580.254485][T25395] usb 13-1: usb_control_msg returned -32 [ 1580.254528][T25395] usbtmc 13-1:16.0: can't read capabilities [ 1580.529041][T27312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7861'. [ 1580.608105][T27306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.733025][T27306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.055423][T27318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7862'. [ 1581.347414][ T1162] net_ratelimit: 869 callbacks suppressed [ 1581.791255][T10455] usb 13-1: USB disconnect, device number 6 [ 1583.761576][T27343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7868'. [ 1583.992609][T27351] Bluetooth: MGMT ver 1.23 [ 1587.125450][ T53] net_ratelimit: 612 callbacks suppressed [ 1592.136252][ T5835] hid-generic 0005:0007:0009.001C: item fetching failed at offset 0/1 [ 1592.137492][ T5835] hid-generic 0005:0007:0009.001C: probe with driver hid-generic failed with error -22 [ 1592.146083][ C0] net_ratelimit: 503 callbacks suppressed [ 1594.384458][T27439] vivid-001: kernel_thread() failed [ 1594.899663][T27449] tipc: Started in network mode [ 1594.899680][T27449] tipc: Node identity 8ea06015d021, cluster identity 4711 [ 1594.899759][T27449] tipc: Enabled bearer , priority 0 [ 1594.931367][T27449] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1594.963380][T27449] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1594.969341][T27449] tipc: Resetting bearer [ 1595.199805][T27448] tipc: Disabling bearer [ 1596.260242][T27471] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7900'. [ 1597.576123][ C0] net_ratelimit: 503 callbacks suppressed [ 1597.639708][T27486] tipc: Enabled bearer , priority 0 [ 1597.640086][T27486] syzkaller0: entered promiscuous mode [ 1597.640096][T27486] syzkaller0: entered allmulticast mode [ 1597.643812][T27486] tipc: Resetting bearer [ 1597.738073][T27485] tipc: Resetting bearer [ 1597.891909][T27485] tipc: Disabling bearer [ 1600.704608][T11788] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1602.626327][ C0] net_ratelimit: 725 callbacks suppressed [ 1607.154900][T27558] vivid-003: kernel_thread() failed [ 1607.157025][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.157074][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.494971][T27560] vivid-001: kernel_thread() failed [ 1608.226291][ C2] net_ratelimit: 603 callbacks suppressed [ 1608.806155][ T5093] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 1608.976113][ T5093] usb 13-1: Using ep0 maxpacket: 8 [ 1608.978601][ T5093] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1608.980469][ T5093] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 1608.980525][ T5093] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1608.980544][ T5093] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1608.980563][ T5093] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1608.980583][ T5093] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1608.980630][ T5093] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.724705][ T5093] usb 13-1: usb_control_msg returned -32 [ 1609.724728][ T5093] usbtmc 13-1:16.0: can't read capabilities [ 1609.752387][ T5093] usb 13-1: USB disconnect, device number 7 [ 1610.671804][T27596] vivid-001: kernel_thread() failed [ 1610.857668][T11788] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1611.019914][ T42] hid-generic 0005:0007:0009.001D: item fetching failed at offset 0/1 [ 1611.020532][ T42] hid-generic 0005:0007:0009.001D: probe with driver hid-generic failed with error -22 [ 1611.056830][ T5093] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 1613.403298][T25642] net_ratelimit: 724 callbacks suppressed [ 1614.214655][T19073] hid-generic 0005:0007:0009.001E: item fetching failed at offset 0/1 [ 1614.214906][T19073] hid-generic 0005:0007:0009.001E: probe with driver hid-generic failed with error -22 [ 1618.416155][T25645] net_ratelimit: 723 callbacks suppressed [ 1619.312740][ T42] hid-generic 0005:0007:0009.001F: item fetching failed at offset 0/1 [ 1619.313258][ T42] hid-generic 0005:0007:0009.001F: probe with driver hid-generic failed with error -22 [ 1619.488642][T27691] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7953'. [ 1623.889962][T27721] net_ratelimit: 720 callbacks suppressed [ 1624.987003][T27730] tipc: Enabled bearer , priority 0 [ 1625.013185][T27730] syzkaller0: entered promiscuous mode [ 1625.013201][T27730] syzkaller0: entered allmulticast mode [ 1625.086744][T27731] tipc: Resetting bearer [ 1625.311923][T27729] tipc: Resetting bearer [ 1626.230269][T27729] tipc: Disabling bearer [ 1626.389120][ T5093] tipc: Node number set to 1585537045 [ 1626.935105][T11788] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 1628.981013][ C0] net_ratelimit: 610 callbacks suppressed [ 1634.302210][ C2] net_ratelimit: 734 callbacks suppressed [ 1638.536858][T27807] vivid-001: kernel_thread() failed [ 1639.349139][ C0] net_ratelimit: 386 callbacks suppressed [ 1639.696125][T27818] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7984'. [ 1644.773407][ T1163] net_ratelimit: 384 callbacks suppressed [ 1650.152937][ C0] net_ratelimit: 372 callbacks suppressed [ 1655.589271][ C0] net_ratelimit: 643 callbacks suppressed [ 1661.137492][T25642] net_ratelimit: 491 callbacks suppressed [ 1661.510578][T25395] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 1662.146100][T25395] usb 14-1: Using ep0 maxpacket: 8 [ 1662.147175][T25395] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1662.148227][T25395] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1662.148249][T25395] usb 14-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.148298][T25395] usb 14-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1662.148347][T25395] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.153218][T25395] usbtmc 14-1:16.0: bulk endpoints not found [ 1664.027537][ T8915] usb 14-1: USB disconnect, device number 15 [ 1664.157305][T27957] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8011'. [ 1666.300881][ C0] net_ratelimit: 619 callbacks suppressed [ 1667.248265][T27983] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8018'. [ 1667.663511][T27986] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8021'. [ 1668.592615][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.592696][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.656894][ C0] net_ratelimit: 505 callbacks suppressed [ 1672.957328][T28019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8027'. [ 1673.231487][T28024] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8029'. [ 1675.057733][T28034] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8031'. [ 1675.530297][T28035] vivid-001: kernel_thread() failed [ 1675.841138][T28042] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8032'. [ 1675.903434][T28040] tipc: Enabled bearer , priority 0 [ 1675.904064][T28040] syzkaller0: entered promiscuous mode [ 1675.904077][T28040] syzkaller0: entered allmulticast mode [ 1675.938299][T28040] tipc: Resetting bearer [ 1675.958276][T28039] tipc: Resetting bearer [ 1676.018497][T28039] tipc: Disabling bearer [ 1676.074563][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8034'. [ 1676.722110][T23565] net_ratelimit: 385 callbacks suppressed [ 1681.980843][ C0] net_ratelimit: 495 callbacks suppressed [ 1683.383602][T28097] tipc: Enabling of bearer rejected, failed to enable media [ 1685.957946][T25395] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1686.300637][T25395] usb 10-1: Using ep0 maxpacket: 8 [ 1686.301703][T25395] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1686.323702][T25395] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1686.323734][T25395] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.323791][T25395] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1686.323813][T25395] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1686.323835][T25395] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1686.323890][T25395] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.364402][T25395] usbtmc 10-1:16.0: bulk endpoints not found [ 1687.054480][T25105] net_ratelimit: 381 callbacks suppressed [ 1689.751627][ T8915] usb 10-1: USB disconnect, device number 35 [ 1692.115325][T25645] net_ratelimit: 379 callbacks suppressed [ 1697.176150][ C2] net_ratelimit: 503 callbacks suppressed [ 1702.387097][ T53] net_ratelimit: 373 callbacks suppressed [ 1703.220917][T28241] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8068'. [ 1706.373494][T28265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8072'. [ 1707.520336][T23565] net_ratelimit: 623 callbacks suppressed [ 1709.651932][T28284] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8078'. [ 1713.199672][ C2] net_ratelimit: 394 callbacks suppressed [ 1718.536555][ C2] net_ratelimit: 494 callbacks suppressed [ 1721.255082][T11788] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1723.579824][T25645] net_ratelimit: 498 callbacks suppressed [ 1724.504992][T28374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8097'. [ 1726.908810][T28391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8101'. [ 1729.009384][T25642] net_ratelimit: 599 callbacks suppressed [ 1729.343294][T28409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8104'. [ 1730.329732][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.329786][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.140597][ C2] net_ratelimit: 620 callbacks suppressed [ 1735.603753][T28453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8115'. [ 1739.454307][T28472] vivid-001: kernel_thread() failed [ 1739.624682][T25103] net_ratelimit: 607 callbacks suppressed [ 1739.807264][T11788] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1740.018285][T28486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8119'. [ 1740.487626][T11788] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 1742.882594][T11788] Bluetooth: hci0: command 0x0406 tx timeout [ 1744.666222][T25642] net_ratelimit: 370 callbacks suppressed [ 1745.032821][T28506] vivid-001: kernel_thread() failed [ 1749.176527][ T5746] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1750.542433][ T1158] net_ratelimit: 488 callbacks suppressed [ 1752.419436][T28567] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8138'. [ 1756.026874][T25107] net_ratelimit: 513 callbacks suppressed [ 1756.155136][T28592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8144'. [ 1758.824425][ T5746] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 1761.036238][T25103] net_ratelimit: 486 callbacks suppressed [ 1762.451134][T28644] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8153'. [ 1765.676351][T28661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8156'. [ 1766.220437][ C0] net_ratelimit: 606 callbacks suppressed [ 1770.237490][T28701] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8165'. [ 1770.356246][ T5746] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 1770.562750][T28700] tipc: Enabled bearer , priority 0 [ 1770.563421][T28700] syzkaller0: entered promiscuous mode [ 1770.563437][T28700] syzkaller0: entered allmulticast mode [ 1770.642171][T28704] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1771.185813][T28710] tipc: Resetting bearer [ 1771.278443][T28699] tipc: Resetting bearer [ 1771.336111][ C2] net_ratelimit: 499 callbacks suppressed [ 1771.732229][T28699] tipc: Disabling bearer [ 1771.878298][T10632] tipc: Node number set to 167790606 [ 1772.605575][T28718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8170'. [ 1773.025059][T28723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8171'. [ 1773.835669][T28728] vivid-001: kernel_thread() failed [ 1774.369242][T28736] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8174'. [ 1775.572383][T28743] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8175'. [ 1776.786567][T25645] net_ratelimit: 501 callbacks suppressed [ 1777.479753][T28757] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8179'. [ 1777.808836][T28762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8180'. [ 1779.724973][ T5746] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 1782.208212][ T74] net_ratelimit: 489 callbacks suppressed [ 1785.134284][T28803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8189'. [ 1785.755574][T28809] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8191'. [ 1787.350213][ C0] net_ratelimit: 722 callbacks suppressed [ 1788.276867][T28833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8198'. [ 1789.063680][T28841] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8200'. [ 1789.540453][T28843] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8199'. [ 1789.798496][T28846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8201'. [ 1791.358714][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.358761][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.536355][ C2] net_ratelimit: 616 callbacks suppressed [ 1795.202339][T28872] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8206'. [ 1795.515985][T28876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8209'. [ 1795.655470][T28879] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8208'. [ 1797.530855][T28888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8212'. [ 1797.676292][ T1158] net_ratelimit: 613 callbacks suppressed [ 1797.943398][T28891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8213'. [ 1798.803520][T28900] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8217'. [ 1798.830091][T28901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8215'. [ 1803.266107][ C0] net_ratelimit: 498 callbacks suppressed [ 1806.149312][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8226'. [ 1807.179814][T28954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8229'. [ 1808.344662][T28964] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8231'. [ 1808.369493][T28964] net_ratelimit: 504 callbacks suppressed [ 1811.272997][T28976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8234'. [ 1811.296192][T28980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8235'. [ 1812.169077][T28993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8238'. [ 1813.195472][T28997] vivid-001: kernel_thread() failed [ 1813.424041][T25105] net_ratelimit: 598 callbacks suppressed [ 1814.063726][T29013] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8242'. [ 1817.410773][T29036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8249'. [ 1818.568156][ C0] net_ratelimit: 507 callbacks suppressed [ 1820.263876][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8252'. [ 1820.513309][T29057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8255'. [ 1821.160570][ T5746] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 1821.275497][T29076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8258'. [ 1822.293816][T29081] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8259'. [ 1824.068142][ C2] net_ratelimit: 726 callbacks suppressed [ 1826.115744][T29112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8265'. [ 1828.586169][T19073] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1829.070758][T19073] usb 10-1: Using ep0 maxpacket: 8 [ 1829.076714][T19073] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1829.077958][T19073] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1829.078015][T19073] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1829.078035][T19073] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1829.078052][T19073] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1829.078070][T19073] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1829.078120][T19073] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.652920][T19073] usb 10-1: usb_control_msg returned -32 [ 1829.652956][T19073] usbtmc 10-1:16.0: can't read capabilities [ 1830.012595][ C0] net_ratelimit: 506 callbacks suppressed [ 1830.301898][ T5093] usb 10-1: USB disconnect, device number 36 [ 1830.335192][T29144] usbtmc 10-1:16.0: usbtmc_ioctl_request failed -71 [ 1831.201277][T29155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8275'. [ 1834.274896][T29168] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8279'. [ 1835.034067][ C2] net_ratelimit: 611 callbacks suppressed [ 1835.067210][T29179] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8282'. [ 1836.504097][T29188] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8283'. [ 1838.016550][T29203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8287'. [ 1838.322601][T29206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8288'. [ 1840.248652][ T1163] net_ratelimit: 734 callbacks suppressed [ 1840.553735][T29218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8292'. [ 1840.927642][T29221] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8294'. [ 1841.105139][T29224] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8295'. [ 1843.371909][T25395] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1844.476294][T25395] usb 10-1: Using ep0 maxpacket: 8 [ 1844.477642][T25395] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1844.478858][T25395] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1844.478925][T25395] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1844.478948][T25395] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1844.478972][T25395] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1844.478997][T25395] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1844.479048][T25395] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.021608][T25395] usb 10-1: usb_control_msg returned -32 [ 1845.021646][T25395] usbtmc 10-1:16.0: can't read capabilities [ 1845.426172][ C0] net_ratelimit: 609 callbacks suppressed [ 1846.154660][T19073] usb 10-1: USB disconnect, device number 37 [ 1846.757555][T29259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8302'. [ 1847.223924][T29265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8304'. [ 1850.547949][ C2] net_ratelimit: 499 callbacks suppressed [ 1852.065157][T29285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8308'. [ 1852.071843][T29284] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8307'. [ 1852.725507][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.725559][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.269831][T29299] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8311'. [ 1854.850090][T29304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8314'. [ 1855.904389][ T1164] net_ratelimit: 502 callbacks suppressed [ 1857.717370][T29328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8318'. [ 1859.409540][T29338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8321'. [ 1860.259171][T29344] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8322'. [ 1861.029656][T29352] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8324'. [ 1861.039390][ T1164] net_ratelimit: 509 callbacks suppressed [ 1861.586475][ T5746] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 1862.857064][ T5746] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1862.889746][T29374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8328'. [ 1863.850191][T29380] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8330'. [ 1864.133638][T29386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8332'. [ 1866.136201][ C2] net_ratelimit: 501 callbacks suppressed [ 1866.760880][ T5746] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 1869.247801][T29421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8342'. [ 1869.564533][T29429] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8343'. [ 1869.633384][T29431] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8341'. [ 1870.122350][T29434] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8344'. [ 1871.332718][ T74] net_ratelimit: 384 callbacks suppressed [ 1872.438683][T29454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8349'. [ 1874.690008][ T5746] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 1875.321312][T29474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8353'. [ 1875.503880][T29476] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8354'. [ 1876.008032][T29483] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8357'. [ 1876.138177][T29485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8358'. [ 1876.376826][T27159] net_ratelimit: 848 callbacks suppressed [ 1876.537009][T29490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8361'. [ 1877.013417][T29494] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8360'. [ 1878.663437][T29508] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8363'. [ 1879.721637][T29514] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8364'. [ 1880.447347][T29520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8367'. [ 1881.497193][ C2] net_ratelimit: 496 callbacks suppressed [ 1881.809456][T29529] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8369'. [ 1884.348426][ T5746] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1884.469338][ T5746] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 1885.281920][T29552] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8374'. [ 1886.427588][T29564] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8376'. [ 1886.445742][T29563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8375'. [ 1886.549111][ T1163] net_ratelimit: 505 callbacks suppressed [ 1887.858942][T29573] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8377'. [ 1888.300342][T29582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8380'. [ 1889.712800][T29588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8381'. [ 1891.667837][ C2] net_ratelimit: 488 callbacks suppressed [ 1894.854865][T29612] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8387'. [ 1895.012992][T29616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8388'. [ 1895.444074][T29622] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8390'. [ 1896.936936][T27159] net_ratelimit: 611 callbacks suppressed [ 1897.794570][T29638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8392'. [ 1898.246568][T29647] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8393'. [ 1899.251904][ T5746] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 1902.466146][T25642] net_ratelimit: 512 callbacks suppressed [ 1903.233048][T29675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8402'. [ 1903.563762][T29677] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8403'. [ 1905.105719][T29687] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8405'. [ 1907.731984][T25103] net_ratelimit: 495 callbacks suppressed [ 1912.223954][T29725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8416'. [ 1912.534271][T29732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8418'. [ 1912.601366][T29730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8417'. [ 1913.046999][T25642] net_ratelimit: 722 callbacks suppressed [ 1913.477846][T29741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8420'. [ 1914.166497][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.166571][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.774244][T29750] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8422'. [ 1914.813681][T29748] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8421'. [ 1916.801000][T29763] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8427'. [ 1916.834202][ T5746] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 1918.136126][ C0] net_ratelimit: 611 callbacks suppressed [ 1918.369501][T29781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8431'. [ 1919.762230][T29791] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8433'. [ 1920.037194][T29794] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8432'. [ 1923.272737][T29815] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8438'. [ 1923.281715][T29815] net_ratelimit: 613 callbacks suppressed [ 1924.392276][T29821] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8439'. [ 1925.931069][ T5746] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 1926.251265][T29834] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8443'. [ 1928.302868][T29844] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8446'. [ 1928.352963][ T38] net_ratelimit: 411 callbacks suppressed [ 1933.356522][ T1163] net_ratelimit: 264 callbacks suppressed [ 1933.518575][T29870] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8452'. [ 1934.456439][T29879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8454'. [ 1935.416887][T29886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8455'. [ 1935.422605][ T5746] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1937.086361][T29907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8460'. [ 1937.090186][T29904] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8459'. [ 1938.458182][T27159] net_ratelimit: 508 callbacks suppressed [ 1942.872452][T29944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8468'. [ 1942.972128][T29950] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8470'. [ 1943.237989][T29952] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8469'. [ 1943.503877][ T38] net_ratelimit: 499 callbacks suppressed [ 1943.770221][T29956] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8471'. [ 1947.389691][T29970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8476'. [ 1948.288146][T29977] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8477'. [ 1948.820395][T29981] kcov: kcov_start: t = ffff88802747cb00, size = 524288, area = ffffc90027f0a000 [ 1948.845646][T22803] sock ffff888029a7e200 sk ffff88804bffb000 [ 1948.845835][T22803] vgaarb: vga_arb_release [ 1948.845849][T22803] ================================================================== [ 1948.845857][T22803] BUG: KASAN: slab-use-after-free in __dynamic_dev_dbg+0x2fc/0x310 [ 1948.845941][T22803] Read of size 8 at addr ffff888022778120 by task syz.5.6527/22803 [ 1948.845956][T22803] [ 1948.845968][T22803] CPU: 2 UID: 0 PID: 22803 Comm: syz.5.6527 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1948.846014][T22803] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1948.846023][T22803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1948.846034][T22803] Call Trace: [ 1948.846040][T22803] [ 1948.846049][T22803] dump_stack_lvl+0x100/0x190 [ 1948.846075][T22803] print_report+0x13d/0x4b0 [ 1948.846101][T22803] ? __virt_addr_valid+0x239/0x430 [ 1948.846131][T22803] ? __dynamic_dev_dbg+0x2fc/0x310 [ 1948.846153][T22803] kasan_report+0xdf/0x1c0 [ 1948.846181][T22803] ? __dynamic_dev_dbg+0x2fc/0x310 [ 1948.846207][T22803] __dynamic_dev_dbg+0x2fc/0x310 [ 1948.846230][T22803] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 1948.846261][T22803] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1948.846281][T22803] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1948.846310][T22803] vga_arb_release+0x3e7/0x540 [ 1948.846337][T22803] ? __pfx_vga_arb_release+0x10/0x10 [ 1948.846361][T22803] __fput+0x400/0xb60 [ 1948.846390][T22803] task_work_run+0x150/0x240 [ 1948.846412][T22803] ? __pfx_task_work_run+0x10/0x10 [ 1948.846436][T22803] do_exit+0x8da/0x2a60 [ 1948.846458][T22803] ? __pfx_do_exit+0x10/0x10 [ 1948.846485][T22803] ? cgroup_update_frozen_flag+0x125/0x240 [ 1948.846507][T22803] ? find_held_lock+0x2b/0x80 [ 1948.846527][T22803] ? get_signal+0x184f/0x21e0 [ 1948.846544][T22803] do_group_exit+0xd5/0x2a0 [ 1948.846565][T22803] get_signal+0x1ec7/0x21e0 [ 1948.846585][T22803] ? __pfx_get_signal+0x10/0x10 [ 1948.846600][T22803] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1948.846627][T22803] arch_do_signal_or_restart+0x91/0x7a0 [ 1948.846653][T22803] ? get_old_timespec32+0xda/0x130 [ 1948.846681][T22803] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1948.846709][T22803] ? __ia32_sys_clock_nanosleep_time32+0x363/0x480 [ 1948.846740][T22803] exit_to_user_mode_loop+0x139/0x700 [ 1948.846759][T22803] ? rcu_is_watching+0x13/0xc0 [ 1948.846782][T22803] do_int80_emulation+0x555/0x650 [ 1948.846804][T22803] asm_int80_emulation+0x1a/0x20 [ 1948.846822][T22803] RIP: 0023:0xf71d77eb [ 1948.846837][T22803] Code: Unable to access opcode bytes at 0xf71d77c1. [ 1948.846846][T22803] RSP: 002b:00000000f54963ac EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 1948.846865][T22803] RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 0000000000000000 [ 1948.846877][T22803] RDX: 00000000f5496444 RSI: 00000000f549643c RDI: 0000000000000000 [ 1948.846888][T22803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1948.846899][T22803] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1948.846910][T22803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1948.846927][T22803] [ 1948.846935][T22803] [ 1948.846939][T22803] Allocated by task 1164: [ 1948.846949][T22803] kasan_save_stack+0x30/0x50 [ 1948.846975][T22803] kasan_save_track+0x14/0x30 [ 1948.846997][T22803] __kasan_kmalloc+0xaa/0xb0 [ 1948.847021][T22803] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 1948.847046][T22803] kmalloc_reserve+0xe8/0x350 [ 1948.847070][T22803] __alloc_skb+0x185/0x710 [ 1948.847088][T22803] nsim_dev_trap_report_work+0x2af/0xd20 [ 1948.847111][T22803] process_one_work+0xac7/0x1b10 [ 1948.847131][T22803] worker_thread+0x5ef/0xe50 [ 1948.847151][T22803] kthread+0x373/0x450 [ 1948.847168][T22803] ret_from_fork+0x730/0xd60 [ 1948.847184][T22803] ret_from_fork_asm+0x1a/0x30 [ 1948.847200][T22803] [ 1948.847204][T22803] Freed by task 1164: [ 1948.847212][T22803] kasan_save_stack+0x30/0x50 [ 1948.847233][T22803] kasan_save_track+0x14/0x30 [ 1948.847255][T22803] kasan_save_free_info+0x3b/0x70 [ 1948.847273][T22803] __kasan_slab_free+0x5f/0x80 [ 1948.847295][T22803] kfree+0x22b/0x6d0 [ 1948.847311][T22803] skb_free_head+0xb9/0x160 [ 1948.847327][T22803] skb_release_data+0x659/0x860 [ 1948.847381][T22803] consume_skb+0xc4/0x110 [ 1948.847400][T22803] nsim_dev_trap_report_work+0x8de/0xd20 [ 1948.847422][T22803] process_one_work+0xac7/0x1b10 [ 1948.847442][T22803] worker_thread+0x5ef/0xe50 [ 1948.847463][T22803] kthread+0x373/0x450 [ 1948.847486][T22803] ret_from_fork+0x730/0xd60 [ 1948.847502][T22803] ret_from_fork_asm+0x1a/0x30 [ 1948.847518][T22803] [ 1948.847523][T22803] The buggy address belongs to the object at ffff888022778000 [ 1948.847523][T22803] which belongs to the cache kmalloc-4k of size 4096 [ 1948.847538][T22803] The buggy address is located 288 bytes inside of [ 1948.847538][T22803] freed 4096-byte region [ffff888022778000, ffff888022779000) [ 1948.847554][T22803] [ 1948.847559][T22803] The buggy address belongs to the physical page: [ 1948.847567][T22803] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22778 [ 1948.847584][T22803] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1948.847599][T22803] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1948.847616][T22803] page_type: f5(slab) [ 1948.847632][T22803] raw: 00fff00000000040 ffff88801d043040 dead000000000100 dead000000000122 [ 1948.847647][T22803] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1948.847664][T22803] head: 00fff00000000040 ffff88801d043040 dead000000000100 dead000000000122 [ 1948.847679][T22803] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1948.847696][T22803] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1948.847711][T22803] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1948.847721][T22803] page dumped because: kasan: bad access detected [ 1948.847729][T22803] page_owner tracks the page as allocated [ 1948.847735][T22803] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2754694686 [ 1948.847762][T22803] post_alloc_hook+0xfd/0x120 [ 1948.847780][T22803] get_page_from_freelist+0x110d/0x35d0 [ 1948.847801][T22803] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1948.847821][T22803] new_slab+0xa9/0x6e0 [ 1948.847838][T22803] refill_objects+0xe3/0x410 [ 1948.847857][T22803] __pcs_replace_empty_main+0x35e/0x650 [ 1948.847876][T22803] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 1948.847894][T22803] pci_alloc_dev+0x47/0x270 [ 1948.847917][T22803] pci_scan_single_device+0x10c/0x240 [ 1948.847941][T22803] pci_scan_slot+0x1c9/0x7c0 [ 1948.847963][T22803] pci_scan_child_bus_extend+0x6b/0x7b0 [ 1948.847988][T22803] acpi_pci_root_create+0x6d6/0x8c0 [ 1948.848002][T22803] pci_acpi_scan_root+0x4ae/0x5c0 [ 1948.848020][T22803] acpi_pci_root_add.cold+0x91e/0x16f0 [ 1948.848039][T22803] acpi_bus_attach+0x63d/0xb60 [ 1948.848062][T22803] acpi_dev_for_one_check+0x97/0xd0 [ 1948.848082][T22803] page_owner free stack trace missing [ 1948.848089][T22803] [ 1948.848093][T22803] Memory state around the buggy address: [ 1948.848103][T22803] ffff888022778000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1948.848114][T22803] ffff888022778080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1948.848125][T22803] >ffff888022778100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1948.848134][T22803] ^ [ 1948.848142][T22803] ffff888022778180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1948.848153][T22803] ffff888022778200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1948.848161][T22803] ================================================================== [ 1948.848171][T22803] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1949.346395][T22803] CPU: 2 UID: 0 PID: 22803 Comm: syz.5.6527 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1949.353716][T22803] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1949.357227][T22803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1949.362304][T22803] Call Trace: [ 1949.364085][T22803] [ 1949.365676][T22803] dump_stack_lvl+0x100/0x190 [ 1949.368156][T22803] vpanic+0x553/0x970 [ 1949.370216][T22803] ? __pfx_vpanic+0x10/0x10 [ 1949.376815][T22803] ? __pfx_vprintk_emit+0x10/0x10 [ 1949.379373][T22803] ? __dynamic_dev_dbg+0x2fc/0x310 [ 1949.386278][T22803] panic+0xd1/0xe0 [ 1949.388345][T22803] ? __pfx_panic+0x10/0x10 [ 1949.390639][T22803] ? end_report.part.0+0x23/0x90 [ 1949.407881][T22803] ? rcu_is_watching+0x13/0xc0 [ 1949.410362][T22803] ? end_report.part.0+0x23/0x90 [ 1949.417098][T22803] check_panic_on_warn.cold+0x19/0x34 [ 1949.419895][T22803] end_report.part.0+0x3a/0x90 [ 1949.427752][T22803] kasan_report.cold+0xe/0x18 [ 1949.436519][T22803] ? __dynamic_dev_dbg+0x2fc/0x310 [ 1949.439198][T22803] __dynamic_dev_dbg+0x2fc/0x310 [ 1949.441748][T22803] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 1949.446857][T22803] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1949.457460][T22803] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1949.460208][T22803] vga_arb_release+0x3e7/0x540 [ 1949.462698][T22803] ? __pfx_vga_arb_release+0x10/0x10 [ 1949.465839][T22803] __fput+0x400/0xb60 [ 1949.468176][T22803] task_work_run+0x150/0x240 [ 1949.470914][T22803] ? __pfx_task_work_run+0x10/0x10 [ 1949.473992][T22803] do_exit+0x8da/0x2a60 [ 1949.476533][T22803] ? __pfx_do_exit+0x10/0x10 [ 1949.478925][T22803] ? cgroup_update_frozen_flag+0x125/0x240 [ 1949.481918][T22803] ? find_held_lock+0x2b/0x80 [ 1949.484274][T22803] ? get_signal+0x184f/0x21e0 [ 1949.486715][T22803] do_group_exit+0xd5/0x2a0 [ 1949.488972][T22803] get_signal+0x1ec7/0x21e0 [ 1949.491263][T22803] ? __pfx_get_signal+0x10/0x10 [ 1949.494058][T22803] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1949.497172][T22803] arch_do_signal_or_restart+0x91/0x7a0 [ 1949.500126][T22803] ? get_old_timespec32+0xda/0x130 [ 1949.502765][T22803] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1949.505884][T22803] ? __ia32_sys_clock_nanosleep_time32+0x363/0x480 [ 1949.509173][T22803] exit_to_user_mode_loop+0x139/0x700 [ 1949.512096][T22803] ? rcu_is_watching+0x13/0xc0 [ 1949.518696][T22803] do_int80_emulation+0x555/0x650 [ 1949.521308][T22803] asm_int80_emulation+0x1a/0x20 [ 1949.523778][T22803] RIP: 0023:0xf71d77eb [ 1949.525841][T22803] Code: Unable to access opcode bytes at 0xf71d77c1. [ 1949.529305][T22803] RSP: 002b:00000000f54963ac EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 1949.533868][T22803] RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 0000000000000000 [ 1949.538770][T22803] RDX: 00000000f5496444 RSI: 00000000f549643c RDI: 0000000000000000 [ 1949.543598][T22803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1949.548455][T22803] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1949.554325][T22803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1949.560183][T22803] [ 1949.563230][T22803] Kernel Offset: disabled [ 1949.570312][T22803] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:53:55 Registers: info registers vcpu 0 CPU#0 EAX=f6de1fa0 EBX=f6e09558 ECX=824c0e83 EDX=824c96e2 ESI=00000000 EDI=ffffffff EBP=ffffffff ESP=ffbb09a0 EIP=f70eb675 EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56623480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3c9638 CR3=000000005837f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801df0cb00 RSI=ffffffff81b67e9e RDI=ffff88801df0cb00 RBP=0000000000000001 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=0000000000000000 RIP=ffffffff81b67e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00000000 DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88809584a000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f72af7bc CR3=000000000fb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b10d15 RDI=ffffffff9cc6cba0 RBP=ffffffff9cc6cb60 RSP=ffffc90004eff010 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000020 R14=000000000000000d R15=ffffc90004eff328 RIP=ffffffff85b10d3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809594a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5484ff4 CR3=000000005837f000 CR4=00352ef0 DR0=000000000000000b DR1=00000000ffffffff DR2=400000000001001d DR3=fffffffffffffff6 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801df08000 RSI=ffffffff81b67e9e RDI=ffff88801df08000 RBP=0000000000000003 RSP=ffffc9000049fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=0000000000000000 RIP=ffffffff81b67e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff888095a4a000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032a23ffc CR3=000000000fb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ce4887d44725bfa3 3e2695b1c2caaa23 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 67971c3f7fa8602b 76001e12cd805d21 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3bb650e0ea02d966 09e83d4ed6a2784f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 87ddb40aed1ef274 15ff48e82ea4afc9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005f40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fcdc00801c600080 0272ecf0c6300080 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000001000000 0100000045be0080 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0272ece101000000 b7da00800272ecad ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 010000000272ed05 0272ecfd01000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45eb2e18031a8960 30dd4adc989f1bc5 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3208f30b42d219ab a964986f713ce01e ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000