last executing test programs: 14m26.533497605s ago: executing program 0 (id=137): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) pipe2$watch_queue(0x0, 0x80) r4 = add_key(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x100000000000a3) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_pidfd_open(0x0, 0x0) 14m25.208696689s ago: executing program 0 (id=140): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1, 0x8, 0x2f, 0xe2}]}) epoll_create1(0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x81800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000200)=0x940, 0x4) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 14m21.884393195s ago: executing program 0 (id=152): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$md(0xffffffffffffff9c, 0x0, 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x1800, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)='4', 0x1}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') pread64(r3, &(0x7f0000000b40)=""/102400, 0x200000, 0x300) 14m19.615481591s ago: executing program 0 (id=167): mlockall(0x4) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000100)="000000000000000000000000000000000000000001") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x181403, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x40000000, 0x0, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/rfcomm0\x00', 0x802, 0x0) write(r4, &(0x7f0000000300)="c7401b1e0741d6201c31a1d182ded8d555d2", 0x12) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 14m18.697499056s ago: executing program 0 (id=170): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x159}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000090) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x8048000) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x445, 0x8001012, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2b2, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5631, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x32f4, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 14m17.885104787s ago: executing program 0 (id=162): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x18, 0x5, 0x1046) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000001a40)=[{{&(0x7f00000006c0)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x5c}}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14m17.61599303s ago: executing program 32 (id=162): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x18, 0x5, 0x1046) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000001a40)=[{{&(0x7f00000006c0)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x5c}}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12.443928618s ago: executing program 3 (id=2859): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) socket$unix(0x1, 0x5, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x4, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 8.937368636s ago: executing program 1 (id=2861): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x1, 0x3c, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0x2}, @ssrr={0x89, 0x3, 0x74}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xa, 0x8, 0x0, 0x80}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r11 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) syz_ublk_setup_queues(r11, r10, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r4}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r11, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r9, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) 8.879065841s ago: executing program 3 (id=2863): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') r5 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="503bfde51b257f40b3392d504fe4", 0xe}], 0x1) syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x1000, 0x3, 0xa1, 0x0, r6}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0xfc, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 8.419914121s ago: executing program 1 (id=2864): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, &(0x7f0000000840)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0xc240, 0x0) getpgid(0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000004c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000680)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r6 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r6, r6, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), 0x0) syz_usb_connect$midi(0x6, 0xab, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x1, 0x1, 0x28, 0x30, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0xe, [@midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x3, 0x3, [{0x9, 0x6}, {0xd3, 0x3}, {0x1, 0x4}], 0xdc}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x3, 0x2, [{0xf8, 0xd}, {0x6, 0x2}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x79ed, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x81}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x80, 0x4, [{0x40, 0x10}, {0x2, 0x7}, {0x5, 0x1}, {0xf, 0x1}]}], [{{0x9, 0x5, 0xe, 0x0, 0x20, 0x2, 0x8, 0xff, {0x13, 0x25, 0x1, 0xf, "cffe55852e07ddc35eb3ed095717d6"}}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xf7, 0x7, 0xf, {0xd, 0x25, 0x1, 0x9, "e09b37d206e5cc0378"}}}, {{0x9, 0x5, 0x5, 0x4, 0x438, 0x0, 0xca, 0x9, {0x11, 0x25, 0x1, 0xd, "335e3d872edb9db13d21e491af"}}}]}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xc9, 0xd, 0xd, 0x20, 0x7f}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x525b}}, {0xf, &(0x7f00000001c0)=@string={0xf, 0x3, "d3a166b033d2984a2100dd580a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x282ef7d0f131fcb5}}, {0x79, &(0x7f00000002c0)=@string={0x79, 0x3, "036b7cd2094ea514d830bb3b14f5691df686ba4f78e9f3bec73de807c03f7531370e84e8348b388cf2058422c574edba6828ac6a4b5c8185a1910cd717ef47e42c324996d137239eb90983378075cb21c71e0edaceae4ee0ae5aba94d8aa71a278d42b72b046a43114c551f076bf1010c655db55d89d3a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_connect$midi(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x3, 0x0, [], 0x9}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) userfaultfd(0x80001) 7.591522538s ago: executing program 3 (id=2867): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000030601080000000000006b000000000a050001000700000005000100070000000900299d73797a32000000001500097d169100000900020073797a31000000000900020073797a31000000009e83aab211cf97310576cb08cd8894d7f7044fc9b099434be750ab4476"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r4, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3b, r6, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x1, 0xfffffffc, 0x2000000}}}}, 0xfd10}, 0x1, 0x0, 0x0, 0x4080}, 0x20001000) 7.493548056s ago: executing program 2 (id=2868): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000008c0)='bpf_lsm_audit_rule_init\x00') r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x12) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 5.944933619s ago: executing program 4 (id=2869): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa6) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe4) setuid(r0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0xb) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000640)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000680)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0x1b}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r2, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000740)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000780)=0xa, r2, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000007c0)={0x4, 0x8, 0xfa00, {r2, 0x8}}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000800)={0x0, 0x0, 0x1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000540)="c1d8c827763ad903", 0x8}, {&(0x7f0000000580)="b1583e08c3023fc7", 0x8}], 0x2) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) 5.888607402s ago: executing program 2 (id=2870): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) timerfd_create(0x8, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)) clock_adjtime(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a00", 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r4, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x0, 0x2c, 0x11, 0x2}], 0x10, 0xffffffff}, 0x94) bind$inet6(r3, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000240)=[{&(0x7f00000003c0)}], 0x1) 5.854566591s ago: executing program 3 (id=2871): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/devices/00:00/options\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/256, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pnp/devices/00:01/options\x00', 0x0, 0x0) read(r1, &(0x7f0000000280)=""/256, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/bus/pnp/devices/00:02/options\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./proc\x00', 0x1ff) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000f00)='270', 0x3) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0x40000000) read(r2, &(0x7f0000000800)=""/256, 0x100) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000c00)={0x2, 0x0, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000d00)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 5.618477523s ago: executing program 4 (id=2872): r0 = socket(0x5, 0x6, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2d, 0x0, 0x0, 0xc}, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x1a, 0xb, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000400000000000000015ffffff180100003b20782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mount(0x0, &(0x7f00000009c0)='./debug\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a80)='0', 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000240)="0e899b5d7e007ca0af03034fda66c42909f2aa970dd1128ac13e22848982175c91b1cd92f2df0c83021d", 0x2a}, {&(0x7f0000000280)="40064e", 0x3}], 0x2) close(0x3) openat$dm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r5 = fsopen(&(0x7f0000000880)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000008c0)='secret\x00', &(0x7f0000000900)='AQB123456789\x00\x00\x00\x00x\r\xfa589v+\x9f\xb8+e!\x1b\x1d(\xb2\xcb\x15\xd3d\x1c0123t56', 0x0) r6 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x40102, 0x0) ioctl$DM_DEV_CREATE(r6, 0xc138fd03, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) r8 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$DM_TABLE_LOAD(r8, 0xc138fd09, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x1d8, 0x138, 0x1, 0x0, 0xa1000, 0x0, 0x0, @by_dev={r7}, [@raid={0x0, 0x50, 0x0, 0xa0, 'raid\x00', {'raid5_rs', 0x20, '3 64 daemon_sleep 100', 0x20, 0x2, [{0x20, @dev=@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}}, {0x20, @dev=@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}}]}}]}) 5.113256545s ago: executing program 1 (id=2873): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000780)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000007c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(r4) 4.821926681s ago: executing program 2 (id=2874): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x40, r5, 0x9c3fa077fa966179, 0x70bd2c, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]]}, 0x40}, 0x1, 0x0, 0x0, 0x44801}, 0x4000054) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) 4.746960466s ago: executing program 2 (id=2875): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') r5 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="503bfde51b257f40b3392d504fe4", 0xe}], 0x1) syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x1000, 0x3, 0xa1, 0x0, r6}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0xfc, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.36829919s ago: executing program 1 (id=2876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0x3, 0x2) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, 0x0) fsopen(0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000540)='Z', 0x1, 0x48000, &(0x7f0000000580)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000600)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 3.355170309s ago: executing program 4 (id=2877): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x40, r5, 0x9c3fa077fa966179, 0x70bd2c, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]]}, 0x40}, 0x1, 0x0, 0x0, 0x44801}, 0x4000054) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) 3.198014405s ago: executing program 2 (id=2878): socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x6, @loopback, 0x80000000}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/udp6\x00') r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) pread64(r1, &(0x7f0000002880)=""/195, 0xc3, 0x591f) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000029c0)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {}, {0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r4, &(0x7f0000002ac0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000002b00)={0x2, 0x4e23, @local}, 0x10) sendmsg(r4, &(0x7f0000002b40)={&(0x7f0000002b80)=@in6={0xa, 0x4e22, 0xff, @mcast1, 0x25d}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002c40)="710e94effaceea6e9ea81593632e1d56063a8f46", 0x14}], 0x1}, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f00000001c0)=@random="f5c9", 0x2, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 2.871928859s ago: executing program 3 (id=2879): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000008c0)='bpf_lsm_audit_rule_init\x00') r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x12) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 2.633299182s ago: executing program 1 (id=2880): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa6) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe4) setuid(r0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0xb) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000640)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000680)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0x1b}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r2, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000740)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000780)=0xa, r2, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000007c0)={0x4, 0x8, 0xfa00, {r2, 0x8}}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000800)={0x0, 0x0, 0x1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000540)="c1d8c827763ad903", 0x8}, {&(0x7f0000000580)="b1583e08c3023fc7", 0x8}], 0x2) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) 2.382150614s ago: executing program 4 (id=2881): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1.117019723s ago: executing program 4 (id=2882): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) timerfd_create(0x8, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)) clock_adjtime(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a00", 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r4, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x0, 0x2c, 0x11, 0x2}], 0x10, 0xffffffff}, 0x94) bind$inet6(r3, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000240)=[{&(0x7f00000003c0)}], 0x1) 36.244186ms ago: executing program 2 (id=2883): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x40, r5, 0x9c3fa077fa966179, 0x70bd2c, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]]}, 0x40}, 0x1, 0x0, 0x0, 0x44801}, 0x4000054) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) 673.801µs ago: executing program 4 (id=2884): syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000500)=ANY=[], 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0x7, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000100)) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x2) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08061cdc030ec080000000040000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 260.493µs ago: executing program 1 (id=2885): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x2020) fsopen(&(0x7f0000000000)='fusectl\x00', 0x0) r2 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2000000000}, {}, 0x0, 0xffffffff, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x0, 0x0, 0x4}}, 0xe4) socket$can_j1939(0x1d, 0x2, 0x7) timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000440)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x2c41, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000740)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000007c0)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) mount(0x0, &(0x7f0000000800)='./config\x00', &(0x7f0000000840)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000940)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='\n', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=2886): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x3}, {0x2, "d1193d49138d7cdd07468b8972dd0e894a3ea4ad03e297e368a68ba8810dece110e805c49a151c3d9cabd1e56f3b4d213a7c30096df9de2001a14988837dc1a5"}}}}, 0x47) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) fstat(r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x805, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000007311a1080000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@fallback=r1, 0x1, 0x1, 0x7, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r7, &(0x7f00000001c0)='w', 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r7, r2, 0x1e, 0x201c, 0x0, @value=r2, @void, @void, @void, r6}, 0x20) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): l=240 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 773.143293][ T43] audit: type=1326 audit(1794571203.831:20649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.4.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 773.143329][ T43] audit: type=1326 audit(1794571203.831:20650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.4.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 773.143365][ T43] audit: type=1326 audit(1794571203.831:20651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.4.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 773.143404][ T43] audit: type=1326 audit(1794571203.831:20652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.4.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 773.143440][ T43] audit: type=1326 audit(1794571203.831:20653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.4.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 773.144918][ T43] audit: type=1326 audit(1794571203.831:20654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.4.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 773.144954][ T43] audit: type=1326 audit(1794571203.831:20655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.4.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 773.144988][ T43] audit: type=1326 audit(1794571203.831:20656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.4.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 774.785941][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'. [ 775.226910][T15237] overlayfs: missing 'lowerdir' [ 775.310402][T15228] sctp_transport_update_pmtu: 43 callbacks suppressed [ 775.310417][T15228] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.310675][T15228] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.310922][T15228] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.311131][T15228] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.311345][T15228] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.311548][T15228] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.311811][T15228] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.312027][T15228] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.312235][T15228] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 775.312440][T15228] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 777.953998][T15274] overlayfs: missing 'lowerdir' [ 778.186735][T15276] overlayfs: missing 'lowerdir' [ 778.439594][ T43] kauditd_printk_skb: 168 callbacks suppressed [ 778.439614][ T43] audit: type=1326 audit(1794571209.131:20825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15279 comm="syz.3.2300" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aefbc code=0x0 [ 779.012586][T13386] udevd[13386]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 779.114521][ T43] audit: type=1326 audit(1794571209.811:20826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.3.2305" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefbc code=0x0 [ 779.134405][ T1482] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 779.294492][ T1482] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 779.295363][ T1482] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.295386][ T1482] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.301433][ T1482] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 779.307403][ T1482] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 779.307435][ T1482] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 779.310006][ T1482] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 779.310039][ T1482] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 779.311514][ T1482] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 779.312871][ T1482] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 779.312908][ T1482] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 779.317948][ T1482] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 779.396387][T15316] overlayfs: missing 'lowerdir' [ 779.895670][T13386] udevd[13386]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 779.901382][T13386] udevd[13386]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 781.198712][T15330] overlayfs: missing 'lowerdir' [ 781.412491][T15339] overlayfs: missing 'lowerdir' [ 782.032607][T15342] overlayfs: missing 'lowerdir' [ 782.084112][ T5876] usb 6-1: USB disconnect, device number 59 [ 782.087780][ T5876] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 782.093231][ T5876] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 782.093891][ T5876] keyspan 6-1:1.0: device disconnected [ 783.185710][T15362] overlayfs: missing 'lowerdir' [ 784.552133][T15376] overlayfs: missing 'lowerdir' [ 784.642624][T15380] Invalid ELF header magic: != ELF [ 785.458367][T15384] netlink: 'syz.2.2328': attribute type 1 has an invalid length. [ 785.461275][T15382] overlayfs: missing 'lowerdir' [ 785.517959][T15384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 785.521363][T15388] macvlan2: entered promiscuous mode [ 785.521376][T15388] macvlan2: entered allmulticast mode [ 785.521506][T15388] bond1: entered allmulticast mode [ 785.521525][T15388] bond1: entered promiscuous mode [ 785.521883][T15388] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 785.523027][T15388] team0: Port device macvlan2 added [ 785.565410][T15384] bond1: (slave ip6gretap1): making interface the new active one [ 785.565434][T15384] ip6gretap1: entered promiscuous mode [ 785.565561][T15384] ip6gretap1: entered allmulticast mode [ 785.568900][T15384] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 785.579532][T15390] overlayfs: missing 'lowerdir' [ 786.698490][T15413] overlayfs: missing 'lowerdir' [ 786.783362][T15421] overlayfs: missing 'lowerdir' [ 788.303145][T15463] overlayfs: missing 'lowerdir' [ 788.799005][T15467] overlayfs: missing 'lowerdir' [ 789.882406][ T43] audit: type=1800 audit(1794571220.571:20827): pid=15480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2354" name="file1" dev="sda1" ino=2038 res=0 errno=-22 [ 790.214562][T15497] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 791.451393][T15514] overlayfs: missing 'lowerdir' [ 794.265047][T15561] overlayfs: missing 'lowerdir' [ 796.021170][T15593] overlayfs: missing 'lowerdir' [ 796.422762][T15597] overlayfs: missing 'lowerdir' [ 796.662062][ T43] audit: type=1800 audit(1794571227.351:20828): pid=15600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2386" name="file1" dev="sda1" ino=2038 res=0 errno=-22 [ 796.758905][T15606] overlayfs: missing 'lowerdir' [ 796.885731][ T43] audit: type=1326 audit(1794571227.581:20829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15613 comm="syz.2.2392" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd3fbc code=0x0 [ 798.683405][ T43] audit: type=1326 audit(1794571229.371:20830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.4.2395" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffefbc code=0x0 [ 799.858041][T15661] overlayfs: missing 'lowerdir' [ 801.353634][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.353651][ C1] bridge0: topology change detected, propagating [ 801.353804][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.353813][ C1] bridge0: topology change detected, propagating [ 801.586161][T15677] overlayfs: missing 'lowerdir' [ 802.584986][T15696] overlayfs: missing 'lowerdir' [ 803.273686][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 803.690870][T15720] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 803.862926][T15720] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 803.863022][T15720] overlayfs: failed to look up (tracing) for ino (-66) [ 803.946762][T15726] overlayfs: missing 'lowerdir' [ 804.006998][T15731] overlayfs: missing 'lowerdir' [ 804.118105][T15734] overlayfs: missing 'lowerdir' [ 805.887721][T15778] overlayfs: missing 'lowerdir' [ 807.082416][T15784] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 807.898572][T15814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2438'. [ 808.395822][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.395854][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.411486][T15905] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 815.768533][T15876] bridge0: port 3(syz_tun) entered blocking state [ 815.768629][T15876] bridge0: port 3(syz_tun) entered listening state [ 815.768815][T15876] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.768902][T15876] bridge0: port 2(bridge_slave_1) entered listening state [ 815.769083][T15876] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.769167][T15876] bridge0: port 1(bridge_slave_0) entered listening state [ 816.124906][T15876] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 816.349034][T15905] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 816.349071][T15905] overlayfs: failed to look up (tracing) for ino (-66) [ 817.913978][ T1132] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 817.913995][ T1132] ata1.00: irq_stat 0x40000000 [ 817.914004][ T1132] ata1.00: failed command: READ DMA EXT [ 817.914010][ T1132] ata1.00: cmd 25/00:48:c6:23:08/00:05:00:00:00/e0 tag 14 dma 692224 in [ 817.914010][ T1132] res 41/04:48:c6:23:08/00:05:00:00:00/e0 Emask 0x1 (device error) [ 817.914038][ T1132] ata1.00: status: { DRDY ERR } [ 817.914045][ T1132] ata1.00: error: { ABRT } [ 817.914655][ T1132] ata1.00: configured for UDMA/66 [ 817.914760][ T1132] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 817.914782][ T1132] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 817.914825][ T1132] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 817.914864][ T1132] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 08 23 c6 00 05 48 00 [ 817.914878][ T1132] I/O error, dev sda, sector 533446 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 817.993840][ T1132] ata1: EH complete [ 818.655785][T15922] udevd[15922]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 819.633393][T15922] udevd[15922]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 819.639288][T15922] udevd[15922]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 819.943825][ T11] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 820.104211][ T11] usb 9-1: New USB device found: idVendor=056a, idProduct=5012, bcdDevice=0.00 [ 820.105352][ T11] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.105365][ T11] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 820.105382][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.106896][ T11] usb 9-1: config 0 descriptor?? [ 820.685156][T15955] overlayfs: workdir and upperdir must reside under the same mount [ 821.021637][T15955] si4713 0-0006: IRQ not configured. Using timeouts. [ 821.021761][T15955] si4713 0-0006: Error while sending command 0x01 [ 821.021769][T15955] si4713 0-0006: Failed to probe device information. [ 821.022377][T15955] si4713 0-0006: probe with driver si4713 failed with error -95 [ 821.022491][T15955] i2c i2c-0: new_device: Instantiated device si4713 at 0x06 [ 821.543432][ T43] audit: type=1326 audit(1794571252.231:20831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15958 comm="syz.2.2472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 821.543482][ T43] audit: type=1326 audit(1794571252.231:20832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15958 comm="syz.2.2472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 821.565786][ T43] audit: type=1326 audit(1794571252.261:20833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15958 comm="syz.2.2472" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 821.565834][ T43] audit: type=1326 audit(1794571252.261:20834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15958 comm="syz.2.2472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 821.565871][ T43] audit: type=1326 audit(1794571252.261:20835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15958 comm="syz.2.2472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 821.565909][ T43] audit: type=1326 audit(1794571252.261:20836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15958 comm="syz.2.2472" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 821.566142][ T43] audit: type=1326 audit(1794571252.261:20837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15958 comm="syz.2.2472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 821.566256][ T43] audit: type=1326 audit(1794571252.261:20838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15958 comm="syz.2.2472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 821.566907][ T43] audit: type=1326 audit(1794571252.261:20839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15958 comm="syz.2.2472" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 821.567077][ T43] audit: type=1326 audit(1794571252.261:20840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15958 comm="syz.2.2472" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 823.149207][ T1482] usb 9-1: USB disconnect, device number 49 [ 824.085774][T15943] udevd[15943]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 825.609142][T15990] overlayfs: missing 'lowerdir' [ 825.899060][T15943] udevd[15943]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 825.902669][T15943] udevd[15943]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 826.441957][T16012] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 826.577223][T16010] ubi: mtd0 is already attached to ubi0 [ 826.589546][T16012] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 826.589592][T16012] overlayfs: failed to look up (tracing) for ino (-66) [ 828.119904][ T43] kauditd_printk_skb: 207 callbacks suppressed [ 828.119917][ T43] audit: type=1326 audit(1794571258.811:21048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.1.2487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 828.120078][ T43] audit: type=1326 audit(1794571258.811:21049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.1.2487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 828.121865][ T43] audit: type=1326 audit(1794571258.811:21050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.1.2487" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 828.122037][ T43] audit: type=1326 audit(1794571258.811:21051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.1.2487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 828.122063][ T43] audit: type=1326 audit(1794571258.811:21052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.1.2487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 828.122453][ T43] audit: type=1326 audit(1794571258.811:21053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.1.2487" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 828.122613][ T43] audit: type=1326 audit(1794571258.811:21054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.1.2487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 828.122734][ T43] audit: type=1326 audit(1794571258.811:21055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.1.2487" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 828.123433][ T43] audit: type=1326 audit(1794571258.811:21056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.1.2487" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 828.123455][ T43] audit: type=1326 audit(1794571258.811:21057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16020 comm="syz.1.2487" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 828.372831][T16026] Invalid ELF header magic: != ELF [ 829.062376][T16030] overlayfs: missing 'lowerdir' [ 829.713311][T16029] udevd[16029]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 830.038632][T16044] overlayfs: missing 'lowerdir' [ 830.064058][T16046] 9pnet_virtio: no channels available for device syz [ 830.069021][T16046] overlayfs: missing 'lowerdir' [ 830.189127][T16051] bond0: (slave gretap0): Opening slave failed [ 830.747421][T16029] udevd[16029]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 830.749947][T16029] udevd[16029]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 831.328933][T16068] overlayfs: missing 'lowerdir' [ 832.627247][T16086] overlayfs: missing 'lowerdir' [ 833.158600][ T43] kauditd_printk_skb: 288 callbacks suppressed [ 833.158710][ T43] audit: type=1326 audit(1794571263.761:21346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.3.2509" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 833.168680][ T43] audit: type=1326 audit(1794571263.851:21347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.3.2509" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70aefe7 code=0x7ffc0000 [ 833.168919][ T43] audit: type=1326 audit(1794571263.851:21348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.3.2509" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 833.168941][ T43] audit: type=1326 audit(1794571263.861:21349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.3.2509" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70aefe7 code=0x7ffc0000 [ 833.168959][ T43] audit: type=1326 audit(1794571263.861:21350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.3.2509" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 833.168978][ T43] audit: type=1326 audit(1794571263.861:21351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.3.2509" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70aefe7 code=0x7ffc0000 [ 833.168997][ T43] audit: type=1326 audit(1794571263.861:21352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.3.2509" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 833.179186][ T43] audit: type=1326 audit(1794571263.871:21353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.3.2509" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 833.179418][ T43] audit: type=1326 audit(1794571263.871:21354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.3.2509" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70aefe7 code=0x7ffc0000 [ 833.179508][ T43] audit: type=1326 audit(1794571263.871:21355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.3.2509" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 834.148074][T16111] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 835.163115][T16119] overlayfs: missing 'lowerdir' [ 835.247210][T16124] overlayfs: missing 'lowerdir' [ 837.720625][T16167] overlayfs: missing 'lowerdir' [ 840.023016][ T43] kauditd_printk_skb: 187 callbacks suppressed [ 840.023030][ T43] audit: type=1326 audit(1794571270.711:21543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16201 comm="syz.1.2534" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x0 [ 840.376812][T16212] overlayfs: missing 'lowerdir' [ 840.499196][ T11] libceph: connect (1)[c::]:6789 error -101 [ 840.515704][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 840.530360][T16216] ceph: No mds server is up or the cluster is laggy [ 840.779392][ T11] libceph: connect (1)[c::]:6789 error -101 [ 840.779539][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 842.258204][T16230] sctp_transport_update_pmtu: 43 callbacks suppressed [ 842.258225][T16230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 842.262975][T16230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 842.270071][T16230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 842.292359][T16230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 842.297971][T16230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 842.305811][T16230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 842.310000][T16230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 842.317744][T16230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 842.323426][T16230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 842.331337][T16230] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 842.806374][T16245] overlayfs: missing 'lowerdir' [ 843.489032][ T1482] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 843.650190][ T1482] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 843.652998][ T1482] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 843.653022][ T1482] usb 7-1: config 0 interface 0 has no altsetting 0 [ 843.668802][ T1482] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 843.668825][ T1482] usb 7-1: Product: syz [ 843.668837][ T1482] usb 7-1: Manufacturer: syz [ 843.668855][ T1482] usb 7-1: SerialNumber: syz [ 843.685678][ T1482] usb 7-1: config 0 descriptor?? [ 843.690430][ T1482] usb 7-1: selecting invalid altsetting 0 [ 843.893405][T16255] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 843.893434][T16255] CIFS: Attempting to mount //127.0.0.1/share [ 843.990337][ T5880] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.990568][ T5880] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.990622][ T5880] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.990654][ T5880] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.903143][ T43] audit: type=1326 audit(1794571275.591:21544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.3.2556" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aefbc code=0x0 [ 845.026560][T16285] overlayfs: missing 'lowerdir' [ 845.218305][T16288] overlayfs: missing 'lowerdir' [ 846.109425][T16255] CIFS: VFS: cifs_mount failed w/return code = -512 [ 846.122724][ T5876] usb 7-1: USB disconnect, device number 51 [ 846.153721][ C2] bridge0: port 1(bridge_slave_0) entered learning state [ 846.153855][ C2] bridge0: port 2(bridge_slave_1) entered learning state [ 846.153966][ C2] bridge0: port 3(syz_tun) entered learning state [ 846.883342][T16311] ubi: mtd0 is already attached to ubi0 [ 847.395316][T16321] overlayfs: missing 'lowerdir' [ 848.049236][T16328] overlayfs: missing 'lowerdir' [ 849.202554][ T43] audit: type=1326 audit(1794571279.891:21545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16331 comm="syz.2.2570" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x0 [ 849.410027][T16350] overlayfs: missing 'lowerdir' [ 850.142981][T16362] overlayfs: missing 'lowerdir' [ 850.518762][T16369] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 850.535014][T16369] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 850.535028][T16369] block device autoloading is deprecated and will be removed. [ 850.856608][T16369] md/raid:md1: device ram3 operational as raid disk 1 [ 850.894726][T16369] md/raid:md1: not enough operational devices (2/3 failed) [ 851.258169][T16369] md/raid:md1: failed to run raid set. [ 851.258182][T16369] md: pers->run() failed ... [ 851.258217][T16374] md: md1 stopped. [ 852.023255][T16394] overlayfs: missing 'lowerdir' [ 853.506460][T16401] warn_alloc: 1 callbacks suppressed [ 853.506482][T16401] syz.2.2587: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 853.506569][T16401] CPU: 1 UID: 0 PID: 16401 Comm: syz.2.2587 Tainted: G L syzkaller #0 PREEMPT(full) [ 853.506597][T16401] Tainted: [L]=SOFTLOCKUP [ 853.506605][T16401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 853.506617][T16401] Call Trace: [ 853.506625][T16401] [ 853.506633][T16401] dump_stack_lvl+0x100/0x190 [ 853.506668][T16401] warn_alloc.cold+0x9e/0xb2 [ 853.506692][T16401] ? __pfx_warn_alloc+0x10/0x10 [ 853.506741][T16401] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 853.506772][T16401] ? __pfx_get_page_from_freelist+0x10/0x10 [ 853.506807][T16401] __alloc_frozen_pages_noprof+0x1a33/0x31e0 [ 853.506846][T16401] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 853.506884][T16401] ? lock_acquire+0x1d1/0x380 [ 853.506919][T16401] ? page_table_check_set+0x1aa/0x630 [ 853.506964][T16401] __folio_alloc_noprof+0x16/0x260 [ 853.506994][T16401] alloc_migration_target+0x1d7/0x6d0 [ 853.507040][T16401] migrate_pages_batch+0x5c2/0x4700 [ 853.507068][T16401] ? set_pte_range+0x3b0/0xa20 [ 853.507103][T16401] ? __pfx_alloc_migration_target+0x10/0x10 [ 853.507140][T16401] ? rcu_read_unlock+0x2d/0xb0 [ 853.507167][T16401] ? __pfx_migrate_pages_batch+0x10/0x10 [ 853.507194][T16401] ? finish_fault+0xaea/0x13e0 [ 853.507239][T16401] ? folio_unlock+0xf5/0x190 [ 853.507273][T16401] migrate_pages_sync+0x12c/0x880 [ 853.507300][T16401] ? __pfx_alloc_migration_target+0x10/0x10 [ 853.507331][T16401] ? __pfx_migrate_pages_sync+0x10/0x10 [ 853.507369][T16401] migrate_pages+0x1a79/0x2840 [ 853.507399][T16401] ? __pfx_alloc_migration_target+0x10/0x10 [ 853.507445][T16401] ? __pfx_migrate_pages+0x10/0x10 [ 853.507482][T16401] ? mtree_load+0x3a4/0xb50 [ 853.507507][T16401] move_pages_and_store_status+0xf1/0x230 [ 853.507536][T16401] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 853.507575][T16401] kernel_move_pages+0xca4/0x14d0 [ 853.507611][T16401] ? __pfx_kernel_move_pages+0x10/0x10 [ 853.507666][T16401] ? __seccomp_filter+0x896/0x1130 [ 853.507705][T16401] ? find_held_lock+0x2b/0x80 [ 853.507733][T16401] ? __might_fault+0xc5/0x140 [ 853.507770][T16401] ? __might_fault+0xc5/0x140 [ 853.507797][T16401] __ia32_sys_move_pages+0xdd/0x1b0 [ 853.507827][T16401] __do_fast_syscall_32+0x14d/0x8e0 [ 853.507846][T16401] ? lockdep_hardirqs_on+0x7d/0x110 [ 853.507879][T16401] do_fast_syscall_32+0x32/0x70 [ 853.507898][T16401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 853.507936][T16401] RIP: 0023:0xf7fd3fbc [ 853.507954][T16401] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 853.507972][T16401] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 853.507991][T16401] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0 [ 853.508003][T16401] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 853.508016][T16401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 853.508027][T16401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.508039][T16401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 853.508063][T16401] [ 853.508167][T16401] Mem-Info: [ 853.508178][T16401] active_anon:999 inactive_anon:1151 isolated_anon:0 [ 853.508178][T16401] active_file:6196 inactive_file:7504 isolated_file:0 [ 853.508178][T16401] unevictable:1000 dirty:99 writeback:0 [ 853.508178][T16401] slab_reclaimable:6700 slab_unreclaimable:68327 [ 853.508178][T16401] mapped:23521 shmem:1020 pagetables:1540 [ 853.508178][T16401] sec_pagetables:383 bounce:0 [ 853.508178][T16401] kernel_misc_reclaimable:0 [ 853.508178][T16401] free:26633 free_pcp:0 free_cma:0 [ 853.508254][T16401] Node 0 active_anon:96kB inactive_anon:88kB active_file:580kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:600kB dirty:16kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7264kB pagetables:1304kB sec_pagetables:1188kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 853.508304][T16401] Node 1 active_anon:3900kB inactive_anon:4516kB active_file:24204kB inactive_file:30016kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:93484kB dirty:380kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6892kB pagetables:4856kB sec_pagetables:344kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 853.508351][T16401] Node 0 DMA free:2944kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 853.508427][T16401] lowmem_reserve[]: 0 256 256 256 256 [ 853.508460][T16401] Node 0 DMA32 free:25396kB boost:25960kB min:37500kB low:40384kB high:43268kB reserved_highatomic:0kB free_highatomic:0kB active_anon:96kB inactive_anon:88kB active_file:476kB inactive_file:0kB unevictable:2000kB writepending:16kB zspages:1052kB present:1032196kB managed:262244kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 853.508524][T16401] lowmem_reserve[]: 0 0 0 0 0 [ 853.508556][T16401] Node 1 DMA32 free:78192kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:3900kB inactive_anon:4516kB active_file:24204kB inactive_file:30016kB unevictable:2000kB writepending:380kB zspages:5944kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 853.508609][T16401] lowmem_reserve[]: 0 0 0 0 0 [ 853.508637][T16401] Node 0 DMA: 80*4kB (UM) 30*8kB (UM) 15*16kB (UM) 17*32kB (UM) 11*64kB (UM) 3*128kB (UM) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2944kB [ 853.508790][T16401] Node 0 DMA32: 257*4kB (UME) 200*8kB (UME) 79*16kB (UME) 166*32kB (UME) 69*64kB (UME) 24*128kB (UM) 8*256kB (M) 9*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 25396kB [ 853.508949][T16401] Node 1 DMA32: 1315*4kB (UME) 774*8kB (UME) 460*16kB (UME) 377*32kB (UME) 145*64kB (UME) 79*128kB (UME) 6*256kB (UM) 5*512kB (UM) 15*1024kB (UME) 4*2048kB (UM) 0*4096kB = 77916kB [ 853.509110][T16401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 853.509125][T16401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 853.509144][T16401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 853.509157][T16401] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 853.509171][T16401] 16171 total pagecache pages [ 853.509179][T16401] 1475 pages in swap cache [ 853.509185][T16401] Free swap = 96636kB [ 853.509192][T16401] Total swap = 124996kB [ 853.509199][T16401] 524155 pages RAM [ 853.509206][T16401] 0 pages HighMem/MovableOnly [ 853.509212][T16401] 217702 pages reserved [ 853.509218][T16401] 0 pages cma reserved [ 853.879754][T16419] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 854.027967][T16419] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 854.028327][T16419] overlayfs: failed to look up (tracing) for ino (-66) [ 855.440469][T16446] overlayfs: missing 'lowerdir' [ 855.552501][ T43] audit: type=1326 audit(1794571286.241:21546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16417 comm="syz.2.2590" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x0 [ 855.870232][T16457] ip6tnl0: Caught tx_queue_len zero misconfig [ 855.896198][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2600'. [ 856.206758][ T43] audit: type=1326 audit(1794571286.901:21547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.2602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 856.207082][ T43] audit: type=1326 audit(1794571286.901:21548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.2602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 856.228910][ T43] audit: type=1326 audit(1794571286.921:21549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.2602" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 856.236078][ T43] audit: type=1326 audit(1794571286.931:21550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.2602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 856.243131][ T43] audit: type=1326 audit(1794571286.931:21551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.2602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 856.250506][ T43] audit: type=1326 audit(1794571286.941:21552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.2602" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 856.258163][ T43] audit: type=1326 audit(1794571286.951:21553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.2602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 856.259518][ T43] audit: type=1326 audit(1794571286.951:21554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.2602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 856.259769][ T43] audit: type=1326 audit(1794571286.951:21555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.2.2602" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 857.932066][T16480] overlayfs: missing 'lowerdir' [ 858.175814][T16487] overlayfs: missing 'lowerdir' [ 858.554810][ T1482] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 859.117788][ T1482] usb 6-1: New USB device found: idVendor=056a, idProduct=5012, bcdDevice=0.00 [ 859.120252][ T1482] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.120265][ T1482] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 859.120281][ T1482] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.121584][ T1482] usb 6-1: config 0 descriptor?? [ 859.851279][T16520] ceph: No mds server is up or the cluster is laggy [ 859.883740][T14135] libceph: connect (1)[c::]:6789 error -101 [ 859.885255][T14135] libceph: mon0 (1)[c::]:6789 connect error [ 859.891519][T16525] overlayfs: missing 'lowerdir' [ 860.018412][T16526] overlayfs: workdir and upperdir must reside under the same mount [ 860.054906][T16526] i2c i2c-0: Failed to register i2c client si4713 at 0x06 (-16) [ 860.734593][T16535] overlayfs: missing 'lowerdir' [ 861.475236][T14135] usb 6-1: USB disconnect, device number 60 [ 861.579802][T16553] overlayfs: missing 'lowerdir' [ 863.714572][T16582] overlayfs: missing 'lowerdir' [ 865.353147][T16595] overlayfs: missing 'lowerdir' [ 866.747986][T16626] overlayfs: missing 'lowerdir' [ 867.385625][T16640] rxe_eth0 speed is unknown, defaulting to 1000 [ 867.571243][T16642] sit1: entered allmulticast mode [ 867.890741][T16640] ±ÿ speed is unknown, defaulting to 1000 [ 869.944335][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.944386][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.092189][T16675] overlayfs: missing 'lowerdir' [ 873.500178][T16723] comedi comedi3: board detection failed [ 876.233584][ C2] bridge0: port 3(syz_tun) entered forwarding state [ 876.233601][ C2] bridge0: topology change detected, propagating [ 876.233713][ C2] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.233722][ C2] bridge0: topology change detected, propagating [ 876.233771][ C2] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.233778][ C2] bridge0: topology change detected, propagating [ 876.625598][T16743] overlayfs: missing 'lowerdir' [ 877.183680][T14686] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 877.336456][T14686] usb 8-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 877.336523][T14686] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 877.342209][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.342414][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 877.374670][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.374733][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 877.383434][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.387587][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 877.411888][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.411943][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 877.424803][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.424948][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 877.436192][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.436242][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 877.456142][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.456186][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 877.471170][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.471227][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 878.467588][T14686] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 878.467605][T14686] usb 8-1: Product: syz [ 878.467612][T14686] usb 8-1: Manufacturer: syz [ 878.467619][T14686] usb 8-1: SerialNumber: syz [ 878.468790][T14686] usb 8-1: config 0 descriptor?? [ 878.831970][T14686] usb 8-1: USB disconnect, device number 39 [ 879.138250][T16785] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2681'. [ 879.433974][T16790] overlayfs: missing 'lowerdir' [ 880.313623][T14686] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 880.481634][T14686] usb 8-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 880.943654][ T1482] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 881.013682][T14686] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 881.017500][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.017516][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.018275][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.018285][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.019026][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.019037][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.019812][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.019824][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.020570][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.020581][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.021311][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.021322][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.022051][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.022062][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.022778][T14686] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.022788][T14686] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.024743][T14686] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 881.024757][T14686] usb 8-1: Product: syz [ 881.024764][T14686] usb 8-1: Manufacturer: syz [ 881.024770][T14686] usb 8-1: SerialNumber: syz [ 881.026025][T14686] usb 8-1: config 0 descriptor?? [ 881.134566][ T1482] usb 7-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 881.134590][ T1482] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 881.135396][ T1482] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.135408][ T1482] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.136155][ T1482] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.136166][ T1482] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.136945][ T1482] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.136956][ T1482] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.137747][ T1482] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.137763][ T1482] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.139936][ T1482] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.139954][ T1482] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.140832][ T1482] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.140850][ T1482] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.141680][ T1482] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.141695][ T1482] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.142516][ T1482] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.142531][ T1482] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 881.216286][ T1482] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 881.216311][ T1482] usb 7-1: Product: syz [ 881.216323][ T1482] usb 7-1: Manufacturer: syz [ 881.216336][ T1482] usb 7-1: SerialNumber: syz [ 881.221384][ T1482] usb 7-1: config 0 descriptor?? [ 881.348717][ T1482] usb 8-1: USB disconnect, device number 40 [ 881.439642][T14337] usb 7-1: USB disconnect, device number 52 [ 882.593460][T16846] ip6tnl0: Caught tx_queue_len zero misconfig [ 883.018436][ T6173] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 883.836300][ T6173] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 884.123861][T16864] xt_l2tp: wrong L2TP version: 7 [ 884.425965][T16858] ublk3: read batch cmd buffer failed [ 884.426061][T16858] ublk3: read batch cmd buffer failed [ 884.432351][T16858] ublk3: read batch cmd buffer failed [ 884.432401][T16858] ublk3: read batch cmd buffer failed [ 885.010127][T16873] ubi: mtd0 is already attached to ubi0 [ 885.039482][ T5868] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 885.287001][ T5868] usb 8-1: Using ep0 maxpacket: 8 [ 885.303618][ T5868] usb 8-1: New USB device found: idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 885.337510][ T5868] usb 8-1: config 0 has no interfaces? [ 885.337532][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.512769][ T5868] usb 8-1: config 0 descriptor?? [ 885.870866][T16860] syz.1.2702: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 885.870909][T16860] CPU: 2 UID: 0 PID: 16860 Comm: syz.1.2702 Tainted: G L syzkaller #0 PREEMPT(full) [ 885.870925][T16860] Tainted: [L]=SOFTLOCKUP [ 885.870929][T16860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 885.870936][T16860] Call Trace: [ 885.870941][T16860] [ 885.870946][T16860] dump_stack_lvl+0x100/0x190 [ 885.870968][T16860] warn_alloc.cold+0x9e/0xb2 [ 885.870980][T16860] ? __pfx_warn_alloc+0x10/0x10 [ 885.871001][T16860] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 885.871019][T16860] ? __pfx_get_page_from_freelist+0x10/0x10 [ 885.871038][T16860] __alloc_frozen_pages_noprof+0x1a33/0x31e0 [ 885.871064][T16860] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 885.871088][T16860] ? lock_acquire+0x1d1/0x380 [ 885.871100][T16860] ? page_table_check_set+0x1aa/0x630 [ 885.871125][T16860] __folio_alloc_noprof+0x16/0x260 [ 885.871142][T16860] alloc_migration_target+0x1d7/0x6d0 [ 885.871158][T16860] migrate_pages_batch+0x5c2/0x4700 [ 885.871173][T16860] ? set_pte_range+0x3b0/0xa20 [ 885.871184][T16860] ? __pfx_alloc_migration_target+0x10/0x10 [ 885.871231][T16860] ? rcu_read_unlock+0x2d/0xb0 [ 885.871246][T16860] ? __pfx_migrate_pages_batch+0x10/0x10 [ 885.871263][T16860] ? finish_fault+0xaea/0x13e0 [ 885.871281][T16860] ? folio_unlock+0xf5/0x190 [ 885.871299][T16860] migrate_pages_sync+0x12c/0x880 [ 885.871316][T16860] ? __pfx_alloc_migration_target+0x10/0x10 [ 885.871335][T16860] ? __pfx_migrate_pages_sync+0x10/0x10 [ 885.871358][T16860] migrate_pages+0x1a79/0x2840 [ 885.871376][T16860] ? __pfx_alloc_migration_target+0x10/0x10 [ 885.871394][T16860] ? __pfx_migrate_pages+0x10/0x10 [ 885.871416][T16860] ? mtree_load+0x3a4/0xb50 [ 885.871430][T16860] move_pages_and_store_status+0xf1/0x230 [ 885.871447][T16860] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 885.871479][T16860] kernel_move_pages+0xca4/0x14d0 [ 885.871501][T16860] ? __pfx_kernel_move_pages+0x10/0x10 [ 885.871516][T16860] ? arch_do_signal_or_restart+0x1f9/0x7a0 [ 885.871540][T16860] ? find_held_lock+0x2b/0x80 [ 885.871558][T16860] ? __might_fault+0xc5/0x140 [ 885.871572][T16860] ? __might_fault+0xc5/0x140 [ 885.871588][T16860] __ia32_sys_move_pages+0xdd/0x1b0 [ 885.871604][T16860] __do_fast_syscall_32+0x14d/0x8e0 [ 885.871618][T16860] ? lockdep_hardirqs_on+0x7d/0x110 [ 885.871636][T16860] do_fast_syscall_32+0x32/0x70 [ 885.871646][T16860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 885.871660][T16860] RIP: 0023:0xf702efbc [ 885.871670][T16860] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 885.871679][T16860] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 885.871690][T16860] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0 [ 885.871696][T16860] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 885.871703][T16860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 885.871708][T16860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.871714][T16860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 885.871728][T16860] [ 885.874640][T16860] Mem-Info: [ 885.874648][T16860] active_anon:142 inactive_anon:2031 isolated_anon:0 [ 885.874648][T16860] active_file:4903 inactive_file:5650 isolated_file:0 [ 885.874648][T16860] unevictable:1000 dirty:602 writeback:0 [ 885.874648][T16860] slab_reclaimable:6674 slab_unreclaimable:69051 [ 885.874648][T16860] mapped:23080 shmem:1001 pagetables:1450 [ 885.874648][T16860] sec_pagetables:387 bounce:0 [ 885.874648][T16860] kernel_misc_reclaimable:0 [ 885.874648][T16860] free:20568 free_pcp:0 free_cma:0 [ 885.874672][T16860] Node 0 active_anon:148kB inactive_anon:0kB active_file:3044kB inactive_file:2720kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:2316kB dirty:800kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7232kB pagetables:1304kB sec_pagetables:1204kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 885.874698][T16860] Node 1 active_anon:420kB inactive_anon:8124kB active_file:16568kB inactive_file:19880kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:90004kB dirty:1608kB writeback:0kB shmem:2004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6852kB pagetables:4496kB sec_pagetables:344kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 885.874722][T16860] Node 0 DMA free:2376kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:108kB unevictable:0kB writepending:24kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 885.874750][T16860] lowmem_reserve[]: 0 256 256 256 256 [ 885.874767][T16860] Node 0 DMA32 free:19276kB boost:25960kB min:37500kB low:40384kB high:43268kB reserved_highatomic:4096kB free_highatomic:0kB active_anon:148kB inactive_anon:0kB active_file:2868kB inactive_file:2612kB unevictable:2000kB writepending:776kB zspages:1052kB present:1032196kB managed:262244kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 885.874795][T16860] lowmem_reserve[]: 0 0 0 0 0 [ 885.874811][T16860] Node 1 DMA32 free:60620kB boost:6144kB min:53284kB low:65068kB high:76852kB reserved_highatomic:2048kB free_highatomic:16kB active_anon:420kB inactive_anon:8124kB active_file:16568kB inactive_file:19880kB unevictable:2000kB writepending:1608kB zspages:5708kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 885.874838][T16860] lowmem_reserve[]: 0 0 0 0 0 [ 885.874854][T16860] Node 0 DMA: 67*4kB (UM) 17*8kB (UM) 11*16kB (UM) 19*32kB (UM) 11*64kB (UM) 2*128kB (U) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2404kB [ 885.874920][T16860] Node 0 DMA32: 247*4kB (UME) 171*8kB (UME) 65*16kB (UME) 146*32kB (UME) 68*64kB (UME) 18*128kB (UM) 4*256kB (M) 5*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 19332kB [ 885.874991][T16860] Node 1 DMA32: 213*4kB (UME) 665*8kB (UME) 699*16kB (UMEH) 399*32kB (UME) 121*64kB (UME) 54*128kB (UME) 12*256kB (UM) 9*512kB (UM) 8*1024kB (UM) 0*2048kB 0*4096kB = 60652kB [ 885.875065][T16860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 885.875074][T16860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 885.875082][T16860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 885.875089][T16860] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 885.875096][T16860] 13237 total pagecache pages [ 885.875100][T16860] 1681 pages in swap cache [ 885.875104][T16860] Free swap = 96840kB [ 885.875108][T16860] Total swap = 124996kB [ 885.875112][T16860] 524155 pages RAM [ 885.875115][T16860] 0 pages HighMem/MovableOnly [ 885.875119][T16860] 217702 pages reserved [ 885.875122][T16860] 0 pages cma reserved [ 886.129626][T16870] sd 0:0:0:0: PR command failed: 1026 [ 886.129653][T16870] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 886.129673][T16870] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 886.156028][ T6173] usb 8-1: USB disconnect, device number 41 [ 886.793356][T16887] xt_REDIRECT: bad MAP_IPS. [ 886.800272][T16887] syzkaller0: entered promiscuous mode [ 886.800286][T16887] syzkaller0: entered allmulticast mode [ 887.210945][T16899] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2709'. [ 889.182486][T16917] overlayfs: missing 'lowerdir' [ 890.228088][T16936] rxe_eth0 speed is unknown, defaulting to 1000 [ 890.512425][T16936] ±ÿ speed is unknown, defaulting to 1000 [ 892.426149][T16965] xt_l2tp: wrong L2TP version: 7 [ 896.530343][T16977] ubi: mtd0 is already attached to ubi0 [ 899.005905][T17025] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2745'. [ 899.057031][T17028] xt_l2tp: wrong L2TP version: 7 [ 900.418401][T17033] sctp_transport_update_pmtu: 43 callbacks suppressed [ 900.418463][T17033] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 900.422646][T17033] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 900.425210][T17033] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 900.426730][T17033] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 900.427903][T17033] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 900.429551][T17033] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 900.433323][T17033] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 900.436353][T17033] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 900.439230][T17033] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 900.441199][T17033] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 901.633385][T17044] ublk4: read batch cmd buffer failed [ 901.633439][T17044] ublk4: read batch cmd buffer failed [ 901.643126][T17044] ublk4: read batch cmd buffer failed [ 901.643176][T17044] ublk4: read batch cmd buffer failed [ 902.337476][T17063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.337501][T17063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.338666][T17063] batman_adv: batadv0: Interface deactivated: syz_tun [ 902.338678][T17063] batman_adv: batadv0: Removing interface: syz_tun [ 902.906468][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 902.906485][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 902.906494][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xab35 instead [ 902.906503][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x59d0 instead [ 902.906511][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 902.906519][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 902.906527][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 902.906538][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 902.906553][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 902.906568][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 902.906575][T17071] jffs2: Further such events for this erase block will not be printed [ 902.906845][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 902.906855][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 902.906864][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xab35 instead [ 902.906873][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x59d0 instead [ 902.906881][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 902.906888][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 902.906896][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 902.906906][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 902.906921][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 902.906936][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 902.906943][T17071] jffs2: Further such events for this erase block will not be printed [ 902.907209][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 902.907219][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 902.907227][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xab35 instead [ 902.907236][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x59d0 instead [ 902.907259][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 902.907267][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 902.907275][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xab35 instead [ 902.907284][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x59d0 instead [ 902.907307][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 902.907315][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 902.907324][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xab35 instead [ 902.907333][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x59d0 instead [ 902.907356][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 902.907363][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 902.907373][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xab35 instead [ 902.907386][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x59d0 instead [ 902.907437][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 902.907448][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 902.907456][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xab35 instead [ 902.907465][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x59d0 instead [ 902.907512][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 902.907520][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 902.907528][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xab35 instead [ 902.907538][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x59d0 instead [ 902.907560][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 902.907568][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 902.907576][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xab35 instead [ 902.907586][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x59d0 instead [ 902.907611][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 902.907620][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 902.907628][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xab35 instead [ 902.907636][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x59d0 instead [ 902.907658][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 902.907666][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 902.907674][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xab35 instead [ 902.907683][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x59d0 instead [ 902.907704][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 902.907712][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 902.907720][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xab35 instead [ 902.907729][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x59d0 instead [ 902.907751][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 902.907759][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 902.907767][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xab35 instead [ 902.907776][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x59d0 instead [ 902.907798][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 902.907805][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 902.907814][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xab35 instead [ 902.907822][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x59d0 instead [ 902.907844][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 902.907852][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 902.907860][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xab35 instead [ 902.907891][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x59d0 instead [ 902.908017][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 902.908027][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 902.908035][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xab35 instead [ 902.908045][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x59d0 instead [ 902.908067][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 902.908075][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 902.908083][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xab35 instead [ 902.908093][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x59d0 instead [ 902.908119][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 902.908127][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 902.908135][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xab35 instead [ 902.908144][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x59d0 instead [ 902.908166][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 902.908174][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 902.908183][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xab35 instead [ 902.908192][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x59d0 instead [ 902.908214][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 902.908222][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 902.908230][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xab35 instead [ 902.908239][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x59d0 instead [ 902.908261][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 902.908269][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 902.908277][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xab35 instead [ 902.908286][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x59d0 instead [ 902.908308][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 902.908316][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 902.908324][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xab35 instead [ 902.908333][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x59d0 instead [ 902.908355][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 902.908363][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 902.908371][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xab35 instead [ 902.908380][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x59d0 instead [ 902.908402][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 902.908410][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 902.908418][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xab35 instead [ 902.908432][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x59d0 instead [ 902.908465][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 902.908478][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 902.908488][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xab35 instead [ 902.908498][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x59d0 instead [ 902.908520][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 902.908528][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 902.908537][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xab35 instead [ 902.908546][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x59d0 instead [ 902.908568][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 902.908576][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 902.908584][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xab35 instead [ 902.908594][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x59d0 instead [ 902.908623][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 902.908632][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 902.908642][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xab35 instead [ 902.908652][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x59d0 instead [ 902.908675][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 902.908684][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 902.908694][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xab35 instead [ 902.908704][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x59d0 instead [ 902.908728][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 902.908737][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 902.908747][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xab35 instead [ 902.908756][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x59d0 instead [ 902.908779][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 902.908787][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 902.908795][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xab35 instead [ 902.908804][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x59d0 instead [ 902.908826][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 902.908834][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 902.908842][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xab35 instead [ 902.908851][T17071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x59d0 instead [ 902.908875][T17071] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 902.908881][T17071] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 903.742484][ T43] kauditd_printk_skb: 105 callbacks suppressed [ 903.742497][ T43] audit: type=1326 audit(1794571333.956:21661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.4.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 903.743109][ T43] audit: type=1326 audit(1794571333.956:21662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.4.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 903.773564][ T43] audit: type=1326 audit(1794571333.984:21663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.4.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 903.773605][ T43] audit: type=1326 audit(1794571333.984:21664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.4.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 903.773699][ T43] audit: type=1326 audit(1794571333.984:21665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.4.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 903.774123][ T43] audit: type=1326 audit(1794571333.984:21666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.4.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 903.774228][ T43] audit: type=1326 audit(1794571333.984:21667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.4.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 903.774424][ T43] audit: type=1326 audit(1794571333.984:21668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.4.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 903.774627][ T43] audit: type=1326 audit(1794571333.984:21669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.4.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 903.774722][ T43] audit: type=1326 audit(1794571333.984:21670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17082 comm="syz.4.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefbc code=0x7ffc0000 [ 904.336066][T14636] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 904.498235][T14636] usb 9-1: Using ep0 maxpacket: 16 [ 904.505281][T14636] usb 9-1: unable to get BOS descriptor or descriptor too short [ 904.505324][T14636] usb 9-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 904.520208][T14636] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.520225][T14636] usb 9-1: Product: syz [ 904.520232][T14636] usb 9-1: Manufacturer: syz [ 904.520239][T14636] usb 9-1: SerialNumber: syz [ 904.870655][T14636] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 904.936279][T14636] usb 9-1: USB disconnect, device number 50 [ 905.224215][ T1132] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 905.224233][ T1132] ata1.00: irq_stat 0x40000000 [ 905.224242][ T1132] ata1.00: failed command: READ DMA EXT [ 905.224248][ T1132] ata1.00: cmd 25/00:10:fe:38:01/00:15:00:00:00/e0 tag 14 dma 2760704 in [ 905.224248][ T1132] res 41/04:10:fe:38:01/00:15:00:00:00/e0 Emask 0x1 (device error) [ 905.224276][ T1132] ata1.00: status: { DRDY ERR } [ 905.224283][ T1132] ata1.00: error: { ABRT } [ 905.224880][ T1132] ata1.00: configured for UDMA/66 [ 905.224989][ T1132] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 905.225012][ T1132] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 905.225029][ T1132] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 905.225048][ T1132] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 38 fe 00 15 10 00 [ 905.225059][ T1132] I/O error, dev sda, sector 80126 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 905.235325][ T1132] ata1: EH complete [ 905.335141][T17131] udevd[17131]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.591311][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 908.591327][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 908.591336][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xab35 instead [ 908.591345][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x59d0 instead [ 908.591354][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 908.591361][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 908.591369][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 908.591379][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 908.591395][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 908.591410][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 908.591418][T17152] jffs2: Further such events for this erase block will not be printed [ 908.591596][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 908.591604][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 908.591613][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xab35 instead [ 908.591622][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x59d0 instead [ 908.591629][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 908.591637][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 908.591644][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 908.591654][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 908.591669][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 908.591684][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 908.591691][T17152] jffs2: Further such events for this erase block will not be printed [ 908.591883][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 908.591894][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 908.591902][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xab35 instead [ 908.591911][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x59d0 instead [ 908.591934][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 908.591942][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 908.591951][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xab35 instead [ 908.591960][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x59d0 instead [ 908.591988][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 908.591996][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 908.592007][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xab35 instead [ 908.592016][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x59d0 instead [ 908.592039][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 908.592047][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 908.592056][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xab35 instead [ 908.592065][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x59d0 instead [ 908.592087][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 908.592095][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 908.592103][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xab35 instead [ 908.592112][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x59d0 instead [ 908.592133][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 908.592141][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 908.592150][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xab35 instead [ 908.592159][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x59d0 instead [ 908.592181][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 908.592189][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 908.592197][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xab35 instead [ 908.592206][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x59d0 instead [ 908.592231][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 908.592239][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 908.592247][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xab35 instead [ 908.592256][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x59d0 instead [ 908.592278][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 908.592286][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 908.592294][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xab35 instead [ 908.592304][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x59d0 instead [ 908.592325][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 908.592333][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 908.592341][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xab35 instead [ 908.592350][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x59d0 instead [ 908.592372][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 908.592380][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 908.592388][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xab35 instead [ 908.592397][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x59d0 instead [ 908.592418][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 908.592426][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 908.592434][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xab35 instead [ 908.592443][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x59d0 instead [ 908.592465][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 908.592473][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 908.592481][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xab35 instead [ 908.592490][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x59d0 instead [ 908.592512][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 908.592520][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 908.592528][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xab35 instead [ 908.592537][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x59d0 instead [ 908.592558][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 908.592566][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 908.592574][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xab35 instead [ 908.592584][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x59d0 instead [ 908.592606][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 908.592613][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 908.592622][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xab35 instead [ 908.592631][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x59d0 instead [ 908.592653][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 908.592661][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 908.592670][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xab35 instead [ 908.592679][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x59d0 instead [ 908.592701][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 908.592709][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 908.592717][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xab35 instead [ 908.592726][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x59d0 instead [ 908.592828][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 908.592839][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 908.592848][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xab35 instead [ 908.592858][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x59d0 instead [ 908.592882][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 908.592891][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 908.592901][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xab35 instead [ 908.592911][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x59d0 instead [ 908.592934][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 908.592942][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 908.592950][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xab35 instead [ 908.592959][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x59d0 instead [ 908.592987][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 908.592995][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 908.593004][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xab35 instead [ 908.593015][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x59d0 instead [ 908.593038][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 908.593047][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 908.593056][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xab35 instead [ 908.593066][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x59d0 instead [ 908.593090][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 908.593099][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 908.593108][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xab35 instead [ 908.593119][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x59d0 instead [ 908.593142][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 908.593151][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 908.593159][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xab35 instead [ 908.593168][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x59d0 instead [ 908.593189][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 908.593198][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 908.593206][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xab35 instead [ 908.593215][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x59d0 instead [ 908.593237][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 908.593245][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 908.593253][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xab35 instead [ 908.593262][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x59d0 instead [ 908.593284][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 908.593292][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 908.593300][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xab35 instead [ 908.593309][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x59d0 instead [ 908.593331][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 908.593339][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 908.593347][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xab35 instead [ 908.593356][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x59d0 instead [ 908.593377][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 908.593385][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 908.593394][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xab35 instead [ 908.593403][T17152] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x59d0 instead [ 908.593420][T17152] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 908.593425][T17152] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 909.526252][T17158] overlayfs: missing 'lowerdir' [ 911.877994][T17179] comedi comedi3: board detection failed [ 912.067667][T17181] netlink: 'syz.1.2766': attribute type 10 has an invalid length. [ 912.169601][T17172] comedi comedi3: board detection failed [ 913.039477][T17189] ip6tnl0: Caught tx_queue_len zero misconfig [ 913.749962][T17199] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2770'. [ 914.152255][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2773'. [ 916.004531][ T43] kauditd_printk_skb: 88 callbacks suppressed [ 916.004551][ T43] audit: type=1326 audit(1794571345.268:21759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.2.2779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 916.004805][ T43] audit: type=1326 audit(1794571345.268:21760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.2.2779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 916.029673][ T43] audit: type=1326 audit(1794571345.296:21761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.2.2779" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 916.029897][ T43] audit: type=1326 audit(1794571345.296:21762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.2.2779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 916.030695][ T43] audit: type=1326 audit(1794571345.296:21763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.2.2779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 916.031083][ T43] audit: type=1326 audit(1794571345.296:21764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.2.2779" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 916.031600][ T43] audit: type=1326 audit(1794571345.296:21765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.2.2779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 916.036759][ T43] audit: type=1326 audit(1794571345.296:21766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.2.2779" exe="/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 916.036887][ T43] audit: type=1326 audit(1794571345.296:21767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.2.2779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 916.040054][ T43] audit: type=1326 audit(1794571345.296:21768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17219 comm="syz.2.2779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x7ffc0000 [ 916.506203][T14636] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 916.668706][T14636] usb 7-1: Using ep0 maxpacket: 16 [ 916.692584][T14636] usb 7-1: unable to get BOS descriptor or descriptor too short [ 916.693034][T14636] usb 7-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 916.740594][T14636] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.740761][T14636] usb 7-1: Product: syz [ 916.741047][T14636] usb 7-1: Manufacturer: syz [ 916.741162][T14636] usb 7-1: SerialNumber: syz [ 917.034287][T14636] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 917.057698][T14636] usb 7-1: USB disconnect, device number 53 [ 917.198181][T17247] udevd[17247]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 917.363846][T17248] tipc: Cannot configure node identity twice [ 917.365781][T17248] overlayfs: overlapping lowerdir path [ 917.942589][T17260] bridge0: port 3(netdevsim0) entered blocking state [ 917.943094][T17260] bridge0: port 3(netdevsim0) entered disabled state [ 917.944298][T17260] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 918.092458][T17260] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 918.094513][T17260] bridge0: port 3(netdevsim0) entered blocking state [ 918.094606][T17260] bridge0: port 3(netdevsim0) entered listening state [ 918.124160][T17263] overlayfs: missing 'lowerdir' [ 919.401457][T17271] udevd[17271]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 920.154990][T17280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.362366][T17280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.658388][T17291] ubi: mtd0 is already attached to ubi0 [ 921.621529][T14686] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 921.792835][T14686] usb 8-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 921.972098][T17280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.988196][T14686] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 921.988267][T14686] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 921.988297][T14686] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.288746][T17280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.763973][T17302] overlayfs: missing 'lowerdir' [ 923.907270][T14686] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 924.524848][T14686] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 924.745750][T14686] usb 8-1: USB disconnect, device number 42 [ 924.748260][T14686] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 924.748529][T14686] spcp8x5 8-1:1.0: device disconnected [ 925.106477][T17320] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 925.338260][T14337] libceph: connect (1)127.0.0.1:6789 error -101 [ 925.338351][T14337] libceph: mon0 (1)127.0.0.1:6789 connect error [ 925.420433][T17322] md/raid:md3: device ram7 operational as raid disk 1 [ 925.620862][T14337] libceph: connect (1)127.0.0.1:6789 error -101 [ 925.621026][T14337] libceph: mon0 (1)127.0.0.1:6789 connect error [ 925.959984][T17322] md/raid:md3: not enough operational devices (2/3 failed) [ 925.987552][T17320] ceph: No mds server is up or the cluster is laggy [ 926.036664][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2802'. [ 926.190784][T17322] md/raid:md3: failed to run raid set. [ 926.190795][T17322] md: pers->run() failed ... [ 927.376370][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 927.376385][ T43] audit: type=1326 audit(1794571355.732:21793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.3.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 927.376418][ T43] audit: type=1326 audit(1794571355.732:21794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.3.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 927.376437][ T43] audit: type=1326 audit(1794571355.741:21795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.3.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 927.376456][ T43] audit: type=1326 audit(1794571355.741:21796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.3.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 927.376475][ T43] audit: type=1326 audit(1794571355.741:21797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.3.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 927.376493][ T43] audit: type=1326 audit(1794571355.741:21798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.3.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 927.376512][ T43] audit: type=1326 audit(1794571355.741:21799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.3.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 927.376531][ T43] audit: type=1326 audit(1794571355.741:21800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17344 comm="syz.3.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 928.008072][T17362] ubi: mtd0 is already attached to ubi0 [ 930.844550][T14337] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 931.008797][T14337] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 931.009799][T14337] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.009837][T14337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.017590][T14337] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 931.036397][T14337] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 931.036455][T14337] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 931.038082][T14337] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 931.038146][T14337] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 931.055016][T14337] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 931.062575][T14337] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 931.062642][T14337] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 931.066679][T14337] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 931.214198][ T1132] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 931.214432][ T1132] ata1.00: irq_stat 0x40000000 [ 931.214507][ T1132] ata1.00: failed command: READ DMA EXT [ 931.214515][ T1132] ata1.00: cmd 25/00:00:2e:32:01/00:20:00:00:00/e0 tag 11 dma 4194304 in [ 931.214515][ T1132] res 41/04:00:2e:32:01/00:20:00:00:00/e0 Emask 0x1 (device error) [ 931.214755][ T1132] ata1.00: status: { DRDY ERR } [ 931.214764][ T1132] ata1.00: error: { ABRT } [ 931.217194][ T1132] ata1.00: configured for UDMA/66 [ 931.218867][ T1132] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 931.219504][ T1132] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 931.220206][ T1132] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 931.220642][ T1132] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 01 32 2e 00 20 00 00 [ 931.220990][ T1132] I/O error, dev sda, sector 78382 op 0x0:(READ) flags 0x84700 phys_seg 154 prio class 2 [ 931.222227][ T1132] ata1: EH complete [ 931.863992][ T1132] ata1.00: limiting speed to UDMA/33:PIO4 [ 931.864014][ T1132] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x6 [ 931.864029][ T1132] ata1.00: irq_stat 0x40000000 [ 931.864044][ T1132] ata1.00: failed command: READ DMA EXT [ 931.864054][ T1132] ata1.00: cmd 25/00:40:6e:5b:01/00:05:00:00:00/e0 tag 14 dma 688128 in [ 931.864054][ T1132] res 41/04:40:6e:5b:01/00:05:00:00:00/e0 Emask 0x1 (device error) [ 931.864103][ T1132] ata1.00: status: { DRDY ERR } [ 931.864116][ T1132] ata1.00: error: { ABRT } [ 931.864167][ T1132] ata1: hard resetting link [ 932.525941][ T1132] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 932.531370][ T1132] ata1.00: configured for UDMA/33 [ 932.531650][ T1132] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 932.531692][ T1132] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 932.531729][ T1132] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 932.531790][ T1132] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 5b 6e 00 05 40 00 [ 932.531811][ T1132] I/O error, dev sda, sector 88942 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 932.532164][ T1132] ata1: EH complete [ 932.654370][T14337] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 932.818250][T14337] usb 7-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 932.819244][T14337] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 932.819265][T14337] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 932.819294][T14337] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.825054][T14337] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 932.826892][T14337] usb 7-1: SPCP8x5 converter now attached to ttyUSB2 [ 933.881381][T14636] usb 6-1: USB disconnect, device number 61 [ 933.882902][T14636] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 933.884163][T17411] sctp_transport_update_pmtu: 45 callbacks suppressed [ 933.884174][T17411] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 933.884475][T17411] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 933.884734][T17411] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 933.885602][T17411] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 933.885964][T17411] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 933.887007][T14636] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 933.887484][T14636] keyspan 6-1:1.0: device disconnected [ 933.896019][T17411] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 933.896359][T17411] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 933.896631][T17411] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 933.896876][T17411] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 933.897135][T17411] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 934.107681][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.107756][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.207002][ T43] audit: type=1326 audit(1794571362.061:21801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.1.2820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 934.208404][ T43] audit: type=1326 audit(1794571362.061:21802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.1.2820" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 934.208639][ T43] audit: type=1326 audit(1794571362.061:21803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.1.2820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 934.208816][ T43] audit: type=1326 audit(1794571362.061:21804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.1.2820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 934.209464][ T43] audit: type=1326 audit(1794571362.061:21805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.1.2820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 934.209701][ T43] audit: type=1326 audit(1794571362.061:21806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.1.2820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 934.210098][ T43] audit: type=1326 audit(1794571362.061:21807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.1.2820" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 934.210554][ T43] audit: type=1326 audit(1794571362.061:21808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.1.2820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 934.210743][ T43] audit: type=1326 audit(1794571362.061:21809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.1.2820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 934.211568][ T43] audit: type=1326 audit(1794571362.061:21810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.1.2820" exe="/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 934.498530][ T5868] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 934.802690][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 934.911566][ T5868] usb 6-1: unable to get BOS descriptor or descriptor too short [ 934.911611][ T5868] usb 6-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 934.937938][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.937962][ T5868] usb 6-1: Product: syz [ 934.937973][ T5868] usb 6-1: Manufacturer: syz [ 934.937987][ T5868] usb 6-1: SerialNumber: syz [ 935.220462][T17430] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 935.234424][T17430] md: array md3 already has disks! [ 935.236341][ T5868] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 935.288596][ T5868] usb 6-1: USB disconnect, device number 62 [ 935.309653][T17430] md: could not open device unknown-block(1,7). [ 935.309685][T17430] md: error, md_import_device() returned -16 [ 935.327841][T14686] libceph: connect (1)127.0.0.1:6789 error -101 [ 935.327926][T14686] libceph: mon0 (1)127.0.0.1:6789 connect error [ 935.440036][T17441] udevd[17441]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 935.442388][T17434] md/raid:md3: device ram7 operational as raid disk 1 [ 935.477270][T17434] md/raid:md3: not enough operational devices (2/3 failed) [ 935.503989][T14636] usb 7-1: USB disconnect, device number 54 [ 935.517368][T14636] SPCP8x5 ttyUSB2: SPCP8x5 converter now disconnected from ttyUSB2 [ 935.517636][T14636] spcp8x5 7-1:1.0: device disconnected [ 935.602334][T14686] libceph: connect (1)127.0.0.1:6789 error -101 [ 935.602464][T14686] libceph: mon0 (1)127.0.0.1:6789 connect error [ 935.647071][T17434] md/raid:md3: failed to run raid set. [ 935.647087][T17434] md: pers->run() failed ... [ 935.647125][T17440] md: md3 stopped. [ 936.133721][T17430] ceph: No mds server is up or the cluster is laggy [ 936.155566][ T11] libceph: connect (1)127.0.0.1:6789 error -101 [ 936.155649][ T11] libceph: mon0 (1)127.0.0.1:6789 connect error [ 939.305186][T17479] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 939.321806][T10885] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 939.345780][T17479] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 939.623101][T14636] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 939.659272][ C3] sctp_transport_update_pmtu: 95 callbacks suppressed [ 939.659294][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 939.710676][ T43] kauditd_printk_skb: 156 callbacks suppressed [ 939.710688][ T43] audit: type=1326 audit(1794571367.145:21967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.3.2838" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 939.743788][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 939.797174][T14636] usb 8-1: Using ep0 maxpacket: 16 [ 939.797740][ T43] audit: type=1326 audit(1794571367.228:21968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.3.2838" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 939.798192][ T43] audit: type=1326 audit(1794571367.228:21969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.3.2838" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 939.798754][ T43] audit: type=1326 audit(1794571367.228:21970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.3.2838" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 939.800025][ T43] audit: type=1326 audit(1794571367.228:21971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.3.2838" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 939.800439][ T43] audit: type=1326 audit(1794571367.228:21972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.3.2838" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 939.801130][ T43] audit: type=1326 audit(1794571367.228:21973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.3.2838" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 939.801495][ T43] audit: type=1326 audit(1794571367.228:21974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.3.2838" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 939.801909][T14636] usb 8-1: unable to get BOS descriptor or descriptor too short [ 939.801944][T14636] usb 8-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 939.802317][ T43] audit: type=1326 audit(1794571367.228:21975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.3.2838" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 939.802681][ T43] audit: type=1326 audit(1794571367.228:21976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.3.2838" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefbc code=0x7ffc0000 [ 939.824648][T14636] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.824673][T14636] usb 8-1: Product: syz [ 939.824685][T14636] usb 8-1: Manufacturer: syz [ 939.824697][T14636] usb 8-1: SerialNumber: syz [ 939.829668][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 939.829731][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 939.917638][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 939.986382][T17488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.986406][T17488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.100462][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 940.352883][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 940.352940][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 940.352984][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 940.353030][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 940.407057][T14636] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 940.429081][T14636] usb 8-1: USB disconnect, device number 43 [ 940.617397][T17441] udevd[17441]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 940.700675][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 941.227814][T17501] lo: Caught tx_queue_len zero misconfig [ 941.289104][T17501] nvme_fabrics: missing parameter 'transport=%s' [ 941.289117][T17501] nvme_fabrics: missing parameter 'nqn=%s' [ 943.312879][T17529] socket: no more sockets [ 943.341267][T17529] socket: no more sockets [ 943.448879][ T6173] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 943.611366][ T6173] usb 6-1: Using ep0 maxpacket: 16 [ 943.615360][ T6173] usb 6-1: unable to get BOS descriptor or descriptor too short [ 943.615386][ T6173] usb 6-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 943.620594][ T6173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.620609][ T6173] usb 6-1: Product: syz [ 943.620617][ T6173] usb 6-1: Manufacturer: syz [ 943.620656][ T6173] usb 6-1: SerialNumber: syz [ 943.644223][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.864663][ T6173] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 943.891874][ T6173] usb 6-1: USB disconnect, device number 63 [ 943.947541][T17441] udevd[17441]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 944.444656][T17541] xfrm0: Caught tx_queue_len zero misconfig [ 946.216756][ T43] kauditd_printk_skb: 122 callbacks suppressed [ 946.216775][ T43] audit: type=1326 audit(1794571374.145:22099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17558 comm="syz.2.2858" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fbc code=0x0 [ 947.016399][ T43] audit: type=1800 audit(1794571374.883:22100): pid=17560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2858" name="bus" dev="ramfs" ino=76323 res=0 errno=-4 [ 947.198860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.199038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.464111][T17575] ublk6: read batch cmd buffer failed [ 949.464508][T17575] ublk6: read batch cmd buffer failed [ 949.510702][T17575] ublk6: read batch cmd buffer failed [ 949.511099][T17575] ublk6: read batch cmd buffer failed [ 949.846470][T17578] comedi comedi3: board detection failed [ 950.041574][T17581] netlink: 'syz.3.2863': attribute type 10 has an invalid length. [ 950.041711][T17581] bridge0: port 3(netdevsim0) entered disabled state [ 950.041797][T17581] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.042031][T17581] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.457585][ T43] audit: type=1326 audit(1794571378.057:22101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.1.2864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 950.460322][ T43] audit: type=1326 audit(1794571378.057:22102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.1.2864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 950.462287][ T43] audit: type=1326 audit(1794571378.067:22103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.1.2864" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 950.462455][ T43] audit: type=1326 audit(1794571378.067:22104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.1.2864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 950.462689][ T43] audit: type=1326 audit(1794571378.067:22105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.1.2864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 950.463591][ T43] audit: type=1326 audit(1794571378.067:22106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.1.2864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 950.463825][ T43] audit: type=1326 audit(1794571378.067:22107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.1.2864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 950.506143][ T43] audit: type=1326 audit(1794571378.104:22108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.1.2864" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 950.540508][T17588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.540532][T17588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.861832][ T5876] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 951.024351][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 951.030899][ T5876] usb 6-1: unable to get BOS descriptor or descriptor too short [ 951.030942][ T5876] usb 6-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 951.041404][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.041426][ T5876] usb 6-1: Product: syz [ 951.041439][ T5876] usb 6-1: Manufacturer: syz [ 951.041452][ T5876] usb 6-1: SerialNumber: syz [ 951.447218][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.447297][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.447941][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.557699][ T43] kauditd_printk_skb: 88 callbacks suppressed [ 952.557712][ T43] audit: type=1326 audit(1794571379.995:22197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.1.2864" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 952.557883][ T43] audit: type=1326 audit(1794571379.995:22198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.1.2864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 952.557994][ T43] audit: type=1326 audit(1794571379.995:22199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17584 comm="syz.1.2864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efbc code=0x7ffc0000 [ 952.589972][ T5876] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 952.625048][ T5876] usb 6-1: USB disconnect, device number 64 [ 952.820266][T17607] overlayfs: missing 'lowerdir' [ 952.831658][T17377] udevd[17377]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 952.921973][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.922146][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.922309][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.217578][T17615] bridge0: port 3(netdevsim0) entered blocking state [ 953.217630][T17615] bridge0: port 3(netdevsim0) entered listening state [ 953.217744][T17615] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.217789][T17615] bridge0: port 2(bridge_slave_1) entered listening state [ 953.217888][T17615] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.217937][T17615] bridge0: port 1(bridge_slave_0) entered listening state [ 953.338587][T17615] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 953.340361][T17611] rxe_eth0 speed is unknown, defaulting to 1000 [ 953.854881][T17622] comedi comedi3: board detection failed [ 953.964490][T17628] comedi comedi3: board detection failed [ 954.105861][T17631] netlink: 'syz.2.2875': attribute type 10 has an invalid length. [ 954.106051][T17631] bridge0: port 3(syz_tun) entered disabled state [ 954.106137][T17631] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.106199][T17631] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.124642][T17631] bridge0: port 3(syz_tun) entered blocking state [ 954.124695][T17631] bridge0: port 3(syz_tun) entered listening state [ 954.124806][T17631] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.124866][T17631] bridge0: port 2(bridge_slave_1) entered listening state [ 954.124980][T17631] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.125026][T17631] bridge0: port 1(bridge_slave_0) entered listening state [ 954.183071][T17631] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 954.203993][T17611] ±ÿ speed is unknown, defaulting to 1000 [ 956.506454][T17653] bridge0: port 3(netdevsim0) entered blocking state [ 956.506503][T17653] bridge0: port 3(netdevsim0) entered disabled state [ 956.508640][T17653] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 956.510065][T17653] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 958.508788][T17652] overlayfs: missing 'lowerdir' [ 958.697114][T17669] ================================================================== [ 958.697131][T17669] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x194b/0x1d60 [ 958.697162][T17669] Write of size 8 at addr ffffc90024864818 by task syz.3.2886/17669 [ 958.697179][T17669] [ 958.697192][T17669] CPU: 0 UID: 0 PID: 17669 Comm: syz.3.2886 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.697217][T17669] Tainted: [L]=SOFTLOCKUP [ 958.69722 ** replaying previous printk message ** [ 958.697225][T17669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 958.697237][T17669] Call Trace: [ 958.697244][T17669] [ 958.697252][T17669] dump_stack_lvl+0x100/0x190 [ 958.697281][T17669] print_report+0x13d/0x4b0 [ 958.697308][T17669] ? _raw_spin_lock_irqsave+0x52/0x60 [ 958.697337][T17669] ? sys_imageblit+0x194b/0x1d60 [ 958.697374][T17669] kasan_report+0xdf/0x1c0 [ 958.697401][T17669] ? sys_imageblit+0x194b/0x1d60 [ 958.697427][T17669] sys_imageblit+0x194b/0x1d60 [ 958.697451][T17669] ? __pfx_sys_imageblit+0x10/0x10 [ 958.697471][T17669] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 958.697495][T17669] soft_cursor+0x524/0xa10 [ 958.697514][T17669] ccw_cursor+0xd2c/0x1550 [ 958.697536][T17669] ? __pfx_ccw_cursor+0x10/0x10 [ 958.697555][T17669] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 958.697578][T17669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 958.697601][T17669] ? get_color+0x1da/0x450 [ 958.697624][T17669] ? __pfx_ccw_cursor+0x10/0x10 [ 958.697642][T17669] fbcon_cursor+0x43c/0x5e0 [ 958.697667][T17669] hide_cursor+0x87/0x230 [ 958.697688][T17669] redraw_screen+0x5d4/0x760 [ 958.697711][T17669] ? __pfx_redraw_screen+0x10/0x10 [ 958.697733][T17669] ? kasan_save_stack+0x3f/0x50 [ 958.697752][T17669] ? kasan_save_stack+0x30/0x50 [ 958.697768][T17669] ? kasan_save_track+0x14/0x30 [ 958.697786][T17669] ? kasan_save_free_info+0x3b/0x70 [ 958.697809][T17669] ? __kasan_slab_free+0x5f/0x80 [ 958.697826][T17669] ? kfree+0x22b/0x6d0 [ 958.697848][T17669] ? tomoyo_path_number_perm+0x46d/0x580 [ 958.697870][T17669] fbcon_unblank+0x6b7/0xac0 [ 958.697903][T17669] ? __pfx_fbcon_unblank+0x10/0x10 [ 958.697932][T17669] ? __pfx___might_resched+0x10/0x10 [ 958.697961][T17669] ? __pfx_fbcon_unblank+0x10/0x10 [ 958.697985][T17669] do_unblank_screen+0x2c8/0x540 [ 958.698006][T17669] ? __pfx_do_unblank_screen+0x10/0x10 [ 958.698027][T17669] ? rcu_is_watching+0x13/0xc0 [ 958.698051][T17669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 958.698072][T17669] vt_ioctl+0xa93/0x3170 [ 958.698092][T17669] ? __pfx_vt_ioctl+0x10/0x10 [ 958.698109][T17669] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 958.698131][T17669] ? futex_wait+0x11e/0x370 [ 958.698150][T17669] ? hook_capable+0x1bc/0x500 [ 958.698168][T17669] ? rcu_is_watching+0x13/0xc0 [ 958.698190][T17669] ? apparmor_capable+0x1d7/0x4d0 [ 958.698214][T17669] ? bpf_lsm_capable+0x9/0x10 [ 958.698234][T17669] ? security_capable+0x80/0x260 [ 958.698256][T17669] vt_compat_ioctl+0x361/0x4e0 [ 958.698275][T17669] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 958.698293][T17669] ? __fget_files+0x215/0x3d0 [ 958.698312][T17669] ? hook_file_ioctl_common+0x140/0x440 [ 958.698339][T17669] ? __fget_files+0x21f/0x3d0 [ 958.698358][T17669] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 958.698377][T17669] tty_compat_ioctl+0x1b4/0x420 [ 958.698399][T17669] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 958.698423][T17669] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 958.698444][T17669] __do_fast_syscall_32+0x14d/0x8e0 [ 958.698461][T17669] ? lockdep_hardirqs_on+0x7d/0x110 [ 958.698485][T17669] do_fast_syscall_32+0x32/0x70 [ 958.698501][T17669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 958.698522][T17669] RIP: 0023:0xf70aefbc [ 958.698538][T17669] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 958.698556][T17669] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 958.698572][T17669] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004b3a [ 958.698582][T17669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 958.698592][T17669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 958.698602][T17669] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 958.698612][T17669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 958.698629][T17669] [ 958.698635][T17669] [ 958.698642][T17669] The buggy address belongs to a 16-page vmalloc region starting at 0xffffc90024854000 allocated at tpg_alloc+0x166/0x9b0 [ 958.698703][T17669] Memory state around the buggy address: [ 958.698714][T17669] ffffc90024864700: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 958.698726][T17669] ffffc90024864780: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 958.698739][T17669] >ffffc90024864800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 958.698749][T17669] ^ [ 958.698758][T17669] ffffc90024864880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 958.698772][T17669] ffffc90024864900: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 958.698780][T17669] ================================================================== [ 958.722457][T17669] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 958.906856][T17669] CPU: 1 UID: 0 PID: 17669 Comm: syz.3.2886 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.910060][T17669] Tainted: [L]=SOFTLOCKUP [ 958.911393][T17669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 958.914367][T17669] Call Trace: [ 958.915351][T17669] [ 958.916249][T17669] dump_stack_lvl+0x100/0x190 [ 958.917682][T17669] vpanic+0x2dc/0x6f8 [ 958.918854][T17669] panic+0xd1/0xe0 [ 958.919996][T17669] ? __pfx_panic+0x10/0x10 [ 958.921366][T17669] ? sys_imageblit+0x194b/0x1d60 [ 958.922847][T17669] ? preempt_schedule+0x57/0xd0 [ 958.924339][T17669] check_panic_on_warn.cold+0x19/0x34 [ 958.925903][T17669] end_report.part.0+0x3a/0x90 [ 958.927366][T17669] kasan_report.cold+0xe/0x18 [ 958.928799][T17669] ? sys_imageblit+0x194b/0x1d60 [ 958.930288][T17669] sys_imageblit+0x194b/0x1d60 [ 958.931725][T17669] ? __pfx_sys_imageblit+0x10/0x10 [ 958.933246][T17669] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 958.935071][T17669] soft_cursor+0x524/0xa10 [ 958.936386][T17669] ccw_cursor+0xd2c/0x1550 [ 958.937728][T17669] ? __pfx_ccw_cursor+0x10/0x10 [ 958.939184][T17669] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 958.941070][T17669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 958.942828][T17669] ? get_color+0x1da/0x450 [ 958.944199][T17669] ? __pfx_ccw_cursor+0x10/0x10 [ 958.945660][T17669] fbcon_cursor+0x43c/0x5e0 [ 958.947031][T17669] hide_cursor+0x87/0x230 [ 958.948364][T17669] redraw_screen+0x5d4/0x760 [ 958.949789][T17669] ? __pfx_redraw_screen+0x10/0x10 [ 958.951331][T17669] ? kasan_save_stack+0x3f/0x50 [ 958.952781][T17669] ? kasan_save_stack+0x30/0x50 [ 958.954210][T17669] ? kasan_save_track+0x14/0x30 [ 958.955674][T17669] ? kasan_save_free_info+0x3b/0x70 [ 958.957203][T17669] ? __kasan_slab_free+0x5f/0x80 [ 958.958661][T17669] ? kfree+0x22b/0x6d0 [ 958.959899][T17669] ? tomoyo_path_number_perm+0x46d/0x580 [ 958.961573][T17669] fbcon_unblank+0x6b7/0xac0 [ 958.962930][T17669] ? __pfx_fbcon_unblank+0x10/0x10 [ 958.964467][T17669] ? __pfx___might_resched+0x10/0x10 [ 958.966158][T17669] ? __pfx_fbcon_unblank+0x10/0x10 [ 958.967988][T17669] do_unblank_screen+0x2c8/0x540 [ 958.969810][T17669] ? __pfx_do_unblank_screen+0x10/0x10 [ 958.971502][T17669] ? rcu_is_watching+0x13/0xc0 [ 958.972938][T17669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 958.974730][T17669] vt_ioctl+0xa93/0x3170 [ 958.976066][T17669] ? __pfx_vt_ioctl+0x10/0x10 [ 958.977554][T17669] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 958.979499][T17669] ? futex_wait+0x11e/0x370 [ 958.980930][T17669] ? hook_capable+0x1bc/0x500 [ 958.982347][T17669] ? rcu_is_watching+0x13/0xc0 [ 958.983784][T17669] ? apparmor_capable+0x1d7/0x4d0 [ 958.985246][T17669] ? bpf_lsm_capable+0x9/0x10 [ 958.986651][T17669] ? security_capable+0x80/0x260 [ 958.988231][T17669] vt_compat_ioctl+0x361/0x4e0 [ 958.989668][T17669] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 958.991299][T17669] ? __fget_files+0x215/0x3d0 [ 958.992725][T17669] ? hook_file_ioctl_common+0x140/0x440 [ 958.994332][T17669] ? __fget_files+0x21f/0x3d0 [ 958.995693][T17669] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 958.997308][T17669] tty_compat_ioctl+0x1b4/0x420 [ 958.998819][T17669] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 959.000502][T17669] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 959.002146][T17669] __do_fast_syscall_32+0x14d/0x8e0 [ 959.003729][T17669] ? lockdep_hardirqs_on+0x7d/0x110 [ 959.005287][T17669] do_fast_syscall_32+0x32/0x70 [ 959.006731][T17669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 959.008620][T17669] RIP: 0023:0xf70aefbc [ 959.009899][T17669] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 959.015446][T17669] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 959.017927][T17669] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004b3a [ 959.020243][T17669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 959.022683][T17669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 959.024979][T17669] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 959.027225][T17669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 959.029736][T17669] [ 959.031416][T17669] Kernel Offset: disabled [ 959.032770][T17669] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:03:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c18685 RDI=ffffffff9cf46520 RBP=ffffffff9cf464e0 RSP=ffffc900006cf9d8 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3230303963666657 R12=0000000000000000 R13=0000000000000066 R14=0000000000000002 R15=ffffc900006cfda8 RIP=ffffffff85c186af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095275000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73a9aa4 CR3=000000004ca73000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000015400000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff8880237c0000 RSI=ffffffff820136a7 RDI=0000000000000005 RBP=ffffc900042afb98 RSP=ffffc900042afa80 R8 =0000000000000000 R9 =0000000000000001 R10=ffffc900042af9df R11=0000000000000000 R12=ffffc900042afb00 R13=0000000000000003 R14=fffff52000855f61 R15=0000000000000001 RIP=ffffffff820136a9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095375000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c283789 CR3=000000004d234000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002dc00000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff88802798a580 RSI=ffffffff82010e1e RDI=0000000000000005 RBP=ffff88802ae44660 RSP=ffffc900046ef960 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffffed1004f31763 R13=0000000000000003 R14=ffffed10055c88cd R15=0000000000000001 RIP=ffffffff82010e20 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095475000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53ecff4 CR3=000000000fd96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010c00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000ee3f406c RBX=ffff888025470bd8 RCX=0000000000000200 RDX=00000000461fee8e RSI=0000000009dd4184 RDI=00000000d6810512 RBP=0000000000000007 RSP=ffffc90003e0edc8 R8 =00000000bae303fa R9 =0000000000000007 R10=0000000000000001 R11=0000000000000001 R12=ffff888025470000 R13=0000000000000001 R14=0000000000000004 R15=0000000000000001 RIP=ffffffff81e8c9f5 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbc18349300 ffffffff 00c00000 GS =0000 ffff888095575000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f0ece39f40 CR3=000000004f00e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b231d4083850152 d92435ec71655d98 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9602df3ce0653b57 63e7583bf2b9a59c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e7b58e1f4960dec 46ac2a22b29dcea5 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 74356aed87bd62f4 2bf61b863ae3170d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001e40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0cfa3200ac3bfc00 000245c0e3ef7e00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f65400080010000 80010000f7273000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 28632200000245c0 000245b5000245af ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 80010000000245c0 000245c0000245ae ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 887a0df0e101d00e 06f3f32c689461d6 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ab168356c13b1d07 4ca9ed8d6a814221 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0d9479c870f8c449 d618d4fdeb0d1a69 0d9479c870f8c449 d618d4fdeb0d1a69 0d9479c870f8c449 d618d4fdeb0d1a69 0d9479c870f8c449 d618d4fdeb0d1a69 ZMM18=2f69f26d2f2c7ff8 fd512b594cbdb4f4 2f69f26d2f2c7ff8 fd512b594cbdb4f4 2f69f26d2f2c7ff8 fd512b594cbdb4f4 2f69f26d2f2c7ff8 fd512b594cbdb4f4 ZMM19=6e21000000000000 0000000000000004 6e21000000000000 0000000000000003 6e21000000000000 0000000000000002 6e21000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000aa8030608 000aa0031010000a 90030c08000a8803 7008000a80030fff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0200080006 0800020800080178 8a2e000004cf0000 000f000000150000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0009000000140000 0011000000100000 000a000000050000 00120000000c0000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004080007800205 8002080178e8c9f5 040807800300306e 616c7701ffffffff ZMM25=fd512b59fd512b59 fd512b59fd512b59 fd512b59fd512b59 fd512b59fd512b59 fd512b59fd512b59 fd512b59fd512b59 fd512b59fd512b59 fd512b59fd512b59 ZMM26=2f2c7ff82f2c7ff8 2f2c7ff82f2c7ff8 2f2c7ff82f2c7ff8 2f2c7ff82f2c7ff8 2f2c7ff82f2c7ff8 2f2c7ff82f2c7ff8 2f2c7ff82f2c7ff8 2f2c7ff82f2c7ff8 ZMM27=2f69f26d2f69f26d 2f69f26d2f69f26d 2f69f26d2f69f26d 2f69f26d2f69f26d 2f69f26d2f69f26d 2f69f26d2f69f26d 2f69f26d2f69f26d 2f69f26d2f69f26d ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6d2100006d210000 6d2100006d210000 6d2100006d210000 6d2100006d210000 6d2100006d210000 6d2100006d210000 6d2100006d210000 6d2100006d210000