last executing test programs: 11m20.10932058s ago: executing program 1 (id=258): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0xfffffffc, {0x2}, 0x0, 0x0, 0x2, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x13\xf6\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xffffffffffffffff}}, 0x23b) 11m15.675736971s ago: executing program 1 (id=267): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 11m13.831111112s ago: executing program 1 (id=270): socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x4, [0x0, 0xd1, 0x8b, 0xc]}}) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet6(0xa, 0x1, 0x0) close(0x4) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x27, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0xffffff7f, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x10, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0xf000, 0x1000, 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m12.225716627s ago: executing program 1 (id=274): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$FUSE_GETXATTR(r3, &(0x7f0000002400)={0x18, 0x0, 0x0, {0xffff}}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(r7, r7) ioprio_get$pid(0x2, r7) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r6, 0x13}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 11m12.168552381s ago: executing program 1 (id=275): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r0 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000080)='4', 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000007000050401000000000000", @ANYRES32, @ANYBLOB="14000180080001"], 0x2c}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = syz_io_uring_setup(0xf03, 0x0, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, 0x0, r8, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x10, r5, 0x0, 0x0, 0x0, 0x12121, 0x3}) io_uring_enter(r6, 0x1008, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000ffff26ad7088d20a6a910760cdfa", @ANYRES32=0x0, @ANYBLOB="1555000000000000140012800b00010067656e6576650000040002"], 0x34}, 0x1, 0x0, 0x0, 0x24004844}, 0x28008042) 11m11.7412185s ago: executing program 1 (id=278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x4c880}, 0x48800) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10, 0x1000, 0x80, 0x7f}, {0x8, 0x0, 0x800, 0x3, 0x2, 0x6}, 0xe72d, 0x2, 0x178d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x3454acd1e6f80a22}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcd2e77eb9cafbc50}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 11m11.489491768s ago: executing program 32 (id=278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x4c880}, 0x48800) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10, 0x1000, 0x80, 0x7f}, {0x8, 0x0, 0x800, 0x3, 0x2, 0x6}, 0xe72d, 0x2, 0x178d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x3454acd1e6f80a22}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcd2e77eb9cafbc50}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 1m45.846151901s ago: executing program 3 (id=1674): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x305) 1m42.268989984s ago: executing program 3 (id=1680): socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e306000000000000000000000085000000200000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000"], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x5, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x20000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) sendfile(r5, r6, 0x0, 0x10000) 1m38.881411631s ago: executing program 3 (id=1685): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) 1m38.155173064s ago: executing program 3 (id=1690): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m37.189891717s ago: executing program 3 (id=1696): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x2, 0xfe, 0x49, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x0, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b000100627269646765000014000280080002000600000008000300"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c01000010000100000000000000000000000000000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000004c001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7fdffff000000000f8ffdef7cebcc6b66ec2da20a2c629e699f38088cf764d77a6f0dbf85ecb4310000"], 0x13c}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x4}) 1m36.926346904s ago: executing program 3 (id=1697): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r4, 0x5, 0x4) 1m31.062586799s ago: executing program 0 (id=1713): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m30.369187792s ago: executing program 0 (id=1716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9286649abd8d4f18, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x65) 1m29.134864221s ago: executing program 0 (id=1718): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m27.329346625s ago: executing program 0 (id=1722): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r4 = openat$sndseq(0xffffff9c, 0x0, 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) 1m26.831827713s ago: executing program 2 (id=1724): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r4, 0x5, 0x4) 1m24.32076675s ago: executing program 0 (id=1727): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000340)='Linux Founda', 0xc) write(0xffffffffffffffff, &(0x7f00000003c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='Conf', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r4, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r5, &(0x7f0000000740)='midi.usb0\x00') 1m23.168729389s ago: executing program 2 (id=1728): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x2, 0xfe, 0x49, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x0, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b0001006272696467"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c01000010000100000000000000000000000000000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x4}) 1m22.841042085s ago: executing program 2 (id=1729): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) 1m22.734821138s ago: executing program 0 (id=1730): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m22.599513767s ago: executing program 2 (id=1731): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xfffff5d4}}, './file0\x00'}) ioctl$TIOCSTI(r3, 0x5412, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b92", 0x53}], 0x1}, 0x20048000) 1m22.390290331s ago: executing program 2 (id=1732): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m21.197845124s ago: executing program 33 (id=1697): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r4, 0x5, 0x4) 1m21.025935768s ago: executing program 2 (id=1734): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) unlink(&(0x7f00000002c0)='./file0\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x451, 0x8001008, r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, r4, 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x1, 0x800002b, r5, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x20) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r6, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 1m1.53789261s ago: executing program 34 (id=1730): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m1.529499274s ago: executing program 35 (id=1734): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) unlink(&(0x7f00000002c0)='./file0\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x451, 0x8001008, r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, r4, 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x1, 0x800002b, r5, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x20) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r6, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 19.131391611s ago: executing program 5 (id=1792): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) io_submit(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 16.541769202s ago: executing program 5 (id=1794): socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e306000000000000000000000085000000200000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000"], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x5, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x20000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) sendfile(r5, r6, 0x0, 0x10000) 15.878252479s ago: executing program 7 (id=1795): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1c9) socket$inet_smc(0x2b, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000436c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000002c0)="440f20c03501000000440f22c066baf80cb82d9eb08aef66bafc0cecc402350d50a0b9860100000f3266baf80cb874293c8eef66bafc0cedc744240039010000c74424026cad04c7ff2c24263e440f83db0000008fe998986439b8410f78829f3a0000d9f7", 0x65}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\''], 0x2a) close(r5) lstat64(&(0x7f00000000c0)='./cgroup\x00', 0x0) write(r4, &(0x7f0000000180)='pi3usb30532 0x59\x00', 0x10) 15.162534742s ago: executing program 4 (id=1798): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) r0 = socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000007c0)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4040) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3a) socket(0x11, 0x3, 0x0) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x2000, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x0, 0x1, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x4000, 0x2, 0x0, 0x0, r3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fcntl$notify(r5, 0x402, 0x0) getdents64(r4, 0x0, 0x22) 13.521624164s ago: executing program 7 (id=1799): close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000840)="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", 0x1b3) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071119000000000008510000002000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 12.896155539s ago: executing program 4 (id=1800): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0xffffffffffffffc7, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12e5, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000015}, 0xc844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x850003d1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000680)=""/240) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) 11.861997323s ago: executing program 6 (id=1801): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r2 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 11.688068472s ago: executing program 5 (id=1802): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0xffffffffffffffff, 0x4, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000100)=[0x7, 0x7fffffff, 0x400, 0x6, 0x7, 0x5007, 0x4da11d3, 0x3ff], &(0x7f0000000180)=[0x0], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000003c0)=0x2010b9, 0xffffffffffffff79) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x2c, 0x11, 0x300, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x7, 0xa}, {0x0, 0x5}}, [{0x8, 0xb, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048080}, 0x4008008) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) 11.429128496s ago: executing program 7 (id=1803): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 11.428450221s ago: executing program 6 (id=1804): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) 10.735997464s ago: executing program 5 (id=1805): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r3, 0x5, 0x4) 6.803483974s ago: executing program 4 (id=1806): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r4, 0x5, 0x4) 6.802182331s ago: executing program 6 (id=1807): socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) 6.534314662s ago: executing program 7 (id=1808): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb6010203010902"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc2"], 0x14}}, 0x20008000) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r3, &(0x7f0000000040)='\x00J', 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5, 0x100000001, 0x4, 0x5, 0x5, 0x9, 0x36, 0xa4, 0x129e, 0x4, 0x10, 0x401, 0x0, 0x4, 0x4a, 0x80], 0x80a0000, 0x2a884}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) futex(0x0, 0x201, 0x2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000410005010100e0ffffffffffa6ee8a4c5a2da625aa16a6048e36790000001c0001000600060008000000100007007f0000017f000001910040001400020010f10c000500060000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='dctcp', 0x5) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r4, &(0x7f0000001000)=[{&(0x7f0000000b40)="b63a88b0938ee522cd2e", 0xa}], 0x1) sendto$inet(r4, 0x0, 0x0, 0x4044880, 0x0, 0x0) 6.341082726s ago: executing program 5 (id=1809): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1c9) socket$inet_smc(0x2b, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000436c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000002c0)="440f20c03501000000440f22c066baf80cb82d9eb08aef66bafc0cecc402350d50a0b9860100000f3266baf80cb874293c8eef66bafc0cedc744240039010000c74424026cad04c7ff2c24263e440f83db0000008fe998986439b8410f78829f3a0000d9f7", 0x65}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\''], 0x2a) close(r5) lstat64(&(0x7f00000000c0)='./cgroup\x00', 0x0) write(r4, &(0x7f0000000180)='pi3usb30532 0x59\x00', 0x10) 5.560410758s ago: executing program 4 (id=1810): r0 = socket(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x14e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%/,c\xbe\xfbL:', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000780)={r5, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x2}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 5.394242149s ago: executing program 6 (id=1811): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='raid5', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='4096', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1:0', 0x3) write(r4, &(0x7f00000004c0)='1:1', 0x3) write(r4, &(0x7f0000000540)='1:3', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='0', 0x1) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f0000000640)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f00000007c0)='active', 0x6) 2.13262812s ago: executing program 5 (id=1812): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r3 = eventfd2(0x156, 0x0) r4 = dup2(r3, r2) write$eventfd(r3, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x23ea5d1b09597025, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.982691162s ago: executing program 7 (id=1813): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) r0 = socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000007c0)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4040) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3a) socket(0x11, 0x3, 0x0) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x2000, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x0, 0x1, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x4000, 0x2, 0x0, 0x0, r3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fcntl$notify(r5, 0x402, 0x0) getdents64(r4, 0x0, 0x22) 1.849097425s ago: executing program 6 (id=1814): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0x80044dfe, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) 1.60580665s ago: executing program 7 (id=1815): r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r4, &(0x7f00000002c0), 0x4001) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) pwritev2(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000000c0)="3a4002c716d6a76c8c4954a5376cbb6f97620bfe3824433daae61da82f787afff91cf673ef7ebed356e623497f0489", 0x2f}, {&(0x7f0000000100)="14647874f50593fbd741385970459568ce343ccd4ca406866df429c6830d4bed180761c6379067d47e193a152b8d9b9da24d5e2bfff31cabce47132c5f77935c3daa805711c8891ca27689fc7040b552c98f8497e0f83d29d4d31a5428db4e0b66c4f2cb4a58658f48f111a2d19940a9fdc06ef423164c716d82f62fbfec4a93993b602b0ae83752df6dc833066afb0806d527718d646510a82a215b61d8cbfb270fca0317890b361155dfa0a614209ff9cd54f0f116b87d9a4b25f7b04a5318ecbb78440b2eaee36182408db4a31885717297d9ac1a2347feb0c981cd", 0xdd}], 0x3, 0x3, 0xffff8000, 0x14) 1.078575276s ago: executing program 4 (id=1816): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) 173.067231ms ago: executing program 4 (id=1817): socket$packet(0x11, 0x2, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x19, 0x10, 0x19, 0x10, 0x3, 0x2, 0x2, 0xac, 0xffffffffffffffff}) readv(r0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000000c0)={0xfffffffd, 0x4}) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setns(0xc9, 0x0) 0s ago: executing program 6 (id=1818): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = socket(0x1a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r8, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FAMILY={0x5, 0xd, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61128c00000000006113300000000000bf300000000000002500070007ffffffbd0201000000000095002000000000006916320000000000bf6700000000000007070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) kernel console output (not intermixed with test programs): ink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 713.418361][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 713.464537][T13395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1696'. [ 713.896050][T13402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.901499][T13402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.013302][T13402] null_blk: nullb1: using native zone append [ 714.050124][T13405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.050451][T13405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.322190][T13402] null_blk: disk nullb1 created [ 715.531807][T13420] pim6reg: entered allmulticast mode [ 716.136770][T13400] pim6reg: left allmulticast mode [ 716.442948][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 716.443022][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1703'. [ 716.443548][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 716.881630][ T1300] block nbd0: Possible stuck request ffff888027175080: control (read@0,1024B). Runtime 180 seconds [ 716.881718][ T1300] block nbd0: Possible stuck request ffff888027175240: control (read@1024,1024B). Runtime 180 seconds [ 716.881742][ T1300] block nbd0: Possible stuck request ffff888027175400: control (read@2048,2048B). Runtime 180 seconds [ 718.369659][T13452] netlink: 'syz.4.1709': attribute type 1 has an invalid length. [ 719.281367][ T9726] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 719.432093][ T9726] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 719.433011][ T9726] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 135 [ 719.434568][ T9726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.434581][ T9726] usb 9-1: Product: syz [ 719.434588][ T9726] usb 9-1: Manufacturer: syz [ 719.434596][ T9726] usb 9-1: SerialNumber: syz [ 719.437270][T13459] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 719.933692][T13472] __nla_validate_parse: 5 callbacks suppressed [ 719.936477][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'. [ 719.936499][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'. [ 719.936602][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 720.051497][T13472] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1714'. [ 720.201185][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 720.201301][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 720.201626][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf30d instead [ 720.201642][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xffe9 instead [ 720.201652][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 720.201663][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 720.201673][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 720.201686][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 720.201707][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 720.201764][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 720.201776][T13480] jffs2: Further such events for this erase block will not be printed [ 720.202055][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 720.202068][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 720.202079][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf30d instead [ 720.202090][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xffe9 instead [ 720.202100][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 720.202109][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 720.202120][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 720.202137][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 720.202160][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 720.202226][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 720.202237][T13480] jffs2: Further such events for this erase block will not be printed [ 720.202521][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 720.202532][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 720.202541][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf30d instead [ 720.202552][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xffe9 instead [ 720.202576][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 720.202586][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 720.202596][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf30d instead [ 720.202607][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xffe9 instead [ 720.202670][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 720.202681][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 720.202692][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf30d instead [ 720.202703][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xffe9 instead [ 720.202730][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 720.202739][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 720.202749][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf30d instead [ 720.202759][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xffe9 instead [ 720.202822][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 720.202833][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 720.202842][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf30d instead [ 720.202853][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xffe9 instead [ 720.202877][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 720.202886][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 720.202896][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf30d instead [ 720.202906][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xffe9 instead [ 720.202968][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 720.202978][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 720.202988][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf30d instead [ 720.202998][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xffe9 instead [ 720.203024][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 720.203033][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 720.203042][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf30d instead [ 720.203053][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xffe9 instead [ 720.203115][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 720.203132][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 720.203143][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf30d instead [ 720.203154][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xffe9 instead [ 720.203179][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 720.203189][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 720.203199][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf30d instead [ 720.203211][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xffe9 instead [ 720.203286][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 720.203297][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 720.203307][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf30d instead [ 720.203318][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xffe9 instead [ 720.203343][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 720.203351][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 720.203361][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf30d instead [ 720.203371][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xffe9 instead [ 720.203442][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 720.203453][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 720.203462][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf30d instead [ 720.203473][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xffe9 instead [ 720.203497][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 720.203506][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 720.203515][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf30d instead [ 720.203525][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xffe9 instead [ 720.203602][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 720.203619][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 720.203637][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf30d instead [ 720.203655][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xffe9 instead [ 720.203728][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 720.203739][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 720.203749][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf30d instead [ 720.203760][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xffe9 instead [ 720.203806][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 720.203816][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 720.203826][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf30d instead [ 720.203838][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xffe9 instead [ 720.203902][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 720.203947][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 720.203960][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf30d instead [ 720.203971][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xffe9 instead [ 720.203997][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 720.204069][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 720.204081][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf30d instead [ 720.204091][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xffe9 instead [ 720.204116][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 720.204130][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 720.204140][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf30d instead [ 720.204152][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xffe9 instead [ 720.204218][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 720.204229][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 720.204240][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf30d instead [ 720.204252][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xffe9 instead [ 720.204278][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 720.204288][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 720.204297][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf30d instead [ 720.204307][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xffe9 instead [ 720.204379][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 720.204390][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 720.204399][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf30d instead [ 720.204410][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xffe9 instead [ 720.204433][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 720.204442][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 720.204452][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf30d instead [ 720.204462][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xffe9 instead [ 720.204573][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 720.204589][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 720.204603][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf30d instead [ 720.204615][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xffe9 instead [ 720.204682][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 720.204693][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 720.204703][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf30d instead [ 720.204713][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xffe9 instead [ 720.204737][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 720.204746][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 720.204755][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf30d instead [ 720.204766][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xffe9 instead [ 720.204828][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 720.204840][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 720.204849][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf30d instead [ 720.204859][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xffe9 instead [ 720.204884][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 720.204893][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 720.204903][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf30d instead [ 720.204913][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xffe9 instead [ 720.204975][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 720.204986][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 720.204996][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf30d instead [ 720.205006][T13480] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xffe9 instead [ 720.205026][T13480] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 720.205031][T13480] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 720.809474][ T9726] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 720.842455][ T9726] usb 9-1: USB disconnect, device number 30 [ 720.844600][ T9726] usblp0: removed [ 722.652444][T13500] 9pnet_virtio: no channels available for device syz [ 722.808229][T13500] syz.4.1721: page allocation failure: order:0, mode:0x144cca(GFP_HIGHUSER_MOVABLE|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=0,cpuset=/,mems_allowed=0-1 [ 722.831237][T13500] CPU: 1 UID: 0 PID: 13500 Comm: syz.4.1721 Tainted: G L syzkaller #0 PREEMPT(full) [ 722.831271][T13500] Tainted: [L]=SOFTLOCKUP [ 722.831278][T13500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 722.831285][T13500] Call Trace: [ 722.831291][T13500] [ 722.831296][T13500] dump_stack_lvl+0x100/0x190 [ 722.831318][T13500] warn_alloc.cold+0x9e/0xb2 [ 722.831332][T13500] ? __pfx_warn_alloc+0x10/0x10 [ 722.831356][T13500] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 722.831374][T13500] ? __pfx_get_page_from_freelist+0x10/0x10 [ 722.831396][T13500] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 722.831422][T13500] ? mt_validate_nulls+0x22f/0xae0 [ 722.831439][T13500] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 722.831459][T13500] ? __pfx_mt_validate_nulls+0x10/0x10 [ 722.831480][T13500] ? __lock_acquire+0x4c5/0x1ec0 [ 722.831501][T13500] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 722.831517][T13500] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 722.831531][T13500] ? policy_nodemask+0xed/0x4f0 [ 722.831548][T13500] alloc_pages_mpol+0x201/0x550 [ 722.831563][T13500] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 722.831577][T13500] ? __lock_acquire+0x4c5/0x1ec0 [ 722.831596][T13500] folio_alloc_mpol_noprof+0x36/0x260 [ 722.831614][T13500] alloc_migration_target_by_mpol+0x2c1/0x650 [ 722.831632][T13500] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 722.831650][T13500] ? __pfx___might_resched+0x10/0x10 [ 722.831665][T13500] ? bpf_ksym_find+0x124/0x1c0 [ 722.831680][T13500] migrate_pages_batch+0x5c4/0x4680 [ 722.831698][T13500] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 722.831721][T13500] ? __pfx_migrate_pages_batch+0x10/0x10 [ 722.831736][T13500] ? stack_trace_save+0x8e/0xc0 [ 722.831755][T13500] ? kasan_save_stack+0x3f/0x50 [ 722.831767][T13500] ? kasan_save_stack+0x30/0x50 [ 722.831779][T13500] ? kasan_save_track+0x14/0x30 [ 722.831791][T13500] ? __kasan_slab_alloc+0x89/0x90 [ 722.831804][T13500] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 722.831817][T13500] ? __mpol_dup+0x74/0x390 [ 722.831832][T13500] ? mbind_range+0x2ad/0x550 [ 722.831847][T13500] ? do_mbind+0x7dc/0xfd0 [ 722.831863][T13500] ? kernel_mbind+0x1b7/0x200 [ 722.831881][T13500] migrate_pages_sync+0x12c/0x880 [ 722.831898][T13500] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 722.831920][T13500] ? __pfx_migrate_pages_sync+0x10/0x10 [ 722.831942][T13500] migrate_pages+0x1a83/0x2850 [ 722.831960][T13500] ? current_cpuset_is_being_rebound+0x24/0x370 [ 722.831979][T13500] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 722.832000][T13500] ? __pfx_migrate_pages+0x10/0x10 [ 722.832019][T13500] ? do_mbind+0x555/0xfd0 [ 722.832041][T13500] do_mbind+0x5a4/0xfd0 [ 722.832072][T13500] ? __pfx_do_mbind+0x10/0x10 [ 722.832090][T13500] ? madvise_unlock+0xa9/0x220 [ 722.832113][T13500] ? __pfx_get_nodes+0x10/0x10 [ 722.832132][T13500] kernel_mbind+0x1b7/0x200 [ 722.832151][T13500] ? __pfx_kernel_mbind+0x10/0x10 [ 722.832173][T13500] __do_fast_syscall_32+0x13a/0x8b0 [ 722.832191][T13500] do_fast_syscall_32+0x32/0x70 [ 722.832207][T13500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 722.832222][T13500] RIP: 0023:0xf7f97fec [ 722.832238][T13500] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 722.832243][T13500] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 722.832255][T13500] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 722.832262][T13500] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 722.832270][T13500] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 722.832276][T13500] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 722.832283][T13500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 722.832297][T13500] [ 722.843351][T13500] Mem-Info: [ 722.843372][T13500] active_anon:1899 inactive_anon:2005 isolated_anon:0 [ 722.843372][T13500] active_file:1577 inactive_file:22266 isolated_file:0 [ 722.843372][T13500] unevictable:3049 dirty:16 writeback:0 [ 722.843372][T13500] slab_reclaimable:6657 slab_unreclaimable:71481 [ 722.843372][T13500] mapped:23838 shmem:3483 pagetables:2390 [ 722.843372][T13500] sec_pagetables:346 bounce:0 [ 722.843372][T13500] kernel_misc_reclaimable:0 [ 722.843372][T13500] free:21522 free_pcp:0 free_cma:0 [ 722.843446][T13500] Node 0 active_anon:68kB inactive_anon:1312kB active_file:340kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:300kB dirty:4kB writeback:0kB shmem:1332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8960kB pagetables:1324kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 722.843493][T13500] Node 0 DMA free:1668kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:204kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.843544][T13500] lowmem_reserve[]: 0 278 278 278 278 [ 722.843570][T13500] Node 0 DMA32 free:28592kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:60kB inactive_anon:1108kB active_file:340kB inactive_file:64kB unevictable:0kB writepending:4kB zspages:2852kB present:1032196kB managed:284672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.843621][T13500] lowmem_reserve[]: 0 0 0 0 0 [ 722.843660][T13500] Node 0 DMA: 21*4kB (UM) 10*8kB (UM) 2*16kB (UM) 4*32kB (UM) 1*64kB (U) 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1668kB [ 722.843789][T13500] Node 0 DMA32: 917*4kB (UME) 268*8kB (UME) 117*16kB (UME) 140*32kB (UME) 83*64kB (UME) 41*128kB (UME) 15*256kB (M) 4*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 28612kB [ 722.843958][T13500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 722.843974][T13500] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 722.843990][T13500] 6765 total pagecache pages [ 722.843998][T13500] 1098 pages in swap cache [ 722.844006][T13500] Free swap = 70228kB [ 722.844012][T13500] Total swap = 124996kB [ 722.844020][T13500] 524155 pages RAM [ 722.844026][T13500] 0 pages HighMem/MovableOnly [ 722.844032][T13500] 212095 pages reserved [ 722.848559][T13500] 0 pages cma reserved [ 723.243668][T13499] syz.4.1721 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 723.243741][T13499] CPU: 3 UID: 0 PID: 13499 Comm: syz.4.1721 Tainted: G L syzkaller #0 PREEMPT(full) [ 723.243781][T13499] Tainted: [L]=SOFTLOCKUP [ 723.243798][T13499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 723.243807][T13499] Call Trace: [ 723.243813][T13499] [ 723.243818][T13499] dump_stack_lvl+0x100/0x190 [ 723.243840][T13499] dump_header+0xfb/0x606 [ 723.243856][T13499] oom_kill_process.cold+0xd/0x380 [ 723.243871][T13499] out_of_memory+0x1256/0x14f0 [ 723.243891][T13499] ? __pfx_out_of_memory+0x10/0x10 [ 723.243910][T13499] __alloc_frozen_pages_noprof+0x2852/0x3300 [ 723.243938][T13499] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 723.243961][T13499] ? stack_trace_save+0x8e/0xc0 [ 723.243977][T13499] ? __pfx_stack_trace_save+0x10/0x10 [ 723.243991][T13499] ? stack_depot_save_flags+0x27/0x9f0 [ 723.244016][T13499] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 723.244032][T13499] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 723.244062][T13499] ? policy_nodemask+0xed/0x4f0 [ 723.244104][T13499] alloc_pages_mpol+0x201/0x550 [ 723.244120][T13499] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 723.244134][T13499] ? do_raw_spin_lock+0x128/0x260 [ 723.244151][T13499] ? find_held_lock+0x2b/0x80 [ 723.244162][T13499] ? swap_cache_alloc_folio+0x374/0xc50 [ 723.244188][T13499] folio_alloc_mpol_noprof+0x36/0x260 [ 723.244208][T13499] swap_cache_alloc_folio+0x3d7/0xc50 [ 723.244222][T13499] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 723.244234][T13499] ? swap_cache_get_folio+0x28d/0x360 [ 723.244252][T13499] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 723.244274][T13499] swap_cache_read_folio+0x47/0x140 [ 723.244288][T13499] swap_cluster_readahead+0x477/0x5d0 [ 723.244316][T13499] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 723.244331][T13499] ? swap_table_get+0x28/0x2c0 [ 723.244355][T13499] swapin_readahead+0xf0/0x260 [ 723.244366][T13499] ? __pfx_swapin_readahead+0x10/0x10 [ 723.244377][T13499] ? __pfx_get_swap_device+0x10/0x10 [ 723.244395][T13499] do_swap_page+0xf72/0x5580 [ 723.244413][T13499] ? inode_to_bdi+0x9e/0x160 [ 723.244424][T13499] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 723.244463][T13499] ? __pfx_do_swap_page+0x10/0x10 [ 723.244478][T13499] ? lock_acquire+0x1d1/0x380 [ 723.244492][T13499] ? __pte_offset_map+0x2f/0x310 [ 723.244531][T13499] ? __pfx_filemap_map_pages+0x10/0x10 [ 723.244549][T13499] ? rcu_is_watching+0x13/0xc0 [ 723.244561][T13499] ? __pte_offset_map+0x179/0x310 [ 723.244575][T13499] __handle_mm_fault+0x15bd/0x2f60 [ 723.244593][T13499] ? lock_vma_under_rcu+0x11d/0x590 [ 723.244609][T13499] ? __pfx___handle_mm_fault+0x10/0x10 [ 723.244628][T13499] ? lock_vma_under_rcu+0x17c/0x590 [ 723.244651][T13499] handle_mm_fault+0x363/0xa20 [ 723.244669][T13499] do_user_addr_fault+0x59c/0x12f0 [ 723.244687][T13499] exc_page_fault+0x6f/0xd0 [ 723.244703][T13499] asm_exc_page_fault+0x26/0x30 [ 723.244715][T13499] RIP: 0023:0xf7090ff5 [ 723.244728][T13499] Code: 85 77 fd ff ff 85 c0 74 19 83 e8 01 0f 85 6a fd ff ff 8b 44 24 20 31 f6 89 74 24 24 0f c8 89 44 24 20 8b 44 24 1c 8b 4c 24 20 <89> 08 e9 e4 fb ff ff 85 c0 0f 84 b2 01 00 00 83 e8 01 0f 85 3a fd [ 723.244739][T13499] RSP: 002b:00000000ffb79750 EFLAGS: 00010246 [ 723.244749][T13499] RAX: 0000000080000380 RBX: 00000000f7427ff4 RCX: 0000000000000008 [ 723.244756][T13499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 723.244763][T13499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 723.244770][T13499] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 723.244777][T13499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 723.244790][T13499] [ 723.388099][T13499] Mem-Info: [ 723.388176][T13499] active_anon:282 inactive_anon:1293 isolated_anon:0 [ 723.388176][T13499] active_file:1298 inactive_file:24732 isolated_file:0 [ 723.388176][T13499] unevictable:3049 dirty:16 writeback:0 [ 723.388176][T13499] slab_reclaimable:6657 slab_unreclaimable:71519 [ 723.388176][T13499] mapped:21463 shmem:1339 pagetables:2415 [ 723.388176][T13499] sec_pagetables:346 bounce:0 [ 723.388176][T13499] kernel_misc_reclaimable:0 [ 723.388176][T13499] free:22656 free_pcp:14 free_cma:0 [ 723.392728][T13499] Node 0 active_anon:156kB inactive_anon:1148kB active_file:244kB inactive_file:160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:300kB dirty:4kB writeback:0kB shmem:1256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8960kB pagetables:1324kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 723.392762][T13499] Node 0 DMA free:1668kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:212kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 723.392792][T13499] lowmem_reserve[]: 0 278 278 278 278 [ 723.392811][T13499] Node 0 DMA32 free:28396kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:156kB inactive_anon:936kB active_file:244kB inactive_file:160kB unevictable:0kB writepending:4kB zspages:2852kB present:1032196kB managed:284672kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 723.392852][T13499] lowmem_reserve[]: 0 0 0 0 0 [ 723.392878][T13499] Node 0 DMA: 21*4kB (UM) 10*8kB (UM) 2*16kB (UM) 4*32kB (UM) 1*64kB (U) 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1668kB [ 723.393019][T13499] Node 0 DMA32: 931*4kB (UM) 261*8kB (UME) 118*16kB (UME) 132*32kB (UME) 84*64kB (UME) 41*128kB (UME) 15*256kB (M) 4*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 28436kB [ 723.393099][T13499] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 723.393108][T13499] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 723.393116][T13499] 6596 total pagecache pages [ 723.393121][T13499] 1023 pages in swap cache [ 723.393125][T13499] Free swap = 69596kB [ 723.393129][T13499] Total swap = 124996kB [ 723.393133][T13499] 524155 pages RAM [ 723.393137][T13499] 0 pages HighMem/MovableOnly [ 723.393141][T13499] 212095 pages reserved [ 723.393144][T13499] 0 pages cma reserved [ 723.393150][T13499] Unreclaimable slab info: [ 723.393154][T13499] Name Used Total [ 723.393217][T13499] bio-184 24KB 40KB [ 723.393227][T13499] pid_3 21KB 47KB [ 723.393237][T13499] pid_2 79KB 118KB [ 723.393252][T13499] bio-464 17KB 31KB [ 723.393259][T13499] bio-528 19KB 31KB [ 723.393270][T13499] bio-544 19KB 31KB [ 723.393279][T13499] bio-552 19KB 31KB [ 723.393288][T13499] zswap_entry 757KB 762KB [ 723.393298][T13499] AF_VSOCK 54KB 183KB [ 723.393305][T13499] sw_flow_stats 15KB 20KB [ 723.393313][T13499] sw_flow 42KB 61KB [ 723.393323][T13499] batadv_tt_change_cache 11KB 20KB [ 723.393360][T13499] batadv_tl_cache 27KB 40KB [ 723.393369][T13499] ceph_osd_request 5KB 95KB [ 723.393378][T13499] ceph_msg 2KB 38KB [ 723.393387][T13499] IEEE-802.15.4-MAC 39KB 93KB [ 723.393394][T13499] IEEE-802.15.4-RAW 12KB 31KB [ 723.393401][T13499] p9_req_t 11KB 39KB [ 723.393412][T13499] SMC6 78KB 187KB [ 723.393419][T13499] SMC 109KB 250KB [ 723.393427][T13499] TIPC 38KB 184KB [ 723.393434][T13499] rds_tcp_incoming 14KB 31KB [ 723.393441][T13499] rds_tcp_connection 42KB 63KB [ 723.393451][T13499] RDS 51KB 123KB [ 723.393459][T13499] rds_connection 25KB 46KB [ 723.393466][T13499] SCTPv6 97KB 210KB [ 723.393474][T13499] SCTP 39KB 183KB [ 723.393481][T13499] sctp_chunk 18KB 54KB [ 723.393489][T13499] sctp_bind_bucket 8KB 20KB [ 723.393496][T13499] PNPIPE 48KB 154KB [ 723.393502][T13499] PHONET 16KB 31KB [ 723.393509][T13499] L2TP/IPv6 46KB 95KB [ 723.393517][T13499] L2TP/IP 43KB 157KB [ 723.393524][T13499] KCM 56KB 93KB [ 723.393531][T13499] kcm_mux 52KB 94KB [ 723.393539][T13499] RXRPC 56KB 160KB [ 723.393546][T13499] rxrpc_call_jar 165KB 255KB [ 723.393554][T13499] can_gw 7KB 8KB [ 723.393562][T13499] can_receiver 17KB 23KB [ 723.393569][T13499] net_bridge_fdb_entry 146KB 149KB [ 723.393578][T13499] xfrm6_tunnel_spi 7KB 8KB [ 723.393586][T13499] MPTCPv6 92KB 223KB [ 723.393594][T13499] ip6-frags 9KB 15KB [ 723.393604][T13499] fib6_node 158KB 196KB [ 723.393614][T13499] ip6_dst_cache 181KB 257KB [ 723.397295][T13499] mfc6_cache 6KB 8KB [ 723.397308][T13499] PINGv6 43KB 61KB [ 723.397318][T13499] RAWv6 138KB 309KB [ 723.397326][T13499] UDPv6 132KB 283KB [ 723.551639][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 723.551654][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 723.551668][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'. [ 723.619872][T13499] tw_sock_TCPv6 31KB 63KB [ 723.628199][T13499] request_sock_TCPv6 29KB 61KB [ 723.631988][T13499] TCPv6 165KB 364KB [ 723.634709][T13499] ip_vs_conn 26KB 32KB [ 723.637220][T13499] xt_hashlimit 31KB 54KB [ 723.640809][T13499] nf_conntrack 47KB 78KB [ 723.645184][T13499] wg_peer 146KB 178KB [ 723.648671][T13499] allowedips_node 17KB 31KB [ 723.651737][T13499] ubi_wl_entry_slab 2KB 3KB [ 723.654048][T13499] t10_alua_lu_gp_cache 8KB 15KB [ 723.656368][T13499] scsi_sense_cache 49KB 56KB [ 723.659973][T13499] virtio_scsi_cmd 21KB 24KB [ 723.662615][T13499] bio-136 55KB 84KB [ 723.665026][T13499] io_kiocb 2KB 62KB [ 723.667636][T13499] bio-264 30KB 47KB [ 723.668129][T13510] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1723'. [ 723.684254][T13499] mqueue_inode_cache 76KB 185KB [ 723.684985][T13499] f2fs_evict_inode_work 7KB 7KB [ 723.685000][T13499] bio-272 10KB 15KB [ 723.685009][T13499] f2fs_bio_post_read_ctx 30KB 31KB [ 723.685061][T13499] jfs_mp 14KB 15KB [ 723.685071][T13499] orangefs_op_cache 102KB 204KB [ 723.685080][T13499] fuse_request 17KB 39KB [ 723.685093][T13499] jffs2_refblock 21KB 54KB [ 723.685108][T13499] cifs_small_rq 28KB 32KB [ 723.685116][T13499] cifs_request 67KB 67KB [ 723.685124][T13499] cifs_mpx_ids 8KB 15KB [ 723.685131][T13499] cifs_io_subrequest 42KB 47KB [ 723.685138][T13499] cifs_io_request 105KB 111KB [ 723.685155][T13499] nfs_commit_data 24KB 31KB [ 723.685163][T13499] nfs_write_data 40KB 63KB [ 723.685183][T13499] jbd2_inode 16KB 23KB [ 723.685191][T13499] ext4_system_zone 1KB 3KB [ 723.685199][T13499] ext4_io_end_vec 6KB 15KB [ 723.685213][T13499] kioctx 27KB 127KB [ 723.685221][T13499] aio_kiocb 32KB 54KB [ 723.685230][T13499] fanotify_path_event 5KB 7KB [ 723.685237][T13499] fanotify_mark 11KB 11KB [ 723.685244][T13499] dnotify_mark 22KB 23KB [ 723.685252][T13499] dnotify_struct 5KB 7KB [ 723.685261][T13499] fasync_cache 35KB 47KB [ 723.685269][T13499] userfaultfd_ctx_cache 39KB 94KB [ 723.685278][T13499] zspage 221KB 228KB [ 723.685290][T13499] zs_handle 271KB 280KB [ 723.685311][T13499] pid_namespace 44KB 123KB [ 723.685319][T13499] kvm_gmem_inode_cache 41KB 184KB [ 723.685327][T13499] kvm_async_pf 13KB 15KB [ 723.685335][T13499] kvm_vcpu 50KB 182KB [ 723.685343][T13499] kvm_mmu_page_header 61KB 69KB [ 723.685351][T13499] pte_list_desc 26KB 31KB [ 723.685359][T13499] x86_emulator 37KB 127KB [ 723.685368][T13499] rpc_buffers 82KB 191KB [ 723.685376][T13499] rpc_tasks 19KB 46KB [ 723.685384][T13499] UNIX-STREAM 87KB 223KB [ 723.685392][T13499] UNIX 138KB 350KB [ 723.685399][T13499] ip4-frags 17KB 31KB [ 723.685407][T13499] mfc_cache 13KB 16KB [ 723.685415][T13499] MPTCP 33KB 153KB [ 723.685424][T13499] tcp_bind2_bucket 12KB 32KB [ 723.685433][T13499] tcp_bind_bucket 17KB 32KB [ 723.685440][T13499] inet_peer 7KB 8KB [ 723.685448][T13499] xfrm_dst 28KB 78KB [ 723.685456][T13499] xfrm_state 39KB 159KB [ 723.685463][T13499] ip_fib_trie 33KB 40KB [ 723.685472][T13499] ip_fib_alias 98KB 110KB [ 723.685486][T13499] rtable 53KB 176KB [ 723.685494][T13499] RAW 75KB 255KB [ 723.685502][T13499] UDP 148KB 286KB [ 723.685509][T13499] tw_sock_TCP 7KB 15KB [ 723.685517][T13499] request_sock_TCP 31KB 61KB [ 723.685526][T13499] TCP 253KB 409KB [ 723.685534][T13499] fs_bio_integrity 7KB 8KB [ 723.685543][T13499] hugetlbfs_inode_cache 21KB 93KB [ 723.685550][T13499] fscache_cookie_jar 18KB 30KB [ 723.685558][T13499] netfs_subrequest 51KB 62KB [ 723.685566][T13499] netfs_request 154KB 175KB [ 723.685575][T13499] bio-288 31KB 31KB [ 723.685582][T13499] bio-328 12KB 15KB [ 723.685590][T13499] ep_head 6KB 23KB [ 723.685639][T13499] eventpoll_pwq 16KB 35KB [ 723.685648][T13499] eventpoll_epi 46KB 59KB [ 723.685656][T13499] inotify_inode_mark 40KB 46KB [ 723.685663][T13499] bpf_fs_inode_cache 26KB 31KB [ 723.685675][T13499] sgpool-128 187KB 327KB [ 723.685682][T13499] sgpool-64 116KB 127KB [ 723.685690][T13499] sgpool-32 87KB 126KB [ 723.685697][T13499] sgpool-16 68KB 93KB [ 723.685706][T13499] sgpool-8 104KB 148KB [ 723.685714][T13499] bio_crypt_ctx 9KB 11KB [ 723.685723][T13499] bio_integrity_data 0KB 8KB [ 723.685732][T13499] request_queue 237KB 272KB [ 723.685740][T13499] blkdev_ioc 20KB 39KB [ 723.685750][T13499] bio-200 311KB 367KB [ 723.685759][T13499] biovec-max 1066KB 1309KB [ 723.685767][T13499] biovec-128 76KB 255KB [ 723.685775][T13499] biovec-64 164KB 315KB [ 723.685783][T13499] biovec-16 96KB 125KB [ 723.685792][T13499] mm_slot 11KB 15KB [ 723.685802][T13499] ksm_mm_slot 14KB 16KB [ 723.685811][T13499] ksm_rmap_item 2KB 19KB [ 723.685820][T13499] uid_cache 31KB 62KB [ 723.685828][T13499] iommu_iova_magazine 79KB 189KB [ 723.685836][T13499] iommu_iova 254KB 260KB [ 723.685844][T13499] dmaengine-unmap-256 2KB 30KB [ 723.685851][T13499] dmaengine-unmap-128 1KB 30KB [ 723.685859][T13499] dmaengine-unmap-16 0KB 8KB [ 723.685866][T13499] dmaengine-unmap-2 0KB 4KB [ 723.685873][T13499] QIPCRTR 1KB 31KB [ 723.685881][T13499] audit_buffer 18KB 39KB [ 723.685890][T13499] skbuff_ext_cache 23KB 36KB [ 723.685921][T13499] skbuff_small_head 2051KB 3411KB [ 723.685929][T13499] skbuff_fclone_cache 148KB 234KB [ 723.685953][T13499] skbuff_head_cache 1768KB 2312KB [ 723.685962][T13499] configfs_dir_cache 90KB 92KB [ 723.685970][T13499] file_lease_cache 16KB 39KB [ 723.685978][T13499] file_lock_cache 13KB 63KB [ 723.685986][T13499] file_lock_ctx 40KB 47KB [ 723.685994][T13499] fsnotify_inode_mark_connector 33KB 47KB [ 723.686003][T13499] posix_timers_cache 33KB 64KB [ 723.686012][T13499] taskstats 56KB 111KB [ 723.686019][T13499] mem_cgroup_per_node 129KB 153KB [ 723.686027][T13499] mem_cgroup 127KB 216KB [ 723.686038][T13499] proc_dir_entry 758KB 796KB [ 723.686045][T13499] pde_opener 6KB 19KB [ 723.686054][T13499] seq_file 31KB 70KB [ 723.686062][T13499] sigqueue 11KB 31KB [ 723.686074][T13499] shmem_inode_cache 7343KB 7504KB [ 723.686082][T13499] kernfs_iattrs_cache 22KB 31KB [ 723.686093][T13499] kernfs_node_cache 28215KB 28237KB [ 723.686102][T13499] mnt_cache 87KB 133KB [ 723.686110][T13499] bfilp 26KB 55KB [ 723.687824][T13499] filp 481KB 637KB [ 723.687843][T13499] names_cache 245KB 264KB [ 723.687853][T13499] net_namespace 158KB 296KB [ 723.687861][T13499] ima_iint_cache 29KB 55KB [ 723.687895][T13499] lsm_inode_cache 1541KB 1834KB [ 723.687911][T13499] lsm_file_cache 188KB 253KB [ 723.687920][T13499] key_jar 33KB 86KB [ 723.687929][T13499] uts_namespace 80KB 138KB [ 723.687938][T13499] nsproxy 9KB 27KB [ 723.687956][T13499] vm_area_struct 1419KB 1476KB [ 723.687966][T13499] fs_cache 44KB 72KB [ 723.687976][T13499] files_cache 176KB 270KB [ 723.687985][T13499] task_exec_state 14KB 40KB [ 723.688038][T13499] signal_cache 1096KB 1941KB [ 723.688059][T13499] sighand_cache 1387KB 2194KB [ 723.688070][T13499] task_struct 5906KB 6103KB [ 723.688088][T13499] cred 177KB 344KB [ 723.688099][T13499] anon_vma_chain 478KB 496KB [ 723.688111][T13499] anon_vma 527KB 567KB [ 723.688125][T13499] pid 175KB 367KB [ 723.688141][T13499] Acpi-Operand 191KB 332KB [ 723.688149][T13499] Acpi-ParseExt 19KB 23KB [ 723.688158][T13499] Acpi-Parse 13KB 23KB [ 723.688167][T13499] Acpi-State 14KB 35KB [ 723.688174][T13499] Acpi-Namespace 30KB 44KB [ 723.688182][T13499] shared_policy_node 9KB 16KB [ 723.688190][T13499] numa_policy 9KB 24KB [ 723.688197][T13499] perf_event 34KB 62KB [ 723.688204][T13499] trace_event_file 585KB 588KB [ 723.688213][T13499] ftrace_event_field 1129KB 1130KB [ 723.688222][T13499] pool_workqueue 2284KB 2336KB [ 723.688231][T13499] task_group 32KB 64KB [ 723.688261][T13499] maple_node 774KB 1448KB [ 723.688269][T13499] mm_struct 506KB 605KB [ 723.688290][T13499] vmap_area 818KB 1010KB [ 723.688651][T13499] debug_objects_cache 3080KB 10679KB [ 723.688664][T13499] page->ptl 214KB 232KB [ 723.688673][T13499] kmalloc-cg-8k 1968KB 2112KB [ 723.688683][T13499] kmalloc-cg-4k 16520KB 16672KB [ 723.688693][T13499] kmalloc-cg-2k 10560KB 10656KB [ 723.688704][T13499] kmalloc-cg-1k 3136KB 3264KB [ 723.688712][T13499] kmalloc-cg-512 1786KB 1792KB [ 723.688721][T13499] kmalloc-cg-256 437KB 472KB [ 723.688732][T13499] kmalloc-cg-128 284KB 304KB [ 723.688742][T13499] kmalloc-cg-64 56KB 88KB [ 723.688755][T13499] kmalloc-cg-32 90KB 188KB [ 723.688763][T13499] kmalloc-cg-16 8KB 16KB [ 723.688772][T13499] kmalloc-cg-8 23KB 44KB [ 723.688780][T13499] kmalloc-cg-192 61KB 80KB [ 723.688789][T13499] kmalloc-cg-96 75KB 92KB [ 723.688809][T13499] kmalloc-8k 6544KB 6656KB [ 723.688839][T13499] kmalloc-4k 35840KB 37320KB [ 723.688848][T13499] kmalloc-2k 18760KB 18880KB [ 723.688869][T13499] kmalloc-1k 6294KB 7584KB [ 723.688889][T13499] kmalloc-512 12291KB 12704KB [ 723.688923][T13499] kmalloc-256 6154KB 6600KB [ 723.689030][T13499] kmalloc-128 4110KB 5800KB [ 723.689182][T13499] kmalloc-64 6175KB 8236KB [ 723.689215][T13499] kmalloc-32 2693KB 2840KB [ 723.689228][T13499] kmalloc-16 481KB 508KB [ 723.689239][T13499] kmalloc-8 445KB 472KB [ 723.689287][T13499] kmalloc-192 3246KB 3892KB [ 723.689328][T13499] kmalloc-96 2903KB 3288KB [ 723.689337][T13499] kmem_cache_node 216KB 220KB [ 723.689345][T13499] kmem_cache 180KB 218KB [ 723.689353][T13499] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz4,task=syz.4.1721,pid=13499,uid=0 [ 723.692319][T13499] Out of memory (oom_kill_allocating_task): Killed process 13499 (syz.4.1721) total-vm:104084kB, anon-rss:24kB, file-rss:22828kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 724.125512][T13515] pim6reg: entered allmulticast mode [ 725.644203][T13514] pim6reg: left allmulticast mode [ 725.698026][T13515] 9pnet_virtio: no channels available for device syz [ 726.400557][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 726.400768][ T43] audit: type=1800 audit(1788399485.301:12005): pid=13527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1727" name="idProduct" dev="configfs" ino=51878 res=0 errno=0 [ 726.478650][ T43] audit: type=1800 audit(1788399485.381:12006): pid=13527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1727" name="serialnumber" dev="configfs" ino=51880 res=0 errno=0 [ 726.488301][ T43] audit: type=1800 audit(1788399485.401:12007): pid=13527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1727" name="configuration" dev="configfs" ino=51882 res=0 errno=0 [ 726.505285][ T5144] udevd[5144]: worker [10346] /devices/virtual/block/nbd0 timeout; kill it [ 726.514320][ T5144] udevd[5144]: seq 15760 '/devices/virtual/block/nbd0' killed [ 727.440957][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1728'. [ 727.441025][T13530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'. [ 727.501258][T13530] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1728'. [ 738.217056][T13551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 738.231762][T13551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 738.233578][T13551] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 738.234074][T13551] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 738.234570][T13551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 738.277924][ T5748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 738.284484][ T5748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 738.289585][ T5748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 738.298876][ T5748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 738.301671][ T5748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 740.391342][ T5748] Bluetooth: hci4: command tx timeout [ 742.481413][ T5748] Bluetooth: hci4: command tx timeout [ 744.551248][ T5748] Bluetooth: hci4: command tx timeout [ 746.631186][ T5748] Bluetooth: hci4: command tx timeout [ 746.954617][ T1300] block nbd0: Possible stuck request ffff888027175080: control (read@0,1024B). Runtime 210 seconds [ 746.954679][ T1300] block nbd0: Possible stuck request ffff888027175240: control (read@1024,1024B). Runtime 210 seconds [ 746.954708][ T1300] block nbd0: Possible stuck request ffff888027175400: control (read@2048,2048B). Runtime 210 seconds [ 746.981978][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.982107][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.498688][T13551] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 749.509703][T13551] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 749.520175][T13551] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 749.560086][T13551] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 749.564904][T13551] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 749.872849][T13551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 749.876668][T13551] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 749.879881][T13551] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 749.886315][T13551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 749.887180][T13551] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 750.572933][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 750.576639][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 750.582845][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 750.665964][T13574] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1738'. [ 751.678685][ T5748] Bluetooth: hci3: command tx timeout [ 752.003169][ T5748] Bluetooth: hci5: command tx timeout [ 752.970519][ T5814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.970623][ T5814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.235180][ T5814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.235233][ T5814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.332309][T13596] pim6reg: entered allmulticast mode [ 753.389651][ T5814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.395313][ T5814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.407649][T13596] 9pnet_virtio: no channels available for device syz [ 753.535015][T13591] pim6reg: left allmulticast mode [ 753.841777][ T5748] Bluetooth: hci3: command tx timeout [ 753.904721][ T5814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.908035][ T5814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.072195][ T5748] Bluetooth: hci5: command tx timeout [ 754.321422][ T9] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 754.474104][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 754.474933][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 754.474971][ T9] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 754.474996][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 754.475031][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 754.475058][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 754.476690][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 754.476705][ T9] usb 9-1: Product: syz [ 754.476714][ T9] usb 9-1: Manufacturer: syz [ 754.484629][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 754.484640][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 754.486288][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 754.486299][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 754.572191][T13565] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.572453][T13565] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.572593][T13565] bridge_slave_0: entered allmulticast mode [ 754.573732][T13565] bridge_slave_0: entered promiscuous mode [ 754.575559][T13565] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.575650][T13565] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.575861][T13565] bridge_slave_1: entered allmulticast mode [ 754.576623][T13565] bridge_slave_1: entered promiscuous mode [ 754.691737][ T5814] bridge_slave_1: left allmulticast mode [ 754.691778][ T5814] bridge_slave_1: left promiscuous mode [ 754.692138][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.699840][ T5814] bridge_slave_0: left allmulticast mode [ 754.700237][ T5814] bridge_slave_0: left promiscuous mode [ 754.700790][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.898593][ T5814] bond1 (unregistering): (slave bridge1): Releasing active interface [ 754.898639][ T5814] bridge1 (unregistering): left allmulticast mode [ 754.926752][ T5814] team0: Port device bond0 removed [ 754.931903][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.942065][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.944779][ T5814] bond0 (unregistering): Released all slaves [ 754.958752][ T5814] bond1 (unregistering): left allmulticast mode [ 754.998506][ T5814] bond1 (unregistering): Released all slaves [ 755.026111][T13565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.076313][T13565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.306240][ T5814] : left promiscuous mode [ 755.359891][T13565] team0: Port device team_slave_0 added [ 755.370646][T13565] team0: Port device team_slave_1 added [ 755.419598][ T5814] IPVS: stopping backup sync thread 7967 ... [ 755.483740][T13609] futex_wake_op: syz.4.1740 tries to shift op by 144; fix this program [ 755.488663][T13609] futex_wake_op: syz.4.1740 tries to shift op by 144; fix this program [ 755.553643][T13565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.553688][T13565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.553748][T13565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.574653][T13565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.574702][T13565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.574738][T13565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.911369][ T5748] Bluetooth: hci3: command tx timeout [ 756.001808][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 756.015646][T13565] hsr_slave_0: entered promiscuous mode [ 756.016331][T13565] hsr_slave_1: entered promiscuous mode [ 756.016656][T13565] debugfs: 'hsr0' already exists in 'hsr' [ 756.016668][T13565] Cannot create hsr debugfs directory [ 756.151479][ T5748] Bluetooth: hci5: command tx timeout [ 756.459041][T13561] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.459159][T13561] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.459251][T13561] bridge_slave_0: entered allmulticast mode [ 756.459954][T13561] bridge_slave_0: entered promiscuous mode [ 756.473052][T13561] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.473142][T13561] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.473243][T13561] bridge_slave_1: entered allmulticast mode [ 756.473989][T13561] bridge_slave_1: entered promiscuous mode [ 756.495024][ T5814] hsr_slave_0: left promiscuous mode [ 756.497114][ T5814] hsr_slave_1: left promiscuous mode [ 756.505284][ T5814] batadv_slave_1: left allmulticast mode [ 756.505409][ T5814] veth1_macvtap: left promiscuous mode [ 756.505464][ T5814] veth0_macvtap: left promiscuous mode [ 756.505572][ T5814] veth1_vlan: left promiscuous mode [ 756.505640][ T5814] veth0_vlan: left promiscuous mode [ 756.759932][ T5814] team0 (unregistering): Port device 12žÿ removed [ 756.772201][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 757.064097][T13561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.066049][T13561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.090291][T13550] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.094062][T13550] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.094203][T13550] bridge_slave_0: entered allmulticast mode [ 757.095577][T13550] bridge_slave_0: entered promiscuous mode [ 757.187423][T13550] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.187503][T13550] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.187596][T13550] bridge_slave_1: entered allmulticast mode [ 757.188388][T13550] bridge_slave_1: entered promiscuous mode [ 757.189813][T13561] team0: Port device team_slave_0 added [ 757.191168][T13561] team0: Port device team_slave_1 added [ 757.248496][ T5886] usb 9-1: USB disconnect, device number 31 [ 757.312883][T13561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.312964][T13561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.315000][T13561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.316069][T13561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.316079][T13561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.316093][T13561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.327817][T13550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.334307][T13550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.354600][T13550] team0: Port device team_slave_0 added [ 757.364580][T13550] team0: Port device team_slave_1 added [ 757.413274][T13550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.413339][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.413411][T13550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.432510][T13561] hsr_slave_0: entered promiscuous mode [ 757.432984][T13561] hsr_slave_1: entered promiscuous mode [ 757.442263][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3 [ 757.442896][T13550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.442922][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.442979][T13550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.568991][T13550] hsr_slave_0: entered promiscuous mode [ 757.569530][T13550] hsr_slave_1: entered promiscuous mode [ 757.569856][T13550] debugfs: 'hsr0' already exists in 'hsr' [ 757.569868][T13550] Cannot create hsr debugfs directory [ 757.577689][ T5814] IPVS: stop unused estimator thread 0... [ 758.011580][ T5748] Bluetooth: hci3: command tx timeout [ 758.098040][T13565] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 758.164596][T13565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 758.231385][ T5748] Bluetooth: hci5: command tx timeout [ 758.322122][T13565] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 758.378020][T13565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 758.393476][T13565] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 758.443445][T13565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 758.721280][T13565] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 758.726042][T13565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 758.727121][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4 [ 758.835391][T13561] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 758.840064][T13561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 758.859245][T13561] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 758.866319][T13561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 758.883925][T13561] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 758.892022][T13561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 758.901990][T13561] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 759.140741][T13561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 759.176666][ T5446] 8021q: adding VLAN 0 to HW filter on device eth5 [ 759.361061][T13550] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 759.365604][T13550] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 759.366777][T13550] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 759.369791][T13550] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 759.381043][T13565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.383708][T13561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.385605][T13550] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 759.393368][T13550] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 759.393935][T13550] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 759.400602][T13550] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 759.457358][T13565] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.596580][ T5814] .` (unregistering): Released all slaves [ 759.602478][T13561] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.611838][T10625] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.611926][T10625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.612804][T10625] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.612848][T10625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.620603][T10625] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.620655][T10625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.629435][T10625] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.629536][T10625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.694558][ T5814] tipc: Disabling bearer [ 759.714791][ T5814] tipc: Left network mode [ 759.777781][T13550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.784367][ T5814] IPVS: stopping backup sync thread 9383 ... [ 759.827928][T13689] syz.4.1743: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset= [ 759.829380][T13550] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.832626][T13689] /,mems_allowed=0-1 [ 759.832660][T13689] CPU: 1 UID: 0 PID: 13689 Comm: syz.4.1743 Tainted: G L syzkaller #0 PREEMPT(full) [ 759.832679][T13689] Tainted: [L]=SOFTLOCKUP [ 759.832684][T13689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 759.832694][T13689] Call Trace: [ 759.832699][T13689] [ 759.832706][T13689] dump_stack_lvl+0x100/0x190 [ 759.832727][T13689] warn_alloc.cold+0x9e/0xb2 [ 759.832741][T13689] ? __pfx_warn_alloc+0x10/0x10 [ 759.832762][T13689] ? __kasan_kmalloc+0xaa/0xb0 [ 759.832777][T13689] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 759.832797][T13689] ? xskq_create+0x52/0x290 [ 759.832811][T13689] ? do_sock_setsockopt+0xf3/0x1d0 [ 759.832877][T13689] ? __do_fast_syscall_32+0x13a/0x8b0 [ 759.832896][T13689] ? do_fast_syscall_32+0x32/0x70 [ 759.832921][T13689] ? xsk_setsockopt+0x743/0xab0 [ 759.832935][T13689] __vmalloc_node_range_noprof+0x123b/0x1420 [ 759.832959][T13689] ? xsk_setsockopt+0x743/0xab0 [ 759.832976][T13689] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 759.832994][T13689] ? kasan_save_track+0x14/0x30 [ 759.833009][T13689] ? __kasan_kmalloc+0xaa/0xb0 [ 759.833023][T13689] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 759.833044][T13689] ? xskq_create+0x52/0x290 [ 759.833058][T13689] ? xsk_setsockopt+0x743/0xab0 [ 759.833070][T13689] xskq_create+0x18f/0x290 [ 759.833083][T13689] ? xsk_setsockopt+0x743/0xab0 [ 759.833111][T13689] xsk_setsockopt+0x743/0xab0 [ 759.833122][T13689] ? __pfx_aa_sk_perm+0x10/0x10 [ 759.833145][T13689] ? __pfx_xsk_setsockopt+0x10/0x10 [ 759.833158][T13689] ? find_held_lock+0x2b/0x80 [ 759.833173][T13689] ? aa_sock_opt_perm+0x114/0x1e0 [ 759.833186][T13689] ? __pfx_xsk_setsockopt+0x10/0x10 [ 759.833201][T13689] do_sock_setsockopt+0xf3/0x1d0 [ 759.833220][T13689] __sys_setsockopt+0x119/0x190 [ 759.833238][T13689] __ia32_sys_setsockopt+0xbc/0x160 [ 759.833253][T13689] ? __do_fast_syscall_32+0xb3/0x8b0 [ 759.833270][T13689] ? lockdep_hardirqs_on+0x7d/0x110 [ 759.833286][T13689] __do_fast_syscall_32+0x13a/0x8b0 [ 759.833306][T13689] do_fast_syscall_32+0x32/0x70 [ 759.833323][T13689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 759.833338][T13689] RIP: 0023:0xf7f97fec [ 759.833356][T13689] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 759.833361][T13689] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 759.833373][T13689] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 759.833380][T13689] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 759.833387][T13689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 759.833394][T13689] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 759.833401][T13689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 759.833415][T13689] [ 759.838573][T13689] Mem-Info: [ 759.838585][T13689] active_anon:550 inactive_anon:1472 isolated_anon:0 [ 759.838585][T13689] active_file:1253 inactive_file:12962 isolated_file:0 [ 759.838585][T13689] unevictable:3048 dirty:143 writeback:0 [ 759.838585][T13689] slab_reclaimable:6609 slab_unreclaimable:71851 [ 759.838585][T13689] mapped:27287 shmem:1008 pagetables:1695 [ 759.838585][T13689] sec_pagetables:372 bounce:0 [ 759.838585][T13689] kernel_misc_reclaimable:0 [ 759.838585][T13689] free:23113 free_pcp:3934 free_cma:0 [ 759.838617][T13689] Node 0 active_anon:0kB inactive_anon:24kB active_file:128kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8888kB pagetables:1124kB sec_pagetables:1220kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 759.838648][T13689] Node 1 active_anon:2200kB inactive_anon:5864kB active_file:4884kB inactive_file:51844kB unevictable:12192kB isolated(anon):0kB isolated(file):0kB mapped:109120kB dirty:572kB writeback:0kB shmem:4032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8504kB pagetables:5656kB sec_pagetables:268kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 759.838679][T13689] Node 0 DMA free:1872kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 759.838713][T13689] lowmem_reserve[]: 0 278 278 278 278 [ 759.838735][T13689] Node 0 DMA32 free:31496kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:2048kB free_highatomic:528kB active_anon:0kB inactive_anon:16kB active_file:128kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:2476kB present:1032196kB managed:284672kB mlocked:0kB bounce:0kB free_pcp:1676kB local_pcp:512kB free_cma:0kB [ 759.838769][T13689] lowmem_reserve[]: 0 0 0 0 0 [ 759.838788][T13689] Node 1 DMA32 free:59084kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2200kB inactive_anon:5864kB active_file:4884kB inactive_file:51844kB unevictable:12192kB writepending:572kB zspages:5180kB present:1048432kB managed:948208kB mlocked:8192kB bounce:0kB free_pcp:14060kB local_pcp:10392kB free_cma:0kB [ 759.838820][T13689] lowmem_reserve[]: 0 0 0 0 0 [ 759.838838][T13689] Node 0 DMA: 18*4kB (UM) 11*8kB (UM) 3*16kB (UM) 4*32kB (UM) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1872kB [ 759.838915][T13689] Node 0 DMA32: 1058*4kB (UMEH) 240*8kB (UMEH) 60*16kB (UMEH) 200*32kB (UMEH) 73*64kB (UME) 30*128kB (UMEH) 15*256kB (UM) 7*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 31496kB [ 759.839004][T13689] Node 1 DMA32: 449*4kB (UME) 1027*8kB (UME) 858*16kB (UME) 213*32kB (M) 49*64kB (ME) 19*128kB (ME) 1*256kB (U) 6*512kB (U) 1*1024kB (U) 1*2048kB (U) 4*4096kB (U) = 58908kB [ 759.839098][T13689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 759.839108][T13689] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 759.839118][T13689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 759.839127][T13689] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 759.839137][T13689] 9364 total pagecache pages [ 759.839142][T13689] 1388 pages in swap cache [ 759.839146][T13689] Free swap = 76396kB [ 759.839151][T13689] Total swap = 124996kB [ 759.839155][T13689] 524155 pages RAM [ 759.839160][T13689] 0 pages HighMem/MovableOnly [ 759.839164][T13689] 212095 pages reserved [ 759.839168][T13689] 0 pages cma reserved [ 759.854246][T10509] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.854326][T10509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.860781][T10509] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.860865][T10509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.197032][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 760.359233][T13713] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 760.474617][T13713] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 760.474697][T13713] overlayfs: failed to look up (tracing) for ino (-66) [ 760.732932][T13565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.795644][T13561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.059121][T13550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.298559][ T5814] hsr_slave_0: left promiscuous mode [ 761.301090][ T5814] hsr_slave_1: left promiscuous mode [ 761.583849][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 761.702775][T13561] veth0_vlan: entered promiscuous mode [ 761.718268][T13561] veth1_vlan: entered promiscuous mode [ 761.756970][T13565] veth0_vlan: entered promiscuous mode [ 761.785912][T13565] veth1_vlan: entered promiscuous mode [ 761.819961][T13561] veth0_macvtap: entered promiscuous mode [ 761.823538][T13561] veth1_macvtap: entered promiscuous mode [ 761.917120][T13565] veth0_macvtap: entered promiscuous mode [ 761.938321][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 761.958323][T13550] veth0_vlan: entered promiscuous mode [ 761.967462][T13561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.972208][T13565] veth1_macvtap: entered promiscuous mode [ 761.979652][T13561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.005849][T13550] veth1_vlan: entered promiscuous mode [ 762.225291][T13565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.291377][T12124] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.291444][T12124] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.291488][T12124] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.291527][T12124] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.294832][ T5814] IPVS: stop unused estimator thread 0... [ 762.390022][T13773] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 762.437716][T13773] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 762.438685][T13773] overlayfs: failed to look up (tracing) for ino (-66) [ 762.727812][T13565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.775261][T13550] veth0_macvtap: entered promiscuous mode [ 762.787485][T10625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.787612][T10625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.809267][T12125] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.809339][T12125] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.809405][T12125] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.809450][T12125] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.827597][T13550] veth1_macvtap: entered promiscuous mode [ 762.885146][ T110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.885186][ T110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.161315][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 763.176310][T13550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.185667][T13550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.225452][ T5814] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.225551][ T5814] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.225606][ T5814] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.225654][ T5814] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.435495][T10518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.435565][T10518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.515382][T10486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.515426][T10486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.548392][T10518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.548466][T10518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.575095][T10486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.575162][T10486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.289451][T13790] pim6reg: entered allmulticast mode [ 764.318404][T13789] pim6reg: left allmulticast mode [ 764.386292][T13789] 9pnet_virtio: no channels available for device syz [ 765.801615][T13814] netlink: 'syz.5.1750': attribute type 10 has an invalid length. [ 765.979714][T13814] team0 (unregistering): Port device team_slave_0 removed [ 766.028485][T13814] team0 (unregistering): Port device team_slave_1 removed [ 768.161725][ T9726] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 768.311319][ T9726] usb 12-1: Using ep0 maxpacket: 8 [ 768.311872][ T9726] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 768.312749][ T9726] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 768.312762][ T9726] usb 12-1: config 0 has no interface number 0 [ 768.312780][ T9726] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 768.312800][ T9726] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.313982][ T9726] usb 12-1: config 0 descriptor?? [ 768.327800][ T9726] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 769.276157][T13831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.276411][T13831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.305701][T13831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.311991][T13831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.419612][T13831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.419951][T13831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.540630][T13770] usb 12-1: USB disconnect, device number 2 [ 773.627325][T13885] NILFS (loop7): device size too small [ 777.033060][ T1300] block nbd0: Possible stuck request ffff888027175080: control (read@0,1024B). Runtime 240 seconds [ 777.033117][ T1300] block nbd0: Possible stuck request ffff888027175240: control (read@1024,1024B). Runtime 240 seconds [ 777.033163][ T1300] block nbd0: Possible stuck request ffff888027175400: control (read@2048,2048B). Runtime 240 seconds [ 777.885602][T13949] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1770'. [ 779.600786][T13988] pim6reg: entered allmulticast mode [ 780.975578][T13953] pim6reg: left allmulticast mode [ 781.069305][T13953] 9pnet_virtio: no channels available for device syz [ 782.943872][ T43] audit: type=1326 audit(1788399541.851:12008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.4.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 782.944060][ T43] audit: type=1326 audit(1788399541.851:12009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.4.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 782.946896][ T43] audit: type=1326 audit(1788399541.851:12010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.4.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 782.946960][ T43] audit: type=1326 audit(1788399541.851:12011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.4.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 782.948148][ T43] audit: type=1326 audit(1788399541.851:12012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.4.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 782.948466][ T43] audit: type=1326 audit(1788399541.851:12013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.4.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 782.950011][ T43] audit: type=1326 audit(1788399541.851:12014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.4.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 782.950620][ T43] audit: type=1326 audit(1788399541.851:12015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.4.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 782.950683][ T43] audit: type=1326 audit(1788399541.851:12016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.4.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 782.950720][ T43] audit: type=1326 audit(1788399541.851:12017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.4.1775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97fec code=0x7ffc0000 [ 783.088524][T14012] nbd1: detected capacity change from 0 to 63 [ 783.171468][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 783.174865][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 783.178142][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf30d instead [ 783.182091][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xffe9 instead [ 783.186624][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 783.190874][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 783.194827][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 783.199240][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 783.209485][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 783.213340][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 783.216683][T14013] jffs2: Further such events for this erase block will not be printed [ 783.220256][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 783.224599][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 783.228755][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf30d instead [ 783.237887][T14012] Console: switching [ 783.242837][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xffe9 instead [ 783.242893][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 783.242918][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 783.242942][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 783.242971][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 783.243006][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 783.243046][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 783.243070][T14013] jffs2: Further such events for this erase block will not be printed [ 783.243273][T14012] to colour dummy device 80x25 [ 783.243407][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 783.243482][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 783.243507][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf30d instead [ 783.243533][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xffe9 instead [ 783.243578][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 783.243602][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 783.243629][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf30d instead [ 783.243654][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xffe9 instead [ 783.243694][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 783.243718][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 783.243743][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf30d instead [ 783.243806][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xffe9 instead [ 783.243847][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 783.243871][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 783.243895][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf30d instead [ 783.243920][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xffe9 instead [ 783.243995][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 783.244021][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 783.244045][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf30d instead [ 783.244071][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xffe9 instead [ 783.244132][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 783.244156][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 783.244180][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf30d instead [ 783.244204][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xffe9 instead [ 783.244278][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 783.244302][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 783.244326][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf30d instead [ 783.244352][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xffe9 instead [ 783.244395][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 783.352519][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 783.352574][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf30d instead [ 783.352614][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xffe9 instead [ 783.353567][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 783.353627][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 783.353797][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf30d instead [ 783.353928][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xffe9 instead [ 783.354093][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 783.354221][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 783.354280][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf30d instead [ 783.354387][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xffe9 instead [ 783.354716][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 783.354768][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 783.354781][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf30d instead [ 783.354912][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xffe9 instead [ 783.355305][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 783.355435][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 783.355633][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf30d instead [ 783.355688][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xffe9 instead [ 783.355928][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 783.355982][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 783.382208][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf30d instead [ 783.382273][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xffe9 instead [ 783.382760][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 783.382861][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 783.382959][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf30d instead [ 783.383417][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xffe9 instead [ 783.386203][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 783.386368][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 783.386467][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf30d instead [ 783.386630][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xffe9 instead [ 783.386988][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 783.387086][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 783.387185][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf30d instead [ 783.387284][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xffe9 instead [ 783.387484][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 783.388455][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 783.388468][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf30d instead [ 783.388521][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xffe9 instead [ 783.389089][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 783.392724][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 783.392782][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf30d instead [ 783.393932][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xffe9 instead [ 783.399736][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 783.399902][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 783.400030][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf30d instead [ 783.400101][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xffe9 instead [ 783.400460][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 783.400554][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 783.400652][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf30d instead [ 783.400722][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xffe9 instead [ 783.400887][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 783.400980][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 783.401050][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf30d instead [ 783.427001][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xffe9 instead [ 783.427261][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 783.437355][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 783.437414][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf30d instead [ 783.437456][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xffe9 instead [ 783.437717][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 783.437880][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 783.437977][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf30d instead [ 783.438078][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xffe9 instead [ 783.438373][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 783.438470][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 783.438569][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf30d instead [ 783.438763][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xffe9 instead [ 783.438959][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 783.439029][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 783.439124][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf30d instead [ 783.439224][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xffe9 instead [ 783.439391][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 783.439485][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 783.439582][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf30d instead [ 783.439685][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xffe9 instead [ 783.439910][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 783.439980][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 783.440142][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf30d instead [ 783.440267][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xffe9 instead [ 783.440536][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 783.440633][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 783.440764][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf30d instead [ 783.440861][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xffe9 instead [ 783.456265][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 783.456324][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 783.456460][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf30d instead [ 783.456559][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xffe9 instead [ 783.466163][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 783.466215][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 783.466228][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf30d instead [ 783.466323][T14013] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xffe9 instead [ 783.466469][T14013] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 783.466523][T14013] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 784.193688][T14014] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 784.339642][T14014] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 784.339868][T14014] pci 0000:00:01.0: BAR 2 [mem 0x80201000-0x80201fff] [ 784.340302][T14014] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 784.998101][T14014] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 785.000287][T14014] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 643979 usecs [ 786.073995][T14014] pci 0000:00:01.0: Adding to iommu group 1 [ 786.085623][T14014] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 786.085671][T14014] pci 0000:00:01.0: vgaarb: bridge control possible [ 786.085688][T14014] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 786.215968][T14014] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 786.216659][T14014] pci 0000:00:01.0: BAR 2 [mem 0x80201000-0x80201fff]: assigned [ 786.239202][T14014] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 786.729028][T14014] [drm] Found bochs VGA, ID 0xb0c5. [ 786.729134][T14014] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80201000. [ 786.736916][T14014] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 786.775201][T14040] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 786.856016][ T67] block nbd1: Receive control failed (result -104) [ 786.863855][T14040] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x59 (-16) [ 787.211722][T14047] nfs4: Unknown parameter '*Ów ÑQytlh‰ÞÔnr_blocks 32 [ 797.066427][ T5886] usb 11-1: USB disconnect, device number 2 [ 797.329435][T14119] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1800'. [ 797.925321][ T5885] usb 10-1: USB disconnect, device number 2 [ 800.892294][T14143] pim6reg: entered allmulticast mode [ 801.209565][T14143] pim6reg: left allmulticast mode [ 803.060407][T14142] 9pnet_virtio: no channels available for device syz [ 804.501311][ T5829] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 804.662166][ T5829] usb 12-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 804.667211][ T5829] usb 12-1: config 0 has no interfaces? [ 804.672274][ T5829] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.675647][ T5829] usb 12-1: Product: syz [ 804.677492][ T5829] usb 12-1: Manufacturer: syz [ 804.679593][ T5829] usb 12-1: SerialNumber: syz [ 804.687946][ T5829] usb 12-1: config 0 descriptor?? [ 804.732306][T14154] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 805.117190][T14154] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x59 (-16) [ 805.341421][ T5885] usb 12-1: USB disconnect, device number 3 [ 805.344379][T14162] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 805.661819][T14162] md: could not open device unknown-block(1,0). [ 805.715542][T14166] md: could not open device unknown-block(1,1). [ 805.751479][T14164] md: could not open device unknown-block(1,3). [ 806.623409][T14162] md/raid:md0: not clean -- starting background reconstruction [ 806.679780][T14170] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1812'. [ 806.751051][T14162] md/raid:md0: device ram0 operational as raid disk 0 [ 806.769465][T14162] md/raid:md0: device ram1 operational as raid disk 1 [ 806.769844][T14162] __kmem_cache_create_args(raid5-md0) failed with error -12 [ 806.769888][T14162] CPU: 0 UID: 0 PID: 14162 Comm: syz.6.1811 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.769932][T14162] Tainted: [L]=SOFTLOCKUP [ 806.769942][T14162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 806.769954][T14162] Call Trace: [ 806.769962][T14162] [ 806.769971][T14162] dump_stack_lvl+0x100/0x190 [ 806.770007][T14162] __kmem_cache_create_args.cold+0x4c/0x6f [ 806.770035][T14162] setup_conf+0x1e00/0x2a20 [ 806.770120][T14162] ? __pfx_setup_conf+0x10/0x10 [ 806.770146][T14162] ? _printk+0xcf/0x110 [ 806.770170][T14162] ? get_pers+0x222/0x2e0 [ 806.770189][T14162] ? get_pers+0x222/0x2e0 [ 806.770212][T14162] raid5_run+0x1260/0x1670 [ 806.770251][T14162] ? __pfx_get_pers+0x10/0x10 [ 806.770277][T14162] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 806.770303][T14162] md_run+0xc2f/0x2510 [ 806.770339][T14162] ? __pfx_md_run+0x10/0x10 [ 806.770366][T14162] ? set_disk_ro+0x1b7/0x210 [ 806.770425][T14162] ? __pfx_set_disk_ro+0x10/0x10 [ 806.770460][T14162] do_md_run+0x36/0x660 [ 806.770495][T14162] array_state_store+0x9c5/0xcf0 [ 806.770522][T14162] md_attr_store+0x1c5/0x330 [ 806.770550][T14162] ? __pfx_md_attr_store+0x10/0x10 [ 806.770577][T14162] sysfs_kf_write+0xf2/0x150 [ 806.770601][T14162] kernfs_fop_write_iter+0x3e0/0x5f0 [ 806.770629][T14162] ? __pfx_sysfs_kf_write+0x10/0x10 [ 806.770652][T14162] vfs_write+0x6af/0x1050 [ 806.770683][T14162] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 806.770717][T14162] ? __pfx_vfs_write+0x10/0x10 [ 806.770734][T14162] ? find_held_lock+0x2b/0x80 [ 806.770778][T14162] ksys_write+0x12a/0x250 [ 806.770802][T14162] ? __pfx_ksys_write+0x10/0x10 [ 806.770830][T14162] __do_fast_syscall_32+0x13a/0x8b0 [ 806.770865][T14162] do_fast_syscall_32+0x32/0x70 [ 806.770895][T14162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.770924][T14162] RIP: 0023:0xf708efec [ 806.770950][T14162] Code: Unable to access opcode bytes at 0xf708efc2. [ 806.770959][T14162] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 806.770981][T14162] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800007c0 [ 806.770996][T14162] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 806.771011][T14162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 806.771024][T14162] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 806.771037][T14162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 806.771068][T14162] [ 806.771098][T14162] md/raid:md0: couldn't allocate 4318kB for buffers [ 806.894429][T14162] md: pers->run() failed ... [ 807.111549][ T5912] block nbd0: Possible stuck request ffff888027175080: control (read@0,1024B). Runtime 270 seconds [ 807.111597][ T5912] block nbd0: Possible stuck request ffff888027175240: control (read@1024,1024B). Runtime 270 seconds [ 807.111636][ T5912] block nbd0: Possible stuck request ffff888027175400: control (read@2048,2048B). Runtime 270 seconds [ 807.116836][T14175] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 807.324538][T14175] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 807.325070][T14175] overlayfs: failed to look up (tracing) for ino (-66) [ 807.795879][T14163] kAFS: unable to lookup cell '/,c¾ûL' [ 808.393642][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.396033][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.343566][ T5748] Bluetooth: hci5: link tx timeout [ 809.350508][ T5748] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 810.235446][ T6298] libceph: connect (1)[c::]:6789 error -101 [ 810.236467][ T6298] libceph: mon0 (1)[c::]:6789 connect error [ 810.238004][ T6298] libceph: connect (1)[c::]:6789 error -101 [ 810.238565][ T6298] libceph: mon0 (1)[c::]:6789 connect error [ 810.239148][T14186] ceph: No mds server is up or the cluster is laggy [ 811.442531][ T5748] Bluetooth: hci5: command 0x0406 tx timeout [ 811.572002][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 812.021553][T14200] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 812.425513][ T25] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 812.733013][T14202] ================================================================== [ 812.733046][T14202] BUG: KASAN: stack-out-of-bounds in unwind_next_frame+0xb87/0x2090 [ 812.733063][T14202] Read of size 2 at addr ffffc900032bf6c0 by task iou-wrk-14196/14202 [ 812.733073][T14202] [ 812.733081][T14202] CPU: 0 UID: 0 PID: 14202 Comm: iou-wrk-14196 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.733097][T14202] Tainted: [L]=SOFTLOCKUP [ 812.733102][T14202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 812.733110][T14202] Call Trace: [ 812.733114][T14202] [ 812.733119][T14202] dump_stack_lvl+0x100/0x190 [ 812.733135][T14202] print_report+0x13d/0x4b0 [ 812.733152][T14202] ? _raw_spin_lock_irqsave+0x52/0x60 [ 812.733165][T14202] ? unwind_next_frame+0xb87/0x2090 [ 812.733178][T14202] kasan_report+0xdf/0x1c0 [ 812.733193][T14202] ? unwind_next_frame+0xb87/0x2090 [ 812.733208][T14202] unwind_next_frame+0xb87/0x2090 [ 812.733236][T14202] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 812.733253][T14202] ? __pfx_stack_trace_consume_entry_nosched+0x10/0x10 [ 812.733269][T14202] arch_stack_walk+0x94/0xf0 [ 812.733286][T14202] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 812.733303][T14202] stack_trace_save_tsk+0x16d/0x210 [ 812.733317][T14202] ? __pfx_stack_trace_save_tsk+0x10/0x10 [ 812.733332][T14202] ? find_held_lock+0x2b/0x80 [ 812.733345][T14202] ? do_raw_spin_unlock+0x145/0x1e0 [ 812.733363][T14202] proc_pid_stack+0x16e/0x2b0 [ 812.733381][T14202] proc_single_show+0x124/0x1f0 [ 812.733398][T14202] seq_read_iter+0x32f/0x1270 [ 812.733413][T14202] seq_read+0x344/0x4d0 [ 812.733423][T14202] ? __pfx_seq_read+0x10/0x10 [ 812.733434][T14202] ? rcu_is_watching+0x13/0xc0 [ 812.733447][T14202] ? iov_iter_advance+0xac/0x6d0 [ 812.733459][T14202] ? common_file_perm+0x266/0x500 [ 812.733475][T14202] loop_rw_iter+0x305/0x6a0 [ 812.733487][T14202] __io_read+0x1084/0x1470 [ 812.733498][T14202] ? lockdep_hardirqs_on+0x7d/0x110 [ 812.733514][T14202] io_read+0x8d/0x230 [ 812.733525][T14202] ? __pfx_io_read+0x10/0x10 [ 812.733538][T14202] ? __lock_acquire+0x4c5/0x1ec0 [ 812.733553][T14202] __io_issue_sqe+0xe8/0x7a0 [ 812.733572][T14202] io_issue_sqe+0x88/0x1540 [ 812.733584][T14202] ? find_held_lock+0x2b/0x80 [ 812.733595][T14202] ? kcov_remote_start+0x2e6/0x6d0 [ 812.733611][T14202] io_wq_submit_work+0x3b6/0xf70 [ 812.733627][T14202] io_worker_handle_work+0x60a/0x15e0 [ 812.733645][T14202] io_wq_worker+0x33e/0xe60 [ 812.733659][T14202] ? __pfx_io_wq_worker+0x10/0x10 [ 812.733672][T14202] ? lock_acquire+0x1d1/0x380 [ 812.733690][T14202] ? do_raw_spin_lock+0x128/0x260 [ 812.733708][T14202] ? find_held_lock+0x2b/0x80 [ 812.733719][T14202] ? ret_from_fork+0x79/0xd60 [ 812.733737][T14202] ? rcu_is_watching+0x13/0xc0 [ 812.733748][T14202] ? __pfx_io_wq_worker+0x10/0x10 [ 812.733761][T14202] ret_from_fork+0x730/0xd60 [ 812.733785][T14202] ? __pfx_ret_from_fork+0x10/0x10 [ 812.733803][T14202] ? native_load_gs_index+0x1e/0xc0 [ 812.733817][T14202] ? __switch_to+0x800/0x10f0 [ 812.733833][T14202] ? __pfx_io_wq_worker+0x10/0x10 [ 812.733847][T14202] ret_from_fork_asm+0x1a/0x30 [ 812.733863][T14202] [ 812.733868][T14202] [ 812.733871][T14202] The buggy address belongs to a vmalloc virtual mapping [ 812.733882][T14202] The buggy address belongs to the physical page: [ 812.733887][T14202] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x51ddf [ 812.733898][T14202] memcg:ffff88806c1fb402 [ 812.733903][T14202] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 812.733918][T14202] raw: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 812.733930][T14202] raw: ffffffffffffffff 0000000000000000 00000001ffffffff ffff88806c1fb402 [ 812.733936][T14202] page dumped because: kasan: bad access detected [ 812.733942][T14202] page_owner tracks the page as allocated [ 812.733947][T14202] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 7051, tgid 7051 (syz-executor), ts 810378653525 [ 812.733966][T14202] post_alloc_hook+0xfd/0x120 [ 812.733982][T14202] get_page_from_freelist+0x110d/0x35d0 [ 812.733999][T14202] __alloc_frozen_pages_noprof+0x936/0x3300 [ 812.734016][T14202] alloc_pages_mpol+0x201/0x550 [ 812.734030][T14202] alloc_pages_noprof+0x1a/0x160 [ 812.734045][T14202] __vmalloc_node_range_noprof+0x833/0x1420 [ 812.734060][T14202] __vmalloc_node_noprof+0xad/0xf0 [ 812.734074][T14202] copy_process+0x803/0x8370 [ 812.734090][T14202] kernel_clone+0x176/0x9d0 [ 812.734106][T14202] __do_compat_sys_ia32_clone+0xd4/0x120 [ 812.734122][T14202] __do_fast_syscall_32+0x13a/0x8b0 [ 812.734138][T14202] do_fast_syscall_32+0x32/0x70 [ 812.734153][T14202] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 812.734167][T14202] page last free pid 5824 tgid 5824 ts 810141815741 stack trace: [ 812.734175][T14202] free_pages_prepare+0x586/0xe00 [ 812.734190][T14202] __free_contig_range_common+0x14f/0x250 [ 812.734206][T14202] free_pages_bulk+0x12a/0x200 [ 812.734215][T14202] vm_area_free_pages+0xb2/0x2a0 [ 812.734225][T14202] vfree+0xf7/0x6d0 [ 812.734237][T14202] delayed_vfree_work+0x56/0x80 [ 812.734251][T14202] process_one_work+0xac7/0x1b10 [ 812.734264][T14202] worker_thread+0x5ef/0xe50 [ 812.734276][T14202] kthread+0x373/0x450 [ 812.734289][T14202] ret_from_fork+0x730/0xd60 [ 812.734306][T14202] ret_from_fork_asm+0x1a/0x30 [ 812.734315][T14202] [ 812.734318][T14202] Memory state around the buggy address: [ 812.734324][T14202] ffffc900032bf580: f2 f2 f2 00 f2 f2 f2 00 f2 f2 f2 00 00 00 f2 f2 [ 812.734332][T14202] ffffc900032bf600: f2 f2 f2 00 00 00 00 00 f2 f2 f2 f2 f2 00 00 00 [ 812.734340][T14202] >ffffc900032bf680: 00 00 00 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 [ 812.734346][T14202] ^ [ 812.734353][T14202] ffffc900032bf700: 00 00 00 00 00 00 00 f1 f1 f1 f1 04 f3 f3 f3 00 [ 812.734361][T14202] ffffc900032bf780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.734367][T14202] ================================================================== [ 812.736148][T14202] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 812.948926][T14202] CPU: 0 UID: 0 PID: 14202 Comm: iou-wrk-14196 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.953602][T14202] Tainted: [L]=SOFTLOCKUP [ 812.955396][T14202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 812.959580][T14202] Call Trace: [ 812.960938][T14202] [ 812.962171][T14202] dump_stack_lvl+0x100/0x190 [ 812.964193][T14202] vpanic+0x553/0x970 [ 812.965892][T14202] ? __pfx_vpanic+0x10/0x10 [ 812.967833][T14202] ? unwind_next_frame+0xb87/0x2090 [ 812.970013][T14202] panic+0xd1/0xe0 [ 812.971574][T14202] ? __pfx_panic+0x10/0x10 [ 812.973445][T14202] ? unwind_next_frame+0xb87/0x2090 [ 812.975593][T14202] ? preempt_schedule_common+0x3c/0xb0 [ 812.977959][T14202] check_panic_on_warn.cold+0x19/0x34 [ 812.980263][T14202] end_report.part.0+0x3a/0x90 [ 812.982291][T14202] kasan_report.cold+0xe/0x18 [ 812.984289][T14202] ? unwind_next_frame+0xb87/0x2090 [ 812.986474][T14202] unwind_next_frame+0xb87/0x2090 [ 812.988636][T14202] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 812.991012][T14202] ? __pfx_stack_trace_consume_entry_nosched+0x10/0x10 [ 812.994102][T14202] arch_stack_walk+0x94/0xf0 [ 812.996065][T14202] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 812.998286][T14202] stack_trace_save_tsk+0x16d/0x210 [ 813.000332][T14202] ? __pfx_stack_trace_save_tsk+0x10/0x10 [ 813.002595][T14202] ? find_held_lock+0x2b/0x80 [ 813.004420][T14202] ? do_raw_spin_unlock+0x145/0x1e0 [ 813.006471][T14202] proc_pid_stack+0x16e/0x2b0 [ 813.008372][T14202] proc_single_show+0x124/0x1f0 [ 813.010323][T14202] seq_read_iter+0x32f/0x1270 [ 813.012200][T14202] seq_read+0x344/0x4d0 [ 813.013899][T14202] ? __pfx_seq_read+0x10/0x10 [ 813.015945][T14202] ? rcu_is_watching+0x13/0xc0 [ 813.018038][T14202] ? iov_iter_advance+0xac/0x6d0 [ 813.020183][T14202] ? common_file_perm+0x266/0x500 [ 813.022151][T14202] loop_rw_iter+0x305/0x6a0 [ 813.024046][T14202] __io_read+0x1084/0x1470 [ 813.025914][T14202] ? lockdep_hardirqs_on+0x7d/0x110 [ 813.028101][T14202] io_read+0x8d/0x230 [ 813.029789][T14202] ? __pfx_io_read+0x10/0x10 [ 813.031776][T14202] ? __lock_acquire+0x4c5/0x1ec0 [ 813.033856][T14202] __io_issue_sqe+0xe8/0x7a0 [ 813.035927][T14202] io_issue_sqe+0x88/0x1540 [ 813.037972][T14202] ? find_held_lock+0x2b/0x80 [ 813.039986][T14202] ? kcov_remote_start+0x2e6/0x6d0 [ 813.042246][T14202] io_wq_submit_work+0x3b6/0xf70 [ 813.044521][T14202] io_worker_handle_work+0x60a/0x15e0 [ 813.046938][T14202] io_wq_worker+0x33e/0xe60 [ 813.048854][T14202] ? __pfx_io_wq_worker+0x10/0x10 [ 813.050961][T14202] ? lock_acquire+0x1d1/0x380 [ 813.052963][T14202] ? do_raw_spin_lock+0x128/0x260 [ 813.055100][T14202] ? find_held_lock+0x2b/0x80 [ 813.057135][T14202] ? ret_from_fork+0x79/0xd60 [ 813.059120][T14202] ? rcu_is_watching+0x13/0xc0 [ 813.061232][T14202] ? __pfx_io_wq_worker+0x10/0x10 [ 813.063507][T14202] ret_from_fork+0x730/0xd60 [ 813.065472][T14202] ? __pfx_ret_from_fork+0x10/0x10 [ 813.067640][T14202] ? native_load_gs_index+0x1e/0xc0 [ 813.069831][T14202] ? __switch_to+0x800/0x10f0 [ 813.071812][T14202] ? __pfx_io_wq_worker+0x10/0x10 [ 813.073852][T14202] ret_from_fork_asm+0x1a/0x30 [ 813.075843][T14202] [ 813.077856][T14202] Kernel Offset: disabled [ 813.079723][T14202] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:39:31 Registers: info registers vcpu 0 CPU#0 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae24d5 RDI=ffffffff9bc501e0 RBP=ffffffff9bc501a0 RSP=ffffc9000334ed08 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6232333030306552 R12=0000000000000000 R13=000000000000000a R14=000000000000000b R15=ffffc9000334f020 RIP=ffffffff85ae24ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096967000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000020 CR3=000000004b4f4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802b23c0a0 RCX=0000000000000001 RDX=0000000000000002 RSI=ffffffff8e4e6989 RDI=ffffffff8c622380 RBP=ffff888055b58000 RSP=ffffc900032cf7f0 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000046 R14=ffff88802b33c040 R15=0000000000000001 RIP=ffffffff8bcd58b2 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a67000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080008000 CR3=000000004b4f4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000003 RBX=ffff88801cf58c00 RCX=0000000000000100 RDX=bc101d9a73125dae RSI=0000000010f50544 RDI=000000009dc59b3c RBP=0000000000000071 RSP=ffffc900005480d0 R8 =000000000001dd63 R9 =0000000000000071 R10=0000000000000002 R11=0000000000000001 R12=ffff88801cf58000 R13=ffffffff97dcc978 R14=000000000001dd63 R15=bc101d9a73125dae RIP=ffffffff81e67328 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73f6288 CR3=000000004dcaf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000023000000000 0000000700000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=ffff888040f10c28 RCX=0000000000000078 RDX=0000000000000000 RSI=ffff888040f10c00 RDI=ffffffff8edebe60 RBP=0000000000000007 RSP=ffffc90002106ff8 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000003 R11=0000000000000001 R12=ffff888040f10000 R13=0000000000000002 R14=0000000000000000 R15=ffffffff8edebe60 RIP=ffffffff81e66ded RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff64a43fa8 CR3=0000000056301000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005619be188c50 00005619be188c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa6cf2eb0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020303030303030 3030303030303030 3030203030303030 3030303030306666 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20296c6c75662854 504d454552502030 232072656c6c616b 7a79732020202020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 204c202020202020 2020202020202047 203a6465746e6961 542036393134312d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b72772d756f6920 3a6d6d6f43203230 323431203a444950 2030203a44495520 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30203a555043205d 3230323431545b5d 3138303333372e32 313820205b203a6c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000