last executing test programs: 8m8.690730552s ago: executing program 3 (id=1701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="34000000140001060400", @ANYRES32=r3, @ANYBLOB="14000200200100000000000000000000000000010800080020000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r2, @ANYBLOB="1400020020010000000000000000"], 0x34}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9e}}], &(0x7f0000000340)='GPL\x00', 0x57b, 0x0, 0x0, 0x41100, 0x50, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x1], &(0x7f0000000440)=[{0x2, 0x5, 0xc, 0x8}, {0x5, 0x5, 0x9, 0xc}, {0x3, 0x4, 0x9, 0x9}, {0x0, 0x3, 0x7, 0x4}, {0x5, 0x5, 0xb, 0xa}, {0x3, 0x5, 0x9, 0x2}, {0x4, 0x2, 0xc, 0xc}, {0x2, 0x5, 0x5, 0x5}, {0x2, 0x1, 0x9, 0x9}], 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, r2, 0x25, 0x3, @void}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x10000000]}}) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x4001, 0x0, 0x0) 8m7.315256432s ago: executing program 3 (id=1704): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x480c4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(r2, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000fedb03000000000000000300", @ANYRES32=r4, @ANYBLOB="0c00308005000200ff000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8m2.657952146s ago: executing program 3 (id=1708): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000007000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) gettid() timer_create(0x1, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)={0x2}, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYBLOB="5f6c35d33c0aabd098cda36d0962eb127be16fb9e11f1b7fe6e815fd92eb25eeb183922da12597c291c122a443e9d5c0fc49369df2e555703f39", @ANYBLOB="0000000000000000000000000000000000030000", @ANYRES32=0x0, @ANYRES32], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 7m56.058591817s ago: executing program 3 (id=1723): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat$nci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mq_open(0x0, 0xc0, 0x11b, 0x0) r1 = open(0x0, 0x109240, 0x145) creat(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=r4, 0x1e, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000053d2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 7m53.632318129s ago: executing program 3 (id=1726): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) mkdir(&(0x7f0000000140)='./file0\x00', 0x63) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000009000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6(0xa, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x200, 0xfffffffe, 0x5b, 0x0, 0x0, 0x0, 0x3}}, 0x50) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000838ed1b905f2821733148934c0dbe9aaa53feb880260fd85c29271ff20b5"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000084) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) 7m52.618263339s ago: executing program 3 (id=1728): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB], 0xd4}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x6a040000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r0, 0xbbc5e000) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r2, 0x0, 0x0, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$binfmt_format(r3, &(0x7f0000000040)='1\x00', 0x2) ioctl$BLKRRPART(r2, 0x125f, 0x1f) 7m37.097728432s ago: executing program 32 (id=1728): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB], 0xd4}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x6a040000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r0, 0xbbc5e000) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r2, 0x0, 0x0, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$binfmt_format(r3, &(0x7f0000000040)='1\x00', 0x2) ioctl$BLKRRPART(r2, 0x125f, 0x1f) 16.731295772s ago: executing program 2 (id=2384): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000340), 0x1000) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) close(0x3) 15.779152211s ago: executing program 0 (id=2387): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(0x0, 0x84880) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x26}, 0x28) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000040000000001000000080001000000000004000480080002000100000024000880140007800800050000000c000580"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) r8 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000140)={'some'}, 0x2f) sendmsg$kcm(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) 14.497144003s ago: executing program 2 (id=2389): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r3, @ANYBLOB="14000200200100000000000000000000000000010800080020000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="34000000140001060500", @ANYRES32=r2, @ANYBLOB="1400020020010000000000000000"], 0x34}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9e}}], &(0x7f0000000340)='GPL\x00', 0x57b, 0x0, 0x0, 0x41100, 0x50, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x1], &(0x7f0000000440)=[{0x2, 0x5, 0xc, 0x8}, {0x5, 0x5, 0x9, 0xc}, {0x3, 0x4, 0x9, 0x9}, {0x0, 0x3, 0x7, 0x4}, {0x5, 0x5, 0xb, 0xa}, {0x3, 0x5, 0x9, 0x2}, {0x4, 0x2, 0xc, 0xc}, {0x2, 0x5, 0x5, 0x5}, {0x2, 0x1, 0x9, 0x9}], 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, r2, 0x25, 0x3, @void}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x10000000]}}) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x4001, 0x0, 0x0) 13.504803798s ago: executing program 2 (id=2390): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000340), 0x1000) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) write(r3, &(0x7f0000000400)='40', 0x2) write(r4, &(0x7f0000000440)='4\x00', 0x2) read(0xffffffffffffffff, &(0x7f00000004c0), 0x1000) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) r5 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) close(0x3) 9.876036721s ago: executing program 2 (id=2393): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = gettid() prlimit64(r2, 0x6, 0x0, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x40) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, &(0x7f0000000140)) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.84840207s ago: executing program 1 (id=2401): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000340), 0x1000) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) write(r3, &(0x7f0000000400)='40', 0x2) read(0xffffffffffffffff, &(0x7f00000004c0), 0x1000) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) 9.188021308s ago: executing program 4 (id=2394): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001400)={'multiq3\x00', [0x100, 0xf, 0x2, 0x2, 0x1, 0xff, 0xe, 0x20000000, 0x6, 0xfffffffb, 0x0, 0x10000007, 0x5, 0x0, 0x10001, 0x7, 0x0, 0x8, 0xf, 0x401, 0x7, 0x4, 0x8000, 0x9, 0x3, 0x3, 0x3, 0x0, 0x7, 0x7, 0x8]}) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x310}], 0x1, 0x6) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) 7.234795219s ago: executing program 0 (id=2395): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469f"], &(0x7f0000000100)='GPL\x00'}, 0x94) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 7.120746891s ago: executing program 1 (id=2396): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469f"], &(0x7f0000000100)='GPL\x00'}, 0x94) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 6.943567742s ago: executing program 0 (id=2397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7) read(r1, &(0x7f0000001140)=""/4096, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000009200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r6, &(0x7f00000009c0)='1', 0x1, 0xf, 0x0, 0x0, r6}]) write$FUSE_DIRENT(r6, 0x0, 0x10) 6.94159982s ago: executing program 4 (id=2398): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r3, @ANYBLOB="14000200200100000000000000000000000000010800080020000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="34000000140001060500", @ANYRES32=r2, @ANYBLOB="1400020020010000000000000000"], 0x34}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9e}}], &(0x7f0000000340)='GPL\x00', 0x57b, 0x0, 0x0, 0x41100, 0x50, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x1], &(0x7f0000000440)=[{0x2, 0x5, 0xc, 0x8}, {0x5, 0x5, 0x9, 0xc}, {0x3, 0x4, 0x9, 0x9}, {0x0, 0x3, 0x7, 0x4}, {0x5, 0x5, 0xb, 0xa}, {0x3, 0x5, 0x9, 0x2}, {0x4, 0x2, 0xc, 0xc}, {0x2, 0x5, 0x5, 0x5}, {0x2, 0x1, 0x9, 0x9}], 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, r2, 0x25, 0x3, @void}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x10000000]}}) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x4001, 0x0, 0x0) 6.250171823s ago: executing program 1 (id=2399): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.151379061s ago: executing program 4 (id=2400): ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.644031274s ago: executing program 2 (id=2402): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000340), 0x1000) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) write(r3, &(0x7f0000000400)='40', 0x2) write(r4, &(0x7f0000000440)='4\x00', 0x2) read(0xffffffffffffffff, &(0x7f00000004c0), 0x1000) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) r6 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) close(0x3) 3.589758624s ago: executing program 4 (id=2403): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469f"], &(0x7f0000000100)='GPL\x00'}, 0x94) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 2.874049767s ago: executing program 0 (id=2404): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469f"], &(0x7f0000000100)='GPL\x00'}, 0x94) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 2.688865181s ago: executing program 1 (id=2405): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000340), 0x1000) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) write(r3, &(0x7f0000000400)='40', 0x2) read(0xffffffffffffffff, &(0x7f00000004c0), 0x1000) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) 2.368991457s ago: executing program 0 (id=2406): open(0x0, 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x35f881, 0x1) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c00000000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e76", 0x20) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0x1a, 0x0, 0x1, 0x95, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 1.924202976s ago: executing program 4 (id=2407): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469f"], &(0x7f0000000100)='GPL\x00'}, 0x94) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 994.207569ms ago: executing program 1 (id=2408): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469f"], &(0x7f0000000100)='GPL\x00'}, 0x94) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 993.21891ms ago: executing program 0 (id=2409): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r3, @ANYBLOB="14000200200100000000000000000000000000010800080020000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000", @ANYRES32=r2, @ANYBLOB="1400020020010000000000000000"], 0x34}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9e}}], &(0x7f0000000340)='GPL\x00', 0x57b, 0x0, 0x0, 0x41100, 0x50, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x1], &(0x7f0000000440)=[{0x2, 0x5, 0xc, 0x8}, {0x5, 0x5, 0x9, 0xc}, {0x3, 0x4, 0x9, 0x9}, {0x0, 0x3, 0x7, 0x4}, {0x5, 0x5, 0xb, 0xa}, {0x3, 0x5, 0x9, 0x2}, {0x4, 0x2, 0xc, 0xc}, {0x2, 0x5, 0x5, 0x5}, {0x2, 0x1, 0x9, 0x9}], 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, r2, 0x25, 0x3, @void}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x10000000]}}) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x4001, 0x0, 0x0) 887.394678ms ago: executing program 2 (id=2410): r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000100)) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}}]}}, 0xf) r5 = socket$inet6_udp(0xa, 0x2, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x0, 0x0, 0xe, 0x2, 0x5}, 0x20) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) write$uinput_user_dev(r6, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) write$6lowpan_control(r3, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) setuid(0xee01) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 431.609452ms ago: executing program 4 (id=2411): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './my_configfs/usb_gadget/g1/functions/uvc.usb0\x00'}) ioctl$VIDIOC_S_EDID(r1, 0xc0245629, &(0x7f0000000240)={0x0, 0x6, 0xc93, '\x00', &(0x7f00000001c0)=0xe}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000080000000102020000000000", @ANYRES32, @ANYBLOB="0000007ced0628db0000000000000000000000a9c23f880000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x50) writev(0xffffffffffffffff, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') close(r2) 0s ago: executing program 1 (id=2412): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r3, @ANYBLOB="14000200200100000000000000000000000000010800080020000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r2, @ANYBLOB="1400020020010000000000000000"], 0x34}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9e}}], &(0x7f0000000340)='GPL\x00', 0x57b, 0x0, 0x0, 0x41100, 0x50, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x1], &(0x7f0000000440)=[{0x2, 0x5, 0xc, 0x8}, {0x5, 0x5, 0x9, 0xc}, {0x3, 0x4, 0x9, 0x9}, {0x0, 0x3, 0x7, 0x4}, {0x5, 0x5, 0xb, 0xa}, {0x3, 0x5, 0x9, 0x2}, {0x4, 0x2, 0xc, 0xc}, {0x2, 0x5, 0x5, 0x5}, {0x2, 0x1, 0x9, 0x9}], 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, r2, 0x25, 0x3, @void}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x10000000]}}) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x4001, 0x0, 0x0) kernel console output (not intermixed with test programs): at 0x0001e03c: 0x2a2d instead [ 750.866503][T17022] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 750.875309][T17022] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 750.882859][T17022] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xfbee instead [ 750.891415][T17022] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x2a2d instead [ 750.899575][T17022] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 750.907889][T17022] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 751.004951][T17042] md: recover of RAID array md0 [ 751.008715][T17042] md: md0: recover done. [ 751.114139][T17045] md: recover of RAID array md0 [ 751.120992][T17045] md: md0: recover done. [ 751.195706][T17047] md: recover of RAID array md0 [ 751.198443][T17047] md: md0: recover done. [ 751.253909][T17048] md: recover of RAID array md0 [ 751.257456][T17048] md: md0: recover done. [ 752.309591][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'. [ 752.404878][T17056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1958'. [ 752.415666][T17058] md: recover of RAID array md0 [ 752.420134][T17058] md: md0: recover done. [ 752.515795][T17060] md: recover of RAID array md0 [ 752.519705][T17060] md: md0: recover done. [ 752.536954][ C2] bridge0: port 1(bridge_slave_0) entered learning state [ 752.546897][ C2] bridge0: port 2(bridge_slave_1) entered learning state [ 752.614492][T17063] md: recover of RAID array md0 [ 752.617523][T17063] md: md0: recover done. [ 752.758911][T17068] md: recover of RAID array md0 [ 752.777110][T17068] md: md0: recover done. [ 753.077476][T17075] md: recover of RAID array md0 [ 753.081899][T17075] md: md0: recover done. [ 753.236866][T17077] binder: 17076:17077 ioctl c00c6211 0 returned -14 [ 753.947824][T17080] md: recover of RAID array md0 [ 754.058771][T17080] md: md0: recover done. [ 754.339884][T17078] gadgetfs: bound to dummy_udc driver [ 754.367134][T17066] block device autoloading is deprecated and will be removed. [ 754.922799][ T5834] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 755.080076][ C3] gadgetfs: connected [ 755.088464][ T5834] gadgetfs: disconnected [ 755.386735][T17072] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1961'. [ 755.756015][T17090] md: recover of RAID array md0 [ 755.758933][T17090] md: md0: recover done. [ 756.353175][ C1] bridge0: port 3(vlan3) entered learning state [ 756.532706][T17093] xt_CT: No such helper "pptp" [ 758.120889][T17108] md: recover of RAID array md0 [ 758.142644][T17108] md: md0: recover done. [ 758.862243][T17111] buffer_io_error: 11 callbacks suppressed [ 758.862259][T17111] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 759.367832][T17115] md: recover of RAID array md0 [ 759.372618][T17115] md: md0: recover done. [ 761.989238][T17122] UDC core: g1: couldn't find an available UDC or it's busy [ 762.861415][T17124] md: recover of RAID array md0 [ 762.877210][T17124] md: md0: recover done. [ 763.466332][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1971'. [ 763.479471][T17128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1971'. [ 763.752524][T17131] md: recover of RAID array md0 [ 763.761202][T17131] md: md0: recover done. [ 763.815215][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1973'. [ 763.841355][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1973'. [ 763.858808][T17137] md: recover of RAID array md0 [ 763.862474][T17137] md: md0: recover done. [ 764.524624][T17148] md: recover of RAID array md0 [ 764.527559][T17148] md: md0: recover done. [ 765.186773][T17154] md: recover of RAID array md0 [ 765.196305][T17154] md: md0: recover done. [ 765.875483][T17158] md: recover of RAID array md0 [ 765.916840][T17158] md: md0: recover done. [ 766.085458][T17160] md: recover of RAID array md0 [ 766.089067][T17160] md: md0: recover done. [ 766.435614][T17161] md: recover of RAID array md0 [ 766.448418][T17161] md: md0: recover done. [ 766.678051][T17165] md: recover of RAID array md0 [ 766.694996][T17165] md: md0: recover done. [ 767.142424][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 767.222905][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 767.305304][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 767.427167][T17176] JFS: discard option not supported on device [ 767.440319][T17176] Mount JFS Failure: -22 [ 767.444582][T17176] jfs_mount failed w/return code = -22 [ 768.391591][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'. [ 769.851041][T17191] md: recover of RAID array md0 [ 769.855260][T17191] md: md0: recover done. [ 769.858305][ T5741] Bluetooth: hci4: command 0x0405 tx timeout [ 771.118251][T17198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 771.130639][T17198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1984'. [ 771.267479][T17199] md: recover of RAID array md0 [ 771.270824][T17199] md: md0: recover done. [ 771.385147][T17200] md: recover of RAID array md0 [ 771.390030][T17200] md: md0: recover done. [ 771.521970][T17202] md: recover of RAID array md0 [ 771.545092][T17202] md: md0: recover done. [ 772.234527][T17207] md: recover of RAID array md0 [ 772.370710][T17207] md: md0: recover done. [ 772.726716][T17210] md: recover of RAID array md0 [ 772.738431][T17210] md: md0: recover done. [ 773.143806][T17213] md: recover of RAID array md0 [ 773.154291][T17213] md: md0: recover done. [ 773.601814][T17214] md: recover of RAID array md0 [ 773.613548][T17214] md: md0: recover done. [ 774.032045][T17218] md: recover of RAID array md0 [ 774.046618][T17218] md: md0: recover done. [ 774.851116][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 774.859720][T17226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1990'. [ 774.866878][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 775.088340][T17234] md: recover of RAID array md0 [ 775.095789][T17234] md: md0: recover done. [ 775.097687][T17233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'. [ 775.185859][T17236] md: recover of RAID array md0 [ 775.190105][T17236] md: md0: recover done. [ 775.247288][T17238] md: recover of RAID array md0 [ 775.250235][T17238] md: md0: recover done. [ 775.271323][T17235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.284647][T17235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.306880][T17240] md: recover of RAID array md0 [ 775.311147][T17240] md: md0: recover done. [ 775.419582][T17243] md: recover of RAID array md0 [ 775.430949][T17243] md: md0: recover done. [ 775.496595][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 775.512608][T17246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1994'. [ 775.664435][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'. [ 775.688987][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'. [ 776.019090][T17261] md: recover of RAID array md0 [ 776.028747][T17261] md: md0: recover done. [ 776.138268][T17262] md: recover of RAID array md0 [ 776.144459][T17262] md: md0: recover done. [ 776.204789][ C2] bridge0: port 4(syz_tun) entered learning state [ 776.238216][T17266] md: recover of RAID array md0 [ 776.244766][T17266] md: md0: recover done. [ 776.696775][T17273] md: recover of RAID array md0 [ 776.699674][T17273] md: md0: recover done. [ 776.784829][T17274] md: recover of RAID array md0 [ 776.795979][T17274] md: md0: recover done. [ 777.107708][T17276] md: recover of RAID array md0 [ 777.117307][T17276] md: md0: recover done. [ 777.415358][T17277] md: recover of RAID array md0 [ 777.421948][T17277] md: md0: recover done. [ 777.588312][T17278] md: recover of RAID array md0 [ 777.593838][T17278] md: md0: recover done. [ 778.600376][T17279] md: recover of RAID array md0 [ 778.618037][T17279] md: md0: recover done. [ 778.627106][ T5733] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 779.326459][T17285] md: recover of RAID array md0 [ 780.090768][T17285] md: md0: recover done. [ 780.580596][T17290] md: recover of RAID array md0 [ 780.595078][T17290] md: md0: recover done. [ 780.693106][T17292] __nla_validate_parse: 2 callbacks suppressed [ 780.693145][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'. [ 781.217911][T17299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'. [ 781.226641][T17299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2003'. [ 781.231782][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'. [ 781.612195][T17301] md: recover of RAID array md0 [ 781.615266][T17301] md: md0: recover done. [ 781.881129][T17302] md: recover of RAID array md0 [ 781.897877][T17302] md: md0: recover done. [ 782.386922][T17309] md: recover of RAID array md0 [ 782.399376][T17309] md: md0: recover done. [ 782.494501][T17312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'. [ 782.518781][T17312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2004'. [ 782.603524][ C2] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.610573][ C2] bridge0: topology change detected, propagating [ 782.615219][ C2] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.619845][ C2] bridge0: topology change detected, propagating [ 782.637542][T17314] md: recover of RAID array md0 [ 782.649876][T17314] md: md0: recover done. [ 782.715722][ T5733] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 782.730502][ T5733] Bluetooth: hci4: Injecting HCI hardware error event [ 782.748466][ T5733] Bluetooth: hci4: hardware error 0x00 [ 782.793783][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2005'. [ 782.859027][T17318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2005'. [ 782.979586][T17319] md: recover of RAID array md0 [ 783.067793][T17319] md: md0: recover done. [ 783.765877][T17324] md: recover of RAID array md0 [ 783.777807][T17324] md: md0: recover done. [ 784.199306][T17330] md: recover of RAID array md0 [ 784.219198][T17330] md: md0: recover done. [ 784.726728][T17335] md: recover of RAID array md0 [ 784.735308][T17335] md: md0: recover done. [ 785.484185][ T5733] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 785.764567][T17344] md: recover of RAID array md0 [ 785.770213][T17344] md: md0: recover done. [ 785.824884][T17345] md: recover of RAID array md0 [ 785.829357][T17345] md: md0: recover done. [ 786.055900][T17349] md: recover of RAID array md0 [ 786.059301][T17349] md: md0: recover done. [ 786.344414][ T5733] Bluetooth: hci3: command 0x0c1a tx timeout [ 786.433136][ C1] bridge0: port 3(vlan3) entered forwarding state [ 786.437944][ C1] bridge0: topology change detected, propagating [ 786.874427][T17352] md: recover of RAID array md0 [ 786.879829][T17352] md: md0: recover done. [ 787.403880][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 787.410070][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 787.418715][T17353] netlink: 'syz.4.2010': attribute type 13 has an invalid length. [ 787.425831][T17353] netlink: 'syz.4.2010': attribute type 14 has an invalid length. [ 787.932585][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'. [ 787.962109][T17359] md: recover of RAID array md0 [ 787.986272][T17359] md: md0: recover done. [ 788.023910][T17358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2013'. [ 788.077785][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'. [ 788.106112][T17361] md: recover of RAID array md0 [ 788.114818][T17361] md: md0: recover done. [ 788.247965][T17362] md: recover of RAID array md0 [ 788.264959][T17362] md: md0: recover done. [ 788.722677][T17363] md: recover of RAID array md0 [ 788.733720][T17363] md: md0: recover done. [ 788.894451][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'. [ 789.110006][T17369] md: recover of RAID array md0 [ 789.113705][T17369] md: md0: recover done. [ 789.319894][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 789.345872][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 789.405129][T17377] md: recover of RAID array md0 [ 789.415597][T17377] md: md0: recover done. [ 789.513984][T17383] md: recover of RAID array md0 [ 789.517880][T17383] md: md0: recover done. [ 789.554771][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'. [ 789.561606][T17381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2018'. [ 789.694358][T17388] md: recover of RAID array md0 [ 789.697172][T17388] md: md0: recover done. [ 789.804595][T17389] md: recover of RAID array md0 [ 789.808451][T17389] md: md0: recover done. [ 789.876653][T17393] md: recover of RAID array md0 [ 789.881696][T17393] md: md0: recover done. [ 789.887001][T17392] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 789.930199][T17392] bond0: (slave erspan0): Error: Device can not be enslaved while up [ 789.967994][T17395] md: recover of RAID array md0 [ 789.976514][T17395] md: md0: recover done. [ 790.214330][T17396] md: recover of RAID array md0 [ 790.227707][T17396] md: md0: recover done. [ 790.364487][T17399] md: recover of RAID array md0 [ 790.368369][T17399] md: md0: recover done. [ 791.157972][T17416] md: recover of RAID array md0 [ 791.170881][T17416] md: md0: recover done. [ 791.542681][T17419] md: recover of RAID array md0 [ 791.559325][T17419] md: md0: recover done. [ 792.054413][T17425] md: recover of RAID array md0 [ 792.059249][T17425] md: md0: recover done. [ 792.586012][T17434] md: recover of RAID array md0 [ 792.601935][T17434] md: md0: recover done. [ 793.031765][T17435] md: recover of RAID array md0 [ 793.039339][T17435] md: md0: recover done. [ 793.320461][T17440] md: recover of RAID array md0 [ 793.328198][T17440] md: md0: recover done. [ 793.487356][T17441] md: recover of RAID array md0 [ 793.490960][T17441] md: md0: recover done. [ 793.725544][T17444] md: recover of RAID array md0 [ 793.735955][T17444] md: md0: recover done. [ 794.859063][T17451] md: recover of RAID array md0 [ 794.873513][T17451] md: md0: recover done. [ 795.022220][T17452] md: recover of RAID array md0 [ 795.028285][T17452] md: md0: recover done. [ 795.336839][T17457] md: recover of RAID array md0 [ 795.343850][T17457] md: md0: recover done. [ 795.348385][T17458] __nla_validate_parse: 5 callbacks suppressed [ 795.348428][T17458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2029'. [ 795.475250][T17458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2029'. [ 795.769189][T17462] md: recover of RAID array md0 [ 795.779016][T17462] md: md0: recover done. [ 796.409035][T17465] md: recover of RAID array md0 [ 796.422114][T17465] md: md0: recover done. [ 797.502755][T17471] md: recover of RAID array md0 [ 797.509842][T17471] md: md0: recover done. [ 798.201047][T17473] bridge0: port 4(syz_tun) entered blocking state [ 798.216614][T17473] bridge0: port 4(syz_tun) entered disabled state [ 798.249218][T17473] syz_tun: entered allmulticast mode [ 798.380190][T17473] syz_tun: entered promiscuous mode [ 798.420233][T17473] bridge0: port 4(syz_tun) entered blocking state [ 798.427022][T17473] bridge0: port 4(syz_tun) entered forwarding state [ 798.878741][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'. [ 798.982485][T17478] md: recover of RAID array md0 [ 799.002902][T17478] md: md0: recover done. [ 799.450951][T17481] md: recover of RAID array md0 [ 799.480969][T17481] md: md0: recover done. [ 799.960774][T17485] md: recover of RAID array md0 [ 799.966964][T17485] md: md0: recover done. [ 800.023726][T17489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 800.058644][T17489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2035'. [ 800.160057][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 800.197267][T17494] md: recover of RAID array md0 [ 800.201789][T17494] md: md0: recover done. [ 800.425208][T17497] md: recover of RAID array md0 [ 800.435562][T17497] md: md0: recover done. [ 801.116460][T17504] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 801.137097][T17504] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 801.142924][T17504] overlayfs: failed to look up (tracing) for ino (-66) [ 802.169391][T17505] md: recover of RAID array md0 [ 802.346290][T17505] md: md0: recover done. [ 802.655737][T17506] md: recover of RAID array md0 [ 802.663948][T17506] md: md0: recover done. [ 803.372158][T17514] md: recover of RAID array md0 [ 803.375429][T17514] md: md0: recover done. [ 803.735694][T17517] md: recover of RAID array md0 [ 803.840145][T17517] md: md0: recover done. [ 804.041560][T17521] md: recover of RAID array md0 [ 804.050082][T17521] md: md0: recover done. [ 804.517758][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'. [ 804.899941][T17534] md: recover of RAID array md0 [ 804.912232][T17534] md: md0: recover done. [ 805.324546][T17536] md: recover of RAID array md0 [ 805.328324][T17536] md: md0: recover done. [ 805.383645][T17538] batman_adv: batadv0: Adding interface: veth0 [ 805.388051][T17538] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.404551][T17538] batman_adv: batadv0: Interface activated: veth0 [ 805.404715][T17539] md: recover of RAID array md0 [ 805.409370][T17538] net_ratelimit: 10 callbacks suppressed [ 805.409437][T17538] batadv0: mtu less than device minimum [ 805.413698][T17539] md: md0: recover done. [ 805.427691][T17538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 805.437581][T17538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 805.447612][T17540] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2045'. [ 805.448458][T17538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 805.463535][T17538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 805.472386][T17538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 805.481886][T17538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 805.503056][T17538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 805.523308][T17538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 805.542382][T17538] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 805.615711][T17541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.702026][T17541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.711926][T17541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.794540][T17542] md: recover of RAID array md0 [ 805.797748][T17542] md: md0: recover done. [ 805.894220][T17541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.916092][T17541] batman_adv: batadv0: Interface deactivated: dummy0 [ 805.940303][T17541] batman_adv: batadv0: Removing interface: dummy0 [ 805.967459][T17543] md: recover of RAID array md0 [ 805.971490][T17543] md: md0: recover done. [ 805.979626][T17541] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 805.987003][T17541] batman_adv: batadv0: Removing interface: ipvlan2 [ 806.005509][T17541] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 806.010533][T17541] batman_adv: batadv0: Removing interface: ipvlan3 [ 806.020078][T17541] batman_adv: batadv0: Interface deactivated: veth0 [ 806.025301][T17541] batman_adv: batadv0: Removing interface: veth0 [ 806.255432][T17547] md: recover of RAID array md0 [ 806.258577][T17547] md: md0: recover done. [ 806.283276][ C2] bridge0: port 4(syz_tun) entered forwarding state [ 806.286950][ C2] bridge0: topology change detected, propagating [ 807.594144][T17553] md: recover of RAID array md0 [ 807.597000][T17553] md: md0: recover done. [ 807.674791][T17554] md: recover of RAID array md0 [ 807.678480][T17554] md: md0: recover done. [ 807.734967][T17555] md: recover of RAID array md0 [ 807.739219][T17555] md: md0: recover done. [ 807.814814][T17556] md: recover of RAID array md0 [ 807.818988][T17556] md: md0: recover done. [ 807.933742][T17557] md: recover of RAID array md0 [ 807.937850][T17557] md: md0: recover done. [ 808.024764][T17558] md: recover of RAID array md0 [ 808.028920][T17558] md: md0: recover done. [ 808.196797][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.202330][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.258540][T17559] md: recover of RAID array md0 [ 808.262345][T17559] md: md0: recover done. [ 808.385184][T17560] md: recover of RAID array md0 [ 808.390209][T17560] md: md0: recover done. [ 808.454918][T17561] md: recover of RAID array md0 [ 808.460923][T17561] md: md0: recover done. [ 808.554903][T17562] md: recover of RAID array md0 [ 808.558897][T17562] md: md0: recover done. [ 808.743618][T17563] md: recover of RAID array md0 [ 808.747471][T17563] md: md0: recover done. [ 808.957926][T17568] md: recover of RAID array md0 [ 809.014651][T17568] md: md0: recover done. [ 809.574222][T17571] binder: 17570:17571 ioctl c00c6211 0 returned -14 [ 809.741598][T17573] gadgetfs: bound to dummy_udc driver [ 809.993487][ T5876] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 810.190498][T17575] bridge0: port 4(syz_tun) entered blocking state [ 810.195253][T17575] bridge0: port 4(syz_tun) entered disabled state [ 810.201049][T17575] syz_tun: entered allmulticast mode [ 810.742290][ C1] gadgetfs: connected [ 810.747890][ T5876] gadgetfs: disconnected [ 810.964513][ C1] gadgetfs: connected [ 810.967561][ T5876] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 811.396516][T17570] gadgetfs: suspended from state 3 [ 811.406625][ T5876] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 811.413972][T17570] gadgetfs: disconnected [ 811.417960][ T5876] usb 6-1: can't read configurations, error -71 [ 812.460996][T17575] syz_tun: entered promiscuous mode [ 812.519819][T17580] md: recover of RAID array md0 [ 812.551994][T17580] md: md0: recover done. [ 812.579848][T17575] bridge0: port 4(syz_tun) entered blocking state [ 812.583749][T17575] bridge0: port 4(syz_tun) entered listening state [ 812.586231][T17583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 812.847289][T17588] md: recover of RAID array md0 [ 812.851145][T17588] md: md0: recover done. [ 812.968867][T17589] md: recover of RAID array md0 [ 812.972218][T17589] md: md0: recover done. [ 813.043573][T17592] md: recover of RAID array md0 [ 813.047192][T17592] md: md0: recover done. [ 813.258007][T17596] md: recover of RAID array md0 [ 813.264560][T17596] md: md0: recover done. [ 813.425272][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 814.377820][T17610] md: recover of RAID array md0 [ 814.401380][T17610] md: md0: recover done. [ 816.485319][T17611] md: recover of RAID array md0 [ 816.813555][T17611] md: md0: recover done. [ 816.986986][T17607] UDC core: g1: couldn't find an available UDC or it's busy [ 817.547732][T17617] md: recover of RAID array md0 [ 817.565394][T17617] md: md0: recover done. [ 818.012490][T17621] md: recover of RAID array md0 [ 818.016787][T17621] md: md0: recover done. [ 818.083953][T17623] bridge0: port 3(vlan3) entered disabled state [ 818.095858][T17623] vlan3 (unregistering): left promiscuous mode [ 818.101266][T17623] dummy0: left promiscuous mode [ 818.105254][T17623] bridge0: port 3(vlan3) entered disabled state [ 818.110599][T17628] md: recover of RAID array md0 [ 818.114138][T17628] md: md0: recover done. [ 818.262259][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2059'. [ 818.296961][T17632] md: recover of RAID array md0 [ 818.300134][T17632] md: md0: recover done. [ 818.477387][T17636] md: recover of RAID array md0 [ 818.481458][T17636] md: md0: recover done. [ 818.510954][T17637] JFS: discard option not supported on device [ 818.518700][T17637] Mount JFS Failure: -22 [ 818.521102][T17637] jfs_mount failed w/return code = -22 [ 818.606455][T17638] md: recover of RAID array md0 [ 818.609986][T17638] md: md0: recover done. [ 818.811981][T17639] md: recover of RAID array md0 [ 818.815940][T17639] md: md0: recover done. [ 818.927595][T17640] md: recover of RAID array md0 [ 818.931203][T17640] md: md0: recover done. [ 819.199648][T17641] md: recover of RAID array md0 [ 819.202861][T17641] md: md0: recover done. [ 819.377810][T17642] md: recover of RAID array md0 [ 819.381448][T17642] md: md0: recover done. [ 819.603234][T17643] md: recover of RAID array md0 [ 819.608937][T17643] md: md0: recover done. [ 819.796569][T17644] md: recover of RAID array md0 [ 819.799613][T17644] md: md0: recover done. [ 819.908441][T17645] md: recover of RAID array md0 [ 819.911486][T17645] md: md0: recover done. [ 820.027487][T17646] md: recover of RAID array md0 [ 820.030502][T17646] md: md0: recover done. [ 820.127630][T17647] md: recover of RAID array md0 [ 820.130647][T17647] md: md0: recover done. [ 820.281317][T17648] md: recover of RAID array md0 [ 820.285876][T17648] md: md0: recover done. [ 820.477409][T17660] md: recover of RAID array md0 [ 820.482683][T17660] md: md0: recover done. [ 820.514438][T17317] Bluetooth: hci3: command 0x0c1a tx timeout [ 821.736695][T14722] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 821.747715][T17654] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 821.811794][T17667] md: recover of RAID array md0 [ 821.816118][T17667] md: md0: recover done. [ 821.933628][ T55] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 822.045791][T17669] binder: 17668:17669 ioctl c00c6211 0 returned -14 [ 822.108290][T17670] md: recover of RAID array md0 [ 822.115693][ T55] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 822.124245][T17670] md: md0: recover done. [ 822.157276][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.178543][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.261384][ T55] usb 7-1: config 0 descriptor?? [ 822.329615][T17671] loop2: detected capacity change from 0 to 2640 [ 822.961593][T17672] md: recover of RAID array md0 [ 822.982297][T17672] md: md0: recover done. [ 823.572700][T17676] md: recover of RAID array md0 [ 823.587248][T17676] md: md0: recover done. [ 823.786420][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 824.045882][T17671] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 824.105559][T17671] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 824.201079][T17671] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 824.229818][T17679] md: recover of RAID array md0 [ 824.237621][T17671] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 824.253507][T17679] md: md0: recover done. [ 824.278153][T17671] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 824.286118][T17671] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 824.290867][T17671] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 824.300568][T17671] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 824.306237][T17671] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 824.316883][T17671] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 826.701519][T17689] md: recover of RAID array md0 [ 826.705352][T17689] md: md0: recover done. [ 826.834232][ T5733] Bluetooth: hci3: command 0x0c1a tx timeout [ 827.705395][ T55] usbhid 7-1:0.0: can't add hid device: -32 [ 827.716831][ T55] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 827.821105][ T55] usb 7-1: USB disconnect, device number 13 [ 828.318335][T17696] md: recover of RAID array md0 [ 828.327466][T17696] md: md0: recover done. [ 829.038409][ T5733] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 829.445998][T17702] md: recover of RAID array md0 [ 829.449520][T17702] md: md0: recover done. [ 829.759370][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2073'. [ 830.324080][T17704] batadv_slave_1: entered promiscuous mode [ 830.328325][T17704] macvlan2: entered allmulticast mode [ 830.331185][T17704] batadv_slave_1: entered allmulticast mode [ 830.802375][T17708] md: recover of RAID array md0 [ 830.827661][T17708] md: md0: recover done. [ 831.256016][T17716] md: recover of RAID array md0 [ 831.283967][T17716] md: md0: recover done. [ 833.410873][ T5733] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 833.454521][ T5733] Bluetooth: hci2: Injecting HCI hardware error event [ 833.596347][T17727] md: recover of RAID array md0 [ 833.607933][T17727] md: md0: recover done. [ 833.647335][T17317] Bluetooth: hci2: hardware error 0x00 [ 833.743806][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'. [ 833.893615][T17731] md: recover of RAID array md0 [ 833.896413][T17731] md: md0: recover done. [ 834.041312][T17732] syz.1.2078: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 834.053360][T17732] CPU: 3 UID: 0 PID: 17732 Comm: syz.1.2078 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.053380][T17732] Tainted: [L]=SOFTLOCKUP [ 834.053385][T17732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 834.053393][T17732] Call Trace: [ 834.053409][T17732] [ 834.053415][T17732] dump_stack_lvl+0x100/0x190 [ 834.053499][T17732] warn_alloc.cold+0x94/0xa8 [ 834.053512][T17732] ? __pfx_warn_alloc+0x10/0x10 [ 834.053535][T17732] ? register_lock_class+0x3f/0x7b0 [ 834.053557][T17732] ? kasan_save_stack+0x3f/0x50 [ 834.053582][T17732] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 834.053596][T17732] ? xskq_create+0x52/0x1d0 [ 834.053653][T17732] ? xsk_setsockopt+0x743/0xab0 [ 834.053670][T17732] ? do_sock_setsockopt+0xf3/0x1d0 [ 834.053697][T17732] ? __sys_setsockopt+0x119/0x190 [ 834.053716][T17732] ? __ia32_sys_setsockopt+0xbc/0x160 [ 834.053730][T17732] ? __do_fast_syscall_32+0x13a/0x8b0 [ 834.053749][T17732] ? do_fast_syscall_32+0x32/0x70 [ 834.053764][T17732] ? xskq_create+0xfb/0x1d0 [ 834.053780][T17732] __vmalloc_node_range_noprof+0x136c/0x1630 [ 834.053798][T17732] ? xskq_create+0xfb/0x1d0 [ 834.053817][T17732] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 834.053831][T17732] ? kasan_save_track+0x14/0x30 [ 834.053846][T17732] ? __kasan_kmalloc+0xaa/0xb0 [ 834.053862][T17732] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 834.053876][T17732] ? xskq_create+0xfb/0x1d0 [ 834.053892][T17732] vmalloc_user_noprof+0x9e/0xe0 [ 834.053903][T17732] ? xskq_create+0xfb/0x1d0 [ 834.053919][T17732] xskq_create+0xfb/0x1d0 [ 834.053937][T17732] xsk_setsockopt+0x743/0xab0 [ 834.053952][T17732] ? __pfx_aa_sk_perm+0x10/0x10 [ 834.053989][T17732] ? __pfx_xsk_setsockopt+0x10/0x10 [ 834.054005][T17732] ? irqentry_exit+0x24d/0xa10 [ 834.054019][T17732] ? aa_sock_opt_perm+0xff/0x1b0 [ 834.054033][T17732] ? __pfx_xsk_setsockopt+0x10/0x10 [ 834.054050][T17732] do_sock_setsockopt+0xf3/0x1d0 [ 834.054069][T17732] __sys_setsockopt+0x119/0x190 [ 834.054087][T17732] __ia32_sys_setsockopt+0xbc/0x160 [ 834.054100][T17732] ? __do_fast_syscall_32+0xb3/0x8b0 [ 834.054111][T17732] ? lockdep_hardirqs_on+0x7d/0x110 [ 834.054122][T17732] __do_fast_syscall_32+0x13a/0x8b0 [ 834.054135][T17732] do_fast_syscall_32+0x32/0x70 [ 834.054147][T17732] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 834.054162][T17732] RIP: 0023:0xf6feefec [ 834.054177][T17732] Code: Unable to access opcode bytes at 0xf6feefc2. [ 834.054196][T17732] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 834.054209][T17732] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 834.054217][T17732] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 834.054224][T17732] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 834.054231][T17732] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 834.054238][T17732] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 834.054253][T17732] [ 834.054617][T17732] Mem-Info: [ 834.239933][T17732] active_anon:4709 inactive_anon:15747 isolated_anon:0 [ 834.239933][T17732] active_file:4277 inactive_file:20601 isolated_file:0 [ 834.239933][T17732] unevictable:0 dirty:122 writeback:0 [ 834.239933][T17732] slab_reclaimable:6339 slab_unreclaimable:63684 [ 834.239933][T17732] mapped:29870 shmem:14336 pagetables:1353 [ 834.239933][T17732] sec_pagetables:321 bounce:0 [ 834.239933][T17732] kernel_misc_reclaimable:0 [ 834.239933][T17732] free:35735 free_pcp:14895 free_cma:0 [ 834.244530][T17735] md: recover of RAID array md0 [ 834.268471][T17732] Node 0 active_anon:16kB inactive_anon:172kB active_file:0kB inactive_file:488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4124kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7936kB pagetables:1416kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 834.284591][T17735] md: md0: recover done. [ 834.291014][T17732] Node 1 active_anon:18736kB inactive_anon:62816kB active_file:17108kB inactive_file:81916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103796kB dirty:424kB writeback:0kB shmem:57344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6240kB pagetables:3996kB sec_pagetables:164kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 834.312152][T17732] Node 0 DMA free:2180kB boost:2048kB min:2792kB low:2976kB high:3160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:4kB free_cma:0kB [ 834.331188][T17732] lowmem_reserve[]: 0 279 279 279 279 [ 834.337679][T17732] Node 0 DMA32 free:19972kB boost:4096kB min:17972kB low:21440kB high:24908kB reserved_highatomic:2048KB free_highatomic:1448KB active_anon:16kB inactive_anon:172kB active_file:0kB inactive_file:488kB unevictable:0kB writepending:4kB zspages:0kB present:1032196kB managed:286432kB mlocked:0kB bounce:0kB free_pcp:8796kB local_pcp:2832kB free_cma:0kB [ 834.356682][T17732] lowmem_reserve[]: 0 0 0 0 0 [ 834.359731][T17732] Node 1 DMA32 free:121260kB boost:0kB min:45940kB low:57424kB high:68908kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17852kB inactive_anon:62816kB active_file:17108kB inactive_file:81916kB unevictable:0kB writepending:404kB zspages:2820kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:50756kB local_pcp:12628kB free_cma:0kB [ 834.381264][T17732] lowmem_reserve[]: 0 0 0 0 0 [ 834.387189][T17732] Node 0 DMA: 61*4kB (U) 8*8kB (U) 1*16kB (U) 4*32kB (U) 3*64kB (U) 0*128kB 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2180kB [ 834.409441][T17732] Node 0 DMA32: 87*4kB (UEH) 225*8kB (UEH) 110*16kB (UMEH) 144*32kB (UEH) 55*64kB (UEH) 22*128kB (UEH) 8*256kB (UE) 6*512kB (UMH) 0*1024kB 0*2048kB 0*4096kB = 19972kB [ 834.443493][T17732] Node 1 DMA32: 1453*4kB (UM) 193*8kB (UM) 433*16kB (UME) 245*32kB (UME) 242*64kB (UME) 111*128kB (UME) 71*256kB (UME) 30*512kB (UME) 7*1024kB (UME) 13*2048kB (UE) 2*4096kB (M) = 127340kB [ 834.634432][T17732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 834.654626][T17737] md: recover of RAID array md0 [ 834.654813][T17732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 834.658228][T17737] md: md0: recover done. [ 834.692462][T17732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 834.701608][T17732] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 834.708423][T17732] 37304 total pagecache pages [ 834.711084][T17732] 717 pages in swap cache [ 834.713768][T17732] Free swap = 114624kB [ 834.716121][T17732] Total swap = 124996kB [ 834.718455][T17732] 524155 pages RAM [ 834.720652][T17732] 0 pages HighMem/MovableOnly [ 834.723602][T17732] 211654 pages reserved [ 834.725948][T17732] 0 pages cma reserved [ 834.787041][T17738] md: recover of RAID array md0 [ 834.790090][T17738] md: md0: recover done. [ 835.188555][T17747] md: recover of RAID array md0 [ 835.192101][T17747] md: md0: recover done. [ 835.514927][T17750] md: recover of RAID array md0 [ 835.536078][T17750] md: md0: recover done. [ 835.693181][T17751] md: recover of RAID array md0 [ 835.700085][T17751] md: md0: recover done. [ 835.795497][T17317] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 836.033737][T17752] md: recover of RAID array md0 [ 836.036724][T17752] md: md0: recover done. [ 836.101077][T17753] md: recover of RAID array md0 [ 836.104117][T17753] md: md0: recover done. [ 837.613608][T17764] md: recover of RAID array md0 [ 837.616254][T17764] md: md0: recover done. [ 837.765844][T17767] md: recover of RAID array md0 [ 837.769087][T17767] md: md0: recover done. [ 838.829915][T17771] md: recover of RAID array md0 [ 838.833193][T17771] md: md0: recover done. [ 839.279404][T17776] md: recover of RAID array md0 [ 839.290344][T17776] md: md0: recover done. [ 839.628236][T17780] md: recover of RAID array md0 [ 839.643570][T17780] md: md0: recover done. [ 840.114165][T17783] netlink: 17780 bytes leftover after parsing attributes in process `syz.2.2086'. [ 840.190302][T17786] md: recover of RAID array md0 [ 840.194455][T17786] md: md0: recover done. [ 840.575418][T17790] md: recover of RAID array md0 [ 840.578303][T17790] md: md0: recover done. [ 841.414736][T17799] md: recover of RAID array md0 [ 841.418306][T17799] md: md0: recover done. [ 842.753215][ C2] bridge0: port 4(syz_tun) entered learning state [ 844.901683][T17817] md: recover of RAID array md0 [ 844.923204][T17817] md: md0: recover done. [ 845.498601][T17821] netlink: 860 bytes leftover after parsing attributes in process `syz.0.2091'. [ 846.076853][T17829] md: recover of RAID array md0 [ 846.091080][T17829] md: md0: recover done. [ 847.106577][T17834] md: recover of RAID array md0 [ 847.154836][T17834] md: md0: recover done. [ 847.280626][T17838] md: recover of RAID array md0 [ 847.289987][T17838] md: md0: recover done. [ 847.634127][T17840] md: recover of RAID array md0 [ 847.637732][T17840] md: md0: recover done. [ 848.408492][T17847] md: recover of RAID array md0 [ 848.423924][T17847] md: md0: recover done. [ 849.133532][T17855] md: recover of RAID array md0 [ 849.144236][T17855] md: md0: recover done. [ 849.177250][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'. [ 849.419870][T17861] md: recover of RAID array md0 [ 849.422787][T17861] md: md0: recover done. [ 850.654945][T17870] md: recover of RAID array md0 [ 850.661519][T17870] md: md0: recover done. [ 850.841294][T17871] md: recover of RAID array md0 [ 850.851370][T17871] md: md0: recover done. [ 851.386513][T17877] md: recover of RAID array md0 [ 851.390409][T17877] md: md0: recover done. [ 851.667403][T17878] md: recover of RAID array md0 [ 851.674603][T17878] md: md0: recover done. [ 852.095275][T17881] md: recover of RAID array md0 [ 852.101445][T17881] md: md0: recover done. [ 852.344837][T17883] md: recover of RAID array md0 [ 852.366010][T17883] md: md0: recover done. [ 852.564289][T17892] md: recover of RAID array md0 [ 852.569521][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2105'. [ 852.577446][T17892] md: md0: recover done. [ 852.617266][T17891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2105'. [ 853.407232][T17894] md: recover of RAID array md0 [ 853.410071][T17894] md: md0: recover done. [ 854.003991][T17898] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:0": -EINTR [ 854.146509][T17897] overlayfs: missing 'lowerdir' [ 855.703416][T17897] netlink: 'syz.4.2106': attribute type 2 has an invalid length. [ 855.738030][T17897] : entered promiscuous mode [ 855.890834][T17899] md: recover of RAID array md0 [ 855.895450][T17899] md: md0: recover done. [ 857.125916][T17922] md: recover of RAID array md0 [ 857.133417][T17922] md: md0: recover done. [ 857.395699][T17924] md: recover of RAID array md0 [ 857.401787][T17924] md: md0: recover done. [ 857.629556][T17927] md: recover of RAID array md0 [ 857.632636][T17927] md: md0: recover done. [ 857.825382][T17931] md: recover of RAID array md0 [ 857.839177][T17931] md: md0: recover done. [ 858.165197][T17937] md: recover of RAID array md0 [ 858.171716][T17937] md: md0: recover done. [ 859.655888][T17948] md: recover of RAID array md0 [ 859.705965][T17948] md: md0: recover done. [ 860.392322][T17951] md: recover of RAID array md0 [ 860.439399][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 860.455489][T17951] md: md0: recover done. [ 860.474654][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2113'. [ 860.522699][T17947] netlink: 'syz.0.2113': attribute type 13 has an invalid length. [ 860.552447][T17947] netlink: 'syz.0.2113': attribute type 14 has an invalid length. [ 860.727075][T17956] md: recover of RAID array md0 [ 860.731498][T17956] md: md0: recover done. [ 860.947503][T17958] md: recover of RAID array md0 [ 860.950872][T17958] md: md0: recover done. [ 861.817337][T17960] md: recover of RAID array md0 [ 861.820578][T17960] md: md0: recover done. [ 862.083754][T17963] md: recover of RAID array md0 [ 862.136247][T17963] md: md0: recover done. [ 862.405357][T17966] md: recover of RAID array md0 [ 862.409518][T17966] md: md0: recover done. [ 862.846512][T17970] md: recover of RAID array md0 [ 862.849718][T17970] md: md0: recover done. [ 863.045615][T17974] md: recover of RAID array md0 [ 863.048990][T17974] md: md0: recover done. [ 864.285496][T17967] netlink: 17780 bytes leftover after parsing attributes in process `syz.4.2117'. [ 864.333499][T17983] md: recover of RAID array md0 [ 864.475421][T17983] md: md0: recover done. [ 865.683713][T17985] md: recover of RAID array md0 [ 865.692817][T17985] md: md0: recover done. [ 867.221250][T17993] md: recover of RAID array md0 [ 867.225589][T17993] md: md0: recover done. [ 867.467156][T17998] md: recover of RAID array md0 [ 867.470462][T17998] md: md0: recover done. [ 867.672826][T18001] md: recover of RAID array md0 [ 867.676329][T18001] md: md0: recover done. [ 868.664572][T18004] md: recover of RAID array md0 [ 868.668279][T18004] md: md0: recover done. [ 869.648867][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.652694][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.694969][T18005] md: recover of RAID array md0 [ 869.697874][T18005] md: md0: recover done. [ 869.998070][T18009] md: recover of RAID array md0 [ 870.014074][T18009] md: md0: recover done. [ 870.104929][T18015] md: recover of RAID array md0 [ 870.111902][T18015] md: md0: recover done. [ 870.213803][T18016] md: recover of RAID array md0 [ 870.221098][T18016] md: md0: recover done. [ 870.588837][T18019] md: recover of RAID array md0 [ 870.632822][T18019] md: md0: recover done. [ 872.843248][ C2] bridge0: port 4(syz_tun) entered forwarding state [ 872.848030][ C2] bridge0: topology change detected, propagating [ 873.429579][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2128'. [ 873.610126][T18029] md: recover of RAID array md0 [ 873.612886][T18029] md: md0: recover done. [ 873.687272][T18030] md: recover of RAID array md0 [ 873.690804][T18030] md: md0: recover done. [ 873.754530][T18031] md: recover of RAID array md0 [ 873.757918][T18031] md: md0: recover done. [ 873.827039][T18032] md: recover of RAID array md0 [ 873.830184][T18032] md: md0: recover done. [ 874.025811][T18043] md: recover of RAID array md0 [ 874.029569][T18043] md: md0: recover done. [ 874.054697][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2137'. [ 874.077893][T18044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2137'. [ 874.114408][T18047] md: recover of RAID array md0 [ 874.121584][T18047] md: md0: recover done. [ 874.141857][T18048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2131'. [ 874.224624][T18050] md: recover of RAID array md0 [ 874.227771][T18050] md: md0: recover done. [ 874.635025][T18054] md: recover of RAID array md0 [ 874.641512][T18054] md: md0: recover done. [ 874.744900][T18057] md: recover of RAID array md0 [ 874.825894][T18057] md: md0: recover done. [ 875.645817][T18066] md: recover of RAID array md0 [ 875.648835][T18066] md: md0: recover done. [ 875.848202][T18067] md: recover of RAID array md0 [ 875.856948][T18067] md: md0: recover done. [ 876.199816][T18073] md: recover of RAID array md0 [ 876.203320][T18073] md: md0: recover done. [ 876.376139][T18075] md: recover of RAID array md0 [ 876.379321][T18075] md: md0: recover done. [ 876.821474][T18077] md: recover of RAID array md0 [ 876.827502][T18077] md: md0: recover done. [ 877.508408][T18079] futex_wake_op: syz.4.2136 tries to shift op by 144; fix this program [ 877.514590][T18080] md: recover of RAID array md0 [ 877.514627][T18080] md: md0: recover done. [ 877.884742][T18084] md: recover of RAID array md0 [ 877.889734][T18084] md: md0: recover done. [ 878.214374][T18090] md: recover of RAID array md0 [ 878.220401][T18090] md: md0: recover done. [ 878.415976][T18092] md: recover of RAID array md0 [ 878.423352][T18092] md: md0: recover done. [ 878.697136][T18093] md: recover of RAID array md0 [ 878.708932][T18093] md: md0: recover done. [ 878.984869][T18094] md: recover of RAID array md0 [ 878.998854][T18094] md: md0: recover done. [ 879.148887][T18095] md: recover of RAID array md0 [ 879.186804][T18095] md: md0: recover done. [ 881.465702][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 881.867570][T18110] md: recover of RAID array md0 [ 881.893095][T18110] md: md0: recover done. [ 882.507239][T18115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'. [ 882.546869][T18115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2144'. [ 882.838355][T18120] md: recover of RAID array md0 [ 882.841692][T18120] md: md0: recover done. [ 883.207966][T18127] md: recover of RAID array md0 [ 883.210932][T18127] md: md0: recover done. [ 884.308315][T18138] md: recover of RAID array md0 [ 884.310960][T18138] md: md0: recover done. [ 884.483059][T14382] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 884.647678][T14382] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 884.654754][T14382] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 884.660001][T14382] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 884.669545][T14382] usb 7-1: string descriptor 0 read error: -22 [ 884.673187][T14382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.766401][T18142] md: recover of RAID array md0 [ 884.769765][T18142] md: md0: recover done. [ 884.913440][T14382] cdc_ncm 7-1:1.0: bind() failure [ 884.930038][T14382] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 884.936460][T14382] cdc_ncm 7-1:1.1: bind() failure [ 884.949630][T14382] usb 7-1: USB disconnect, device number 14 [ 884.977460][T18144] md: recover of RAID array md0 [ 884.980224][T18144] md: md0: recover done. [ 885.155384][T18145] md: recover of RAID array md0 [ 885.158689][T18145] md: md0: recover done. [ 885.286215][T18146] md: recover of RAID array md0 [ 885.290186][T18146] md: md0: recover done. [ 885.631455][T18147] md: recover of RAID array md0 [ 885.639182][T18147] md: md0: recover done. [ 885.960124][T18153] md: recover of RAID array md0 [ 885.966734][T18153] md: md0: recover done. [ 886.256399][T18154] md: recover of RAID array md0 [ 887.145749][T18154] md: md0: recover done. [ 887.467885][T18160] md: recover of RAID array md0 [ 887.470539][T18160] md: md0: recover done. [ 887.793910][T18161] md: recover of RAID array md0 [ 888.095617][T18161] md: md0: recover done. [ 888.183917][T18162] md: recover of RAID array md0 [ 888.186616][T18162] md: md0: recover done. [ 888.273761][T18163] md: recover of RAID array md0 [ 888.277375][T18163] md: md0: recover done. [ 888.454305][T18164] md: recover of RAID array md0 [ 888.457387][T18164] md: md0: recover done. [ 888.666843][T18167] md: recover of RAID array md0 [ 888.669987][T18167] md: md0: recover done. [ 888.830555][T18170] md: recover of RAID array md0 [ 888.840380][T14754] Bluetooth: hci1: Frame reassembly failed (-84) [ 888.846843][T18170] md: md0: recover done. [ 888.876828][T14423] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 889.043533][T18172] md: recover of RAID array md0 [ 889.047171][T18172] md: md0: recover done. [ 889.123438][T18175] md: recover of RAID array md0 [ 889.128945][T18175] md: md0: recover done. [ 889.193380][T18177] md: recover of RAID array md0 [ 889.197218][T18177] md: md0: recover done. [ 889.274170][T18180] md: recover of RAID array md0 [ 889.281287][T18180] md: md0: recover done. [ 889.363529][T18181] md: recover of RAID array md0 [ 889.370156][T18181] md: md0: recover done. [ 889.464141][T18184] md: recover of RAID array md0 [ 889.466835][T18184] md: md0: recover done. [ 889.523767][T18187] md: recover of RAID array md0 [ 889.527281][T18187] md: md0: recover done. [ 889.573477][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2155'. [ 889.603997][T18189] md: recover of RAID array md0 [ 889.611031][T18189] md: md0: recover done. [ 889.698249][T18191] md: recover of RAID array md0 [ 889.703882][T18191] md: md0: recover done. [ 889.833663][T18193] md: recover of RAID array md0 [ 889.836612][T18193] md: md0: recover done. [ 889.973562][T18196] md: recover of RAID array md0 [ 889.977031][T18196] md: md0: recover done. [ 890.095007][T18197] md: recover of RAID array md0 [ 890.106575][T18197] md: md0: recover done. [ 890.180430][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'. [ 890.241461][T18202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2157'. [ 890.836370][ T5733] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 890.858401][T18206] md: recover of RAID array md0 [ 890.865838][T18206] md: md0: recover done. [ 891.427432][T18211] md: recover of RAID array md0 [ 891.430449][T18211] md: md0: recover done. [ 891.688603][T18213] md: recover of RAID array md0 [ 891.699936][T18213] md: md0: recover done. [ 891.816534][T18216] md: recover of RAID array md0 [ 891.822888][T18216] md: md0: recover done. [ 892.324880][T18217] md: recover of RAID array md0 [ 892.328685][T18217] md: md0: recover done. [ 892.657224][T18221] md: recover of RAID array md0 [ 892.664953][T18221] md: md0: recover done. [ 894.246031][T18227] md: recover of RAID array md0 [ 894.251373][T18227] md: md0: recover done. [ 894.393590][T18228] md: recover of RAID array md0 [ 894.397577][T18228] md: md0: recover done. [ 895.705308][T18234] md: recover of RAID array md0 [ 895.726735][T18234] md: md0: recover done. [ 896.354539][T18238] md: recover of RAID array md0 [ 896.358080][T18238] md: md0: recover done. [ 896.429944][T18240] md: recover of RAID array md0 [ 896.435352][T18240] md: md0: recover done. [ 896.666736][T18244] md: recover of RAID array md0 [ 896.714189][T18244] md: md0: recover done. [ 898.727754][T18249] md: recover of RAID array md0 [ 898.730971][T18249] md: md0: recover done. [ 898.825427][T18250] md: recover of RAID array md0 [ 898.829444][T18250] md: md0: recover done. [ 899.004214][T18254] md: recover of RAID array md0 [ 899.017646][T18254] md: md0: recover done. [ 899.092398][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2166'. [ 899.197683][T18255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2166'. [ 899.807218][T18258] md: recover of RAID array md0 [ 899.810494][T18258] md: md0: recover done. [ 900.734563][T18267] md: recover of RAID array md0 [ 900.737846][T18267] md: md0: recover done. [ 900.937161][T18271] md: recover of RAID array md0 [ 900.943955][T18271] md: md0: recover done. [ 901.039272][T18274] md: recover of RAID array md0 [ 901.042841][T18274] md: md0: recover done. [ 901.542534][T18278] md: recover of RAID array md0 [ 901.549169][T18278] md: md0: recover done. [ 901.654997][T18279] md: recover of RAID array md0 [ 901.669887][T18279] md: md0: recover done. [ 901.954044][T18283] md: recover of RAID array md0 [ 901.960960][T18283] md: md0: recover done. [ 903.744193][T18294] md: recover of RAID array md0 [ 903.764181][T18294] md: md0: recover done. [ 904.886141][T18295] md: recover of RAID array md0 [ 904.965832][T18295] md: md0: recover done. [ 905.207582][T18301] md: recover of RAID array md0 [ 905.218756][T18301] md: md0: recover done. [ 905.455317][T18304] md: recover of RAID array md0 [ 905.458498][T18304] md: md0: recover done. [ 906.405780][T18310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2177'. [ 906.455694][T18313] md: recover of RAID array md0 [ 906.467306][T18313] md: md0: recover done. [ 906.594423][T18316] md: recover of RAID array md0 [ 906.598473][T18316] md: md0: recover done. [ 906.703466][T18318] md: recover of RAID array md0 [ 906.711843][T18318] md: md0: recover done. [ 906.809007][T18319] md: recover of RAID array md0 [ 906.812640][T18319] md: md0: recover done. [ 906.995457][T18325] md: recover of RAID array md0 [ 906.999314][T18325] md: md0: recover done. [ 907.128009][T18331] md: recover of RAID array md0 [ 907.133812][T18331] md: md0: recover done. [ 907.437027][T17317] Bluetooth: hci3: unexpected event for opcode 0x080d [ 907.508620][T18335] md: recover of RAID array md0 [ 907.511725][T18335] md: md0: recover done. [ 907.892837][T18336] md: recover of RAID array md0 [ 907.902014][T18336] md: md0: recover done. [ 908.097332][T18339] md: recover of RAID array md0 [ 908.100789][T18339] md: md0: recover done. [ 908.264702][T18340] md: recover of RAID array md0 [ 908.275612][T18340] md: md0: recover done. [ 908.334039][ T55] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 908.495723][ T55] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 908.508894][ T55] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 908.519188][T18341] md: recover of RAID array md0 [ 908.522653][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 908.529834][T18341] md: md0: recover done. [ 908.541828][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.648326][ T55] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 908.704956][ T55] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 908.749649][T18347] md: recover of RAID array md0 [ 908.757285][T18347] md: md0: recover done. [ 909.393279][T18354] md: recover of RAID array md0 [ 909.409975][T18354] md: md0: recover done. [ 909.485873][T18338] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 909.736845][ T6336] usb 6-1: USB disconnect, device number 24 [ 909.867104][T18357] md: recover of RAID array md0 [ 909.886997][T18357] md: md0: recover done. [ 909.937097][ T6336] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 909.972890][ T6336] spcp8x5 6-1:1.0: device disconnected [ 910.301685][T18359] md: recover of RAID array md0 [ 910.322759][T18359] md: md0: recover done. [ 910.497515][T18360] md: recover of RAID array md0 [ 910.504920][T18360] md: md0: recover done. [ 910.730308][T18363] md: recover of RAID array md0 [ 910.733941][T18363] md: md0: recover done. [ 910.909620][T18365] md: recover of RAID array md0 [ 910.924034][T18365] md: md0: recover done. [ 911.020147][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2188'. [ 911.153913][T18375] md: recover of RAID array md0 [ 911.164039][T18375] md: md0: recover done. [ 911.275618][T18377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.297066][T18377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.437005][T18378] md: recover of RAID array md0 [ 911.439976][T18378] md: md0: recover done. [ 911.744866][T18382] md: recover of RAID array md0 [ 911.752395][T18382] md: md0: recover done. [ 912.057485][T18383] md: recover of RAID array md0 [ 912.070198][T18383] md: md0: recover done. [ 912.470798][T18389] md: recover of RAID array md0 [ 912.484138][T18389] md: md0: recover done. [ 912.503844][T18388] netlink: 'syz.1.2190': attribute type 8 has an invalid length. [ 912.510676][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2190'. [ 912.520660][T18388] bond0: entered promiscuous mode [ 912.524789][T18388] bond_slave_0: entered promiscuous mode [ 912.528001][T18388] bond_slave_1: entered promiscuous mode [ 912.532103][T18388] gretap0: entered promiscuous mode [ 912.536431][T18388] team0: entered promiscuous mode [ 912.539250][T18388] team_slave_0: entered promiscuous mode [ 912.542384][T18388] team_slave_1: entered promiscuous mode [ 912.550894][T18388] hsr1: entered promiscuous mode [ 912.957258][T18394] md: recover of RAID array md0 [ 912.960762][T18394] md: md0: recover done. [ 913.004994][T18395] Invalid ELF header magic: != ELF [ 913.341273][T18399] md: recover of RAID array md0 [ 913.352408][T18399] md: md0: recover done. [ 913.637934][T18400] ip6_vti0: Caught tx_queue_len zero misconfig [ 913.789357][T18400] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 913.815622][T18401] md: recover of RAID array md0 [ 913.836401][T18401] md: md0: recover done. [ 913.911422][T18400] cramfs: wrong magic [ 913.935457][T18403] md: recover of RAID array md0 [ 913.939540][T18403] md: md0: recover done. [ 914.003752][T18405] md: recover of RAID array md0 [ 914.007028][T18405] md: md0: recover done. [ 914.231643][T18406] md: recover of RAID array md0 [ 914.242327][T18406] md: md0: recover done. [ 914.736402][T18416] md: recover of RAID array md0 [ 914.742000][T18416] md: md0: recover done. [ 914.979728][T18419] comedi comedi3: comedi_config --init_data is deprecated [ 915.010233][T18420] md: recover of RAID array md0 [ 915.023470][T18420] md: md0: recover done. [ 915.026189][T18419] anx7411 0-0002: unable to get SPI slave [ 915.029666][T18419] anx7411 0-0002: fail to reserve I2C bus [ 915.033925][T18419] anx7411 0-0002: probe with driver anx7411 failed with error -12 [ 915.040379][T18419] i2c i2c-0: new_device: Instantiated device anx7411 at 0x02 [ 915.240796][T18422] md: recover of RAID array md0 [ 915.245742][T18422] md: md0: recover done. [ 915.327478][T18426] md: recover of RAID array md0 [ 915.333482][T18426] md: md0: recover done. [ 915.393619][T18431] md: recover of RAID array md0 [ 915.401142][T18431] md: md0: recover done. [ 915.424040][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2197'. [ 915.525052][T18434] md: recover of RAID array md0 [ 915.528223][T18434] md: md0: recover done. [ 915.591423][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2199'. [ 915.597618][T18429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'. [ 915.606922][T18429] netlink: 'syz.1.2199': attribute type 13 has an invalid length. [ 915.617280][T18429] netlink: 'syz.1.2199': attribute type 14 has an invalid length. [ 915.624845][T18436] md: recover of RAID array md0 [ 915.632385][T18436] md: md0: recover done. [ 915.844744][T18437] md: recover of RAID array md0 [ 915.850305][T18437] md: md0: recover done. [ 915.937429][T18438] md: recover of RAID array md0 [ 915.955947][T18438] md: md0: recover done. [ 916.156446][T18439] md: recover of RAID array md0 [ 916.159856][T18439] md: md0: recover done. [ 916.214920][T18440] md: recover of RAID array md0 [ 916.218384][T18440] md: md0: recover done. [ 916.274716][T18441] md: recover of RAID array md0 [ 916.279088][T18441] md: md0: recover done. [ 916.354319][T18442] md: recover of RAID array md0 [ 916.360113][T18442] md: md0: recover done. [ 916.414027][T18443] md: recover of RAID array md0 [ 916.417942][T18443] md: md0: recover done. [ 916.486149][T18444] md: recover of RAID array md0 [ 916.488790][T18444] md: md0: recover done. [ 916.545232][T18445] md: recover of RAID array md0 [ 916.548440][T18445] md: md0: recover done. [ 916.628089][T18446] md: recover of RAID array md0 [ 916.630848][T18446] md: md0: recover done. [ 916.705537][T18447] md: recover of RAID array md0 [ 916.708582][T18447] md: md0: recover done. [ 916.798860][T18448] md: recover of RAID array md0 [ 916.802467][T18448] md: md0: recover done. [ 917.070259][T18451] md: recover of RAID array md0 [ 917.076874][T18451] md: md0: recover done. [ 917.194678][ T5834] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 917.271491][T18459] md: recover of RAID array md0 [ 917.276698][T18459] md: md0: recover done. [ 918.076303][T18463] md: recover of RAID array md0 [ 918.105396][T18463] md: md0: recover done. [ 918.547125][T18465] md: recover of RAID array md0 [ 918.574038][T18465] md: md0: recover done. [ 919.278819][T18466] md: recover of RAID array md0 [ 919.307850][T18466] md: md0: recover done. [ 919.944716][T18471] md: recover of RAID array md0 [ 919.953602][T18471] md: md0: recover done. [ 920.571481][T18486] md: recover of RAID array md0 [ 920.574684][T18486] md: md0: recover done. [ 920.684263][T18487] md: recover of RAID array md0 [ 920.688903][T18487] md: md0: recover done. [ 920.744097][T18488] md: recover of RAID array md0 [ 920.748304][T18488] md: md0: recover done. [ 920.804006][T18489] md: recover of RAID array md0 [ 920.807535][T18489] md: md0: recover done. [ 920.864257][T18490] md: recover of RAID array md0 [ 920.867213][T18490] md: md0: recover done. [ 920.923799][T18493] md: recover of RAID array md0 [ 920.926618][T18493] md: md0: recover done. [ 920.983770][T18495] md: recover of RAID array md0 [ 920.990323][T18495] md: md0: recover done. [ 921.114632][T18497] md: recover of RAID array md0 [ 921.118138][T18497] md: md0: recover done. [ 921.174806][T18498] md: recover of RAID array md0 [ 921.233408][T18498] md: md0: recover done. [ 921.728219][T18500] md: recover of RAID array md0 [ 921.740615][T18500] md: md0: recover done. [ 921.913464][T18503] md: recover of RAID array md0 [ 921.916193][T18503] md: md0: recover done. [ 921.974817][T18504] md: recover of RAID array md0 [ 921.977562][T18504] md: md0: recover done. [ 922.068299][T18507] md: recover of RAID array md0 [ 922.075344][T18507] md: md0: recover done. [ 922.246784][T18511] md: recover of RAID array md0 [ 922.255014][T18511] md: md0: recover done. [ 922.475076][T18512] md: recover of RAID array md0 [ 922.478747][T18512] md: md0: recover done. [ 922.565298][T18513] md: recover of RAID array md0 [ 922.568797][T18513] md: md0: recover done. [ 922.795841][T18515] md: recover of RAID array md0 [ 922.799845][T18515] md: md0: recover done. [ 922.905870][T18516] md: recover of RAID array md0 [ 922.909077][T18516] md: md0: recover done. [ 923.065521][T18517] md: recover of RAID array md0 [ 923.071841][T18517] md: md0: recover done. [ 923.386625][T18526] md: recover of RAID array md0 [ 923.390096][T18526] md: md0: recover done. [ 923.731743][T18530] md: recover of RAID array md0 [ 923.756224][T18530] md: md0: recover done. [ 923.978471][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'. [ 924.146570][T18532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2210'. [ 924.211483][T18532] netlink: 'syz.2.2210': attribute type 13 has an invalid length. [ 924.246839][T18532] netlink: 'syz.2.2210': attribute type 14 has an invalid length. [ 924.989193][T18536] md: recover of RAID array md0 [ 924.999450][T18536] md: md0: recover done. [ 925.322719][T18537] md: recover of RAID array md0 [ 925.338302][T18537] md: md0: recover done. [ 927.820180][T18542] md: recover of RAID array md0 [ 927.825021][T18542] md: md0: recover done. [ 927.943916][T18547] md: recover of RAID array md0 [ 927.954186][T18547] md: md0: recover done. [ 927.972894][T18548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2215'. [ 927.992358][T18548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2215'. [ 928.055152][T18550] md: recover of RAID array md0 [ 928.058965][T18550] md: md0: recover done. [ 928.115152][T18552] md: recover of RAID array md0 [ 928.121560][T18552] md: md0: recover done. [ 928.208121][T18555] md: recover of RAID array md0 [ 928.212509][T18555] md: md0: recover done. [ 928.216484][T18554] overlayfs: missing 'workdir' [ 928.720085][T18557] md: recover of RAID array md0 [ 928.774763][T18557] md: md0: recover done. [ 929.785904][ T5876] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 929.975421][ T5876] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 930.004457][ T5876] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 930.047196][ T5876] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 930.143863][ T5876] usb 9-1: string descriptor 0 read error: -22 [ 930.151246][ T5876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.822345][T18572] md: recover of RAID array md0 [ 931.204799][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.209342][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.215765][T18572] md: md0: recover done. [ 932.029644][T18576] md: recover of RAID array md0 [ 932.042849][T18576] md: md0: recover done. [ 932.072782][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2222'. [ 932.090921][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2222'. [ 932.140104][ T5876] cdc_ncm 9-1:1.0: bind() failure [ 932.241308][ T5876] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 932.248503][ T5876] cdc_ncm 9-1:1.1: bind() failure [ 932.254368][ T5876] usb 9-1: USB disconnect, device number 3 [ 932.419882][T18587] md: recover of RAID array md0 [ 932.422727][T18587] md: md0: recover done. [ 932.651315][T18591] md: recover of RAID array md0 [ 932.655529][T18591] md: md0: recover done. [ 933.038471][T18598] md: recover of RAID array md0 [ 933.042035][T18598] md: md0: recover done. [ 933.224635][T18599] md: recover of RAID array md0 [ 933.228410][T18599] md: md0: recover done. [ 933.300045][T18600] md: recover of RAID array md0 [ 933.302735][T18600] md: md0: recover done. [ 933.376324][T18601] md: recover of RAID array md0 [ 933.379905][T18601] md: md0: recover done. [ 933.812293][T18608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2228'. [ 933.820646][T18609] md: recover of RAID array md0 [ 933.828102][T18608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2228'. [ 933.835487][T18609] md: md0: recover done. [ 933.863464][T18593] netlink: 860 bytes leftover after parsing attributes in process `syz.2.2226'. [ 934.871693][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2229'. [ 934.902394][T18618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2229'. [ 934.957059][T18621] md: recover of RAID array md0 [ 934.976621][T18621] md: md0: recover done. [ 936.268577][T18628] md: recover of RAID array md0 [ 936.271787][T18628] md: md0: recover done. [ 936.586080][T18639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 936.597163][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2233'. [ 936.606895][T18632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 936.612078][T18637] Bluetooth: MGMT ver 1.23 [ 937.126119][T18641] md: recover of RAID array md0 [ 937.129175][T18641] md: md0: recover done. [ 937.256665][T18642] md: recover of RAID array md0 [ 937.259422][T18642] md: md0: recover done. [ 937.349940][T18643] md: recover of RAID array md0 [ 937.352554][T18643] md: md0: recover done. [ 937.465915][T18644] md: recover of RAID array md0 [ 937.469630][T18644] md: md0: recover done. [ 937.527660][T18645] md: recover of RAID array md0 [ 937.530838][T18645] md: md0: recover done. [ 937.748092][T18654] md: recover of RAID array md0 [ 937.751534][T18654] md: md0: recover done. [ 937.973187][T18660] md: recover of RAID array md0 [ 937.978169][T18660] md: md0: recover done. [ 938.875971][T18662] md: recover of RAID array md0 [ 938.879132][T18662] md: md0: recover done. [ 938.953943][T18663] md: recover of RAID array md0 [ 938.956783][T18663] md: md0: recover done. [ 939.017750][T18669] md: recover of RAID array md0 [ 939.020788][T18669] md: md0: recover done. [ 939.084945][T15570] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 939.098066][T18672] md: recover of RAID array md0 [ 939.100731][T18672] md: md0: recover done. [ 939.154947][T18673] md: recover of RAID array md0 [ 939.159038][T18673] md: md0: recover done. [ 939.235463][T18675] md: recover of RAID array md0 [ 939.239963][T18675] md: md0: recover done. [ 939.247999][T15570] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 939.251337][T18674] overlayfs: missing 'lowerdir' [ 939.259469][T15570] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 939.266320][T15570] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 939.284433][T15570] usb 6-1: string descriptor 0 read error: -22 [ 939.314629][T18676] md: recover of RAID array md0 [ 939.319221][T18676] md: md0: recover done. [ 939.375158][T18677] md: recover of RAID array md0 [ 939.378955][T18677] md: md0: recover done. [ 939.464202][T18678] md: recover of RAID array md0 [ 939.468240][T18678] md: md0: recover done. [ 939.605085][T18679] md: recover of RAID array md0 [ 939.609036][T18679] md: md0: recover done. [ 939.803606][T18680] md: recover of RAID array md0 [ 939.806698][T18680] md: md0: recover done. [ 939.964856][T15570] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.974812][T18681] md: recover of RAID array md0 [ 939.978021][T18681] md: md0: recover done. [ 940.031862][T18671] binder: 18670:18671 ioctl c00c6211 0 returned -14 [ 940.085814][T18682] md: recover of RAID array md0 [ 940.089098][T18682] md: md0: recover done. [ 940.153785][T18683] md: recover of RAID array md0 [ 940.157166][T18683] md: md0: recover done. [ 940.234929][T18685] md: recover of RAID array md0 [ 940.243805][T18685] md: md0: recover done. [ 940.314484][T18686] md: recover of RAID array md0 [ 940.317896][T18686] md: md0: recover done. [ 940.390895][T18688] __nla_validate_parse: 1 callbacks suppressed [ 940.390907][T18688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'. [ 940.395829][T15570] cdc_ncm 6-1:1.0: bind() failure [ 940.408560][T18688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2240'. [ 940.431154][T15570] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 940.439315][T18691] md: recover of RAID array md0 [ 940.446028][T18691] md: md0: recover done. [ 940.458646][T15570] cdc_ncm 6-1:1.1: bind() failure [ 940.536571][T15570] usb 6-1: USB disconnect, device number 25 [ 940.595100][T18692] md: recover of RAID array md0 [ 940.599045][T18692] md: md0: recover done. [ 940.674990][T18697] md: recover of RAID array md0 [ 940.678940][T18697] md: md0: recover done. [ 940.681805][T18684] loop2: detected capacity change from 0 to 2640 [ 940.695816][T18358] buffer_io_error: 320 callbacks suppressed [ 940.695832][T18358] Buffer I/O error on dev loop2, logical block 0, async page read [ 940.721579][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2241'. [ 940.732064][T18358] Buffer I/O error on dev loop2, logical block 0, async page read [ 940.745150][T18698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2241'. [ 940.751397][T18358] Buffer I/O error on dev loop2, logical block 0, async page read [ 940.759650][T18358] Buffer I/O error on dev loop2, logical block 0, async page read [ 940.768311][T18358] Buffer I/O error on dev loop2, logical block 0, async page read [ 940.776153][T18699] md: recover of RAID array md0 [ 940.780036][T18699] md: md0: recover done. [ 940.853723][T18701] md: recover of RAID array md0 [ 940.856665][T18701] md: md0: recover done. [ 940.968536][T18704] md: recover of RAID array md0 [ 940.975022][T18704] md: md0: recover done. [ 941.219019][T18684] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 941.226721][T18684] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 941.233569][T18684] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 941.238616][T18684] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 941.247166][T18684] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 941.276331][T18711] md: recover of RAID array md0 [ 941.287605][T18711] md: md0: recover done. [ 941.935939][T18712] md: recover of RAID array md0 [ 941.950020][T18712] md: md0: recover done. [ 942.102109][T18718] md: recover of RAID array md0 [ 942.108918][T18718] md: md0: recover done. [ 942.231681][T18719] comedi comedi0: pcmda12: I/O base address not correctly aligned [ 942.865857][T18723] md: recover of RAID array md0 [ 942.868839][T18723] md: md0: recover done. [ 943.136773][T18720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.021890][T18720] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 944.032241][T18720] veth1_vlan: left promiscuous mode [ 944.037808][T18720] veth0_vlan: left promiscuous mode [ 944.041969][T18720] veth0_vlan: entered promiscuous mode [ 944.049218][T18720] veth1_vlan: entered promiscuous mode [ 944.057345][T18720] veth1_macvtap: left promiscuous mode [ 944.061426][T18720] veth0_macvtap: left promiscuous mode [ 944.066466][T18720] veth0_macvtap: entered promiscuous mode [ 944.070021][T18720] veth1_macvtap: entered promiscuous mode [ 944.079395][T18720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 944.103542][T18728] md: recover of RAID array md0 [ 944.107085][T18728] md: md0: recover done. [ 944.147009][T18720] 8021q: adding VLAN 0 to HW filter on device eth0 [ 944.155461][T18720] 8021q: adding VLAN 0 to HW filter on device eth1 [ 944.161681][T18720] 8021q: adding VLAN 0 to HW filter on device eth2 [ 944.170670][T18720] 8021q: adding VLAN 0 to HW filter on device eth3 [ 944.265860][T18720] bridge0: port 3(vlan3) entered blocking state [ 944.269501][T18720] bridge0: port 3(vlan3) entered forwarding state [ 944.604392][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.618042][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.630698][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.644843][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.833639][T18730] md: recover of RAID array md0 [ 944.836905][T18730] md: md0: recover done. [ 944.986947][T18731] md: recover of RAID array md0 [ 944.998499][T18731] md: md0: recover done. [ 945.125727][T18732] md: recover of RAID array md0 [ 945.129025][T18732] md: md0: recover done. [ 945.185734][T18733] md: recover of RAID array md0 [ 945.189414][T18733] md: md0: recover done. [ 945.255906][T18734] md: recover of RAID array md0 [ 945.260295][T18734] md: md0: recover done. [ 945.395104][T18735] md: recover of RAID array md0 [ 945.398540][T18735] md: md0: recover done. [ 945.466769][T18736] md: recover of RAID array md0 [ 945.470042][T18736] md: md0: recover done. [ 945.617141][T18737] md: recover of RAID array md0 [ 945.620880][T18737] md: md0: recover done. [ 945.775710][T18738] md: recover of RAID array md0 [ 945.778728][T18738] md: md0: recover done. [ 945.928899][T18739] md: recover of RAID array md0 [ 945.937581][T18739] md: md0: recover done. [ 946.139560][T18749] md: recover of RAID array md0 [ 946.145836][T18749] md: md0: recover done. [ 946.318244][T18754] md: recover of RAID array md0 [ 946.326316][T18754] md: md0: recover done. [ 946.484605][T18755] md: recover of RAID array md0 [ 946.490248][T18755] md: md0: recover done. [ 946.667387][T18757] md: recover of RAID array md0 [ 946.683284][T18757] md: md0: recover done. [ 946.943062][T18751] netlink: 860 bytes leftover after parsing attributes in process `syz.1.2249'. [ 946.950744][T18759] md: recover of RAID array md0 [ 946.956019][T18759] md: md0: recover done. [ 947.139201][T18760] md: recover of RAID array md0 [ 947.144865][T18760] md: md0: recover done. [ 947.639402][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'. [ 947.666934][T18766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2252'. [ 947.747130][T18767] md: recover of RAID array md0 [ 947.750464][T18767] md: md0: recover done. [ 947.934795][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2254'. [ 947.965723][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2254'. [ 948.012360][T18775] md: recover of RAID array md0 [ 948.017408][T18775] md: md0: recover done. [ 948.185095][T18777] md: recover of RAID array md0 [ 948.194300][T18777] md: md0: recover done. [ 948.285918][T18779] md: recover of RAID array md0 [ 948.289998][T18779] md: md0: recover done. [ 948.367194][T18782] md: recover of RAID array md0 [ 948.370011][T18782] md: md0: recover done. [ 948.425175][T18783] md: recover of RAID array md0 [ 948.431385][T18783] md: md0: recover done. [ 948.538666][T18784] md: recover of RAID array md0 [ 948.543612][T18784] md: md0: recover done. [ 948.675739][T18785] md: recover of RAID array md0 [ 948.680257][T18785] md: md0: recover done. [ 948.828901][T18786] md: recover of RAID array md0 [ 948.832617][T18786] md: md0: recover done. [ 948.903965][T18787] md: recover of RAID array md0 [ 948.907688][T18787] md: md0: recover done. [ 949.179704][T18788] md: recover of RAID array md0 [ 949.183163][T18788] md: md0: recover done. [ 949.625128][T18797] md: recover of RAID array md0 [ 949.636720][T18797] md: md0: recover done. [ 949.743724][T18802] md: recover of RAID array md0 [ 949.751559][T18802] md: md0: recover done. [ 949.802404][T18800] binder: 18795:18800 ioctl c00c6211 0 returned -14 [ 949.905314][T18805] md: recover of RAID array md0 [ 949.911138][T18805] md: md0: recover done. [ 949.928067][T18804] loop2: detected capacity change from 0 to 2640 [ 951.243420][T18804] buffer_io_error: 325 callbacks suppressed [ 951.243470][T18804] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 951.276612][T18804] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 951.281264][T18804] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 951.317703][T18804] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 951.322455][T18804] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 951.329110][T18804] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 951.335331][T18804] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 951.348114][T18804] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 951.357881][T18804] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 951.362893][T18804] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 951.969317][T18809] md: recover of RAID array md0 [ 951.991995][T18809] md: md0: recover done. [ 952.387903][T18815] md: recover of RAID array md0 [ 952.391610][T18815] md: md0: recover done. [ 952.445150][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'. [ 952.476713][T18817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2262'. [ 952.712819][T18823] md: recover of RAID array md0 [ 952.745007][T18823] md: md0: recover done. [ 952.883432][T18824] md: recover of RAID array md0 [ 952.886123][T18824] md: md0: recover done. [ 953.129406][T18829] md: recover of RAID array md0 [ 953.143332][T18829] md: md0: recover done. [ 953.866544][T18834] md: recover of RAID array md0 [ 953.869687][T18834] md: md0: recover done. [ 954.326455][T18836] md: recover of RAID array md0 [ 954.330061][T18836] md: md0: recover done. [ 954.744715][T18839] md: recover of RAID array md0 [ 954.754514][T18839] md: md0: recover done. [ 955.734091][T18842] md: recover of RAID array md0 [ 955.737184][T18842] md: md0: recover done. [ 955.804831][T18843] md: recover of RAID array md0 [ 955.808670][T18843] md: md0: recover done. [ 955.865029][T18844] md: recover of RAID array md0 [ 955.869074][T18844] md: md0: recover done. [ 956.055228][T18845] md: recover of RAID array md0 [ 956.790840][T18845] md: md0: recover done. [ 957.217365][T18853] md: recover of RAID array md0 [ 957.231687][T18853] md: md0: recover done. [ 957.536141][T18855] md: recover of RAID array md0 [ 957.540206][T18855] md: md0: recover done. [ 957.595145][T18856] md: recover of RAID array md0 [ 957.599193][T18856] md: md0: recover done. [ 957.685131][T18857] md: recover of RAID array md0 [ 957.688882][T18857] md: md0: recover done. [ 957.853848][T18858] md: recover of RAID array md0 [ 957.858479][T18858] md: md0: recover done. [ 958.003857][T18859] md: recover of RAID array md0 [ 958.006811][T18859] md: md0: recover done. [ 958.063988][T18860] md: recover of RAID array md0 [ 958.067469][T18860] md: md0: recover done. [ 958.244955][T18861] md: recover of RAID array md0 [ 958.249434][T18861] md: md0: recover done. [ 958.341999][T18863] md: recover of RAID array md0 [ 958.346719][T18863] md: md0: recover done. [ 958.570211][T18867] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 958.679014][T18867] cramfs: wrong magic [ 959.595820][T18871] md: recover of RAID array md0 [ 959.603198][T18871] md: md0: recover done. [ 961.007726][T18876] md: recover of RAID array md0 [ 961.048852][T18876] md: md0: recover done. [ 961.335811][T18877] md: recover of RAID array md0 [ 961.339542][T18877] md: md0: recover done. [ 961.660323][T18881] md: recover of RAID array md0 [ 961.681614][T18881] md: md0: recover done. [ 961.998527][T18885] binder: 18884:18885 ioctl c00c6211 0 returned -14 [ 962.237348][T18888] loop2: detected capacity change from 0 to 2640 [ 963.729633][T18888] buffer_io_error: 320 callbacks suppressed [ 963.729674][T18888] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 963.751376][T18892] md: recover of RAID array md0 [ 963.788659][T18851] Buffer I/O error on dev loop2, logical block 256, async page read [ 963.833721][T18892] md: md0: recover done. [ 963.840015][T18888] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 963.876943][T18888] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 963.894901][T18888] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 963.908010][T18888] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 963.944977][T18888] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 963.959886][T18888] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 963.990094][T18888] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 964.012049][T18888] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 964.033154][ T5733] Bluetooth: hci3: command 0x0c1a tx timeout [ 964.328177][T18897] md: recover of RAID array md0 [ 964.341764][T18897] md: md0: recover done. [ 964.656487][T18902] md: recover of RAID array md0 [ 964.665631][T18902] md: md0: recover done. [ 965.555929][T18910] md: recover of RAID array md0 [ 965.564652][T18910] md: md0: recover done. [ 966.115235][T18916] overlayfs: missing 'lowerdir' [ 967.938744][T18921] md: recover of RAID array md0 [ 967.941576][T18921] md: md0: recover done. [ 968.082780][T18926] md: recover of RAID array md0 [ 968.096744][T18926] md: md0: recover done. [ 968.221691][T18927] ip6_vti0: Caught tx_queue_len zero misconfig [ 968.591093][T18927] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 968.633678][T18927] cramfs: wrong magic [ 970.350103][T18938] md: recover of RAID array md0 [ 970.358492][T18938] md: md0: recover done. [ 970.657947][T18939] md: recover of RAID array md0 [ 970.660851][T18939] md: md0: recover done. [ 970.848404][T18941] md: recover of RAID array md0 [ 970.857001][T18941] md: md0: recover done. [ 971.004272][T18948] md: recover of RAID array md0 [ 971.007347][T18948] md: md0: recover done. [ 971.223680][T18955] md: recover of RAID array md0 [ 971.236093][T18955] md: md0: recover done. [ 971.339890][T18959] md: recover of RAID array md0 [ 971.345458][T18959] md: md0: recover done. [ 971.519728][T18962] md: recover of RAID array md0 [ 971.527524][T18962] md: md0: recover done. [ 971.832540][T18965] md: recover of RAID array md0 [ 971.846793][T18965] md: md0: recover done. [ 972.254077][T18969] md: recover of RAID array md0 [ 972.261288][T18969] md: md0: recover done. [ 972.578354][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 972.597529][T18976] md: recover of RAID array md0 [ 972.601193][T18976] md: md0: recover done. [ 972.608052][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 972.695707][T18979] md: recover of RAID array md0 [ 972.699507][T18979] md: md0: recover done. [ 972.894072][T18981] md: recover of RAID array md0 [ 972.897390][T18981] md: md0: recover done. [ 972.973793][T18985] md: recover of RAID array md0 [ 972.982133][T18985] md: md0: recover done. [ 973.216929][T18987] md: recover of RAID array md0 [ 973.223548][T18987] md: md0: recover done. [ 973.773836][T18992] md: recover of RAID array md0 [ 973.824156][T18992] md: md0: recover done. [ 974.493673][T19000] md: recover of RAID array md0 [ 974.498169][T19000] md: md0: recover done. [ 974.962534][T19007] md: recover of RAID array md0 [ 974.969875][T19007] md: md0: recover done. [ 975.247818][T19008] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 975.301336][T19008] cramfs: wrong magic [ 975.355109][T19010] md: recover of RAID array md0 [ 975.371252][T19010] md: md0: recover done. [ 975.727268][T19013] md: recover of RAID array md0 [ 975.738963][T19013] md: md0: recover done. [ 977.268879][T19017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2298'. [ 977.279895][T19017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2298'. [ 979.140528][T19029] md: recover of RAID array md0 [ 979.143504][T19029] md: md0: recover done. [ 979.321221][T19033] md: recover of RAID array md0 [ 979.327095][T19033] md: md0: recover done. [ 979.369180][T19034] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2301'. [ 979.413250][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2301'. [ 980.523598][T19045] md: recover of RAID array md0 [ 980.532010][T19045] md: md0: recover done. [ 980.785485][T19054] md: recover of RAID array md0 [ 980.792270][T19054] md: md0: recover done. [ 980.982661][T19057] md: recover of RAID array md0 [ 981.001140][T19057] md: md0: recover done. [ 981.250240][T19062] md: recover of RAID array md0 [ 981.253788][T19062] md: md0: recover done. [ 981.326797][T19064] md: recover of RAID array md0 [ 981.337480][T19064] md: md0: recover done. [ 981.723823][T19066] md: recover of RAID array md0 [ 981.726975][T19066] md: md0: recover done. [ 981.834559][T19068] md: recover of RAID array md0 [ 981.841726][T19068] md: md0: recover done. [ 982.146397][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2308'. [ 982.158085][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2308'. [ 982.255471][T19080] md: recover of RAID array md0 [ 982.265728][T19080] md: md0: recover done. [ 983.444168][T19087] comedi comedi0: pcmda12: I/O base address not correctly aligned [ 984.151655][T19085] netlink: 'syz.4.2314': attribute type 4 has an invalid length. [ 984.274609][T19093] md: recover of RAID array md0 [ 984.277288][T19093] md: md0: recover done. [ 984.364419][T19095] md: recover of RAID array md0 [ 984.367102][T19095] md: md0: recover done. [ 984.406379][T19087] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 984.430026][T19087] veth1_vlan: left promiscuous mode [ 984.440775][T19087] veth0_vlan: entered promiscuous mode [ 984.469540][T19097] md: recover of RAID array md0 [ 984.479766][T19097] md: md0: recover done. [ 984.606463][T19087] veth1_vlan: entered promiscuous mode [ 984.631381][T19087] veth1_macvtap: left promiscuous mode [ 984.641249][T19087] veth0_macvtap: left promiscuous mode [ 984.657139][T19098] md: recover of RAID array md0 [ 984.660915][T19098] md: md0: recover done. [ 984.918114][T19087] veth0_macvtap: entered promiscuous mode [ 984.937552][T19087] veth1_macvtap: entered promiscuous mode [ 985.000594][T19087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 985.015967][T19087] 8021q: adding VLAN 0 to HW filter on device bond3 [ 985.030153][T19087] 8021q: adding VLAN 0 to HW filter on device eth0 [ 985.045264][T19087] 8021q: adding VLAN 0 to HW filter on device eth1 [ 985.055651][T19087] 8021q: adding VLAN 0 to HW filter on device eth2 [ 985.065656][T19087] 8021q: adding VLAN 0 to HW filter on device eth3 [ 985.082412][T19087] bridge0: port 3(vlan2) entered blocking state [ 985.086415][T19087] bridge0: port 3(vlan2) entered listening state [ 985.107950][T19087] 8021q: adding VLAN 0 to HW filter on device bond2 [ 985.139349][T19091] bridge0: port 4(syz_tun) entered disabled state [ 985.189838][T19091] syz_tun (unregistering): left allmulticast mode [ 985.194323][T19103] md: recover of RAID array md0 [ 985.199425][T19103] md: md0: recover done. [ 985.265928][T19091] syz_tun (unregistering): left promiscuous mode [ 985.284764][T19091] bridge0: port 4(syz_tun) entered disabled state [ 985.448641][T19106] md: recover of RAID array md0 [ 985.456696][T19106] md: md0: recover done. [ 985.636120][T19110] md: recover of RAID array md0 [ 985.731513][T19110] md: md0: recover done. [ 985.757598][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.778308][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 985.794626][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.813895][ T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 985.819430][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.827030][ T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 985.854569][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.864865][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 985.913845][T19115] md: recover of RAID array md0 [ 985.916666][T19115] md: md0: recover done. [ 986.013735][T19116] md: recover of RAID array md0 [ 986.021981][T19116] md: md0: recover done. [ 986.085907][T19118] md: recover of RAID array md0 [ 986.096424][T19118] md: md0: recover done. [ 986.394306][T14382] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 986.456458][T19119] md: recover of RAID array md0 [ 986.460028][T19119] md: md0: recover done. [ 986.554177][T14382] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 986.578703][T14382] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 986.599334][T14382] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 986.617889][T14382] usb 6-1: string descriptor 0 read error: -22 [ 986.623647][T19120] md: recover of RAID array md0 [ 986.639667][T14382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.643699][T19120] md: md0: recover done. [ 987.455863][T14382] cdc_ncm 6-1:1.0: bind() failure [ 987.469147][T14382] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 987.478183][T14382] cdc_ncm 6-1:1.1: bind() failure [ 987.508816][T19126] comedi comedi0: pcmda12: I/O base address not correctly aligned [ 987.512042][T14382] usb 6-1: USB disconnect, device number 26 [ 987.584333][T19131] md: recover of RAID array md0 [ 987.594655][T19131] md: md0: recover done. [ 987.674157][T19135] md: recover of RAID array md0 [ 987.705817][T19135] md: md0: recover done. [ 988.004433][T19136] md: recover of RAID array md0 [ 988.053193][T19136] md: md0: recover done. [ 988.418731][T19126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 988.515711][T19141] ehci-pci 0000:00:1d.7: remove, state 1 [ 988.522219][T19141] usb usb1: USB disconnect, device number 1 [ 988.526033][T19141] usb 1-1: USB disconnect, device number 2 [ 988.577201][ T5822] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.585374][ T5822] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.585892][T19142] md: recover of RAID array md0 [ 988.617062][ T5822] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.659429][ T5822] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.696281][T19142] md: md0: recover done. [ 988.748355][T19141] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 988.786181][T19144] md: recover of RAID array md0 [ 988.790167][T19144] md: md0: recover done. [ 988.796324][T19143] uhci_hcd 0000:00:1d.0: remove, state 1 [ 988.884966][T14382] hub 2-0:1.0: activate --> -108 [ 988.891274][T19145] md: recover of RAID array md0 [ 988.900167][T19145] md: md0: recover done. [ 988.916256][T19143] usb usb2: USB disconnect, device number 1 [ 989.028042][T19146] md: recover of RAID array md0 [ 989.031734][T19146] md: md0: recover done. [ 989.127665][T19143] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 989.139531][T19147] md: recover of RAID array md0 [ 989.150628][T19147] md: md0: recover done. [ 989.376754][T19149] md: recover of RAID array md0 [ 989.379642][T19149] md: md0: recover done. [ 989.445042][T19152] md: recover of RAID array md0 [ 989.447747][T19152] md: md0: recover done. [ 989.509148][T19154] md: recover of RAID array md0 [ 989.513605][T19154] md: md0: recover done. [ 989.588569][T19155] md: recover of RAID array md0 [ 989.592822][T19155] md: md0: recover done. [ 989.675807][T19156] md: recover of RAID array md0 [ 989.679730][T19156] md: md0: recover done. [ 989.864817][T19158] md: recover of RAID array md0 [ 989.868203][T19158] md: md0: recover done. [ 989.994140][T19162] md: recover of RAID array md0 [ 989.997690][T19162] md: md0: recover done. [ 990.291541][T19164] md: recover of RAID array md0 [ 990.296887][T19164] md: md0: recover done. [ 990.907301][T19170] md: recover of RAID array md0 [ 990.910444][T19170] md: md0: recover done. [ 990.986795][T19171] md: recover of RAID array md0 [ 990.990556][T19171] md: md0: recover done. [ 991.069922][T19172] md: recover of RAID array md0 [ 991.078797][T19172] md: md0: recover done. [ 991.196752][T19173] md: recover of RAID array md0 [ 991.213979][T19173] md: md0: recover done. [ 991.377227][T19176] md: recover of RAID array md0 [ 991.384261][T19176] md: md0: recover done. [ 991.735819][T19181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2329'. [ 991.752880][T19182] md: recover of RAID array md0 [ 991.782504][T19182] md: md0: recover done. [ 992.335807][T19184] md: recover of RAID array md0 [ 992.339864][T19184] md: md0: recover done. [ 992.527922][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.532524][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.044117][T19186] md: recover of RAID array md0 [ 993.049727][T19186] md: md0: recover done. [ 993.233893][T19187] md: recover of RAID array md0 [ 993.247666][T19187] md: md0: recover done. [ 993.600163][T19191] md: recover of RAID array md0 [ 993.628325][T19191] md: md0: recover done. [ 994.964471][T19196] md: recover of RAID array md0 [ 994.967449][T19196] md: md0: recover done. [ 995.285158][T19199] md: recover of RAID array md0 [ 995.288855][T19199] md: md0: recover done. [ 995.425307][T19203] md: recover of RAID array md0 [ 995.429005][T19203] md: md0: recover done. [ 995.659567][T19206] md: recover of RAID array md0 [ 995.662461][T19206] md: md0: recover done. [ 995.996761][T19212] md: recover of RAID array md0 [ 996.000299][T19212] md: md0: recover done. [ 996.589954][T19217] md: recover of RAID array md0 [ 996.594381][T19217] md: md0: recover done. [ 996.954422][T19221] md: recover of RAID array md0 [ 996.967985][T19221] md: md0: recover done. [ 997.812428][T19226] net_ratelimit: 50 callbacks suppressed [ 997.812448][T19226] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 997.853834][T19226] input: syz0 as /devices/virtual/input/input37 [ 998.007411][T19228] md: recover of RAID array md0 [ 998.010087][T19228] md: md0: recover done. [ 998.165326][T19237] md: recover of RAID array md0 [ 998.193473][T19237] md: md0: recover done. [ 998.200345][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2342'. [ 998.251394][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2342'. [ 998.507847][T19244] md: recover of RAID array md0 [ 998.519022][T19244] md: md0: recover done. [ 998.745985][T19246] md: recover of RAID array md0 [ 998.749866][T19246] md: md0: recover done. [ 998.895735][T19249] loop6: detected capacity change from 0 to 2640 [ 998.955397][T19249] buffer_io_error: 247 callbacks suppressed [ 998.955411][T19249] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.015897][T19249] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.036771][T19249] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.056758][T19249] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.067213][T19249] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.071996][T19249] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.082646][T19249] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.089074][T19249] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.105030][T19249] ldm_validate_partition_table(): Disk read failed. [ 999.141010][T19249] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.177220][T19249] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.193998][T19249] Dev loop6: unable to read RDB block 0 [ 999.206844][T19249] loop6: unable to read partition table [ 999.221034][T19249] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 999.523705][T19256] md: recover of RAID array md0 [ 999.543573][T19256] md: md0: recover done. [ 999.651390][T19257] md: recover of RAID array md0 [ 999.683270][T19257] md: md0: recover done. [ 999.774216][T19260] md: recover of RAID array md0 [ 999.777435][T19260] md: md0: recover done. [ 999.885489][T19262] md: recover of RAID array md0 [ 999.888614][T19262] md: md0: recover done. [ 1000.037930][T19267] md: recover of RAID array md0 [ 1000.069519][T19267] md: md0: recover done. [ 1000.656412][T19270] md: recover of RAID array md0 [ 1000.660647][T19270] md: md0: recover done. [ 1000.818717][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2348'. [ 1000.881964][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2348'. [ 1001.067239][T19275] md: recover of RAID array md0 [ 1001.086239][T19275] md: md0: recover done. [ 1001.454913][T19279] md: recover of RAID array md0 [ 1001.458771][T19279] md: md0: recover done. [ 1001.723774][T19287] md: recover of RAID array md0 [ 1001.727058][T19287] md: md0: recover done. [ 1003.065553][T19297] md: recover of RAID array md0 [ 1003.071000][T19297] md: md0: recover done. [ 1003.317021][T19303] md: recover of RAID array md0 [ 1003.347399][T19303] md: md0: recover done. [ 1003.915531][T19312] md: recover of RAID array md0 [ 1003.919253][T19312] md: md0: recover done. [ 1004.108329][T19314] md: recover of RAID array md0 [ 1004.117965][T19314] md: md0: recover done. [ 1004.435531][T19315] md: recover of RAID array md0 [ 1004.443556][T19315] md: md0: recover done. [ 1004.878244][T19319] md: recover of RAID array md0 [ 1004.881065][T19319] md: md0: recover done. [ 1005.007513][T19320] md: recover of RAID array md0 [ 1005.013509][T19320] md: md0: recover done. [ 1005.372484][T19322] md: recover of RAID array md0 [ 1005.377682][T19322] md: md0: recover done. [ 1005.456904][T19324] md: recover of RAID array md0 [ 1005.461112][T19324] md: md0: recover done. [ 1005.558753][T19326] md: recover of RAID array md0 [ 1005.568124][T19326] md: md0: recover done. [ 1005.713687][T17317] Bluetooth: hci3: command 0x0c1a tx timeout [ 1005.996927][T19334] md: recover of RAID array md0 [ 1006.006718][T19334] md: md0: recover done. [ 1006.116809][T19336] md: recover of RAID array md0 [ 1006.123526][T19336] md: md0: recover done. [ 1006.487414][T19338] md: recover of RAID array md0 [ 1006.491328][T19338] md: md0: recover done. [ 1006.604318][T19339] md: recover of RAID array md0 [ 1006.608354][T19339] md: md0: recover done. [ 1006.714961][T19340] md: recover of RAID array md0 [ 1006.719105][T19340] md: md0: recover done. [ 1006.795052][T19341] md: recover of RAID array md0 [ 1006.798828][T19341] md: md0: recover done. [ 1006.915018][T19342] md: recover of RAID array md0 [ 1006.919211][T19342] md: md0: recover done. [ 1007.033992][T19343] md: recover of RAID array md0 [ 1007.037898][T19343] md: md0: recover done. [ 1007.104397][T19344] md: recover of RAID array md0 [ 1007.108181][T19344] md: md0: recover done. [ 1007.371502][T19348] md: recover of RAID array md0 [ 1007.379591][T19348] md: md0: recover done. [ 1007.896031][T19351] md: recover of RAID array md0 [ 1007.907077][T19351] md: md0: recover done. [ 1008.685055][T19360] md: recover of RAID array md0 [ 1008.688522][T19360] md: md0: recover done. [ 1008.853930][T19361] md: recover of RAID array md0 [ 1008.859749][T19361] md: md0: recover done. [ 1008.944931][T19364] md: recover of RAID array md0 [ 1008.949174][T19364] md: md0: recover done. [ 1009.028126][T19366] md: recover of RAID array md0 [ 1009.035428][T19366] md: md0: recover done. [ 1009.133635][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2367'. [ 1009.155153][T19373] md: recover of RAID array md0 [ 1009.160969][T19373] md: md0: recover done. [ 1009.176798][T19372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2367'. [ 1009.300413][T19376] netlink: 'syz.2.2368': attribute type 9 has an invalid length. [ 1009.306118][T19376] netlink: 'syz.2.2368': attribute type 7 has an invalid length. [ 1009.310413][T19376] netlink: 'syz.2.2368': attribute type 8 has an invalid length. [ 1010.295710][T19381] md: recover of RAID array md0 [ 1010.306520][T19381] md: md0: recover done. [ 1011.587529][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1011.623576][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1011.643038][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xfbee instead [ 1011.665812][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2a2d instead [ 1011.678719][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1011.690388][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1011.700511][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1011.711982][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1011.732499][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1011.752125][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1011.781645][T19386] jffs2: Further such events for this erase block will not be printed [ 1011.806944][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1011.823493][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1011.831592][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xfbee instead [ 1011.864884][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2a2d instead [ 1011.872092][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1011.896114][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1011.904819][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1011.911055][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1011.946179][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1011.948048][T19387] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2370'. [ 1011.982324][T19388] md: recover of RAID array md0 [ 1011.997173][T19388] md: md0: recover done. [ 1012.015589][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1012.052354][T19386] jffs2: Further such events for this erase block will not be printed [ 1012.082765][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1012.158422][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1012.171860][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xfbee instead [ 1012.191226][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x2a2d instead [ 1012.266892][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1012.280243][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1012.291694][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xfbee instead [ 1012.326812][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x2a2d instead [ 1012.498306][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1012.510563][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1012.520692][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xfbee instead [ 1012.529572][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x2a2d instead [ 1012.566994][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1012.585345][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1012.700086][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xfbee instead [ 1012.771734][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x2a2d instead [ 1012.900256][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1013.019533][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1013.034182][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xfbee instead [ 1013.044634][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x2a2d instead [ 1013.108305][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1013.151758][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1013.170565][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xfbee instead [ 1013.191206][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x2a2d instead [ 1013.205135][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1013.221028][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1013.234737][T19392] md: recover of RAID array md0 [ 1013.251083][T19392] md: md0: recover done. [ 1013.315135][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xfbee instead [ 1013.356754][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x2a2d instead [ 1013.375373][T19393] md: recover of RAID array md0 [ 1013.383825][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1013.392439][T19393] md: md0: recover done. [ 1013.400502][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1013.431042][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xfbee instead [ 1013.442021][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x2a2d instead [ 1013.463324][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1013.469809][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1013.484917][T19394] md: recover of RAID array md0 [ 1013.495175][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xfbee instead [ 1013.495596][T19394] md: md0: recover done. [ 1013.574446][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x2a2d instead [ 1013.580961][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1013.588009][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1013.596064][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xfbee instead [ 1013.604983][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x2a2d instead [ 1013.611501][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1013.617663][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1013.623563][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xfbee instead [ 1013.629361][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x2a2d instead [ 1013.633923][T19395] md: recover of RAID array md0 [ 1013.636635][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1013.639082][T19395] md: md0: recover done. [ 1013.644403][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1013.655054][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xfbee instead [ 1013.660922][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x2a2d instead [ 1013.671271][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1013.678874][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1013.686809][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xfbee instead [ 1013.694376][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x2a2d instead [ 1013.702571][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1013.710401][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1013.717741][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xfbee instead [ 1013.725932][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x2a2d instead [ 1013.733374][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1013.739139][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1013.747230][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xfbee instead [ 1013.753426][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x2a2d instead [ 1013.759879][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1013.766073][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1013.772367][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xfbee instead [ 1013.778658][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x2a2d instead [ 1013.785735][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1013.792108][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1013.798647][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xfbee instead [ 1013.806348][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x2a2d instead [ 1013.812704][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1013.819354][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1013.825421][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xfbee instead [ 1013.831188][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x2a2d instead [ 1013.838397][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1013.844690][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1013.850751][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xfbee instead [ 1013.856550][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x2a2d instead [ 1013.862580][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1013.870344][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1013.876179][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xfbee instead [ 1013.882696][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x2a2d instead [ 1013.888891][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1013.895738][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1013.901544][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xfbee instead [ 1013.909537][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x2a2d instead [ 1013.915895][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1013.921992][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1013.927990][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xfbee instead [ 1013.934176][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x2a2d instead [ 1013.940404][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1013.946270][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1013.951974][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xfbee instead [ 1013.969802][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x2a2d instead [ 1013.976515][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1013.982514][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1014.002731][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xfbee instead [ 1014.015384][T19396] md: recover of RAID array md0 [ 1014.018792][T19396] md: md0: recover done. [ 1014.041042][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x2a2d instead [ 1014.072071][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1014.093208][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1014.189521][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xfbee instead [ 1014.230381][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x2a2d instead [ 1014.253353][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1014.265343][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1014.288834][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xfbee instead [ 1014.303157][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x2a2d instead [ 1014.309711][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1014.317872][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1014.324328][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xfbee instead [ 1014.330456][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x2a2d instead [ 1014.337404][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1014.343991][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1014.349688][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xfbee instead [ 1014.378525][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x2a2d instead [ 1014.394914][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1014.419094][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1014.438427][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xfbee instead [ 1014.454749][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x2a2d instead [ 1014.472113][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1014.494753][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1014.501998][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xfbee instead [ 1014.510207][T19386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x2a2d instead [ 1014.516009][T19405] md: recover of RAID array md0 [ 1014.516091][T19405] md: md0: recover done. [ 1014.530445][T19386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1014.538626][T19386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1015.553462][ C3] bridge0: port 3(vlan2) entered learning state [ 1015.602613][T19411] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2374'. [ 1016.297675][T19414] md: recover of RAID array md0 [ 1016.318641][T19414] md: md0: recover done. [ 1016.794337][T19419] md: recover of RAID array md0 [ 1016.806785][T19419] md: md0: recover done. [ 1017.155138][T19421] md: recover of RAID array md0 [ 1017.158515][T19421] md: md0: recover done. [ 1017.284923][T19424] md: recover of RAID array md0 [ 1017.287714][T19424] md: md0: recover done. [ 1017.389275][T19425] md: recover of RAID array md0 [ 1017.446787][T19425] md: md0: recover done. [ 1018.728871][T19440] md: recover of RAID array md0 [ 1018.753322][T19440] md: md0: recover done. [ 1018.757351][T19439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2378'. [ 1019.184068][T19439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2378'. [ 1019.577294][T19443] md: recover of RAID array md0 [ 1019.590037][T19443] md: md0: recover done. [ 1020.110976][T19453] md: recover of RAID array md0 [ 1020.142464][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2380'. [ 1020.156389][T19453] md: md0: recover done. [ 1020.168653][T19450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2380'. [ 1020.742592][T19459] md: recover of RAID array md0 [ 1020.786994][T19459] md: md0: recover done. [ 1021.332500][T19460] md: recover of RAID array md0 [ 1021.336139][T19460] md: md0: recover done. [ 1022.404799][T19461] md: recover of RAID array md0 [ 1022.409052][T19461] md: md0: recover done. [ 1022.524173][T19464] md: recover of RAID array md0 [ 1022.527747][T19464] md: md0: recover done. [ 1022.665278][T19466] md: recover of RAID array md0 [ 1022.670055][T19466] md: md0: recover done. [ 1022.775178][T19469] md: recover of RAID array md0 [ 1022.778190][T19469] md: md0: recover done. [ 1022.903485][T19475] md: recover of RAID array md0 [ 1022.907531][T19475] md: md0: recover done. [ 1023.606374][T19483] md: recover of RAID array md0 [ 1023.609749][T19483] md: md0: recover done. [ 1023.816587][T19486] md: recover of RAID array md0 [ 1023.820124][T19486] md: md0: recover done. [ 1024.391983][T19491] md: recover of RAID array md0 [ 1024.401744][T19491] md: md0: recover done. [ 1024.459028][T19489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2387'. [ 1024.500347][T19489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2387'. [ 1025.649543][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'. [ 1025.689199][T19495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2389'. [ 1025.816708][T19499] md: recover of RAID array md0 [ 1025.830406][T19499] md: md0: recover done. [ 1026.127537][T19506] md: recover of RAID array md0 [ 1026.130734][T19506] md: md0: recover done. [ 1026.362578][T19508] md: recover of RAID array md0 [ 1026.375391][T19508] md: md0: recover done. [ 1026.791244][T19511] md: recover of RAID array md0 [ 1026.860963][T19511] md: md0: recover done. [ 1028.258622][T19514] md: recover of RAID array md0 [ 1028.261563][T19514] md: md0: recover done. [ 1029.184842][T19515] md: recover of RAID array md0 [ 1029.229290][T19515] md: md0: recover done. [ 1029.395047][T19516] md: recover of RAID array md0 [ 1029.398723][T19516] md: md0: recover done. [ 1029.464215][T19517] md: recover of RAID array md0 [ 1029.466906][T19517] md: md0: recover done. [ 1029.544427][T19518] md: recover of RAID array md0 [ 1029.547099][T19518] md: md0: recover done. [ 1029.604233][T19519] md: recover of RAID array md0 [ 1029.607192][T19519] md: md0: recover done. [ 1029.665935][T19520] md: recover of RAID array md0 [ 1029.669594][T19520] md: md0: recover done. [ 1029.724836][T19521] md: recover of RAID array md0 [ 1029.728651][T19521] md: md0: recover done. [ 1029.783881][T19522] md: recover of RAID array md0 [ 1029.789894][T19522] md: md0: recover done. [ 1029.904320][T19527] md: recover of RAID array md0 [ 1029.907549][T19527] md: md0: recover done. [ 1030.197595][T19532] md: recover of RAID array md0 [ 1030.234392][T19532] md: md0: recover done. [ 1031.019666][T19536] md: recover of RAID array md0 [ 1031.033336][T19536] md: md0: recover done. [ 1032.312423][T19540] md: recover of RAID array md0 [ 1032.316780][T19540] md: md0: recover done. [ 1032.442447][T19543] md: recover of RAID array md0 [ 1032.446308][T19543] md: md0: recover done. [ 1032.537793][T19546] md: recover of RAID array md0 [ 1032.541234][T19546] md: md0: recover done. [ 1032.844076][T19554] md: recover of RAID array md0 [ 1032.847190][T19554] md: md0: recover done. [ 1033.024756][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2398'. [ 1033.030089][T19555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2398'. [ 1033.081600][T19560] md: recover of RAID array md0 [ 1033.085462][T19560] md: md0: recover done. [ 1033.450540][T19567] md: recover of RAID array md0 [ 1033.454937][T19567] md: md0: recover done. [ 1033.951578][T19571] md: recover of RAID array md0 [ 1033.961381][T19571] md: md0: recover done. [ 1034.052793][T15409] IPVS: starting estimator thread 0... [ 1034.144918][T19574] IPVS: using max 44 ests per chain, 105600 per kthread [ 1035.046535][T19579] md: recover of RAID array md0 [ 1035.049492][T19579] md: md0: recover done. [ 1036.052894][T19585] md: recover of RAID array md0 [ 1036.057187][T19585] md: md0: recover done. [ 1036.699227][T19589] md: recover of RAID array md0 [ 1036.702668][T19589] md: md0: recover done. [ 1037.009814][T19595] md: recover of RAID array md0 [ 1037.015177][T19595] md: md0: recover done. [ 1037.530663][T19600] md: recover of RAID array md0 [ 1037.551600][T19600] md: md0: recover done. [ 1037.722429][T19603] md: recover of RAID array md0 [ 1037.725873][T19603] md: md0: recover done. [ 1037.791744][T19604] md: recover of RAID array md0 [ 1037.797675][T19604] md: md0: recover done. [ 1037.973679][T19608] md: recover of RAID array md0 [ 1037.978399][T19608] md: md0: recover done. [ 1038.553639][T19609] md: recover of RAID array md0 [ 1038.560202][T19609] md: md0: recover done. [ 1038.690500][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2409'. [ 1038.842221][T17317] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1038.851727][T19617] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1038.939943][T19617] input: syz0 as /devices/virtual/input/input38 [ 1039.322472][T19623] md: recover of RAID array md0 [ 1039.329245][T19623] md: md0: recover done. [ 1039.439955][T19626] ================================================================== [ 1039.444428][T19626] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 1039.448447][T19626] Write of size 4 at addr ffff888024f04f08 by task syz.4.2411/19626 [ 1039.454849][T19626] [ 1039.456062][T19626] CPU: 1 UID: 0 PID: 19626 Comm: syz.4.2411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1039.456081][T19626] Tainted: [L]=SOFTLOCKUP [ 1039.456086][T19626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1039.456094][T19626] Call Trace: [ 1039.456101][T19626] [ 1039.456107][T19626] dump_stack_lvl+0x100/0x190 [ 1039.456127][T19626] print_report+0x13d/0x4b0 [ 1039.456146][T19626] ? __virt_addr_valid+0x239/0x430 [ 1039.456176][T19626] ? try_module_get+0x4c/0xd0 [ 1039.456195][T19626] kasan_report+0xdf/0x1c0 [ 1039.456217][T19626] ? try_module_get+0x4c/0xd0 [ 1039.456236][T19626] kasan_check_range+0x10f/0x1e0 [ 1039.456251][T19626] try_module_get+0x4c/0xd0 [ 1039.456268][T19626] dvb_device_open+0x124/0x3b0 [ 1039.456292][T19626] ? __pfx_dvb_device_open+0x10/0x10 [ 1039.456309][T19626] chrdev_open+0x234/0x6a0 [ 1039.456332][T19626] ? __pfx_apparmor_file_open+0x10/0x10 [ 1039.456347][T19626] ? __pfx_chrdev_open+0x10/0x10 [ 1039.456363][T19626] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1039.456384][T19626] do_dentry_open+0x6ab/0x14d0 [ 1039.456401][T19626] ? __pfx_chrdev_open+0x10/0x10 [ 1039.456415][T19626] vfs_open+0x82/0x3f0 [ 1039.456433][T19626] path_openat+0x19fa/0x2440 [ 1039.456451][T19626] ? __pfx_path_openat+0x10/0x10 [ 1039.456467][T19626] do_file_open+0x20e/0x430 [ 1039.456481][T19626] ? __pfx_do_file_open+0x10/0x10 [ 1039.456499][T19626] ? _raw_spin_unlock+0x28/0x50 [ 1039.456518][T19626] ? alloc_fd+0x471/0x7a0 [ 1039.456532][T19626] do_sys_openat2+0x10f/0x1e0 [ 1039.456548][T19626] ? __pfx_do_sys_openat2+0x10/0x10 [ 1039.456564][T19626] ? do_raw_spin_lock+0x128/0x260 [ 1039.456577][T19626] ? find_held_lock+0x2b/0x80 [ 1039.456593][T19626] ? kcov_ioctl+0x17a/0x760 [ 1039.456617][T19626] ? rcu_is_watching+0x13/0xc0 [ 1039.456632][T19626] ? kcov_ioctl+0x17a/0x760 [ 1039.456648][T19626] __ia32_compat_sys_openat+0x12d/0x210 [ 1039.456665][T19626] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1039.456690][T19626] do_int80_emulation+0x166/0x650 [ 1039.456704][T19626] asm_int80_emulation+0x1a/0x20 [ 1039.456718][T19626] RIP: 0023:0xf71574eb [ 1039.456730][T19626] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1039.456741][T19626] RSP: 002b:00000000f53ec03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1039.456754][T19626] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53ec100 [ 1039.456761][T19626] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1039.456768][T19626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1039.456775][T19626] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1039.456782][T19626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1039.456794][T19626] [ 1039.456798][T19626] [ 1039.617164][T19626] Allocated by task 1: [ 1039.619837][T19626] kasan_save_stack+0x30/0x50 [ 1039.622373][T19626] kasan_save_track+0x14/0x30 [ 1039.624758][T19626] __kasan_kmalloc+0xaa/0xb0 [ 1039.627139][T19626] __kvmalloc_node_noprof+0x351/0x970 [ 1039.629925][T19626] v4l2_ctrl_new+0x4a6/0x23a0 [ 1039.632368][T19626] v4l2_ctrl_new_std+0x1bb/0x290 [ 1039.634921][T19626] vimc_lens_add+0xa5/0x220 [ 1039.637257][T19626] vimc_probe+0x3a0/0xfb0 [ 1039.639535][T19626] platform_probe+0x106/0x1d0 [ 1039.641979][T19626] really_probe+0x241/0xa60 [ 1039.644314][T19626] __driver_probe_device+0x20e/0x450 [ 1039.647040][T19626] driver_probe_device+0x4a/0x140 [ 1039.649662][T19626] __driver_attach+0x21f/0x5b0 [ 1039.652152][T19626] bus_for_each_dev+0x13e/0x1d0 [ 1039.654666][T19626] bus_add_driver+0x305/0x5b0 [ 1039.657082][T19626] driver_register+0x1e2/0x360 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1039.659590][T19626] vimc_init+0x67/0xb0 [ 1039.661891][T19626] do_one_initcall+0x11c/0x6f0 [ 1039.664394][T19626] kernel_init_freeable+0x6ea/0x7b0 [ 1039.667071][T19626] kernel_init+0x21/0x1e0 [ 1039.669305][T19626] ret_from_fork+0x730/0xd60 [ 1039.671729][T19626] ret_from_fork_asm+0x1a/0x30 [ 1039.674197][T19626] [ 1039.675397][T19626] The buggy address belongs to the object at ffff888024f04e00 [ 1039.675397][T19626] which belongs to the cache kmalloc-256 of size 256 [ 1039.682664][T19626] The buggy address is located 16 bytes to the right of [ 1039.682664][T19626] allocated 248-byte region [ffff888024f04e00, ffff888024f04ef8) [ 1039.690180][T19626] [ 1039.691392][T19626] The buggy address belongs to the physical page: [ 1039.694686][T19626] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24f04 [ 1039.699164][T19626] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1039.703553][T19626] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1039.707389][T19626] page_type: f5(slab) [ 1039.709426][T19626] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 1039.713805][T19626] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1039.718201][T19626] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 1039.722678][T19626] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1039.727119][T19626] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1039.731581][T19626] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1039.736023][T19626] page dumped because: kasan: bad access detected [ 1039.739356][T19626] page_owner tracks the page as allocated [ 1039.742357][T19626] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12625262470, free_ts 12205954915 [ 1039.752964][T19626] post_alloc_hook+0xfd/0x120 [ 1039.755383][T19626] get_page_from_freelist+0xf46/0x3500 [ 1039.758196][T19626] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1039.761279][T19626] new_slab+0xa2/0x660 [ 1039.763391][T19626] refill_objects+0xe3/0x410 [ 1039.765701][T19626] __pcs_replace_empty_main+0x372/0x680 [ 1039.768552][T19626] __kmalloc_cache_noprof+0x47b/0x6b0 [ 1039.771341][T19626] dvb_register_device+0x1d6/0x1e20 [ 1039.774042][T19626] dvb_register_frontend+0x552/0x820 [ 1039.776760][T19626] vidtv_bridge_probe+0x44b/0xa30 [ 1039.779355][T19626] platform_probe+0x106/0x1d0 [ 1039.781803][T19626] really_probe+0x241/0xa60 [ 1039.784126][T19626] __driver_probe_device+0x20e/0x450 [ 1039.786846][T19626] driver_probe_device+0x4a/0x140 [ 1039.789420][T19626] __driver_attach+0x21f/0x5b0 [ 1039.791898][T19626] bus_for_each_dev+0x13e/0x1d0 [ 1039.794401][T19626] page last free pid 997 tgid 997 stack trace: [ 1039.797567][T19626] free_pages_prepare+0x586/0xd80 [ 1039.800176][T19626] __free_contig_range_common+0x14f/0x250 [ 1039.803133][T19626] free_pages_bulk+0x12a/0x200 [ 1039.805554][T19626] vm_area_free_pages+0xad/0x2b0 [ 1039.808076][T19626] vfree+0x108/0x730 [ 1039.810120][T19626] delayed_vfree_work+0x56/0x80 [ 1039.812637][T19626] process_one_work+0xa23/0x1940 [ 1039.815200][T19626] worker_thread+0x5ef/0xe50 [ 1039.817551][T19626] kthread+0x373/0x450 [ 1039.819690][T19626] ret_from_fork+0x730/0xd60 [ 1039.822070][T19626] ret_from_fork_asm+0x1a/0x30 [ 1039.824519][T19626] [ 1039.825718][T19626] Memory state around the buggy address: [ 1039.828616][T19626] ffff888024f04e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.832772][T19626] ffff888024f04e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 1039.836872][T19626] >ffff888024f04f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1039.841043][T19626] ^ [ 1039.843297][T19626] ffff888024f04f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1039.847436][T19626] ffff888024f05000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.851602][T19626] ================================================================== [ 1039.863666][T19626] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1039.867424][T19626] CPU: 1 UID: 0 PID: 19626 Comm: syz.4.2411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1039.873102][T19626] Tainted: [L]=SOFTLOCKUP [ 1039.875324][T19626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1039.880553][T19626] Call Trace: [ 1039.882235][T19626] [ 1039.883737][T19626] dump_stack_lvl+0x100/0x190 [ 1039.886111][T19626] vpanic+0x553/0x970 [ 1039.888147][T19626] ? __pfx_vpanic+0x10/0x10 [ 1039.890504][T19626] ? try_module_get+0x4c/0xd0 [ 1039.892913][T19626] panic+0xd1/0xe0 [ 1039.894844][T19626] ? __pfx_panic+0x10/0x10 [ 1039.897108][T19626] ? try_module_get+0x4c/0xd0 [ 1039.899546][T19626] ? preempt_schedule_common+0x3c/0xb0 [ 1039.902388][T19626] check_panic_on_warn.cold+0x19/0x34 [ 1039.905140][T19626] end_report.part.0+0x3a/0x90 [ 1039.907591][T19626] kasan_report.cold+0xe/0x18 [ 1039.910022][T19626] ? try_module_get+0x4c/0xd0 [ 1039.912456][T19626] kasan_check_range+0x10f/0x1e0 [ 1039.915028][T19626] try_module_get+0x4c/0xd0 [ 1039.917358][T19626] dvb_device_open+0x124/0x3b0 [ 1039.919831][T19626] ? __pfx_dvb_device_open+0x10/0x10 [ 1039.922568][T19626] chrdev_open+0x234/0x6a0 [ 1039.924843][T19626] ? __pfx_apparmor_file_open+0x10/0x10 [ 1039.927693][T19626] ? __pfx_chrdev_open+0x10/0x10 [ 1039.930275][T19626] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1039.933536][T19626] do_dentry_open+0x6ab/0x14d0 [ 1039.936006][T19626] ? __pfx_chrdev_open+0x10/0x10 [ 1039.938547][T19626] vfs_open+0x82/0x3f0 [ 1039.940679][T19626] path_openat+0x19fa/0x2440 [ 1039.943023][T19626] ? __pfx_path_openat+0x10/0x10 [ 1039.945552][T19626] do_file_open+0x20e/0x430 [ 1039.947883][T19626] ? __pfx_do_file_open+0x10/0x10 [ 1039.950509][T19626] ? _raw_spin_unlock+0x28/0x50 [ 1039.953007][T19626] ? alloc_fd+0x471/0x7a0 [ 1039.955227][T19626] do_sys_openat2+0x10f/0x1e0 [ 1039.957637][T19626] ? __pfx_do_sys_openat2+0x10/0x10 [ 1039.960355][T19626] ? do_raw_spin_lock+0x128/0x260 [ 1039.962963][T19626] ? find_held_lock+0x2b/0x80 [ 1039.965375][T19626] ? kcov_ioctl+0x17a/0x760 [ 1039.967700][T19626] ? rcu_is_watching+0x13/0xc0 [ 1039.970172][T19626] ? kcov_ioctl+0x17a/0x760 [ 1039.972503][T19626] __ia32_compat_sys_openat+0x12d/0x210 [ 1039.975372][T19626] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1039.978509][T19626] do_int80_emulation+0x166/0x650 [ 1039.981130][T19626] asm_int80_emulation+0x1a/0x20 [ 1039.983682][T19626] RIP: 0023:0xf71574eb [ 1039.985782][T19626] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1039.995908][T19626] RSP: 002b:00000000f53ec03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1040.000298][T19626] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53ec100 [ 1040.004391][T19626] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1040.008480][T19626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1040.012696][T19626] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1040.016854][T19626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1040.021061][T19626] [ 1040.023256][T19626] Kernel Offset: disabled [ 1040.025476][T19626] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:46:04 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8ea91500 RCX=0000000000000001 RDX=0000000000000001 RSI=ffffffff8bef1c60 RDI=ffffffff8c601580 RBP=fffffbfff1d522a0 RSP=ffffffff8ea07d08 R8 =0000000000000007 R9 =0000000000000000 R10=ffffffffffffffce R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff81de9dc7 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880969db000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53ecda4 CR3=000000005f220000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a301e5 RDI=ffffffff9bbfc920 RBP=ffffffff9bbfc8e0 RSP=ffffc900039372e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666657 R12=0000000000000000 R13=0000000000000038 R14=ffffffff85a32c20 R15=dffffc0000000000 RIP=ffffffff85a3020f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096adb000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53ebff4 CR3=000000004d7ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000027685f460fb RBX=ffff88802b423d80 RCX=00000000000006e0 RDX=0000000000000276 RSI=ffffffff81f9b445 RDI=ffff8880237d2580 RBP=000000f1fd7755b4 RSP=ffffc90000538948 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000a7133 R13=0000000000000001 R14=0000000000000001 R15=ffff88802b423dc0 RIP=ffffffff81f9b458 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdb000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7268b50 CR3=0000000049bcc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88805aa75e80 RCX=0000000000000102 RDX=0000000000000002 RSI=ffffffff89c48f61 RDI=ffff88806ba142da RBP=ffff88806ba142c0 RSP=ffffc900005e8b68 R8 =0000000000000004 R9 =0000000000000800 R10=00000000000000d8 R11=0000000000000001 R12=00000000000000d8 R13=0000000000000800 R14=dffffc0000000000 R15=ffffed100d742852 RIP=ffffffff89c48f84 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdb000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f44ba6714ac CR3=000000006efe5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000f010e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000033e8 00000000001cdc18 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000458 0000000000000801 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000