last executing test programs:

16.349845305s ago: executing program 2 (id=1141):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a000900000009040100000102300009040101010102300009"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb042, 0x1000, 0x2, 0x122}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16ae, 0x200, 0x0, 0x266}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5eb7, 0x0, 0x2, 0x1b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7126, 0x8000, 0x0, 0x147}}], 0x4, &(0x7f0000002b00)={0x2e, 0x2a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff7}, 0x0, 0x0, '\x00', {0x0, 0xc56, 0x0, &(0x7f0000001b00)=@buf_max_buf="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"}}, &(0x7f0000002b80))
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e8030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl(r4, 0x4048aecb, &(0x7f0000000200)="0100"/71)
ioctl(r4, 0xc048aeca, &(0x7f0000000300)="0100"/72)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'nicvf0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x16, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x2c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x7, 0x6, 0x7, 0x10, 0x1e, 0x17, 0x4}}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x7f, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x58}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_RUN(r10, 0xae80, 0x0)

14.818719027s ago: executing program 0 (id=1145):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a000900000009040100000102300009040101010102300009"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb042, 0x1000, 0x2, 0x122}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16ae, 0x200, 0x0, 0x266}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5eb7, 0x0, 0x2, 0x1b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7126, 0x8000, 0x0, 0x147}}], 0x4, &(0x7f0000002b00)={0x2e, 0x2a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff7}, 0x0, 0x0, '\x00', {0x0, 0xc56, 0x0, &(0x7f0000001b00)=@buf_max_buf="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"}}, &(0x7f0000002b80))
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e8030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl(r4, 0x4048aecb, &(0x7f0000000200)="0100"/71)
ioctl(r4, 0xc048aeca, &(0x7f0000000300)="0100"/72)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'nicvf0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x16, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x2c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x7, 0x6, 0x7, 0x10, 0x1e, 0x17, 0x4}}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x7f, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x58}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_RUN(r10, 0xae80, 0x0)

13.461585038s ago: executing program 1 (id=1146):
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x21, 0x4, 0x52, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r2 = socket(0x1a, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2fa801, 0x115)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="595d25bd7000fcdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20020810}, 0x74248b129e2a72de)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = gettid()
prlimit64(r3, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff}, 0x106, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dff, 0xffffffff80000002, 0xcd41}}}, 0x90)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x200)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r9 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r9, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011)

13.458120274s ago: executing program 2 (id=1147):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0xfffa, 0x94, 0xf9, 0x3}]}, 0x8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

12.490337882s ago: executing program 2 (id=1150):
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet(0x2b, 0x801, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4)
sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0)
ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
select(0xb670293f642facc, 0x0, 0x0, 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)

11.060088212s ago: executing program 0 (id=1151):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00')
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
getpriority(0x0, r0)
r4 = syz_open_dev$video(&(0x7f0000000080), 0x8003, 0x105580)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0xe000003, 0x52424752, 0x3, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x9, 0x5}, {0x2, 0x10001}}})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r6 = syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)
ptrace$setregset(0x4205, r6, 0x2, &(0x7f0000000540)={&(0x7f0000000440)="4f4722b53bf8ade65c28b39203fc48c3fb6634b900aa21fa63b263c574cf268cc54b743a6bf6dace2e70d0f9b61021c7ba4e577833f6790f3dbc9a3863f68c483b6ebbe0a8b0343d9e237e6d0c1662babb327036a291a0415f4ab26478ecc8958686a6210d2711c59626164438c04f4f115cd5f9140e73c34fbc81a5c37050513e10c604e93cdc340924c62cd230fb7fee68101bca0d0f22386bf37d5890a785dc09ef331f41c739f2145b01df73fbd195bfd9bf6c59e86efadd5fe261c5f7c8b287ddf85d46f7edd109ab610cb78c2cfc36d039d6a4eebf1a887106633c0d8305aa5c4e0f545009", 0xe8})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)

10.481264937s ago: executing program 1 (id=1152):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a000900000009040100000102300009040101010102300009"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb042, 0x1000, 0x2, 0x122}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16ae, 0x200, 0x0, 0x266}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5eb7, 0x0, 0x2, 0x1b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7126, 0x8000, 0x0, 0x147}}], 0x4, &(0x7f0000002b00)={0x2e, 0x2a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff7}, 0x0, 0x0, '\x00', {0x0, 0xc56, 0x0, &(0x7f0000001b00)=@buf_max_buf="bb066a353bdd32703c4ed885a6cb68f9a78930d64988ee50bcfc0a737c48189d5b1af9f6aabc43dcbd12835d6fe566f9d4121582167d576d6129665a5d862309711967138482c840b02f45d13b63ea6381161c96a7a8263115f9666ca117f4c9eed16efc9343cf9bddbf91d2fcd8d1156d4b46b4a36c98565d9e43e9efc8ecbfdcc39575660731b77614a05496ba583aa360677a01ae469c418c0c84306a104b611187daeaa670f808f8cdd08c89290e6ebf33504ed54dfdedce5957a4ccb24fa53ad7b892d83141cc8bb004c92f52d365d54c6b3778138f6fdb3be30b082f6e46b031b999978aab53af1a621cc1d3a052eb5ede5c1d2304c46053b9634dc4c3bb2f65b13ef4734d6854845a61e89bac288f29ee2729d185dcd22e2ae84e310863f6dc872a3116d78ce4d351837d204be63a0ae8c16d7ad103de4c95980b8b7b7bfad9560764ab24a904f9ca573e0564ca1b30ce8f214cd18e81c65f2491a2aa79822c98c0542d37e043d07bf3e696c6835e735f554d2837edc1afa4f892bfeb1acb5b9935ebd504995900211a5f5b9c07753c10623999ac758c68301f94659c6ef9fa6f0bd21cd1702cf89b94ed43a251960131494b6dfca8ffe858984893c4243848a03a96c8f41599df575a4875aace1ac86b54a5488b698106d411b326d17427dfa64dba10051275eafe50b442fe3494c8f27be5a6e609ea432d1cfa7f8769f59a7b416ccca62a4faff488083b7324490b58872cd4230b4d1f0d2d4cdad0b549a4142f39b57ace12536f0e7ed4bb81ae6ae84ddb0e53ec8b3acb40c59be56ff73fedd7e992754c9ed5669834b9b2e04644e72f617864771fd4187e2893c06b34516bacc292881f66076d2a8c8b4a33aa587521afa5ea33ebb64dc30b83f2e17d541d1b9829e649711f1f895f8c94fe304d72178d59362effb35da73e68cdb66e88c0932b7a49dbba5ea49309f8e6b28b90a217310431cbd7989ab389b73274c093957418e64abc39d2e431695e00106aeceb0dd2ed25935882ce204608516e63902e73855cbfa00ad59d8e69eeca31dba1e055945751921ffa1a6961ffa30fbb6fb298ecdeafded7bbd0b64608ed479d45e9518e69b97483a754c03a58e0aefb029d30b96da0afbc52e83c80203fa501b4db8d43c8245609f55f773eed1a6cb368047fd887610207ee578c1466eed1ced59b0bfaed57d6a05739b45df875e245f783dca3afe1b9fc7a360119d5bc50942378947e476f5b4e91efbb5c95ef41103283a6378731cf063c3acae4566a2ceb66168a956a2dc49606b82a14da078ed88754d7c2b1033b27ca0b9caca232e8e63d17e2dffc08cba21a823535b47269df2350f64568e4759c528c8049503b90e720e9e29c4fd40c6bdeca77f15578cb6c0422d7e2d7867e937a9d2e7be30fc7aa74f3670c31d24c083af431f4065dc32c4bacb37166c77e8aba8f08ac03513a11edb8fd06e886afc72f5319490b2d258f3e7f8019837f5354db019c35e526fb766757437945d622b590639c6351946784a802969d49da9940084614b93c21af34a5e3e926be914c46350b510b9bcfe36c4a1707d7a017a68594df41efd11cbfed9e7eafb1c7ba2ed809a783dcea8a05f5a952b149f81581afbda06d9018169eacf87f5eb58b73bd0ad27cff66cac6616bd83dff1d0bb7cb99fd9fece4c7bb4dd2c0b7b64f2729220f404934306d0d673951e9da74681c6fd310450fc180e81cc15445ff9c309cd02ce91697043c31b8e5043c820c8299452b8b6729038554a918de1caf3119068632f121db9749997e4f6b071ee2560d8daaaccdfe2adbb9e853ce63deb8a3319e16246e18bfdf7712cea761d0e451a4c081ac61bd774a1b98127b4b526d3f16d8d623fb48a48753898ba4dbdca039e5e1f8531fcd8a2d82700865fd96edefdbfa945b71a7135d4cdd1fe73ecfc8d59d680716eb525af8e26c29559ba67190159b4dda541a99cf8018c28bcf371c52767680c14627a31c908cb9d03795796d4e1f770e35de5bab84c906b07858e6168e7bac615e9165549b943707e438ed74e15723d3b1fde45aa90044559c5a6531e0259c46426309ecbea28ab2e66721e4c36b00c2cca1a4b0c1f84e44fb7c86ceffa30c66b4faee6e681c1ffc8fd1ec3947304ce3b67c040a142d306db5df6134542e503e8dce7dca317fbc674de61bea22b0a72de203b39c44980ca4c4a9469d19cef1a2a4b769fa705e32b789fe20b85d109e4c235213f015889d34522e2af3bea9527351772bb34efefd7f0ce70e7285ed1bec8413d4e8f1aebbb4196ffdb46d65b523631eaa65975ecad7e445b84f8564985b2f355d871e72aaa8d5b529f1e469774f768affc0caf68019ce497cf3742c07e45ea97937831434bc66d5de54078f27bd23ef1b7c5ab96fe99a9e177762d4b0b7b2692d353707de4f0fbbd8051b67eb0314a1ce011a979fc3054d212060b92f44c91e4d94f2b34bdc63306037667229a1305cb9bb4e6df1cea3b007fa8c097589661ac5b5d0d4f55dfcacdda404e12eebd09a43bf57e6ede72405068a57646f9a72be3c8a316bd1a641c24e385af5c0ec3da4839bb805ed52a461d9e36d45b7073aa9f39bb356626e399580bafe899c067627d768992e66b9e48348307af19a744ee9c0c5329e69059dee3e1c00309ae9ebaeee8ed1457d1f92d1122e53848a233c23fe227765052ca8c9965d100711f919a77f792030edf6fb43f43fc9ba8c72971a12534a569b5bf66f8262d46c7f26b2e9d7fba88b7a325353c4ba4f9cea9965374c685a79a0aeb96274b4e06aeb9c090d6210a1605d7af5814ceea06841401dae704e19dc226efb219f9797e07b756b6d3add20ac838372dd9eaf56dd815e7f8b073e84551e69268ac79576386bd31bcb6f604a08dcd995e921befb27b4e0e8b5f5ecc09c3c8a418a37e7b0f3abb1fd7babfa2cbc1db70d62a612a35bb78d8ee2554594064ae9ce2b2fd88679ab6c0229175cb7d352f14026cec7ea4a6d52827b31eb96c99c1c9946b89d5fca2f2842cbb3f245ee06b7ebb9d960cda75d7dec9e4b3326dee941c8d96e2bfc45272fdaa61d6e80a91d8f2ac882f36eaf53344c2d979502bd6540252637b3e81b2ddee9c3ce615247d5a84305e2074ff059033a87d1c8aa644093a15008321f04c04db7109ce4c6255185f372b2f91978c61ad1679581824c09332f1e72305718b7b7cb1d6e3b4599f6f1b8781514c39ec5d91ee4a4bdf25568ea585132a53e7e9ba44d9b0862f7f33eb8073d01296a26ef1e3d4800a6682957eb956eee3c26e72ac881b6b60f83605f41d763aa97a0df3774cf4a0f9dae789881e76e9a0c84ccfce8e9489da3b385d5ed9ad625bbe2fb031287c7dfe831ad304e9e1dcad3a919353dedc63b89d284b1c1229fd00f01ce65a1e67f56e55d169448793af134558e939b21703a033813308da3a1bcdb71b44d62d8ce41d1c5e3185725ab82807d0ab5ca5c249631c4687749c46d56b1a4838f7bc7aa890000bb4c73968122e237ead944b22915a20d2783d364b47f5cb7aa27fd71b632134acc51f94e89cfc2002a72dfc151e0b5b170420576245e3beae48a4fd2de71b891e0f5ed603adae98042c478c2f5e04d486d87bb3e1d0b8142291800db9a0363dc98a2f81b7cf1e19355c2f92ba058a207c6a34c6de15c8fa467274877f205d0eba6cf5a6377fa41781b54a3e10a28304a32fb0b5f851ef1ea062b7c74f18621f8d1effb77616c9bf34dce1eddf6282af00e87c538bfdcc6fa5df91ef2e2b2fc250f0ef34b59868103ad7f621c917a83a17bcea2ab1f4c958f0d1b227d76b6ce0a83fcffb8d27a42551d204f8cf02bf9a418d5587df4736dcbea5c38458d102cfb6085108f7d0ab57cd3abd2477b9cceef0672382c70e2ef899567c6e3fd5c3b80f7694bacd3e07ca1ded902a38e24b3bd675b7cc2d07d3d71545fbf0d59e7e27316b1672badd8475617c37413a03fc300668838f242422adad946ffff93be8bb18900290c474f2b850277d011777eca882d1d956acd760b5a59709460c021daee11f9d36bdf11b4a75c1ff366e62d4a6ae29787d3788bbedf3df5738886c71b85b21c535c922b5c6f85aa78177c537e153789f639798ad7c2e36c0c66de9d915348f91c3326fb02ad25267bd5a9f2365c8551e556f5f027603a214fad2c2e28fb3afdb611452cd1618bf6056a1a1a6953df7196d6de8e5c3e592fa8176bd85da6d466747648c71c8601274afe8016e2b0ac21a7b0608c0c83e17491519d60f9e5844eec721da4387d1d3089371d01954fb0850cec69ae5230ef41b2d0e560ea97d6bf80274451fa48271ebbe3a38aab4bea6076d5825e7ccae6938b1e9ca1407f4dd91fba14247a14b41ef9281436ccb3345c65de8ba307d5ad00e886448bc996da276b1e3a907635cd3931e64176d24b31176ff8c91afc9832acf1d1d79ebf2a5fcff8c1ad620c00a4b6b76969d310880d6e5b7068146e86888686121adf2f16b830a5732b5b1e2c84dc97acbe81a557f79467fe8fb6a06ad46e9d6dda79dedc2be0b55d51376842b5de0359d65c795af7455c3c2f3616d88c086af6f03c133b42dae9f8427a82aa0c770d9e3f95c96b2e9a9f33520ec279801f1a2cb17d3cf2be9f6c0136e28fb903439123cb200275b326f90cbfb23446993fae00edeb0b184caf3ddf66ac046f513ecda2fcde04026c2e3d759ab21ce5a4606449f3cf850bd1fbf0f3df37da5076b8da07ba6a9146f28606909c04ae0f7c7a01f68550b6c31d7f0938bf0745e5afafa377abf74930f256e93c9c7802cb958c468bcd24e9e9fd99421dd11171135ca6bf92119b9f26b398c13a03d73de647a4b54b27f5849989377ba2c0939a70fd5897fe91e4685d334d9b72e936b6789c193d58cd9970b650cb00460f445efd8ac7d4839b25e4c074b2b32ee80f17a63729678920f1e12b774aa2ee688ca69b82051fe7496f524bc439136282193c651619deec3bd0e911654bcec52f55bce79ffbf4c41ee7d9c243a4f662f15e43cada52f0bd52f31c3c726a373f389114c03c9ea9c81a563fea8ae3851c6ec3ea5d9ef956397b5985d969e0a4853cb6381e0dee5ee560d680322d78ab5180ebbbbcc508097768b44f1595def92434d482cb4006b11ff81aa067482a6c73e711383427628088d7958e1ff0737d2d8e97c029ea5070ea15786fd44a736ec47c4ddb57a6e8c55b34511aed00d252d65f7eecf10440ccca82f3a9b9f6ef150645c7694770e5dedc8a5a7a42849f6cd602606c84b2ceff7ecea0e5a2cdc0c4ca610bdc90aa7b99ac225a50438f6c746091f50fbb5cef92d15d317aee9ad2bb0a02d6122e22091839c679850a7b69ac3fbea146c142aec59d6de028e0a6cc495e7cd0bf90563d68cf3efdc404a2f80247995aa0f9a9deacc61acb4e1382cea667754f69a1c8a6949a052e9182c573dbc896f06ef7d5ac9896ce45c5b3740814f794fe30b83d281b10629cc83fd19a7ae23410a5bfff572bd4976a2a033c8feab9d7681a1b0bee069e0a0333ec17860ad31fec808a73f4057c67dc97fb4e2de818e0ab7c658a4e9a63ba9b8441cf3b664efc579e511080ef80c6c6980c730662eedb0d8d686c0637511b38b7c638ff28d50e8bad18f6145d89d4d38b6d986ddc084e042b0110f959cda2b889e23b10dd95dbd21f3937690eaa48c28103db51a77838cedb5760123bbac6e2cb042615757c9e9c471086ba07a91e2ed7b95717dc95757419e3da80079337dd9778"}}, &(0x7f0000002b80))
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e8030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl(r4, 0x4048aecb, &(0x7f0000000200)="0100"/71)
ioctl(r4, 0xc048aeca, &(0x7f0000000300)="0100"/72)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'nicvf0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x16, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x2c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x7, 0x6, 0x7, 0x10, 0x1e, 0x17, 0x4}}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x7f, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x58}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_RUN(r10, 0xae80, 0x0)

9.828227631s ago: executing program 0 (id=1153):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'vlan0\x00'})
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4")
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0)

9.827886934s ago: executing program 2 (id=1154):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000300)=0x1, 0x4)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r2}, 0x94)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = openat$cgroup_ro(r1, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, 0x0)
readv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "91cee5d1aaab0bdae71fa083cdb51f81695df41766cb3cafb1fda3fa3e6025f2", "56ec92082cf2860d356454fa90602d519e8f47084b09891636f43dddd16435c0", "d868f3eda7bf2ab8a883c3720bd152932480f95fec0f7a20d2b6e1f604a4654a", "1133a33fd4d60bebed50cc1c19d0e83eba095ed99278ccc2c5e88011c3cdfe3d", "1bc3408abc5ea81d2fdf8fb811f5bbbcd52edb4579baf553bf793e47fdbf58cd", "e57f46ce962396e1eb375f67", 0x0, 0x8ef, 0x7ff, 0x8, 0x401}})

7.943141037s ago: executing program 3 (id=1156):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a000900000009040100000102300009040101010102300009"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb042, 0x1000, 0x2, 0x122}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16ae, 0x200, 0x0, 0x266}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5eb7, 0x0, 0x2, 0x1b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7126, 0x8000, 0x0, 0x147}}], 0x4, &(0x7f0000002b00)={0x2e, 0x2a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff7}, 0x0, 0x0, '\x00', {0x0, 0xc56, 0x0, &(0x7f0000001b00)=@buf_max_buf="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"}}, &(0x7f0000002b80))
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e8030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl(r4, 0x4048aecb, &(0x7f0000000200)="0100"/71)
ioctl(r4, 0xc048aeca, &(0x7f0000000300)="0100"/72)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'nicvf0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x16, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x2c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x7, 0x6, 0x7, 0x10, 0x1e, 0x17, 0x4}}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x7f, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x58}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_RUN(r10, 0xae80, 0x0)

6.801157519s ago: executing program 2 (id=1157):
unshare(0x62040200)
mount$cgroup(0x0, 0x0, 0x0, 0x2008000, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000008c0), 0x5, 0x800)
ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0)
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
r4 = socket$inet(0x2, 0x80000, 0x9cf)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0x8, 0x3, 0xfd, 0xe, 0x5]}, &(0x7f0000000000)=0x54)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x5)
readv(r5, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}], 0x1)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r6, &(0x7f0000000040), 0x0)
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r7, 0x4b3a, 0x1)
ioctl$KDSETMODE(r7, 0x4b3a, 0x0)

6.797829381s ago: executing program 1 (id=1158):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x10000051}, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000480)=@IORING_OP_SOCKET={0x2d, 0x40, 0x0, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8286ca8cebed636a, {0x0, 0x0, 0x4a05}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
sendmmsg$inet6(r7, &(0x7f0000002940), 0x40000000000017d, 0x811)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r9)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc})

6.118086525s ago: executing program 0 (id=1159):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a000900000009040100000102300009040101010102300009"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb042, 0x1000, 0x2, 0x122}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16ae, 0x200, 0x0, 0x266}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5eb7, 0x0, 0x2, 0x1b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7126, 0x8000, 0x0, 0x147}}], 0x4, &(0x7f0000002b00)={0x2e, 0x2a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff7}, 0x0, 0x0, '\x00', {0x0, 0xc56, 0x0, &(0x7f0000001b00)=@buf_max_buf="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"}}, &(0x7f0000002b80))
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e8030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl(r4, 0x4048aecb, &(0x7f0000000200)="0100"/71)
ioctl(r4, 0xc048aeca, &(0x7f0000000300)="0100"/72)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'nicvf0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x16, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x2c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x7, 0x6, 0x7, 0x10, 0x1e, 0x17, 0x4}}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x7f, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x58}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})

4.593572348s ago: executing program 3 (id=1160):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xffff}, {0x0, 0x9, 0xff, 0x7fff0000}]})
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001d00070f0000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r1], 0x2c}}, 0x40080)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000240)={0x0, <r5=>0x0})
prlimit64(r5, 0x7, 0x0, &(0x7f00000002c0))
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x30, r3, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
write(r2, &(0x7f0000000200)='md0', 0x3)
close(r2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r6, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000")
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0)
ioctl$FIONREAD(r7, 0x541b, &(0x7f0000002300))
ioctl(r6, 0x40140921, 0x0)
ioctl(r6, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000")
ioctl(r6, 0x400c0930, &(0x7f0000000500)='\x00'/12)
ioctl(r6, 0x40140921, &(0x7f0000000440)="02000000010000000200")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r8, &(0x7f0000000600)='3\n', 0x2)

4.498727033s ago: executing program 1 (id=1161):
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet(0x2b, 0x801, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4)
sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0)
ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
select(0xb670293f642facc, 0x0, 0x0, 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)

4.09725205s ago: executing program 0 (id=1162):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c)
ioctl(r0, 0x40104d06, &(0x7f0000000a00)="000002000000000000000200")
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
write(r6, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-bac', 0x2b)
ioctl(r6, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006")
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x99)
ioctl$TIOCSTI(r5, 0x5412, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e234e2305001500"], 0x3c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)

3.922858085s ago: executing program 3 (id=1163):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e08000000000000000000007f00000080200100", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001000000030000000a00"/24, @ANYRES32, @ANYBLOB], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0x0)
r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
add_key$user(0x0, &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000ba5ae65e31f00e641832d29ed658b91f349b80e830fa29fc891b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126f00000000000000000000aa7c93213bc6ef4da9e28ef7", 0x135, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})
add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000780)="c744e13fa63d376248e65297694d2e2e213a3dba7572e933162850227b5693707a9708bd1e754fa415e931bf2fb89b33d603000000000000004c5132575a4134cd5a822bd818209739966750f5371588d38ddb2fe3a634f72dbeb0c233a6d22df03671e16cb0951ede014a18c12965b326000a2dddc1ad34d2b8447ffc89c875d9acffc746", 0x85, 0xfffffffffffffffe)
syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x42583)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="336418000000555de3d4333944710200000000000000", @ANYRES16=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000c300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000840)="ce0000050000000027d050516d12", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)

2.820371864s ago: executing program 2 (id=1164):
syz_open_dev$video(&(0x7f0000000080), 0x4, 0x64100)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x40, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x39, 0xc8, 0x4}}}}}]}}]}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_clone3(&(0x7f0000002100)={0x1000000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, &(0x7f00000010c0)=""/4096, &(0x7f00000020c0)=[0x0], 0x1}, 0x58)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x100000})
syz_open_dev$vbi(0x0, 0x0, 0x2)
r2 = socket(0x400000000010, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x8)
write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0xfffffffc, 0x5, "42341f9b1000007e4f00"})
splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x0, 0x8002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040090}, 0x4000844)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})

2.803887794s ago: executing program 3 (id=1165):
socket$packet(0x11, 0x2, 0x300)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00')
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
readv(r1, &(0x7f0000000000), 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x52)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timer_create(0xb3b54c18e0590239, 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = syz_ublk_setup_io_uring(0x1a, &(0x7f0000000040)={0x0, 0x1a16, 0x0, 0x6, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000400)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x92cc, 0x800, 0x3, 0x80000258, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2888, 0x2100, 0x11c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x2000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xefa7, 0x0, 0x2, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x502d, 0x80000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x755, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

2.021965388s ago: executing program 1 (id=1166):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl(r1, 0x4048aecb, &(0x7f0000000200)="0100"/71)
ioctl(r1, 0xc048aeca, &(0x7f0000000300)="0100"/72)

1.957462484s ago: executing program 3 (id=1167):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
getrlimit(0x0, &(0x7f0000000180))
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040), 0x111, 0x9}}, 0x4c)

1.902728316s ago: executing program 1 (id=1168):
socket$packet(0x11, 0x2, 0x300)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00')
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000080)={0x19, 0x10, 0x19, 0x10, 0x3, 0x2, 0x2, 0xac, 0xffffffffffffffff})
readv(r1, &(0x7f0000000000), 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x52)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timer_create(0xb3b54c18e0590239, 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = syz_ublk_setup_io_uring(0x1a, &(0x7f0000000040)={0x0, 0x1a16, 0x0, 0x6, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000400)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x92cc, 0x800, 0x3, 0x80000258, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2888, 0x2100, 0x11c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x2000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xefa7, 0x0, 0x2, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x502d, 0x80000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x755, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

281.743151ms ago: executing program 3 (id=1169):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6aff9bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0x10002, [0x200000000000de99, 0x8c9, 0xfffffffffffffffc, 0x20000000000000c4, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x1000000028, 0x8, 0x6, 0x9, 0x9, 0x0, 0x3, 0x8, 0x7, 0x4]})
write$cgroup_subtree(r0, 0x0, 0x10448)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x800)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0x2}, {0x8}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r11 = epoll_create(0x7f)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000740)={0x40000004})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r12 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r12, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, &(0x7f00000000c0)=0x8)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)

0s ago: executing program 0 (id=1170):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0)
mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil)
getsockname$packet(r6, 0x0, 0x0)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x63, 0x1, 0x1, 0xe0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60880, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000)

kernel console output (not intermixed with test programs):

es+0x747/0x10f0
[  320.447486][ T9522]  ? _raw_spin_unlock+0x28/0x50
[  320.447516][ T9522]  ? __pfx_alloc_migration_target+0x10/0x10
[  320.447557][ T9522]  __folio_alloc_noprof+0x16/0x260
[  320.447607][ T9522]  alloc_migration_target+0x1d7/0x6d0
[  320.447639][ T9522]  migrate_pages_batch+0x5c4/0x4680
[  320.447670][ T9522]  ? __schedule+0x1230/0x6920
[  320.447693][ T9522]  ? __pfx_alloc_migration_target+0x10/0x10
[  320.447728][ T9522]  ? migrate_pages_sync+0x12c/0x880
[  320.447755][ T9522]  ? migrate_pages_sync+0x588/0x880
[  320.447784][ T9522]  ? __pfx_migrate_pages_batch+0x10/0x10
[  320.447818][ T9522]  ? lock_acquire+0x1d1/0x380
[  320.447845][ T9522]  ? __pfx_migrate_pages_sync+0x10/0x10
[  320.447880][ T9522]  ? __lock_acquire+0x4c5/0x1ec0
[  320.447908][ T9522]  ? __css_rstat_updated+0x1ce/0x590
[  320.447942][ T9522]  migrate_pages+0x1950/0x2850
[  320.447977][ T9522]  ? __pfx_alloc_migration_target+0x10/0x10
[  320.448012][ T9522]  ? __pfx_migrate_pages+0x10/0x10
[  320.448058][ T9522]  ? mtree_load+0x3a4/0xb50
[  320.448092][ T9522]  move_pages_and_store_status+0xf1/0x230
[  320.448125][ T9522]  ? __pfx_move_pages_and_store_status+0x10/0x10
[  320.448169][ T9522]  kernel_move_pages+0xca4/0x14d0
[  320.448208][ T9522]  ? __pfx_kernel_move_pages+0x10/0x10
[  320.448246][ T9522]  ? xfd_validate_state+0x129/0x190
[  320.448286][ T9522]  __ia32_sys_move_pages+0xdd/0x1b0
[  320.448317][ T9522]  ? __do_fast_syscall_32+0xb3/0x8b0
[  320.448347][ T9522]  ? lockdep_hardirqs_on+0x7d/0x110
[  320.448375][ T9522]  __do_fast_syscall_32+0x13a/0x8b0
[  320.448408][ T9522]  do_fast_syscall_32+0x32/0x70
[  320.448439][ T9522]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  320.448466][ T9522] RIP: 0023:0xf700efec
[  320.448489][ T9522] Code: Unable to access opcode bytes at 0xf700efc2.
[  320.448499][ T9522] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d
[  320.448519][ T9522] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064
[  320.448531][ T9522] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000
[  320.448545][ T9522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  320.448557][ T9522] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  320.448570][ T9522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  320.448597][ T9522]  </TASK>
[  320.448900][ T9522] Mem-Info:
[  320.448911][ T9522] active_anon:7347 inactive_anon:10953 isolated_anon:8
[  320.448911][ T9522]  active_file:10588 inactive_file:11660 isolated_file:0
[  320.448911][ T9522]  unevictable:0 dirty:620 writeback:0
[  320.448911][ T9522]  slab_reclaimable:6337 slab_unreclaimable:53848
[  320.448911][ T9522]  mapped:28203 shmem:15535 pagetables:1265
[  320.448911][ T9522]  sec_pagetables:309 bounce:0
[  320.448911][ T9522]  kernel_misc_reclaimable:0
[  320.448911][ T9522]  free:34611 free_pcp:8980 free_cma:0
[  320.448963][ T9522] Node 0 active_anon:0kB inactive_anon:8kB active_file:104kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9152kB pagetables:1364kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  320.449016][ T9522] Node 1 active_anon:29388kB inactive_anon:43804kB active_file:42248kB inactive_file:46608kB unevictable:0kB isolated(anon):32kB isolated(file):0kB mapped:112784kB dirty:2476kB writeback:0kB shmem:62140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4896kB pagetables:3696kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  320.449076][ T9522] Node 0 DMA free:3432kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  320.449135][ T9522] lowmem_reserve[]: 0 277 277 277 277
[  320.449171][ T9522] Node 0 DMA32 free:25336kB boost:14336kB min:26964kB low:30120kB high:33276kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:8kB active_file:104kB inactive_file:32kB unevictable:0kB writepending:4kB zspages:1780kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:4320kB local_pcp:2208kB free_cma:0kB
[  320.449231][ T9522] lowmem_reserve[]: 0 0 0 0 0
[  320.449436][ T9522] Node 1 DMA32 free:109676kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:532kB active_anon:29388kB inactive_anon:43804kB active_file:42248kB inactive_file:46608kB unevictable:0kB writepending:2476kB zspages:4780kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:31600kB local_pcp:9320kB free_cma:0kB
[  320.449497][ T9522] lowmem_reserve[]: 0 0 0 0 0
[  320.449530][ T9522] Node 0 DMA: 130*4kB (UE) 46*8kB (UE) 11*16kB (UE) 38*32kB (UE) 16*64kB (UE) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3432kB
[  320.449667][ T9522] Node 0 DMA32: 374*4kB (UME) 100*8kB (UME) 70*16kB (UME) 205*32kB (UME) 36*64kB (UME) 12*128kB (UM) 9*256kB (UM) 8*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 0*4096kB = 25336kB
[  320.449825][ T9522] Node 1 DMA32: 1819*4kB (UMEH) 1438*8kB (UMEH) 125*16kB (UMH) 118*32kB (UMEH) 188*64kB (UMEH) 83*128kB (UME) 56*256kB (UME) 28*512kB (UM) 23*1024kB (UM) 5*2048kB (UM) 0*4096kB = 109676kB
[  320.450059][ T9522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  320.450076][ T9522] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  320.450092][ T9522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  320.450107][ T9522] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  320.450123][ T9522] 39218 total pagecache pages
[  320.450130][ T9522] 1437 pages in swap cache
[  320.450138][ T9522] Free swap  = 96904kB
[  320.450145][ T9522] Total swap = 124996kB
[  320.450154][ T9522] 524155 pages RAM
[  320.450161][ T9522] 0 pages HighMem/MovableOnly
[  320.450168][ T9522] 212108 pages reserved
[  320.450174][ T9522] 0 pages cma reserved
[  320.538972][ T9513] vhci_hcd: connection reset by peer
[  320.560314][ T5787] vhci_hcd vhci_hcd.1: stop threads
[  320.560341][ T5787] vhci_hcd vhci_hcd.1: release socket
[  320.560391][ T5787] vhci_hcd vhci_hcd.1: disconnect device
[  320.668588][   T63] wg2 speed is unknown, defaulting to 1000
[  320.675644][ T9512] infiniband syz2: set active
[  320.675663][ T9512] infiniband syz2: added wg2
[  320.811155][ T9512] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  320.811257][ T9512] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  320.824859][ T9512] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  320.999331][ T9512] RDS/IB: syz2: added
[  320.999632][ T9512] smc: adding ib device syz2 with port count 1
[  321.058936][ T9512] smc:    ib device syz2 port 1 has no pnetid
[  321.064395][   T63] wg2 speed is unknown, defaulting to 1000
[  321.091278][ T9512] wg2 speed is unknown, defaulting to 1000
[  321.364049][ T5888] usb 44-1: device descriptor read/8, error -110
[  321.767076][ T5888] usb usb44-port1: attempt power cycle
[  322.014723][ T9512] wg2 speed is unknown, defaulting to 1000
[  322.338228][ T5888] usb usb44-port1: unable to enumerate USB device
[  324.866608][   T42] usb 40-1: device descriptor read/8, error -110
[  325.129042][ T9571] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  325.129082][ T9571] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  325.140711][ T9571] vhci_hcd vhci_hcd.0: Device attached
[  325.289916][ T9578] NILFS (loop3): device size too small
[  325.356022][ T9571] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  325.476028][ T5888] usb 38-1: SetAddress Request (10) to port 0
[  325.476115][ T5888] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd
[  325.493962][ T9512] wg2 speed is unknown, defaulting to 1000
[  325.567321][   T42] usb usb40-port1: attempt power cycle
[  325.692178][ T9512] wg2 speed is unknown, defaulting to 1000
[  325.815784][ T9572] vhci_hcd: connection reset by peer
[  325.824420][   T13] vhci_hcd vhci_hcd.0: stop threads
[  325.827747][   T13] vhci_hcd vhci_hcd.0: release socket
[  325.830862][   T13] vhci_hcd vhci_hcd.0: disconnect device
[  325.960462][ T9583] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  325.960526][ T9583] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  325.967295][ T9583] vhci_hcd vhci_hcd.0: Device attached
[  326.149653][   T42] usb usb40-port1: unable to enumerate USB device
[  326.238730][   T30] usb 42-1: SetAddress Request (10) to port 0
[  326.238902][   T30] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd
[  326.724916][ T9584] vhci_hcd: connection reset by peer
[  326.725614][   T13] vhci_hcd vhci_hcd.2: stop threads
[  326.725698][   T13] vhci_hcd vhci_hcd.2: release socket
[  326.726137][   T13] vhci_hcd vhci_hcd.2: disconnect device
[  327.536986][ T1163] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  327.543871][ T9589] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  327.609869][ T9595] netlink: 'syz.2.737': attribute type 4 has an invalid length.
[  327.609920][ T9595] netlink: 17 bytes leftover after parsing attributes in process `syz.2.737'.
[  327.980011][ T9600] loop9: detected capacity change from 0 to 524287998
[  329.412139][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'.
[  330.546197][ T5888] usb 38-1: device descriptor read/8, error -110
[  330.938664][ T5888] usb usb38-port1: attempt power cycle
[  331.266061][   T30] usb 42-1: device descriptor read/8, error -110
[  331.507272][ T5888] usb usb38-port1: unable to enumerate USB device
[  331.668418][   T30] usb usb42-port1: attempt power cycle
[  332.226675][   T30] usb usb42-port1: unable to enumerate USB device
[  334.200363][ T9616] lo: entered allmulticast mode
[  334.206064][ T9616] lo: left allmulticast mode
[  334.212729][ T9616] bond0: entered promiscuous mode
[  334.212806][ T9616] bond_slave_0: entered promiscuous mode
[  334.213052][ T9616] bond_slave_1: entered promiscuous mode
[  334.214991][ T9616] batadv0: entered promiscuous mode
[  334.218157][ T9616] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  334.218176][ T9616] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  334.219533][ T9616] 8021q: adding VLAN 0 to HW filter on device hsr1
[  334.273664][ T9616] bond0: left promiscuous mode
[  334.273721][ T9616] bond_slave_0: left promiscuous mode
[  334.274397][ T9616] bond_slave_1: left promiscuous mode
[  334.278059][ T9616] batadv0: left promiscuous mode
[  334.351040][ T9623] netlink: 'syz.2.740': attribute type 10 has an invalid length.
[  335.447833][ T9631] CIFS: Attempting to mount //127.0.0.1/share
[  335.550048][ T9631] CIFS: VFS: Error connecting to socket. Aborting operation.
[  335.552502][ T9631] CIFS: VFS: cifs_mount failed w/return code = -111
[  336.128232][ T9628] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  336.548895][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.754'.
[  336.711057][ T9642] netlink: 'syz.1.745': attribute type 11 has an invalid length.
[  336.824045][ T9642] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  336.846218][ T5888] wg2 speed is unknown, defaulting to 1000
[  336.887641][ T9642] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  336.887714][ T9642] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  337.036273][   T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  337.187959][   T25] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  337.190897][   T25] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7
[  337.190916][   T25] usb 7-1: config 0 interface 0 has no altsetting 0
[  337.197684][   T25] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  337.197844][   T25] usb 7-1: Product: syz
[  337.198098][   T25] usb 7-1: Manufacturer: syz
[  337.198141][   T25] usb 7-1: SerialNumber: syz
[  337.220152][   T25] usb 7-1: config 0 descriptor??
[  337.327217][   T25] usb 7-1: selecting invalid altsetting 0
[  337.781816][   T25] usb 7-1: USB disconnect, device number 9
[  338.499331][ T9657] netlink: 'syz.0.746': attribute type 10 has an invalid length.
[  339.072330][ T9660] udevd[9660]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  339.248369][ T9648] ceph: No mds server is up or the cluster is laggy
[  339.302437][ T9654] lo: Caught tx_queue_len zero misconfig
[  339.596633][ T9664] xt_time: unknown flags 0xf4
[  339.662201][ T9664] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.723339][ T9664] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.790900][ T9664] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.835089][ T9664] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.925417][ T5787] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.936020][ T5823] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  339.945448][ T5787] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.966081][ T5787] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.976452][ T5787] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.256807][ T5823] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  340.257380][ T5823] usb 6-1: config 0 has no interfaces?
[  340.259891][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  340.259939][ T5823] usb 6-1: Product: syz
[  340.259972][ T5823] usb 6-1: Manufacturer: syz
[  340.260006][ T5823] usb 6-1: SerialNumber: syz
[  340.265472][ T5823] usb 6-1: config 0 descriptor??
[  340.580866][ T5823] usb 6-1: USB disconnect, device number 10
[  340.672064][ T9675] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  340.672116][ T9675] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  340.672358][ T9675] vhci_hcd vhci_hcd.0: Device attached
[  340.767443][ T9675] rdma_rxe: rxe_newlink: failed to add wg2
[  340.921421][ T9681] fuse: Bad value for 'fd'
[  340.956409][   T30] usb 44-1: SetAddress Request (6) to port 0
[  340.956722][   T30] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd
[  341.446047][   T25] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  341.817864][ T9676] vhci_hcd: connection reset by peer
[  341.818166][ T5787] vhci_hcd vhci_hcd.3: stop threads
[  341.818181][ T5787] vhci_hcd vhci_hcd.3: release socket
[  341.818278][ T5787] vhci_hcd vhci_hcd.3: disconnect device
[  341.826584][   T25] usb 6-1: Using ep0 maxpacket: 32
[  341.828891][   T25] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  341.833455][   T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  341.837988][   T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  341.843330][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.846488][   T25] usb 6-1: Product: syz
[  341.848479][   T25] usb 6-1: Manufacturer: syz
[  341.850785][   T25] usb 6-1: SerialNumber: syz
[  342.076267][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'.
[  342.924481][ T9696] netlink: 'syz.3.756': attribute type 11 has an invalid length.
[  342.976679][ T9696] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  343.033365][ T9696] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  343.036090][ T9696] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  344.298065][   T25] usb 6-1: USB disconnect, device number 11
[  345.415239][ T9728] lo: entered allmulticast mode
[  345.426158][ T9728] lo: left allmulticast mode
[  345.452366][ T9729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.762'.
[  346.021631][ T5594] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  346.078330][   T30] usb 44-1: device descriptor read/8, error -110
[  346.178608][ T5594] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  346.182336][ T5594] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7
[  346.186093][ T5594] usb 6-1: config 0 interface 0 has no altsetting 0
[  346.199790][ T5594] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  346.199885][ T5594] usb 6-1: Product: syz
[  346.204228][ T5594] usb 6-1: Manufacturer: syz
[  346.204412][ T5594] usb 6-1: SerialNumber: syz
[  346.266365][ T5594] usb 6-1: config 0 descriptor??
[  346.299253][ T5594] usb 6-1: selecting invalid altsetting 0
[  346.468535][   T30] usb usb44-port1: attempt power cycle
[  346.924569][   T43] audit: type=1326 audit(1788666506.514:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.764" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0
[  347.085971][ T5594] usb 6-1: USB disconnect, device number 12
[  347.097916][   T30] usb usb44-port1: unable to enumerate USB device
[  347.452911][ T9659] udevd[9659]: setting owner of /dev/bus/usb/006/012 to uid=0, gid=0 failed: No such file or directory
[  347.775842][ T9658] udevd[9658]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  352.394540][ T9772] NILFS (loop2): device size too small
[  353.399248][ T9780] ceph: No mds server is up or the cluster is laggy
[  353.399679][   T42] libceph: connect (1)[c::]:6789 error -22
[  353.399767][   T42] libceph: mon0 (1)[c::]:6789 connect error
[  353.656615][   T25] libceph: connect (1)[c::]:6789 error -22
[  353.656795][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  356.219350][   T43] audit: type=1326 audit(1788666515.814:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9791 comm="syz.1.779" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f57fec code=0x0
[  356.694209][ T9811] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  357.316296][ T9800] netlink: 'syz.0.787': attribute type 10 has an invalid length.
[  357.916721][ T9801] syz.3.780: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1
[  357.960193][ T9801] CPU: 1 UID: 0 PID: 9801 Comm: syz.3.780 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  357.960236][ T9801] Tainted: [L]=SOFTLOCKUP
[  357.960244][ T9801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  357.960257][ T9801] Call Trace:
[  357.960265][ T9801]  <TASK>
[  357.960273][ T9801]  dump_stack_lvl+0x100/0x190
[  357.960306][ T9801]  warn_alloc.cold+0x9e/0xb2
[  357.960330][ T9801]  ? __pfx_warn_alloc+0x10/0x10
[  357.960368][ T9801]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  357.960398][ T9801]  ? __pfx_get_page_from_freelist+0x10/0x10
[  357.960437][ T9801]  __alloc_frozen_pages_noprof+0xcb6/0x3300
[  357.960476][ T9801]  ? debug_check_no_obj_freed+0x260/0x630
[  357.960510][ T9801]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  357.960546][ T9801]  ? find_held_lock+0x2b/0x80
[  357.960568][ T9801]  ? __free_frozen_pages+0x747/0x10f0
[  357.960594][ T9801]  ? __free_frozen_pages+0x747/0x10f0
[  357.960626][ T9801]  ? _raw_spin_unlock+0x28/0x50
[  357.960651][ T9801]  ? irqentry_exit+0x24d/0xa10
[  357.960692][ T9801]  __folio_alloc_noprof+0x16/0x260
[  357.960735][ T9801]  alloc_migration_target+0x1d7/0x6d0
[  357.960766][ T9801]  migrate_pages_batch+0x5c4/0x4680
[  357.960796][ T9801]  ? __pfx_alloc_migration_target+0x10/0x10
[  357.960829][ T9801]  ? migrate_pages_sync+0x12c/0x880
[  357.960857][ T9801]  ? migrate_pages_sync+0x588/0x880
[  357.960884][ T9801]  ? __pfx_migrate_pages_batch+0x10/0x10
[  357.960917][ T9801]  ? __pfx_migrate_pages_sync+0x10/0x10
[  357.960944][ T9801]  ? __free_object+0x2a8/0x3f0
[  357.960972][ T9801]  ? __lock_acquire+0x4c5/0x1ec0
[  357.960999][ T9801]  ? __css_rstat_updated+0x1ce/0x590
[  357.961031][ T9801]  migrate_pages+0x1950/0x2850
[  357.961063][ T9801]  ? __pfx_alloc_migration_target+0x10/0x10
[  357.961098][ T9801]  ? __pfx_migrate_pages+0x10/0x10
[  357.961135][ T9801]  ? mtree_load+0x3a4/0xb50
[  357.961169][ T9801]  move_pages_and_store_status+0xf1/0x230
[  357.961200][ T9801]  ? __pfx_move_pages_and_store_status+0x10/0x10
[  357.961238][ T9801]  kernel_move_pages+0xca4/0x14d0
[  357.961275][ T9801]  ? __pfx_kernel_move_pages+0x10/0x10
[  357.961311][ T9801]  ? xfd_validate_state+0x129/0x190
[  357.961347][ T9801]  __ia32_sys_move_pages+0xdd/0x1b0
[  357.961377][ T9801]  ? __do_fast_syscall_32+0xb3/0x8b0
[  357.961404][ T9801]  ? lockdep_hardirqs_on+0x7d/0x110
[  357.961430][ T9801]  __do_fast_syscall_32+0x13a/0x8b0
[  357.961462][ T9801]  do_fast_syscall_32+0x32/0x70
[  357.961489][ T9801]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  357.961515][ T9801] RIP: 0023:0xf6fdefec
[  357.961540][ T9801] Code: Unable to access opcode bytes at 0xf6fdefc2.
[  357.961549][ T9801] RSP: 002b:00000000f538b50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d
[  357.961569][ T9801] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064
[  357.961582][ T9801] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000
[  357.961596][ T9801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  357.961608][ T9801] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  357.961620][ T9801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  357.961646][ T9801]  </TASK>
[  357.961692][ T9801] Mem-Info:
[  357.961705][ T9801] active_anon:5262 inactive_anon:9060 isolated_anon:12
[  357.961705][ T9801]  active_file:11198 inactive_file:10487 isolated_file:0
[  357.961705][ T9801]  unevictable:0 dirty:201 writeback:0
[  357.961705][ T9801]  slab_reclaimable:6399 slab_unreclaimable:55524
[  357.961705][ T9801]  mapped:27104 shmem:11124 pagetables:1207
[  357.961705][ T9801]  sec_pagetables:311 bounce:0
[  357.961705][ T9801]  kernel_misc_reclaimable:0
[  357.961705][ T9801]  free:33028 free_pcp:10673 free_cma:0
[  357.961760][ T9801] Node 0 active_anon:4kB inactive_anon:4kB active_file:104kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8832kB pagetables:1236kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  357.961809][ T9801] Node 1 active_anon:21044kB inactive_anon:36236kB active_file:44688kB inactive_file:41916kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:108388kB dirty:800kB writeback:0kB shmem:44496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:4488kB pagetables:3592kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  357.961860][ T9801] Node 0 DMA free:3432kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  357.961915][ T9801] lowmem_reserve[]: 0 277 277 277 277
[  357.961950][ T9801] Node 0 DMA32 free:25156kB boost:14336kB min:26964kB low:30120kB high:33276kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:4kB active_file:104kB inactive_file:32kB unevictable:0kB writepending:4kB zspages:1768kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:5100kB local_pcp:2452kB free_cma:0kB
[  357.962005][ T9801] lowmem_reserve[]: 0 0 0 0 0
[  357.962039][ T9801] Node 1 DMA32 free:103524kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:504kB active_anon:21044kB inactive_anon:36236kB active_file:44688kB inactive_file:41916kB unevictable:0kB writepending:800kB zspages:4624kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:37592kB local_pcp:7880kB free_cma:0kB
[  357.962095][ T9801] lowmem_reserve[]: 0 0 0 0 0
[  357.962129][ T9801] Node 0 DMA: 130*4kB (UE) 46*8kB (UE) 11*16kB (UE) 38*32kB (UE) 16*64kB (UE) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3432kB
[  357.962264][ T9801] Node 0 DMA32: 329*4kB (UME) 100*8kB (UME) 70*16kB (UME) 205*32kB (UME) 36*64kB (UME) 12*128kB (UM) 9*256kB (UM) 8*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 0*4096kB = 25156kB
[  357.962421][ T9801] Node 1 DMA32: 889*4kB (UMH) 1232*8kB (UMEH) 302*16kB (UMH) 253*32kB (UMEH) 122*64kB (UMEH) 90*128kB (UME) 46*256kB (UME) 20*512kB (UM) 15*1024kB (UM) 4*2048kB (UM) 3*4096kB (M) = 103524kB
[  357.962587][ T9801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  357.962603][ T9801] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  357.962620][ T9801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  357.962635][ T9801] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  357.962651][ T9801] 34055 total pagecache pages
[  357.962658][ T9801] 1248 pages in swap cache
[  357.962664][ T9801] Free swap  = 92112kB
[  357.962672][ T9801] Total swap = 124996kB
[  357.962679][ T9801] 524155 pages RAM
[  357.962686][ T9801] 0 pages HighMem/MovableOnly
[  357.962692][ T9801] 212108 pages reserved
[  357.962699][ T9801] 0 pages cma reserved
[  359.241308][ T9822] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  359.466060][   T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  359.656897][   T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  359.671747][   T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  359.740001][   T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  359.740037][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.283913][ T9827] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  360.558678][   T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  362.248163][ T5594] usb 5-1: USB disconnect, device number 7
[  363.647057][   T43] audit: type=1326 audit(1788666523.244:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9859 comm="syz.0.794" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0
[  364.976819][ T9873] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  364.976859][ T9873] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  364.979469][ T9873] vhci_hcd vhci_hcd.0: Device attached
[  365.074084][ T9873] rdma_rxe: rxe_newlink: failed to add wg2
[  365.220083][ T5594] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  365.251101][ T9883] NILFS (loop1): device size too small
[  365.398200][ T5594] usb 7-1: Using ep0 maxpacket: 32
[  365.404911][ T5594] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  365.412388][ T5594] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  365.412435][ T5594] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  365.424378][ T5594] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.424435][ T5594] usb 7-1: Product: syz
[  365.424480][ T5594] usb 7-1: Manufacturer: syz
[  365.424515][ T5594] usb 7-1: SerialNumber: syz
[  365.436100][   T42] usb 44-1: SetAddress Request (10) to port 0
[  365.436237][   T42] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd
[  365.678093][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'.
[  365.881223][ T9875] vhci_hcd: connection reset by peer
[  365.894538][ T5787] vhci_hcd vhci_hcd.3: stop threads
[  365.894605][ T5787] vhci_hcd vhci_hcd.3: release socket
[  365.894843][ T5787] vhci_hcd vhci_hcd.3: disconnect device
[  366.591914][ T5594] usb 7-1: USB disconnect, device number 10
[  367.303220][   T38] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  367.311635][ T9888] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  368.836084][ T5846] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  369.016089][ T5846] usb 6-1: Using ep0 maxpacket: 16
[  369.017104][ T5846] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00
[  369.018280][ T5846] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  369.018488][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0
[  369.018653][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.020473][ T5846] usb 6-1: config 0 descriptor??
[  369.271538][ T5846] usbhid 6-1:0.0: can't add hid device: -71
[  369.271632][ T5846] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  369.280941][ T5846] usb 6-1: USB disconnect, device number 13
[  369.821068][ T9912] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  369.821116][ T9912] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  369.821537][ T9912] vhci_hcd vhci_hcd.0: Device attached
[  369.983359][ T9912] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  370.086123][ T5888] usb 38-1: SetAddress Request (14) to port 0
[  370.086235][ T5888] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd
[  370.237369][ T9913] vhci_hcd: connection reset by peer
[  370.237809][ T5787] vhci_hcd vhci_hcd.0: stop threads
[  370.238113][ T5787] vhci_hcd vhci_hcd.0: release socket
[  370.238341][ T5787] vhci_hcd vhci_hcd.0: disconnect device
[  370.466480][   T42] usb 44-1: device descriptor read/8, error -110
[  370.871754][   T42] usb usb44-port1: attempt power cycle
[  371.436526][   T42] usb usb44-port1: unable to enumerate USB device
[  371.834100][ T9951] netlink: 'syz.1.806': attribute type 13 has an invalid length.
[  373.118694][ T5846] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  373.448369][  T155] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  373.448534][ T9969] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  374.186978][ T5846] usb 6-1: Using ep0 maxpacket: 32
[  374.188288][ T5846] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  374.189416][ T5846] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  374.189434][ T5846] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  374.191358][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.191375][ T5846] usb 6-1: Product: syz
[  374.191386][ T5846] usb 6-1: Manufacturer: syz
[  374.191397][ T5846] usb 6-1: SerialNumber: syz
[  374.345177][   T43] audit: type=1326 audit(1788666533.934:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.0.821" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0
[  374.421705][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'.
[  375.186367][ T5888] usb 38-1: device descriptor read/8, error -110
[  375.500303][ T5846] usb 6-1: USB disconnect, device number 14
[  375.576610][ T5888] usb usb38-port1: attempt power cycle
[  376.348293][ T5888] usb usb38-port1: unable to enumerate USB device
[  377.470882][T10003] xt_time: unknown flags 0xf4
[  377.581106][T10003] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.718467][T10003] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.856069][ T5822] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  377.869854][ T5846] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  377.884460][T10003] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.011198][T10003] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.016192][ T5822] usb 6-1: Using ep0 maxpacket: 32
[  378.020182][ T5846] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  378.020204][ T5822] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  378.020695][ T5846] usb 7-1: config 0 has no interfaces?
[  378.022450][ T5846] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  378.022466][ T5846] usb 7-1: Product: syz
[  378.022475][ T5846] usb 7-1: Manufacturer: syz
[  378.022484][ T5846] usb 7-1: SerialNumber: syz
[  378.023906][ T5846] usb 7-1: config 0 descriptor??
[  378.041299][ T5822] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  378.044698][ T5822] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  378.049549][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.053273][ T5822] usb 6-1: Product: syz
[  378.053315][ T5822] usb 6-1: Manufacturer: syz
[  378.053345][ T5822] usb 6-1: SerialNumber: syz
[  378.147587][ T1434] ieee802154 phy1 wpan1: encryption failed: -22
[  378.234903][ T5787] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.248611][ T5787] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.274445][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'.
[  378.349771][ T5787] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.370053][ T5787] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.741428][ T5106] usb 7-1: USB disconnect, device number 11
[  379.029223][ T5822] usb 6-1: USB disconnect, device number 15
[  379.878520][T10031] tipc: Started in network mode
[  379.878616][T10031] tipc: Node identity 0010000000000000002, cluster identity 1
[  379.883546][T10031] Invalid ELF header magic: != ELF
[  379.887059][T10031] overlayfs: overlapping lowerdir path
[  381.196981][T10041] futex_wake_op: syz.3.826 tries to shift op by 144; fix this program
[  383.020386][T10057] openvswitch: netlink: Flow actions attr not present in new flow.
[  383.281212][T10059] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  383.427870][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'.
[  383.428664][T10062] vlan0: entered promiscuous mode
[  383.886050][   T25] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[  384.056823][   T25] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  384.060816][   T25] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  384.060881][   T25] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  384.060910][   T25] usb 8-1: config 0 interface 0 has no altsetting 0
[  384.072401][   T25] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  384.072437][   T25] usb 8-1: Product: syz
[  384.072497][   T25] usb 8-1: Manufacturer: syz
[  384.072518][   T25] usb 8-1: SerialNumber: syz
[  384.080944][   T25] usb 8-1: config 0 descriptor??
[  384.086719][   T25] usb 8-1: selecting invalid altsetting 0
[  384.166046][   T30] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  384.295344][   T25] usb 8-1: USB disconnect, device number 15
[  384.354575][ T9658] udevd[9658]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  384.456833][   T30] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  384.457751][   T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  384.457775][   T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  384.459722][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.459736][   T30] usb 5-1: Product: syz
[  384.459743][   T30] usb 5-1: Manufacturer: syz
[  384.459750][   T30] usb 5-1: SerialNumber: syz
[  384.461069][   T30] usb 5-1: config 0 descriptor??
[  384.464968][   T30] hub 5-1:0.0: bad descriptor, ignoring hub
[  384.464981][   T30] hub 5-1:0.0: probe with driver hub failed with error -5
[  384.470467][   T30] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input20
[  386.980344][    T9] usb 5-1: USB disconnect, device number 8
[  388.962574][T10107] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  388.962614][T10107] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  388.963451][T10107] vhci_hcd vhci_hcd.0: Device attached
[  389.076563][ T5594] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  389.226003][   T42] usb 42-1: SetAddress Request (14) to port 0
[  389.226339][   T42] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd
[  389.237296][ T5594] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  389.243485][ T5594] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  389.245830][ T5594] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  389.252816][ T5594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.276725][T10105] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  389.343766][ T5594] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  389.493972][T10109] vhci_hcd: connection reset by peer
[  389.494207][ T5787] vhci_hcd vhci_hcd.2: stop threads
[  389.494597][ T5787] vhci_hcd vhci_hcd.2: release socket
[  389.494755][ T5787] vhci_hcd vhci_hcd.2: disconnect device
[  390.935160][T10126] loop9: detected capacity change from 0 to 524287998
[  391.582312][   T25] usb 5-1: USB disconnect, device number 9
[  392.222248][T10146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.566972][ T5888] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  393.716743][ T5888] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  393.717739][ T5888] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  393.717768][ T5888] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  393.717797][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.728631][T10164] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  393.736377][ T5888] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  394.310532][   T42] usb 42-1: device descriptor read/8, error -110
[  394.720974][   T42] usb usb42-port1: attempt power cycle
[  395.287028][   T42] usb usb42-port1: unable to enumerate USB device
[  396.650822][ T5594] usb 6-1: USB disconnect, device number 16
[  402.171932][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'.
[  402.284399][T10270] binder: 10268:10270 ioctl c0306201 0 returned -14
[  402.623316][T10277] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  402.623364][T10277] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  402.623885][T10277] vhci_hcd vhci_hcd.0: Device attached
[  402.716197][ T5594] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  402.897244][ T5594] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  402.903611][ T5594] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  402.908520][ T5594] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  402.908560][ T5594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.914362][T10277] rdma_rxe: rxe_newlink: failed to add wg2
[  402.924127][T10275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  402.931419][ T5594] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  402.998857][   T42] usb 42-1: SetAddress Request (18) to port 0
[  402.998976][   T42] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd
[  403.252160][T10278] vhci_hcd: connection reset by peer
[  403.255151][ T5787] vhci_hcd vhci_hcd.2: stop threads
[  403.259848][ T5787] vhci_hcd vhci_hcd.2: release socket
[  403.259897][ T5787] vhci_hcd vhci_hcd.2: disconnect device
[  404.492311][ T5594] usb 5-1: USB disconnect, device number 10
[  408.146065][   T42] usb 42-1: device descriptor read/8, error -110
[  408.663973][   T42] usb usb42-port1: attempt power cycle
[  409.584493][   T42] usb usb42-port1: unable to enumerate USB device
[  409.636112][ T5888] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  409.781981][T10327] NILFS (loop3): device size too small
[  409.906092][ T5888] usb 6-1: Using ep0 maxpacket: 32
[  409.906883][ T5888] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  409.907790][ T5888] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  409.907808][ T5888] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  409.909820][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.909840][ T5888] usb 6-1: Product: syz
[  409.909852][ T5888] usb 6-1: Manufacturer: syz
[  409.909863][ T5888] usb 6-1: SerialNumber: syz
[  410.123923][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'.
[  411.784239][T10339] usbip-vudc usbip-vudc.0: gadget not bound
[  411.863479][ T5888] usb 6-1: USB disconnect, device number 17
[  411.953456][T10345] netlink: 64 bytes leftover after parsing attributes in process `syz.1.877'.
[  412.090075][T10349] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  412.090115][T10349] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  412.090243][T10349] vhci_hcd vhci_hcd.0: Device attached
[  412.132014][T10349] rdma_rxe: rxe_newlink: failed to add wg2
[  412.386427][ T5888] usb 44-1: SetAddress Request (14) to port 0
[  412.390780][ T5888] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd
[  412.601174][T10350] vhci_hcd: connection reset by peer
[  412.619661][ T5787] vhci_hcd vhci_hcd.3: stop threads
[  412.619817][ T5787] vhci_hcd vhci_hcd.3: release socket
[  412.619973][ T5787] vhci_hcd vhci_hcd.3: disconnect device
[  413.605693][T10356] netlink: 64 bytes leftover after parsing attributes in process `syz.0.889'.
[  414.098424][T10357] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  417.388970][T10393] NILFS (loop2): device size too small
[  417.426144][ T5888] usb 44-1: device descriptor read/8, error -110
[  417.776523][ T5822] usb 8-1: new full-speed USB device number 16 using dummy_hcd
[  417.860857][ T5888] usb usb44-port1: attempt power cycle
[  417.971955][ T5822] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  417.983122][ T5822] usb 8-1: config 0 has no interfaces?
[  418.001317][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  418.001582][ T5822] usb 8-1: Product: syz
[  418.001676][ T5822] usb 8-1: Manufacturer: syz
[  418.001765][ T5822] usb 8-1: SerialNumber: syz
[  418.074949][ T5822] usb 8-1: config 0 descriptor??
[  418.517759][T10388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.079117][ T5888] usb usb44-port1: unable to enumerate USB device
[  419.622944][T10388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.715371][T10388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.762544][T10407] netlink: 156 bytes leftover after parsing attributes in process `syz.1.888'.
[  419.766300][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'.
[  419.845821][T10409] binder: 10406:10409 ioctl c0306201 0 returned -14
[  421.210731][T10388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.345010][T10421] netlink: 'syz.1.890': attribute type 1 has an invalid length.
[  421.345065][T10421] netlink: 84 bytes leftover after parsing attributes in process `syz.1.890'.
[  421.345111][T10421] netlink: 'syz.1.890': attribute type 2 has an invalid length.
[  421.345132][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'.
[  421.448510][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.536228][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.536341][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.536378][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.539328][ T5888] usb 8-1: USB disconnect, device number 16
[  421.546572][   T43] audit: type=1326 audit(1788666581.144:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.0.893" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0
[  422.665691][T10438] NILFS (loop1): device size too small
[  425.755352][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'.
[  425.852202][T10473] netlink: 156 bytes leftover after parsing attributes in process `syz.2.903'.
[  425.865992][T10471] binder: 10464:10471 ioctl c0306201 0 returned -14
[  427.895357][T10482] netlink: 'syz.0.904': attribute type 13 has an invalid length.
[  428.298495][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.906'.
[  430.962029][T10513] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  433.559717][T10563] xt_time: unknown flags 0xf4
[  433.656029][T10563] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.770430][T10571] netlink: 'syz.3.916': attribute type 13 has an invalid length.
[  433.885432][T10563] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.947611][T10563] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.006080][ T5594] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  434.104159][T10563] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.167523][ T5594] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  434.168044][ T5594] usb 7-1: config 0 has no interfaces?
[  434.172136][ T5594] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  434.172151][ T5594] usb 7-1: Product: syz
[  434.172159][ T5594] usb 7-1: Manufacturer: syz
[  434.172166][ T5594] usb 7-1: SerialNumber: syz
[  434.175687][ T5594] usb 7-1: config 0 descriptor??
[  434.276200][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.276308][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.276394][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.276430][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.448712][ T5846] usb 7-1: USB disconnect, device number 12
[  435.170334][T10583] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  435.176309][T10583] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  437.095771][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'.
[  437.358985][T10576] netlink: 'syz.2.918': attribute type 13 has an invalid length.
[  437.994817][T10603] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  438.510756][T10609] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  438.528510][T10612] netlink: 64 bytes leftover after parsing attributes in process `syz.3.926'.
[  439.586777][ T1434] ieee802154 phy1 wpan1: encryption failed: -22
[  441.163146][T10631] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  442.019793][T10670] netlink: 156 bytes leftover after parsing attributes in process `syz.1.932'.
[  442.649394][T10681] IPVS: Error connecting to the multicast addr
[  444.200607][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'.
[  444.247556][T10700] netlink: 'syz.2.934': attribute type 13 has an invalid length.
[  444.476403][T10713] netlink: 64 bytes leftover after parsing attributes in process `syz.3.938'.
[  444.816232][ T5888] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[  444.976941][ T5888] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  444.979633][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  444.979660][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  444.981967][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.981986][ T5888] usb 7-1: Product: syz
[  444.981997][ T5888] usb 7-1: Manufacturer: syz
[  444.982008][ T5888] usb 7-1: SerialNumber: syz
[  444.984201][ T5888] usb 7-1: config 0 descriptor??
[  444.986177][ T5888] hub 7-1:0.0: bad descriptor, ignoring hub
[  444.986196][ T5888] hub 7-1:0.0: probe with driver hub failed with error -5
[  444.991583][ T5888] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input22
[  445.929997][T10744] xt_time: unknown flags 0xf4
[  445.959723][T10744] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.010603][T10744] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.071242][T10744] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.122315][T10744] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.256075][ T5822] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  446.256324][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.256357][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.267894][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.268002][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.406776][ T5822] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  446.407476][ T5822] usb 6-1: config 0 has no interfaces?
[  446.409583][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  446.409603][ T5822] usb 6-1: Product: syz
[  446.409615][ T5822] usb 6-1: Manufacturer: syz
[  446.409627][ T5822] usb 6-1: SerialNumber: syz
[  446.411930][ T5822] usb 6-1: config 0 descriptor??
[  446.680338][ T5822] usb 6-1: USB disconnect, device number 18
[  447.280739][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'.
[  447.620581][T10758] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  447.620612][T10758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  447.620818][T10758] vhci_hcd vhci_hcd.0: Device attached
[  447.742994][ T5822] usb 7-1: USB disconnect, device number 13
[  447.946398][ T5888] usb 44-1: SetAddress Request (18) to port 0
[  447.947322][ T5888] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd
[  449.319288][T10776] ipvlan0: Caught tx_queue_len zero misconfig
[  449.696179][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'.
[  449.696276][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'.
[  450.176147][T10759] vhci_hcd: connection reset by peer
[  450.182308][   T13] vhci_hcd vhci_hcd.3: stop threads
[  450.182391][   T13] vhci_hcd vhci_hcd.3: release socket
[  450.182916][   T13] vhci_hcd vhci_hcd.3: disconnect device
[  450.431935][T10789] netlink: 'syz.0.951': attribute type 9 has an invalid length.
[  450.469585][T10789] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  451.090025][T10796] netlink: 'syz.1.949': attribute type 13 has an invalid length.
[  452.776287][ T9607] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  452.936436][ T9607] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  452.937298][ T9607] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  452.937336][ T9607] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  452.937368][ T9607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.939262][T10827] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  452.941470][ T9607] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  453.025995][ T5888] usb 44-1: device descriptor read/8, error -110
[  453.435480][ T5888] usb usb44-port1: attempt power cycle
[  453.721341][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'.
[  454.007115][ T5888] usb usb44-port1: unable to enumerate USB device
[  454.515157][ T5846] usb 6-1: USB disconnect, device number 19
[  455.591088][T10844] ip6t_hbh: unknown flags 58
[  458.014292][T10845] ipvlan3: entered allmulticast mode
[  458.196222][T10845] batman_adv: batadv0: Adding interface: ipvlan3
[  458.196389][T10845] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.207280][T10845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.207322][T10845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.207329][T10845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  458.207560][T10845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.207628][T10845] batman_adv: batadv0: Interface activated: ipvlan3
[  461.079843][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'.
[  464.439947][T10910] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  464.443437][T10910] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  464.554568][T10178] IPVS: starting estimator thread 0...
[  464.759425][T10912] IPVS: using max 44 ests per chain, 105600 per kthread
[  466.819299][T10925] netlink: 'syz.3.976': attribute type 13 has an invalid length.
[  467.088221][T10931] nbd0: detected capacity change from 0 to 63
[  467.237008][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'.
[  468.836831][   T66] block nbd0: Receive control failed (result -104)
[  471.127135][T10949] netlink: 'syz.2.990': attribute type 13 has an invalid length.
[  471.176758][T10952] netlink: 156 bytes leftover after parsing attributes in process `syz.3.991'.
[  471.400519][T10946] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  473.541003][T10969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  474.264116][T10979] random: crng reseeded on system resumption
[  474.387294][T10979] jffs2: notice: (10979) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  474.803379][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'.
[  476.049028][T10995] ip6t_hbh: unknown flags 58
[  476.130474][T10997] ipvlan3: entered allmulticast mode
[  476.133380][T10997] batman_adv: batadv0: Adding interface: ipvlan3
[  476.133463][T10997] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.133511][T10997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  476.133527][T10997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.133536][T10997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  476.133548][T10997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.133558][T10997] batman_adv: batadv0: Interface activated: ipvlan3
[  477.620285][T11008] CIFS: Attempting to mount //127.0.0.1/share
[  479.661927][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'.
[  480.554146][T11008] CIFS: VFS: Error connecting to socket. Aborting operation.
[  480.557152][T11008] CIFS: VFS: cifs_mount failed w/return code = -4
[  483.448193][T11042] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  483.758879][T11047] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  483.823174][T11047] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  483.823335][T11047] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]
[  483.823597][T11047] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  483.824758][T11047] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  484.813466][T11047] pci 0000:00:01.0: Adding to iommu group 1
[  484.818656][T11047] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  484.818691][T11047] pci 0000:00:01.0: vgaarb: bridge control possible
[  484.818703][T11047] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  484.831686][T11047] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  484.831839][T11047] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned
[  484.833315][T11047] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  484.843313][T11047] [drm] Found bochs VGA, ID 0xb0c5.
[  484.843337][T11047] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000.
[  485.367481][T11047] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  485.822514][T11047] Console: switching to colour frame buffer device 160x50
[  485.975819][T11047] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  486.247720][T11076] bond0: invalid ARP target specified
[  486.559702][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'.
[  486.559765][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'.
[  488.152910][T11089] ceph: No mds server is up or the cluster is laggy
[  489.428998][T11107] ip6t_rt: too many addresses specified
[  490.557968][T11116] warn_alloc: 1 callbacks suppressed
[  490.558051][T11116] syz.0.1006: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1
[  490.558245][T11116] CPU: 2 UID: 0 PID: 11116 Comm: syz.0.1006 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  490.558285][T11116] Tainted: [L]=SOFTLOCKUP
[  490.558293][T11116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  490.558306][T11116] Call Trace:
[  490.558313][T11116]  <TASK>
[  490.558326][T11116]  dump_stack_lvl+0x100/0x190
[  490.558425][T11116]  warn_alloc.cold+0x9e/0xb2
[  490.558447][T11116]  ? __pfx_warn_alloc+0x10/0x10
[  490.558506][T11116]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  490.558574][T11116]  ? __pfx_get_page_from_freelist+0x10/0x10
[  490.558612][T11116]  __alloc_frozen_pages_noprof+0xcb6/0x3300
[  490.558650][T11116]  ? debug_check_no_obj_freed+0x260/0x630
[  490.558683][T11116]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  490.558718][T11116]  ? find_held_lock+0x2b/0x80
[  490.558738][T11116]  ? __free_frozen_pages+0x747/0x10f0
[  490.558763][T11116]  ? __free_frozen_pages+0x747/0x10f0
[  490.558794][T11116]  ? _raw_spin_unlock+0x28/0x50
[  490.558819][T11116]  ? irqentry_exit+0x24d/0xa10
[  490.558857][T11116]  __folio_alloc_noprof+0x16/0x260
[  490.558888][T11116]  alloc_migration_target+0x1d7/0x6d0
[  490.558918][T11116]  migrate_pages_batch+0x5c4/0x4680
[  490.558948][T11116]  ? __pfx_alloc_migration_target+0x10/0x10
[  490.558978][T11116]  ? migrate_pages_sync+0x12c/0x880
[  490.559005][T11116]  ? migrate_pages_sync+0x588/0x880
[  490.559030][T11116]  ? __pfx_migrate_pages_batch+0x10/0x10
[  490.559062][T11116]  ? __pfx_migrate_pages_sync+0x10/0x10
[  490.559094][T11116]  ? __lock_acquire+0x4c5/0x1ec0
[  490.559119][T11116]  ? __css_rstat_updated+0x1ce/0x590
[  490.559150][T11116]  migrate_pages+0x1950/0x2850
[  490.559178][T11116]  ? __pfx_alloc_migration_target+0x10/0x10
[  490.559210][T11116]  ? __pfx_migrate_pages+0x10/0x10
[  490.559246][T11116]  ? mtree_load+0x3a4/0xb50
[  490.559277][T11116]  move_pages_and_store_status+0xf1/0x230
[  490.559308][T11116]  ? __pfx_move_pages_and_store_status+0x10/0x10
[  490.559351][T11116]  kernel_move_pages+0xca4/0x14d0
[  490.559388][T11116]  ? __pfx_kernel_move_pages+0x10/0x10
[  490.559423][T11116]  ? xfd_validate_state+0x129/0x190
[  490.559452][T11116]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  490.559480][T11116]  __ia32_sys_move_pages+0xdd/0x1b0
[  490.559508][T11116]  ? __do_fast_syscall_32+0xb3/0x8b0
[  490.559535][T11116]  ? lockdep_hardirqs_on+0x7d/0x110
[  490.559561][T11116]  __do_fast_syscall_32+0x13a/0x8b0
[  490.559592][T11116]  do_fast_syscall_32+0x32/0x70
[  490.559618][T11116]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  490.559644][T11116] RIP: 0023:0xf701efec
[  490.559665][T11116] Code: Unable to access opcode bytes at 0xf701efc2.
[  490.559674][T11116] RSP: 002b:00000000f53cb50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d
[  490.559693][T11116] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064
[  490.559705][T11116] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000
[  490.559718][T11116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  490.559729][T11116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  490.559741][T11116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  490.559765][T11116]  </TASK>
[  490.560917][T11116] Mem-Info:
[  490.560929][T11116] active_anon:4104 inactive_anon:2122 isolated_anon:12
[  490.560929][T11116]  active_file:6307 inactive_file:11866 isolated_file:0
[  490.560929][T11116]  unevictable:1000 dirty:593 writeback:0
[  490.560929][T11116]  slab_reclaimable:6279 slab_unreclaimable:57472
[  490.560929][T11116]  mapped:27354 shmem:4453 pagetables:1311
[  490.560929][T11116]  sec_pagetables:321 bounce:0
[  490.560929][T11116]  kernel_misc_reclaimable:0
[  490.560929][T11116]  free:28089 free_pcp:63 free_cma:0
[  490.560977][T11116] Node 0 active_anon:0kB inactive_anon:8kB active_file:104kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8864kB pagetables:1236kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  490.561195][T11116] Node 1 active_anon:16416kB inactive_anon:8480kB active_file:25124kB inactive_file:47432kB unevictable:4000kB isolated(anon):48kB isolated(file):0kB mapped:109388kB dirty:2372kB writeback:0kB shmem:17812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:4908kB pagetables:4008kB sec_pagetables:144kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  490.561245][T11116] Node 0 DMA free:3324kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  490.561297][T11116] lowmem_reserve[]: 0 277 277 277 277
[  490.561457][T11116] Node 0 DMA32 free:30264kB boost:18432kB min:31060kB low:34216kB high:37372kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:8kB active_file:104kB inactive_file:32kB unevictable:0kB writepending:0kB zspages:1888kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  490.561508][T11116] lowmem_reserve[]: 0 0 0 0 0
[  490.561539][T11116] Node 1 DMA32 free:78768kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:544kB active_anon:16416kB inactive_anon:8480kB active_file:25124kB inactive_file:47432kB unevictable:4000kB writepending:2372kB zspages:5188kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB
[  490.561645][T11116] lowmem_reserve[]: 0 0 0 0 0
[  490.561677][T11116] Node 0 DMA: 129*4kB (UE) 49*8kB (UE) 11*16kB (UE) 34*32kB (UE) 16*64kB (UE) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3324kB
[  490.561800][T11116] Node 0 DMA32: 479*4kB (UME) 127*8kB (UME) 70*16kB (UME) 204*32kB (UME) 38*64kB (UME) 13*128kB (UM) 9*256kB (UM) 8*512kB (M) 3*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 30292kB
[  490.561950][T11116] Node 1 DMA32: 921*4kB (UMEH) 249*8kB (UMEH) 230*16kB (UMEH) 213*32kB (UMEH) 191*64kB (UMEH) 92*128kB (UME) 50*256kB (UME) 24*512kB (UME) 9*1024kB (M) 2*2048kB (UM) 0*4096kB = 78572kB
[  490.562095][T11116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  490.562111][T11116] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  490.562125][T11116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  490.562139][T11116] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  490.562155][T11116] 23586 total pagecache pages
[  490.562161][T11116] 950 pages in swap cache
[  490.562168][T11116] Free swap  = 48508kB
[  490.562175][T11116] Total swap = 124996kB
[  490.562182][T11116] 524155 pages RAM
[  490.562188][T11116] 0 pages HighMem/MovableOnly
[  490.562194][T11116] 212108 pages reserved
[  490.562201][T11116] 0 pages cma reserved
[  492.205973][ T9607] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  492.286324][T11137] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  492.286361][T11137] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  492.292159][T11137] vhci_hcd vhci_hcd.0: Device attached
[  492.356049][ T9607] usb 8-1: Using ep0 maxpacket: 8
[  492.358681][ T9607] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  492.363107][ T9607] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  492.366374][ T9607] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  492.370083][ T9607] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  492.373594][ T9607] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  492.377134][ T9607] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  492.381874][ T9607] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.556179][   T42] usb 40-1: SetAddress Request (22) to port 0
[  492.556306][   T42] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd
[  492.745365][ T9607] usb 8-1: usb_control_msg returned -32
[  492.748434][ T9607] usbtmc 8-1:16.0: can't read capabilities
[  492.950649][ T9607] usb 8-1: USB disconnect, device number 17
[  493.477120][ T5846] Process accounting resumed
[  495.147421][T11138] vhci_hcd: connection reset by peer
[  495.148893][   T13] vhci_hcd vhci_hcd.1: stop threads
[  495.149279][   T13] vhci_hcd vhci_hcd.1: release socket
[  495.151550][   T13] vhci_hcd vhci_hcd.1: disconnect device
[  495.272412][T11151] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  495.610783][T11152] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  495.610973][T11152] block device autoloading is deprecated and will be removed.
[  497.046061][T11168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1022'.
[  497.205574][ T5102] block nbd0: Possible stuck request ffff888027c25080: control (read@0,1024B). Runtime 30 seconds
[  497.206972][ T5102] block nbd0: Possible stuck request ffff888027c25240: control (read@1024,3072B). Runtime 30 seconds
[  497.352873][T11168] bond_slave_0: entered allmulticast mode
[  497.666737][   T42] usb 40-1: device descriptor read/8, error -110
[  498.248653][   T42] usb usb40-port1: attempt power cycle
[  498.816825][   T42] usb usb40-port1: unable to enumerate USB device
[  498.888367][T11170] random: crng reseeded on system resumption
[  499.954601][ T5822] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  500.122306][T11191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  500.226784][ T5822] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  500.762278][   T25] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  501.037511][T11187] ceph: No mds server is up or the cluster is laggy
[  501.257446][ T1434] ieee802154 phy1 wpan1: encryption failed: -22
[  501.436640][T11204] gre0: MTU too low for tipc bearer
[  501.436737][T11204] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  503.561683][ T5106] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  503.788083][ T5106] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  503.791325][ T5106] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9
[  503.796541][ T5106] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9
[  503.805551][ T5106] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.805681][ T5106] usb 7-1: Product: syz
[  503.805779][ T5106] usb 7-1: Manufacturer: syz
[  503.805912][ T5106] usb 7-1: SerialNumber: syz
[  503.806034][ T5822] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  503.850835][ T5106] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected
[  503.955996][ T5822] usb 6-1: Using ep0 maxpacket: 32
[  503.956898][ T5822] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  503.959374][ T5822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  503.959400][ T5822] usb 6-1: config 0 has no interfaces?
[  503.961967][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  503.961992][ T5822] usb 6-1: Product: syz
[  503.962007][ T5822] usb 6-1: Manufacturer: syz
[  503.962022][ T5822] usb 6-1: SerialNumber: syz
[  503.964878][ T5822] usb 6-1: config 0 descriptor??
[  504.096649][ T5106] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  504.101749][ T5106] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  504.178134][ T5888] usb 6-1: USB disconnect, device number 20
[  505.144620][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'.
[  506.212756][ T5888] usb 7-1: USB disconnect, device number 14
[  506.226906][ T5888] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  506.233933][ T5888] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  506.234820][ T5888] ti_usb_3410_5052 7-1:2.0: device disconnected
[  506.473733][T11249] CIFS: Attempting to mount //127.0.0.1/share
[  506.682372][T11249] CIFS: VFS: Error connecting to socket. Aborting operation.
[  506.682794][T11249] CIFS: VFS: cifs_mount failed w/return code = -111
[  508.130646][T11256] netlink: 'syz.3.1036': attribute type 10 has an invalid length.
[  508.136301][T11256] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1036'.
[  508.167483][T11256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.206899][T11256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.217846][T11256] bond0 (unregistering): Released all slaves
[  508.264693][T11258] syz.3.1036: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  508.274967][T11258] CPU: 1 UID: 0 PID: 11258 Comm: syz.3.1036 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  508.275014][T11258] Tainted: [L]=SOFTLOCKUP
[  508.275023][T11258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  508.275035][T11258] Call Trace:
[  508.275044][T11258]  <TASK>
[  508.275054][T11258]  dump_stack_lvl+0x100/0x190
[  508.275085][T11258]  warn_alloc.cold+0x9e/0xb2
[  508.275110][T11258]  ? __pfx_warn_alloc+0x10/0x10
[  508.275151][T11258]  ? __lock_acquire+0x4c5/0x1ec0
[  508.275183][T11258]  ? __lock_acquire+0x4c5/0x1ec0
[  508.275214][T11258]  __vmalloc_node_range_noprof+0x123b/0x1420
[  508.275242][T11258]  ? do_raw_spin_lock+0x128/0x260
[  508.275274][T11258]  ? find_held_lock+0x2b/0x80
[  508.275296][T11258]  ? debug_object_activate+0x343/0x4b0
[  508.275325][T11258]  ? do_replace+0x1c6/0x490
[  508.275397][T11258]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  508.275429][T11258]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  508.275459][T11258]  ? __lock_acquire+0x4c5/0x1ec0
[  508.275494][T11258]  ? do_replace+0x1c6/0x490
[  508.275516][T11258]  __vmalloc_node_noprof+0xad/0xf0
[  508.275544][T11258]  ? do_replace+0x1c6/0x490
[  508.275574][T11258]  __vmalloc_noprof+0xa3/0x120
[  508.275601][T11258]  ? __pfx___vmalloc_noprof+0x10/0x10
[  508.275636][T11258]  do_replace+0x1c6/0x490
[  508.275661][T11258]  ? __pfx_do_replace+0x10/0x10
[  508.275693][T11258]  ? register_lock_class+0x3f/0x7b0
[  508.275727][T11258]  compat_do_replace+0x589/0x7a0
[  508.275756][T11258]  ? __pfx_compat_do_replace+0x10/0x10
[  508.275796][T11258]  ? bpf_lsm_capable+0x9/0x10
[  508.275830][T11258]  ? security_capable+0x80/0x260
[  508.275872][T11258]  do_ebt_set_ctl+0x3f4/0x4a0
[  508.275897][T11258]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  508.275924][T11258]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  508.275953][T11258]  ? futex_wake+0x4ea/0x5e0
[  508.275981][T11258]  ? nf_sockopt_find.isra.0+0x222/0x290
[  508.276010][T11258]  nf_setsockopt+0x8d/0xf0
[  508.276039][T11258]  ip_setsockopt+0xcb/0xf0
[  508.276070][T11258]  tcp_setsockopt+0xa7/0x100
[  508.276096][T11258]  smc_setsockopt+0x1b6/0xa40
[  508.276118][T11258]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  508.276150][T11258]  ? __pfx_smc_setsockopt+0x10/0x10
[  508.276177][T11258]  ? aa_sock_opt_perm+0x114/0x1e0
[  508.276201][T11258]  ? __pfx_smc_setsockopt+0x10/0x10
[  508.276226][T11258]  do_sock_setsockopt+0xf3/0x1d0
[  508.276259][T11258]  __sys_setsockopt+0x119/0x190
[  508.276290][T11258]  __ia32_sys_setsockopt+0xbc/0x160
[  508.276314][T11258]  ? __do_fast_syscall_32+0xb3/0x8b0
[  508.276342][T11258]  ? lockdep_hardirqs_on+0x7d/0x110
[  508.276368][T11258]  __do_fast_syscall_32+0x13a/0x8b0
[  508.276400][T11258]  do_fast_syscall_32+0x32/0x70
[  508.276429][T11258]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  508.276454][T11258] RIP: 0023:0xf6fdefec
[  508.276478][T11258] Code: Unable to access opcode bytes at 0xf6fdefc2.
[  508.276488][T11258] RSP: 002b:00000000f538b50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[  508.276509][T11258] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000
[  508.276523][T11258] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108
[  508.276535][T11258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  508.276548][T11258] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  508.276560][T11258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  508.276593][T11258]  </TASK>
[  508.414552][T11258] Mem-Info:
[  508.414598][T11258] active_anon:1295 inactive_anon:2188 isolated_anon:0
[  508.414598][T11258]  active_file:6315 inactive_file:11669 isolated_file:0
[  508.414598][T11258]  unevictable:1000 dirty:495 writeback:0
[  508.414598][T11258]  slab_reclaimable:6239 slab_unreclaimable:57185
[  508.414598][T11258]  mapped:23196 shmem:2158 pagetables:1255
[  508.414598][T11258]  sec_pagetables:321 bounce:0
[  508.414598][T11258]  kernel_misc_reclaimable:0
[  508.414598][T11258]  free:25037 free_pcp:9471 free_cma:0
[  508.414687][T11258] Node 0 active_anon:0kB inactive_anon:8kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8832kB pagetables:1236kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  508.414789][T11258] Node 1 active_anon:5180kB inactive_anon:8744kB active_file:25124kB inactive_file:46676kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:92756kB dirty:1976kB writeback:0kB shmem:8632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4796kB pagetables:3784kB sec_pagetables:144kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  508.414861][T11258] Node 0 DMA free:3324kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  508.414957][T11258] lowmem_reserve[]: 0 277 277 277 277
[  508.415118][T11258] Node 0 DMA32 free:24620kB boost:18432kB min:31060kB low:34216kB high:37372kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:8kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:1888kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:6024kB local_pcp:36kB free_cma:0kB
[  508.415211][T11258] lowmem_reserve[]: 0 0 0 0 0
[  508.415367][T11258] Node 1 DMA32 free:72204kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:552kB active_anon:5180kB inactive_anon:8744kB active_file:25124kB inactive_file:46676kB unevictable:4000kB writepending:1976kB zspages:5108kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:31804kB local_pcp:10484kB free_cma:0kB
[  508.415457][T11258] lowmem_reserve[]: 0 0 0 0 0
[  508.415621][T11258] Node 0 DMA: 129*4kB (UE) 49*8kB (UE) 11*16kB (UE) 34*32kB (UE) 16*64kB (UE) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3324kB
[  508.416101][T11258] Node 0 DMA32: 427*4kB (UME) 128*8kB (UME) 70*16kB (UME) 205*32kB (UME) 34*64kB (UME) 4*128kB (U) 3*256kB (U) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 24620kB
[  508.416643][T11258] Node 1 DMA32: 1307*4kB (MEH) 482*8kB (UMEH) 222*16kB (UMEH) 82*32kB (UMEH) 124*64kB (UMEH) 45*128kB (UME) 9*256kB (UME) 12*512kB (UME) 12*1024kB (M) 7*2048kB (UM) 2*4096kB (U) = 72220kB
[  508.417198][T11258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  508.417225][T11258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  508.417255][T11258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  508.417285][T11258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  508.417316][T11258] 21234 total pagecache pages
[  508.417340][T11258] 1019 pages in swap cache
[  508.417363][T11258] Free swap  = 48676kB
[  508.417385][T11258] Total swap = 124996kB
[  508.417408][T11258] 524155 pages RAM
[  508.417429][T11258] 0 pages HighMem/MovableOnly
[  508.417451][T11258] 212108 pages reserved
[  508.417473][T11258] 0 pages cma reserved
[  510.937032][T11278] Invalid ELF header magic: != ELF
[  513.034169][ T5888] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  513.294181][ T5888] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  513.451392][T11294] loop9: detected capacity change from 0 to 2640
[  513.454916][T11294] buffer_io_error: 11 callbacks suppressed
[  513.457127][T11294] Buffer I/O error on dev loop9, logical block 0, async page read
[  513.461498][T11294] Buffer I/O error on dev loop9, logical block 0, async page read
[  513.461581][T11294] Buffer I/O error on dev loop9, logical block 0, async page read
[  513.461612][T11294] Buffer I/O error on dev loop9, logical block 0, async page read
[  513.461628][T11294] Buffer I/O error on dev loop9, logical block 0, async page read
[  513.461679][T11294] Buffer I/O error on dev loop9, logical block 0, async page read
[  513.461709][T11294] Buffer I/O error on dev loop9, logical block 0, async page read
[  513.461731][T11294] Buffer I/O error on dev loop9, logical block 0, async page read
[  513.461741][T11294] ldm_validate_partition_table(): Disk read failed.
[  513.461755][T11294] Buffer I/O error on dev loop9, logical block 0, async page read
[  513.461769][T11294] Buffer I/O error on dev loop9, logical block 0, async page read
[  513.461792][T11294] Dev loop9: unable to read RDB block 0
[  513.461869][T11294]  loop9: unable to read partition table
[  513.461976][T11294] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  513.520476][T11292] random: crng reseeded on system resumption
[  513.798127][ T5888] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  513.923401][ T5143] ldm_validate_partition_table(): Disk read failed.
[  513.938049][ T5143] Dev loop9: unable to read RDB block 0
[  513.944141][ T5143]  loop9: unable to read partition table
[  514.066276][T11283] ceph: No mds server is up or the cluster is laggy
[  516.410502][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'.
[  516.828607][T11315] binder: 11314:11315 ioctl c0306201 80004a40 returned -22
[  517.544071][T11321] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  521.194695][T11339] ceph: No mds server is up or the cluster is laggy
[  522.127117][T11349] warn_alloc: 1 callbacks suppressed
[  522.134554][T11349] syz.3.1059: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1
[  522.144927][T11349] CPU: 2 UID: 0 PID: 11349 Comm: syz.3.1059 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  522.144985][T11349] Tainted: [L]=SOFTLOCKUP
[  522.144995][T11349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  522.145008][T11349] Call Trace:
[  522.145016][T11349]  <TASK>
[  522.145026][T11349]  dump_stack_lvl+0x100/0x190
[  522.145061][T11349]  warn_alloc.cold+0x9e/0xb2
[  522.145086][T11349]  ? __pfx_warn_alloc+0x10/0x10
[  522.145126][T11349]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  522.145159][T11349]  ? __pfx_get_page_from_freelist+0x10/0x10
[  522.145201][T11349]  __alloc_frozen_pages_noprof+0xcb6/0x3300
[  522.145239][T11349]  ? debug_check_no_obj_freed+0x260/0x630
[  522.145273][T11349]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  522.145313][T11349]  ? find_held_lock+0x2b/0x80
[  522.145336][T11349]  ? __free_frozen_pages+0x747/0x10f0
[  522.145365][T11349]  ? __free_frozen_pages+0x747/0x10f0
[  522.145399][T11349]  ? _raw_spin_unlock+0x28/0x50
[  522.145429][T11349]  ? __pfx_alloc_migration_target+0x10/0x10
[  522.145472][T11349]  __folio_alloc_noprof+0x16/0x260
[  522.145505][T11349]  alloc_migration_target+0x1d7/0x6d0
[  522.145538][T11349]  migrate_pages_batch+0x5c4/0x4680
[  522.145571][T11349]  ? __pfx_alloc_migration_target+0x10/0x10
[  522.145607][T11349]  ? migrate_pages_sync+0x12c/0x880
[  522.145637][T11349]  ? migrate_pages_sync+0x588/0x880
[  522.145665][T11349]  ? __pfx_migrate_pages_batch+0x10/0x10
[  522.145702][T11349]  ? __pfx_migrate_pages_sync+0x10/0x10
[  522.145737][T11349]  ? __lock_acquire+0x4c5/0x1ec0
[  522.145765][T11349]  ? __css_rstat_updated+0x1ce/0x590
[  522.145799][T11349]  migrate_pages+0x1950/0x2850
[  522.145835][T11349]  ? __pfx_alloc_migration_target+0x10/0x10
[  522.145889][T11349]  ? __pfx_migrate_pages+0x10/0x10
[  522.145930][T11349]  ? mtree_load+0x3a4/0xb50
[  522.145964][T11349]  move_pages_and_store_status+0xf1/0x230
[  522.146004][T11349]  ? __pfx_move_pages_and_store_status+0x10/0x10
[  522.146047][T11349]  kernel_move_pages+0xca4/0x14d0
[  522.146087][T11349]  ? __pfx_kernel_move_pages+0x10/0x10
[  522.146120][T11349]  ? lockdep_hardirqs_on+0x7d/0x110
[  522.146158][T11349]  __ia32_sys_move_pages+0xdd/0x1b0
[  522.146190][T11349]  ? __do_fast_syscall_32+0xba/0x8b0
[  522.146215][T11349]  __do_fast_syscall_32+0x13a/0x8b0
[  522.146249][T11349]  do_fast_syscall_32+0x32/0x70
[  522.146279][T11349]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  522.146306][T11349] RIP: 0023:0xf6fdefec
[  522.146331][T11349] Code: Unable to access opcode bytes at 0xf6fdefc2.
[  522.146338][T11349] RSP: 002b:00000000f538b50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d
[  522.146355][T11349] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064
[  522.146369][T11349] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000
[  522.146382][T11349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  522.146394][T11349] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  522.146406][T11349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  522.146433][T11349]  </TASK>
[  522.181715][T11349] Mem-Info:
[  522.181812][T11349] active_anon:7006 inactive_anon:2216 isolated_anon:1
[  522.181812][T11349]  active_file:6307 inactive_file:10909 isolated_file:0
[  522.181812][T11349]  unevictable:1000 dirty:235 writeback:0
[  522.181812][T11349]  slab_reclaimable:6266 slab_unreclaimable:56923
[  522.181812][T11349]  mapped:28639 shmem:7324 pagetables:1322
[  522.181812][T11349]  sec_pagetables:321 bounce:0
[  522.181812][T11349]  kernel_misc_reclaimable:0
[  522.181812][T11349]  free:26442 free_pcp:4500 free_cma:0
[  522.181880][T11349] Node 0 active_anon:0kB inactive_anon:8kB active_file:104kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8800kB pagetables:1236kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  522.181970][T11349] Node 1 active_anon:28024kB inactive_anon:8856kB active_file:25124kB inactive_file:43604kB unevictable:4000kB isolated(anon):4kB isolated(file):0kB mapped:114528kB dirty:940kB writeback:0kB shmem:29296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:4640kB pagetables:4052kB sec_pagetables:144kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  522.182068][T11349] Node 0 DMA free:3328kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB
[  522.195283][T11349] lowmem_reserve[]: 0 277 277 277 277
[  522.197967][T11349] Node 0 DMA32 free:30676kB boost:18432kB min:31060kB low:34216kB high:37372kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:8kB active_file:104kB inactive_file:32kB unevictable:0kB writepending:0kB zspages:1856kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB
[  522.198068][T11349] lowmem_reserve[]: 0 0 0 0 0
[  522.198460][T11349] Node 1 DMA32 free:71764kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:536kB active_anon:28024kB inactive_anon:8856kB active_file:25124kB inactive_file:43604kB unevictable:4000kB writepending:940kB zspages:5064kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:17852kB local_pcp:1224kB free_cma:0kB
[  522.198624][T11349] lowmem_reserve[]: 0 0 0 0 0
[  522.199212][T11349] Node 0 DMA: 130*4kB (UE) 49*8kB (UE) 11*16kB (UE) 34*32kB (UE) 16*64kB (UE) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3328kB
[  522.200291][T11349] Node 0 DMA32: 495*4kB (UME) 127*8kB (UME) 70*16kB (UME) 212*32kB (UME) 39*64kB (UME) 13*128kB (UM) 9*256kB (UM) 8*512kB (M) 3*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 30676kB
[  522.201373][T11349] Node 1 DMA32: 1249*4kB (UMH) 464*8kB (UMEH) 127*16kB (UMEH) 193*32kB (UMEH) 127*64kB (UMEH) 53*128kB (UME) 8*256kB (UME) 8*512kB (UE) 9*1024kB (M) 6*2048kB (U) 3*4096kB (UM) = 71764kB
[  522.245157][T11349] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  522.245252][T11349] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  522.245319][T11349] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  522.245386][T11349] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  522.245453][T11349] 25585 total pagecache pages
[  522.245515][T11349] 1047 pages in swap cache
[  522.245611][T11349] Free swap  = 48688kB
[  522.245616][T11349] Total swap = 124996kB
[  522.245682][T11349] 524155 pages RAM
[  522.245744][T11349] 0 pages HighMem/MovableOnly
[  522.245775][T11349] 212108 pages reserved
[  522.245780][T11349] 0 pages cma reserved
[  523.277185][T11360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.862364][T11361] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  523.862410][T11361] File: /dev/nullb0 PID: 11361 Comm: syz.0.1060
[  526.184739][T11365] netlink: 'syz.1.1062': attribute type 5 has an invalid length.
[  526.634858][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'.
[  527.292689][ T5894] block nbd0: Possible stuck request ffff888027c25080: control (read@0,1024B). Runtime 60 seconds
[  527.292743][ T5894] block nbd0: Possible stuck request ffff888027c25240: control (read@1024,3072B). Runtime 60 seconds
[  528.616529][T11387] ieee802154 phy1 wpan1: encryption failed: -22
[  531.921430][ T5143] udevd[5143]: worker [9659] /devices/virtual/block/nbd0 is taking a long time
[  534.287737][T11420] netlink: zone id is out of range
[  534.287909][T11420] netlink: zone id is out of range
[  534.288167][T11420] netlink: zone id is out of range
[  534.858398][T11420] netlink: zone id is out of range
[  534.862986][T11420] netlink: zone id is out of range
[  534.880489][T11420] netlink: zone id is out of range
[  534.883271][T11420] netlink: zone id is out of range
[  534.898118][T11420] netlink: zone id is out of range
[  534.901325][T11420] netlink: zone id is out of range
[  534.906967][T11420] netlink: zone id is out of range
[  534.967880][T11418] capability: warning: `syz.3.1075' uses 32-bit capabilities (legacy support in use)
[  537.766878][ T5106] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  537.945325][T11438] warn_alloc: 1 callbacks suppressed
[  537.945400][T11438] syz.0.1085: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1
[  537.945510][T11438] CPU: 2 UID: 0 PID: 11438 Comm: syz.0.1085 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  537.945542][T11438] Tainted: [L]=SOFTLOCKUP
[  537.945547][T11438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  537.945554][T11438] Call Trace:
[  537.945559][T11438]  <TASK>
[  537.945564][T11438]  dump_stack_lvl+0x100/0x190
[  537.945584][T11438]  warn_alloc.cold+0x9e/0xb2
[  537.945597][T11438]  ? __pfx_warn_alloc+0x10/0x10
[  537.945620][T11438]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  537.945637][T11438]  ? __pfx_get_page_from_freelist+0x10/0x10
[  537.945660][T11438]  __alloc_frozen_pages_noprof+0xcb6/0x3300
[  537.945683][T11438]  ? debug_check_no_obj_freed+0x260/0x630
[  537.945701][T11438]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  537.945723][T11438]  ? find_held_lock+0x2b/0x80
[  537.945735][T11438]  ? __free_frozen_pages+0x747/0x10f0
[  537.945750][T11438]  ? __free_frozen_pages+0x747/0x10f0
[  537.945768][T11438]  ? _raw_spin_unlock+0x28/0x50
[  537.945783][T11438]  ? __pfx_alloc_migration_target+0x10/0x10
[  537.945806][T11438]  __folio_alloc_noprof+0x16/0x260
[  537.945824][T11438]  alloc_migration_target+0x1d7/0x6d0
[  537.945853][T11438]  migrate_pages_batch+0x5c4/0x4680
[  537.945872][T11438]  ? __pfx_alloc_migration_target+0x10/0x10
[  537.945891][T11438]  ? migrate_pages_sync+0x12c/0x880
[  537.945906][T11438]  ? migrate_pages_sync+0x588/0x880
[  537.945922][T11438]  ? __pfx_migrate_pages_batch+0x10/0x10
[  537.945941][T11438]  ? __pfx_migrate_pages_sync+0x10/0x10
[  537.945960][T11438]  ? __lock_acquire+0x4c5/0x1ec0
[  537.945975][T11438]  ? __css_rstat_updated+0x1ce/0x590
[  537.945994][T11438]  migrate_pages+0x1950/0x2850
[  537.946012][T11438]  ? __pfx_alloc_migration_target+0x10/0x10
[  537.946031][T11438]  ? __pfx_migrate_pages+0x10/0x10
[  537.946053][T11438]  ? mtree_load+0x3a4/0xb50
[  537.946071][T11438]  move_pages_and_store_status+0xf1/0x230
[  537.946090][T11438]  ? __pfx_move_pages_and_store_status+0x10/0x10
[  537.946112][T11438]  kernel_move_pages+0xca4/0x14d0
[  537.946134][T11438]  ? __pfx_kernel_move_pages+0x10/0x10
[  537.946154][T11438]  ? xfd_validate_state+0x129/0x190
[  537.946175][T11438]  __ia32_sys_move_pages+0xdd/0x1b0
[  537.946192][T11438]  ? __do_fast_syscall_32+0xb3/0x8b0
[  537.946208][T11438]  ? lockdep_hardirqs_on+0x7d/0x110
[  537.946223][T11438]  __do_fast_syscall_32+0x13a/0x8b0
[  537.946241][T11438]  do_fast_syscall_32+0x32/0x70
[  537.946258][T11438]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  537.946272][T11438] RIP: 0023:0xf701efec
[  537.946285][T11438] Code: Unable to access opcode bytes at 0xf701efc2.
[  537.946291][T11438] RSP: 002b:00000000f53cb50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d
[  537.946301][T11438] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064
[  537.946308][T11438] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000
[  537.946315][T11438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  537.946322][T11438] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  537.946328][T11438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  537.946342][T11438]  </TASK>
[  537.953021][T11438] Mem-Info:
[  537.953037][T11438] active_anon:3779 inactive_anon:1306 isolated_anon:12
[  537.953037][T11438]  active_file:9565 inactive_file:9485 isolated_file:0
[  537.953037][T11438]  unevictable:992 dirty:548 writeback:0
[  537.953037][T11438]  slab_reclaimable:6281 slab_unreclaimable:57443
[  537.953037][T11438]  mapped:26794 shmem:4107 pagetables:1316
[  537.953037][T11438]  sec_pagetables:321 bounce:0
[  537.953037][T11438]  kernel_misc_reclaimable:0
[  537.953037][T11438]  free:32669 free_pcp:0 free_cma:0
[  537.953067][T11438] Node 0 active_anon:4kB inactive_anon:4kB active_file:52kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8832kB pagetables:1236kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  537.953097][T11438] Node 1 active_anon:15112kB inactive_anon:5220kB active_file:38208kB inactive_file:37856kB unevictable:3968kB isolated(anon):48kB isolated(file):0kB mapped:107148kB dirty:2192kB writeback:0kB shmem:16428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5016kB pagetables:4028kB sec_pagetables:144kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  537.953126][T11438] Node 0 DMA free:3352kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  537.953160][T11438] lowmem_reserve[]: 0 277 277 277 277
[  537.953181][T11438] Node 0 DMA32 free:30448kB boost:18432kB min:31060kB low:34216kB high:37372kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:4kB active_file:52kB inactive_file:84kB unevictable:0kB writepending:0kB zspages:1892kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  537.953212][T11438] lowmem_reserve[]: 0 0 0 0 0
[  537.953231][T11438] Node 1 DMA32 free:96876kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:560kB active_anon:15112kB inactive_anon:5220kB active_file:38208kB inactive_file:37856kB unevictable:3968kB writepending:2192kB zspages:5420kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  537.953262][T11438] lowmem_reserve[]: 0 0 0 0 0
[  537.953284][T11438] Node 0 DMA: 132*4kB (UE) 51*8kB (UE) 11*16kB (UE) 34*32kB (UE) 16*64kB (UE) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3352kB
[  537.953356][T11438] Node 0 DMA32: 536*4kB (UME) 116*8kB (UME) 60*16kB (UME) 208*32kB (UME) 39*64kB (UME) 13*128kB (UM) 9*256kB (UM) 8*512kB (M) 3*1024kB (M) 1*2048kB (M) 1*4096kB (U) = 30464kB
[  537.953442][T11438] Node 1 DMA32: 929*4kB (UMEH) 1107*8kB (UMEH) 391*16kB (UMEH) 507*32kB (UMEH) 182*64kB (UMEH) 76*128kB (UME) 38*256kB (UME) 20*512kB (UME) 10*1024kB (UME) 5*2048kB (UM) 0*4096kB = 96876kB
[  537.953527][T11438] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  537.953536][T11438] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  537.953544][T11438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  537.953552][T11438] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  537.953561][T11438] 23951 total pagecache pages
[  537.953565][T11438] 796 pages in swap cache
[  537.953569][T11438] Free swap  = 46456kB
[  537.953573][T11438] Total swap = 124996kB
[  537.953577][T11438] 524155 pages RAM
[  537.953581][T11438] 0 pages HighMem/MovableOnly
[  537.953585][T11438] 212108 pages reserved
[  537.953588][T11438] 0 pages cma reserved
[  538.188781][ T5106] usb 6-1: Using ep0 maxpacket: 8
[  538.191040][ T5106] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  538.194843][ T5106] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  538.195038][ T5106] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  538.195133][ T5106] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  538.195205][ T5106] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  538.195368][ T5106] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  538.195564][ T5106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.583517][ T5106] usb 6-1: usb_control_msg returned -32
[  538.583811][ T5106] usbtmc 6-1:16.0: can't read capabilities
[  538.796756][   T42] usb 6-1: USB disconnect, device number 21
[  539.156580][   T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  539.306467][   T10] usb 7-1: Using ep0 maxpacket: 32
[  539.309511][   T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  539.314294][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  539.320197][   T10] usb 7-1: config 0 has no interfaces?
[  539.329174][   T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  539.329333][   T10] usb 7-1: Product: syz
[  539.329467][   T10] usb 7-1: Manufacturer: syz
[  539.329795][   T10] usb 7-1: SerialNumber: syz
[  539.352767][   T10] usb 7-1: config 0 descriptor??
[  539.390152][T11465] bond0: invalid ARP target specified
[  539.660867][   T42] usb 7-1: USB disconnect, device number 15
[  540.687484][ T5847] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  540.802369][T11473] ip6t_rt: too many addresses specified
[  540.846638][ T5847] usb 8-1: unable to get BOS descriptor or descriptor too short
[  540.846904][ T5847] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  540.850769][ T5847] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  540.850868][ T5847] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  540.851098][ T5847] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  540.876692][ T5847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.876985][ T5847] usb 8-1: Product: syz
[  540.877052][ T5847] usb 8-1: Manufacturer: syz
[  540.877144][ T5847] usb 8-1: SerialNumber: syz
[  541.643752][ T5847] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22
[  541.676650][ T5847] usb 8-1: USB disconnect, device number 18
[  541.773409][ T9660] udevd[9660]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  547.544658][T11523] random: crng reseeded on system resumption
[  547.681110][T11524] jffs2: notice: (11524) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  547.716848][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  547.891582][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  547.895809][   T10] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  547.904196][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  547.904525][   T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  547.904855][   T10] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  547.928444][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.928579][   T10] usb 5-1: Product: syz
[  547.928707][   T10] usb 5-1: Manufacturer: syz
[  547.928870][   T10] usb 5-1: SerialNumber: syz
[  549.069329][   T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  549.102101][   T10] usb 5-1: USB disconnect, device number 11
[  549.120012][ T9660] udevd[9660]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  553.584114][T11560] ALSA: mixer_oss: invalid OSS volume ';Ê'
[  554.633777][T11566] syz.3.1100: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1
[  554.633979][T11566] CPU: 2 UID: 0 PID: 11566 Comm: syz.3.1100 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  554.634016][T11566] Tainted: [L]=SOFTLOCKUP
[  554.634023][T11566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  554.634034][T11566] Call Trace:
[  554.634040][T11566]  <TASK>
[  554.634048][T11566]  dump_stack_lvl+0x100/0x190
[  554.634089][T11566]  warn_alloc.cold+0x9e/0xb2
[  554.634114][T11566]  ? __pfx_warn_alloc+0x10/0x10
[  554.634148][T11566]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  554.634177][T11566]  ? __pfx_get_page_from_freelist+0x10/0x10
[  554.634211][T11566]  __alloc_frozen_pages_noprof+0xcb6/0x3300
[  554.634246][T11566]  ? debug_check_no_obj_freed+0x260/0x630
[  554.634276][T11566]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  554.634309][T11566]  ? find_held_lock+0x2b/0x80
[  554.634329][T11566]  ? __free_frozen_pages+0x747/0x10f0
[  554.634352][T11566]  ? __free_frozen_pages+0x747/0x10f0
[  554.634379][T11566]  ? _raw_spin_unlock+0x28/0x50
[  554.634402][T11566]  ? irqentry_exit+0x24d/0xa10
[  554.634435][T11566]  __folio_alloc_noprof+0x16/0x260
[  554.634466][T11566]  alloc_migration_target+0x1d7/0x6d0
[  554.634493][T11566]  migrate_pages_batch+0x5c4/0x4680
[  554.634520][T11566]  ? __pfx_alloc_migration_target+0x10/0x10
[  554.634551][T11566]  ? migrate_pages_sync+0x12c/0x880
[  554.634575][T11566]  ? migrate_pages_sync+0x588/0x880
[  554.634598][T11566]  ? __pfx_migrate_pages_batch+0x10/0x10
[  554.634629][T11566]  ? __pfx_migrate_pages_sync+0x10/0x10
[  554.634658][T11566]  ? __lock_acquire+0x4c5/0x1ec0
[  554.634681][T11566]  ? __css_rstat_updated+0x1ce/0x590
[  554.634709][T11566]  migrate_pages+0x1950/0x2850
[  554.634740][T11566]  ? __pfx_alloc_migration_target+0x10/0x10
[  554.634769][T11566]  ? __pfx_migrate_pages+0x10/0x10
[  554.634805][T11566]  ? mtree_load+0x3a4/0xb50
[  554.634838][T11566]  move_pages_and_store_status+0xf1/0x230
[  554.634865][T11566]  ? __pfx_move_pages_and_store_status+0x10/0x10
[  554.634903][T11566]  kernel_move_pages+0xca4/0x14d0
[  554.634935][T11566]  ? __pfx_kernel_move_pages+0x10/0x10
[  554.634967][T11566]  ? xfd_validate_state+0x129/0x190
[  554.635002][T11566]  __ia32_sys_move_pages+0xdd/0x1b0
[  554.635026][T11566]  ? __do_fast_syscall_32+0xb3/0x8b0
[  554.635053][T11566]  ? lockdep_hardirqs_on+0x7d/0x110
[  554.635077][T11566]  __do_fast_syscall_32+0x13a/0x8b0
[  554.635104][T11566]  do_fast_syscall_32+0x32/0x70
[  554.635128][T11566]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  554.635153][T11566] RIP: 0023:0xf6fdefec
[  554.635172][T11566] Code: Unable to access opcode bytes at 0xf6fdefc2.
[  554.635180][T11566] RSP: 002b:00000000f538b50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d
[  554.635197][T11566] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064
[  554.635210][T11566] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000
[  554.635223][T11566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  554.635234][T11566] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  554.635244][T11566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  554.635266][T11566]  </TASK>
[  554.635313][T11566] Mem-Info:
[  554.635336][T11566] active_anon:3654 inactive_anon:924 isolated_anon:12
[  554.635336][T11566]  active_file:1847 inactive_file:12164 isolated_file:0
[  554.635336][T11566]  unevictable:1000 dirty:44 writeback:2
[  554.635336][T11566]  slab_reclaimable:6272 slab_unreclaimable:57335
[  554.635336][T11566]  mapped:26820 shmem:3872 pagetables:1284
[  554.635336][T11566]  sec_pagetables:321 bounce:0
[  554.635336][T11566]  kernel_misc_reclaimable:0
[  554.635336][T11566]  free:38023 free_pcp:0 free_cma:0
[  554.635394][T11566] Node 0 active_anon:0kB inactive_anon:4kB active_file:52kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8768kB pagetables:1236kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  554.635456][T11566] Node 1 active_anon:14616kB inactive_anon:3692kB active_file:7336kB inactive_file:48572kB unevictable:4000kB isolated(anon):48kB isolated(file):0kB mapped:107252kB dirty:176kB writeback:8kB shmem:15488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4904kB pagetables:3900kB sec_pagetables:144kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  554.635519][T11566] Node 0 DMA free:3352kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  554.635599][T11566] lowmem_reserve[]: 0 277 277 277 277
[  554.635740][T11566] Node 0 DMA32 free:30808kB boost:18432kB min:31060kB low:34216kB high:37372kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:52kB inactive_file:84kB unevictable:0kB writepending:0kB zspages:1860kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  554.635824][T11566] lowmem_reserve[]: 0 0 0 0 0
[  554.643158][T11566] Node 1 DMA32 free:117932kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:560kB active_anon:14616kB inactive_anon:3692kB active_file:7336kB inactive_file:48572kB unevictable:4000kB writepending:84kB zspages:5652kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  554.643214][T11566] lowmem_reserve[]: 0 0 0 0 0
[  554.643242][T11566] Node 0 DMA: 132*4kB (UE) 51*8kB (UE) 11*16kB (UE) 34*32kB (UE) 16*64kB (UE) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3352kB
[  554.644684][T11566] Node 0 DMA32: 536*4kB (UME) 124*8kB (UME) 66*16kB (UME) 215*32kB (UME) 39*64kB (UME) 13*128kB (UM) 9*256kB (UM) 8*512kB (M) 3*1024kB (M) 1*2048kB (M) 1*4096kB (U) = 30848kB
[  554.644865][T11566] Node 1 DMA32: 2928*4kB (UMEH) 1609*8kB (UMEH) 688*16kB (UMEH) 623*32kB (UMEH) 170*64kB (UMEH) 69*128kB (UME) 39*256kB (UME) 14*512kB (UME) 5*1024kB (UME) 6*2048kB (UM) 2*4096kB (M) = 117992kB
[  554.645032][T11566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  554.645048][T11566] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  554.645064][T11566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  554.645079][T11566] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  554.645094][T11566] 18523 total pagecache pages
[  554.645101][T11566] 642 pages in swap cache
[  554.645108][T11566] Free swap  = 45104kB
[  554.645116][T11566] Total swap = 124996kB
[  554.645125][T11566] 524155 pages RAM
[  554.645132][T11566] 0 pages HighMem/MovableOnly
[  554.645141][T11566] 212108 pages reserved
[  554.645148][T11566] 0 pages cma reserved
[  555.059567][T11584] net_ratelimit: 9 callbacks suppressed
[  555.059642][T11584] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  555.556181][ T5888] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  555.826238][ T5888] usb 5-1: Using ep0 maxpacket: 8
[  555.827056][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  555.828835][ T5888] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  555.828904][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  555.828960][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  555.829007][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  555.829053][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  555.829115][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.085384][ T5888] usb 5-1: usb_control_msg returned -32
[  556.087484][ T5888] usbtmc 5-1:16.0: can't read capabilities
[  556.408124][ T5594] usb 5-1: USB disconnect, device number 12
[  557.078619][T11611] Invalid ELF header magic: != ELF
[  557.348703][ T5102] block nbd0: Possible stuck request ffff888027c25080: control (read@0,1024B). Runtime 90 seconds
[  557.348838][ T5102] block nbd0: Possible stuck request ffff888027c25240: control (read@1024,3072B). Runtime 90 seconds
[  557.634728][T11617] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  558.865921][T11630] ip6t_rt: too many addresses specified
[  559.256904][T11633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  559.718714][T11634] netlink: zone id is out of range
[  559.727252][T11634] netlink: zone id is out of range
[  559.741837][T11634] netlink: zone id is out of range
[  559.758967][T11634] netlink: zone id is out of range
[  559.794693][T11634] netlink: zone id is out of range
[  559.812837][T11634] netlink: zone id is out of range
[  559.818476][T11634] netlink: zone id is out of range
[  559.841848][T11634] netlink: zone id is out of range
[  559.851213][T11634] netlink: zone id is out of range
[  560.030892][T11638] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  560.048637][T11638] md: pers->run() failed ...
[  562.580811][ T1434] ieee802154 phy1 wpan1: encryption failed: -22
[  562.949692][T11667] Invalid ELF header magic: != ELF
[  563.134569][ T5594] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  563.514397][ T5594] usb 7-1: Using ep0 maxpacket: 8
[  563.586077][ T5594] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  563.609334][ T5594] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  563.609404][ T5594] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  563.609417][ T5594] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  563.609429][ T5594] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  563.609441][ T5594] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  563.609461][ T5594] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.746411][ T5594] usb 7-1: usb_control_msg returned -32
[  564.746487][ T5594] usbtmc 7-1:16.0: can't read capabilities
[  564.970064][ T5847] usb 7-1: USB disconnect, device number 16
[  565.045487][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  565.048543][T11666] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  565.195923][T11666] usb 8-1: Using ep0 maxpacket: 32
[  565.199703][T11666] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  565.204024][T11666] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  565.204059][T11666] usb 8-1: config 0 has no interfaces?
[  565.212521][T11666] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  565.212563][T11666] usb 8-1: Product: syz
[  565.212592][T11666] usb 8-1: Manufacturer: syz
[  565.212614][T11666] usb 8-1: SerialNumber: syz
[  565.223888][T11666] usb 8-1: config 0 descriptor??
[  565.959015][ T5594] usb 8-1: USB disconnect, device number 19
[  566.337579][T11694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  567.315138][T11703] bridge3: entered promiscuous mode
[  567.315274][T11703] bridge3: entered allmulticast mode
[  569.220953][   T43] audit: type=1804 audit(1788666724.812:614): pid=11727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1124" name="/newroot/274/bus/bus" dev="overlay" ino=1554 res=1 errno=0
[  569.272166][T11731] ip6t_rt: too many addresses specified
[  571.708986][T11745] binder: 11743:11745 ioctl c00c6211 0 returned -14
[  572.108872][T11746] loop2: detected capacity change from 0 to 2640
[  572.139700][ T9660] buffer_io_error: 27 callbacks suppressed
[  572.139745][ T9660] Buffer I/O error on dev loop2, logical block 0, async page read
[  572.140121][ T9660] Buffer I/O error on dev loop2, logical block 0, async page read
[  572.140366][ T9660] Buffer I/O error on dev loop2, logical block 0, async page read
[  572.140597][ T9660] Buffer I/O error on dev loop2, logical block 0, async page read
[  572.140885][ T9660] Buffer I/O error on dev loop2, logical block 0, async page read
[  572.567573][ T9660] Buffer I/O error on dev loop2, logical block 0, async page read
[  572.573337][ T9660] Buffer I/O error on dev loop2, logical block 0, async page read
[  572.577633][ T9660] Buffer I/O error on dev loop2, logical block 0, async page read
[  572.580891][ T9660] Buffer I/O error on dev loop2, logical block 0, async page read
[  572.584487][ T9660] Buffer I/O error on dev loop2, logical block 0, async page read
[  572.587987][ T5888] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  572.737955][ T5888] usb 6-1: unable to get BOS descriptor or descriptor too short
[  572.738002][ T5888] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  572.745960][ T5888] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  572.745999][ T5888] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  572.754158][ T5888] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  572.760894][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.763575][ T5888] usb 6-1: Product: syz
[  572.765247][ T5888] usb 6-1: Manufacturer: syz
[  572.767212][ T5888] usb 6-1: SerialNumber: syz
[  574.819556][ T5888] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  574.827271][ T5888] usb 6-1: USB disconnect, device number 22
[  575.212114][ T9660] udevd[9660]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  576.355422][T11764] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  577.429003][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  578.002579][T11762] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  578.008235][T11762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1142'.
[  579.888935][T11791] Invalid ELF header magic: != ELF
[  581.513009][T11798] wg2 speed is unknown, defaulting to 1000
[  582.044506][T11805] gre0: MTU too low for tipc bearer
[  582.044569][T11805] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  582.655968][ T5888] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  582.806022][ T5888] usb 5-1: Using ep0 maxpacket: 8
[  582.807321][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  582.812233][ T5888] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  582.812274][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  582.812294][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  582.812314][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  582.812331][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  582.812363][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.129264][ T5888] usb 5-1: usb_control_msg returned -32
[  583.129369][ T5888] usbtmc 5-1:16.0: can't read capabilities
[  583.349450][ T5888] usb 5-1: USB disconnect, device number 13
[  583.556374][   T25] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  583.715470][   T25] usb 7-1: unable to get BOS descriptor or descriptor too short
[  583.715533][   T25] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  583.723798][   T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  583.723820][   T25] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  583.723856][   T25] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  583.747659][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.747704][   T25] usb 7-1: Product: syz
[  583.747746][   T25] usb 7-1: Manufacturer: syz
[  583.747767][   T25] usb 7-1: SerialNumber: syz
[  585.034981][   T25] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  585.042100][   T25] usb 7-1: USB disconnect, device number 17
[  585.079784][ T9660] udevd[9660]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  585.117905][ T5888] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  585.122470][T11768] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  585.267738][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short
[  585.267808][ T5888] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  585.269124][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  585.269143][ T5888] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  585.269186][ T5888] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  585.281149][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.281170][ T5888] usb 5-1: Product: syz
[  585.281183][ T5888] usb 5-1: Manufacturer: syz
[  585.281196][ T5888] usb 5-1: SerialNumber: syz
[  587.310510][ T1158] IPVS: starting estimator thread 0...
[  588.190266][ T5102] block nbd0: Possible stuck request ffff888027c25080: control (read@0,1024B). Runtime 120 seconds
[  588.190326][ T5102] block nbd0: Possible stuck request ffff888027c25240: control (read@1024,3072B). Runtime 120 seconds
[  588.259690][T11858] IPVS: using max 22 ests per chain, 52800 per kthread
[  589.079710][ T5888] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  589.084440][ T5888] usb 5-1: USB disconnect, device number 14
[  589.101208][ T9660] udevd[9660]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  589.384879][T11876] Invalid ELF header magic: != ELF
[  589.423019][   T42] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  589.803181][   T42] usb 6-1: unable to get BOS descriptor or descriptor too short
[  589.803276][   T42] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  589.806856][   T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  589.806880][   T42] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  589.806919][   T42] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  589.808529][   T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.808542][   T42] usb 6-1: Product: syz
[  589.808550][   T42] usb 6-1: Manufacturer: syz
[  589.808557][   T42] usb 6-1: SerialNumber: syz
[  591.528953][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'.
[  591.530587][   T43] audit: type=1800 audit(1788666747.122:615): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1155" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0
[  592.490946][ T5106] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  592.698660][ T5106] usb 5-1: Using ep0 maxpacket: 32
[  592.778528][ T5106] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  592.781177][ T5106] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  592.781281][ T5106] usb 5-1: config 0 has no interfaces?
[  592.792060][ T5106] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  592.792255][ T5106] usb 5-1: Product: syz
[  592.792377][ T5106] usb 5-1: Manufacturer: syz
[  592.792441][ T5106] usb 5-1: SerialNumber: syz
[  592.872084][ T5106] usb 5-1: config 0 descriptor??
[  592.879176][   T42] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  592.882841][   T42] usb 6-1: USB disconnect, device number 23
[  593.062757][ T9660] udevd[9660]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  593.237175][T11643] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  593.293838][   T42] usb 5-1: USB disconnect, device number 15
[  593.461688][T11918] wg2 speed is unknown, defaulting to 1000
[  593.507896][T11643] usb 8-1: unable to get BOS descriptor or descriptor too short
[  593.508224][T11643] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  593.521854][T11643] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  593.522014][T11643] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  593.522315][T11643] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  593.556722][T11643] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.565272][T11643] usb 8-1: Product: syz
[  593.565473][T11643] usb 8-1: Manufacturer: syz
[  593.565767][T11643] usb 8-1: SerialNumber: syz
[  594.036703][ T5847] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  594.215409][ T5847] usb 5-1: unable to get BOS descriptor or descriptor too short
[  594.215967][ T5847] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  594.222782][ T5847] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  594.223046][ T5847] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  594.223244][ T5847] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  594.233404][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.233466][ T5847] usb 5-1: Product: syz
[  594.233534][ T5847] usb 5-1: Manufacturer: syz
[  594.233630][ T5847] usb 5-1: SerialNumber: syz
[  595.050072][T11643] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22
[  595.125008][T11643] usb 8-1: USB disconnect, device number 20
[  595.138692][T11934] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  595.186904][T11934] md: array md0 already has disks!
[  595.263244][ T9660] udevd[9660]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  595.357402][T11934] md: could not open device unknown-block(1,1).
[  595.357471][T11934] md: error, md_import_device() returned -16
[  595.497135][T11939] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[  595.497176][T11939] md: pers->run() failed ...
[  595.537139][T11934] md: could not open device unknown-block(1,2).
[  595.537196][T11934] md: error, md_import_device() returned -16
[  595.828237][ T5847] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  595.904422][ T5847] usb 5-1: USB disconnect, device number 16
[  595.939984][ T9660] udevd[9660]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  597.639159][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'.
[  598.016911][T11643] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[  598.229583][T11643] usb 7-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  598.246294][T11643] usb 7-1: config 0 interface 0 has no altsetting 0
[  598.249175][T11643] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.281129][T11967] bridge1: entered promiscuous mode
[  598.281192][T11967] bridge1: entered allmulticast mode
[  598.371777][T11643] usb 7-1: config 0 descriptor??
[  599.635536][T11975] mac80211_hwsim hwsim8 syzkaller0: Caught 
** replaying previous printk message **
[  599.635536][T11975] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig
[  599.638316][T11975] BUG: unable to handle page fault for address: fffffffffffffc10
[  599.645132][T11975] #PF: supervisor read access in kernel mode
[  599.649248][T11975] #PF: error_code(0x0000) - not-present page
[  599.652774][T11975] PGD eb99067 P4D eb99067 PUD eb9b067 PMD 0 
[  599.655193][T11975] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[  599.656966][T11975] CPU: 3 UID: 0 PID: 11975 Comm: syz.3.1169 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  599.660366][T11975] Tainted: [L]=SOFTLOCKUP
[  599.661772][T11975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  599.664954][T11975] RIP: 0010:strnlen+0x4b/0x80
[  599.666503][T11975] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48
[  599.673903][T11975] RSP: 0018:ffffc9000e417110 EFLAGS: 00010246
[  599.675974][T11975] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000
[  599.678465][T11975] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10
[  599.680985][T11975] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000
[  599.683509][T11975] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10
[  599.686170][T11975] R13: ffff88801c6f3e00 R14: 0000000000000006 R15: 0000000000000010
[  599.688812][T11975] FS:  0000000000000000(0000) GS:ffff888096c63000(0063) knlGS:00000000f53cdb40
[  599.691667][T11975] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  599.693821][T11975] CR2: fffffffffffffc10 CR3: 000000006b1b7000 CR4: 0000000000352ef0
[  599.696339][T11975] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  599.699668][T11975] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  599.702956][T11975] Call Trace:
[  599.704178][T11975]  <TASK>
[  599.705146][T11975]  ? lockdep_hardirqs_on+0x7d/0x110
[  599.706915][T11975]  trace_event_raw_event_drv_net_setup_tc+0x101/0x5d0
[  599.709080][T11975]  ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10
[  599.711539][T11975]  ? ieee80211_netdev_setup_tc+0x290/0x3e0
[  599.713546][T11975]  ieee80211_netdev_setup_tc+0x2c6/0x3e0
[  599.715484][T11975]  ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10
[  599.717565][T11975]  tcf_block_offload_cmd.isra.0+0x1c4/0x310
[  599.719477][T11975]  ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10
[  599.721725][T11975]  ? __pfx_down_write+0x10/0x10
[  599.723972][T11975]  tcf_block_get_ext+0x7ed/0x1950
[  599.725870][T11975]  tcf_block_get+0xa8/0x100
[  599.727347][T11975]  ? __pfx_tcf_block_get+0x10/0x10
[  599.729039][T11975]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[  599.731164][T11975]  ? __pfx_multiq_init+0x10/0x10
[  599.732870][T11975]  multiq_init+0x70/0x2b0
[  599.734331][T11975]  ? __pfx_multiq_init+0x10/0x10
[  599.736023][T11975]  qdisc_create+0x47b/0x1060
[  599.737731][T11975]  tc_modify_qdisc+0xdcf/0x2120
[  599.739792][T11975]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  599.741947][T11975]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  599.743831][T11975]  rtnetlink_rcv_msg+0x3c9/0xe90
[  599.745605][T11975]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  599.747534][T11975]  ? ref_tracker_free+0xb6/0x6c0
[  599.749187][T11975]  ? write_comp_data+0x47/0xa0
[  599.750870][T11975]  ? ref_tracker_free+0x37e/0x6c0
[  599.752617][T11975]  netlink_rcv_skb+0x159/0x420
[  599.754304][T11975]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  599.756130][T11975]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  599.757970][T11975]  ? netlink_deliver_tap+0x1ae/0xcc0
[  599.759860][T11975]  netlink_unicast+0x585/0x850
[  599.761731][T11975]  ? __pfx_netlink_unicast+0x10/0x10
[  599.763745][T11975]  netlink_sendmsg+0x8b0/0xda0
[  599.765373][T11975]  ? __pfx_netlink_sendmsg+0x10/0x10
[  599.767162][T11975]  ? apparmor_socket_sendmsg+0x165/0x280
[  599.769022][T11975]  ____sys_sendmsg+0xa4d/0xbe0
[  599.770481][T11975]  ? __pfx_netlink_sendmsg+0x10/0x10
[  599.772202][T11975]  ? __pfx_____sys_sendmsg+0x10/0x10
[  599.774054][T11975]  ___sys_sendmsg+0x190/0x1e0
[  599.775583][T11975]  ? __pfx____sys_sendmsg+0x10/0x10
[  599.777241][T11975]  ? futex_wait+0x11e/0x370
[  599.778861][T11975]  ? find_held_lock+0x2b/0x80
[  599.780646][T11975]  __sys_sendmsg+0x160/0x210
[  599.782352][T11975]  ? __pfx___sys_sendmsg+0x10/0x10
[  599.784191][T11975]  __do_fast_syscall_32+0x13a/0x8b0
[  599.785977][T11975]  do_fast_syscall_32+0x32/0x70
[  599.787742][T11975]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  599.789846][T11975] RIP: 0023:0xf6fdefec
[  599.791326][T11975] Code: Unable to access opcode bytes at 0xf6fdefc2.
[  599.793455][T11975] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  599.796071][T11975] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800012c0
[  599.798671][T11975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  599.801404][T11975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  599.803921][T11975] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  599.806400][T11975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  599.808946][T11975]  </TASK>
[  599.809947][T11975] Modules linked in:
[  599.811242][T11975] CR2: fffffffffffffc10
[  599.812586][T11975] ---[ end trace 0000000000000000 ]---
[  599.814307][T11975] RIP: 0010:strnlen+0x4b/0x80
[  599.814330][T11975] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48
[  599.814341][T11975] RSP: 0018:ffffc9000e417110 EFLAGS: 00010246
[  599.814351][T11975] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000
[  599.814359][T11975] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10
[  599.814367][T11975] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000
[  599.814375][T11975] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10
[  599.814382][T11975] R13: ffff88801c6f3e00 R14: 0000000000000006 R15: 0000000000000010
[  599.814390][T11975] FS:  0000000000000000(0000) GS:ffff888096c63000(0063) knlGS:00000000f53cdb40
[  599.814414][T11975] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  599.814423][T11975] CR2: 00000000f6fdf000 CR3: 000000006b1b7000 CR4: 0000000000352ef0
[  599.814430][T11975] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  599.814437][T11975] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  599.814445][T11975] Kernel panic - not syncing: Fatal exception
[  599.853005][T11975] Kernel Offset: disabled
[  599.854386][T11975] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:52:39  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8fbd7460 RBX=ffffffff8fbd7460 RCX=ffffffff81e990b9 RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff8fbd7460 RBP=ffffc9000042fda8 RSP=ffffc9000042f950
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=000000003863616d
R12=0000000000000000 R13=ffffc9000042fda8 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff827d6e82 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096963000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000020 CR3=000000004b2bd000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=bee96e342006a9c7 784da38649353580 bee96e342006a9c7 784da38649353580 bee96e342006a9c7 784da38649353580 bee96e342006a9c7 784da38649353580
ZMM18=561d87ab02c81e61 13724175ae79b6e5 561d87ab02c81e61 13724175ae79b6e5 561d87ab02c81e61 13724175ae79b6e5 561d87ab02c81e61 13724175ae79b6e5
ZMM19=2b10000000000000 0000000000000004 2b10000000000000 0000000000000003 2b10000000000000 0000000000000002 2b10000000000000 0000000000000001
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e801ffffffff8296 dfe3ffffffff8296 df9affffffff8296 df7cffffffff8296
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 db6cffffffff8296 db15ffffffff8296 da13ffffffff8296 d9dcffffffff8296
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d966ffffffff8296 d8a7ffffffff8296 d853ffffffff8296 d7dbffffffff8296
ZMM24=ff5a753bff5a753b ff5a753bff5a753b ff5a753bff5a753b ff5a753bff5a753b ff5a753bff5a753b ff5a753bff5a753b ff5a753bff5a753b ff5a753bff5a753b
ZMM25=32ca526532ca5265 32ca526532ca5265 32ca526532ca5265 32ca526532ca5265 32ca526532ca5265 32ca526532ca5265 32ca526532ca5265 32ca526532ca5265
ZMM26=36fb711136fb7111 36fb711136fb7111 36fb711136fb7111 36fb711136fb7111 36fb711136fb7111 36fb711136fb7111 36fb711136fb7111 36fb711136fb7111
ZMM27=c7c88039c7c88039 c7c88039c7c88039 c7c88039c7c88039 c7c88039c7c88039 c7c88039c7c88039 c7c88039c7c88039 c7c88039c7c88039 c7c88039c7c88039
ZMM28=000001e0000001df 000001de000001dd 000001dc000001db 000001da000001d9 000001d8000001d7 000001d6000001d5 000001d4000001d3 000001d2000001d1
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=931d0000931d0000 931d0000931d0000 931d0000931d0000 931d0000931d0000 931d0000931d0000 931d0000931d0000 931d0000931d0000 931d0000931d0000
info registers vcpu 1

CPU#1
RAX=000000000003de9d RBX=0000000000000000 RCX=ffffc90007743000 RDX=0000000000080000
RSI=ffffffff81fe95ee RDI=ffff8880266da580 RBP=ffff88802b243b20 RSP=ffffc9000c70edd0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffed1004cdb763 R13=0000000000000003 R14=ffffed1005648765 R15=0000000000000001
RIP=ffffffff81fe95f0 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096a63000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000334fbff8 CR3=000000005bd82000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000000060530c RBX=ffff88801cb12580 RCX=ffffffff8bcdf115 RDX=0000000000000001
RSI=ffffffff8c622500 RDI=ffffffff81dfbf4e RBP=ffffed10039624b0 RSP=ffffc9000048fe00
R8 =0000000000000000 R9 =ffffed10056867bd R10=ffff88802b433deb R11=ffffffff81d6a7b9
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000
RIP=ffffffff8bcdd6bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096b63000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005592049ebf40 CR3=000000004b2bd000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=bee96e342006a9c7 784da38649353580 bee96e342006a9c7 784da38649353580 bee96e342006a9c7 784da38649353580 bee96e342006a9c7 784da38649353580
ZMM18=561d87ab02c81e61 13724175ae79b6e5 561d87ab02c81e61 13724175ae79b6e5 561d87ab02c81e61 13724175ae79b6e5 561d87ab02c81e61 13724175ae79b6e5
ZMM19=2d10000000000000 0000000000000004 2d10000000000000 0000000000000003 2d10000000000000 0000000000000002 2d10000000000000 0000000000000001
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003900302040003 8c03600400038803 02c8080003800303 8002018003018002
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0290030008000288 030fffffffff0202 80030fffffffff02 0408000008000208
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 007c08000a014ffc 0408000608001408 0006017498340000 0688000000110000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800000201c70800 080c4dae006d635f 616d64722f646e61 62696e69666e692f
ZMM25=1372417513724175 1372417513724175 1372417513724175 1372417513724175 1372417513724175 1372417513724175 1372417513724175 1372417513724175
ZMM26=02c81e6102c81e61 02c81e6102c81e61 02c81e6102c81e61 02c81e6102c81e61 02c81e6102c81e61 02c81e6102c81e61 02c81e6102c81e61 02c81e6102c81e61
ZMM27=561d87ab561d87ab 561d87ab561d87ab 561d87ab561d87ab 561d87ab561d87ab 561d87ab561d87ab 561d87ab561d87ab 561d87ab561d87ab 561d87ab561d87ab
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=2c1000002c100000 2c1000002c100000 2c1000002c100000 2c1000002c100000 2c1000002c100000 2c1000002c100000 2c1000002c100000 2c1000002c100000
info registers vcpu 3

CPU#3
RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85ae5665 RDI=ffffffff9bc541e0 RBP=ffffffff9bc541a0 RSP=ffffc9000e416828
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023
R12=0000000000000000 R13=0000000000000072 R14=000000000000000d R15=ffffc9000e416b40
RIP=ffffffff85ae568f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096c63000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=fffffffffffffc10 CR3=000000006b1b7000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000000534c002 Opmask01=0000000002000000 Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556a10f88c50 0000556a10f88c50
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdaa620100 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6143203a3072656c 6c616b7a79732038 6d69737768206d69 7377685f31313230
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79726f7463657269 6420726f20656c69 662068637573206f 4e203a676e697469
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 727720726f66207d 746e657665752f2e 2e2f33436c6f7274 6e6f632f33647261
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 632f646e756f732f 302e313a312d352f 312d352f35627375 2f302e6463685f79
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6d75642f6d726f 6674616c702f7365 63697665642f7379 732f7b5254544120
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000