last executing test programs: 9m52.711655147s ago: executing program 1 (id=493): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="81bc", 0x2}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) mq_open(0x0, 0x800, 0x80, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 9m51.35377511s ago: executing program 1 (id=504): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000100), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000140), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000180)={0x20000014}) creat(0x0, 0xecf86c37d53049cc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000280)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) unshare(0x22020400) execveat(0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x0, 0x0, 0x1000) epoll_pwait(r1, &(0x7f0000000440)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) 9m50.242300801s ago: executing program 1 (id=500): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$inet6(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_int(r3, 0x29, 0x24, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x10}, 0xffffffff}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0xe, 0x0) 9m48.628290093s ago: executing program 1 (id=506): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="81bc", 0x2}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) mq_open(0x0, 0x800, 0x80, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 9m48.587489489s ago: executing program 1 (id=507): mlockall(0x4) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000100)="000000000000000000000000000000000000000001") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x181403, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x40000000, 0x0, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/rfcomm0\x00', 0x802, 0x0) write(r4, &(0x7f0000000300)="c7401b1e0741d6201c31a1d182ded8d555d2", 0x12) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 9m48.143361847s ago: executing program 1 (id=508): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="81bc", 0x2}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) mq_open(0x0, 0x800, 0x80, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 9m32.25678689s ago: executing program 32 (id=508): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="81bc", 0x2}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) mq_open(0x0, 0x800, 0x80, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 5m48.58934581s ago: executing program 4 (id=1278): r0 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000040601010000000000000000010000050500010007000000e5b8313d5168e287ff1474249a839e2d448342e6f1b190e88642acafdf1e0b482d4031be5ba7b48c2df454732c7158846ade9a8697c7dd58fe112439f86b13bf31e6b92965c439518c9c34eb0ed885f5a1a22788ab0bca77bcc3f8218fef39d0714a79c0303981e91eaff47db4"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000440)={'bond0\x00', @ifru_names='gretap0\x00'}) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r9, 0x2000000, 0x7, 0x0, &(0x7f0000000cc0)="630b008646dc3f", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) bind$inet(r2, 0x0, 0x0) 5m46.837755221s ago: executing program 4 (id=1281): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000", @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000343000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000040)=""/224, 0xe0}], 0x3}, 0x72}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40018000}], 0x3, 0x2, 0x0) 5m40.10413886s ago: executing program 4 (id=1284): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) r5 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r6) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) 5m38.569569016s ago: executing program 4 (id=1288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0xffffffffffffffff) r2 = socket(0x840000000002, 0x3, 0x100) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) epoll_create(0x90aa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xa4, &(0x7f0000000140)=""/164, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000280)=@xdp, 0x0, 0x80800) connect$inet(r2, &(0x7f0000000000)={0x2, 0xffff, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) 5m27.23603507s ago: executing program 4 (id=1303): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x7e9a, 0x8, {}, {0xffffffffffffffff}, 0x2, 0x3}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffff0, @private1, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r2, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r2, 0x0, 0x489, &(0x7f0000000400), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) setsockopt(r2, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) 5m24.530680608s ago: executing program 4 (id=1306): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0xffffffffffffffff) r2 = socket(0x840000000002, 0x3, 0x100) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) epoll_create(0x90aa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xa4, &(0x7f0000000140)=""/164, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000280)=@xdp, 0x0, 0x80800) connect$inet(r2, &(0x7f0000000000)={0x2, 0xffff, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) 5m8.039627877s ago: executing program 33 (id=1306): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0xffffffffffffffff) r2 = socket(0x840000000002, 0x3, 0x100) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) epoll_create(0x90aa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xa4, &(0x7f0000000140)=""/164, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000280)=@xdp, 0x0, 0x80800) connect$inet(r2, &(0x7f0000000000)={0x2, 0xffff, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) 1m36.189002749s ago: executing program 5 (id=1750): socket$nl_xfrm(0x10, 0x3, 0x6) fstat(0xffffffffffffffff, &(0x7f0000000380)) r0 = socket(0x840000000002, 0x3, 0x100) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) epoll_create(0x90aa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xa4, &(0x7f0000000140)=""/164, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000280)=@xdp, 0x0, 0x80800) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffff, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 1m34.676551212s ago: executing program 5 (id=1753): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000000), 0x0, 0x1}}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 1m34.025280849s ago: executing program 5 (id=1755): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb3", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000000)}}, 0x3c) 1m33.700590801s ago: executing program 5 (id=1756): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={0x2, 0x12, 0x0, 0x0, 0x46, 0x0, 0x70bd29, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_key={0x39, 0x8, 0xdc8, 0x0, "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"}]}, 0x230}}, 0x20000000) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x10, 0x1403, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r4, &(0x7f00000002c0)=""/153, 0x99) r5 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x54, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x100000002}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x10}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="230000002600000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000680)="1fc3530704410db3fdf34f1b2127fd75dd4a166788ac685149550cc5915c8f2beb4ae942efbc3d0419189d95cd71bf3dfa249b754eb36d46da1c5c0fc15529b4ee41e2d0528b3b94ec4440567a540a8c39a45415af08a71414bb48908f6c74b9d04229c83a6a1146e18b0f46c42516440bfad1bbaaaf314e3d7104641cee742a7b5a9f8f", 0x852, r2}, 0x38) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000000b40)=""/102392, 0x18ff8) mkdir(&(0x7f0000019b40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000019b80)='./config\x00', &(0x7f0000019bc0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000019c00)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000019c40)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) mount(&(0x7f0000019c80)=@loop={'/dev/loop', 0x0}, &(0x7f0000019cc0)='.\x00', &(0x7f0000019d00)='f2fs\x00', 0x0, &(0x7f0000019d40)='acl') r5 = openat(0xffffffffffffff9c, &(0x7f0000019d80)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0) read(r5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x9, r2}, 0x38) 1m14.056276541s ago: executing program 34 (id=1768): r0 = mq_open(&(0x7f0000000000)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x54, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x100000002}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x10}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="230000002600000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000680)="1fc3530704410db3fdf34f1b2127fd75dd4a166788ac685149550cc5915c8f2beb4ae942efbc3d0419189d95cd71bf3dfa249b754eb36d46da1c5c0fc15529b4ee41e2d0528b3b94ec4440567a540a8c39a45415af08a71414bb48908f6c74b9d04229c83a6a1146e18b0f46c42516440bfad1bbaaaf314e3d7104641cee742a7b5a9f8f", 0x852, r2}, 0x38) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000000b40)=""/102392, 0x18ff8) mkdir(&(0x7f0000019b40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000019b80)='./config\x00', &(0x7f0000019bc0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000019c00)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000019c40)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) mount(&(0x7f0000019c80)=@loop={'/dev/loop', 0x0}, &(0x7f0000019cc0)='.\x00', &(0x7f0000019d00)='f2fs\x00', 0x0, &(0x7f0000019d40)='acl') r5 = openat(0xffffffffffffff9c, &(0x7f0000019d80)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0) read(r5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x9, r2}, 0x38) 13.832297249s ago: executing program 3 (id=1874): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x63) openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x103143, 0xf322278639a7a7ba) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000005c0), 0x8, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_require}]}) setxattr$trusted_overlay_origin(&(0x7f00000007c0)='./file0/file1\x00', &(0x7f0000000800), 0x0, 0x0, 0x2) umount2(&(0x7f0000000900)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x1804008, &(0x7f00000009c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$overlay(0x0, &(0x7f0000000a00)='./file0/file1\x00', 0x0, 0x2000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) init_module(0x0, 0xa99, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 12.173241569s ago: executing program 6 (id=1879): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f00000002c0)={0x0, 0x30b5, 0x0, 0x401, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r4 = syz_io_uring_setup(0xf2d, &(0x7f0000000180)={0x0, 0xb5d2, 0x8, 0x1, 0x33a}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000300)) r5 = eventfd(0x26) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r5, 0x1) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x80b2, 0x110101, 0x3, 0x55}, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xc041) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r7, &(0x7f0000000140)='n', 0x1) write(r6, &(0x7f0000000080)='4', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x38, 0x26, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0xc, 0xfff2}, {0x2, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x8081) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0xfffffffd, 0x1d, 0xc, 0x190, &(0x7f0000004480)}) 11.897563063s ago: executing program 0 (id=1880): socket$rxrpc(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setattr(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x258}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffe, 0x800, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0xa001, 0xfffffffe, 0x20146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacdc, 0x4, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x80000, 0x5, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0x260) 11.38542152s ago: executing program 3 (id=1881): syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x23, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0xa7c, r0}, 0x38) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x844) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='net/udp6\x00') preadv(r3, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/210, 0xd2}], 0x1, 0x2ffac000, 0x804) write$tun(r3, &(0x7f0000000e40)={@void, @val={0x1, 0x80, 0xfff2, 0x7fff, 0x3, 0x9}, @eth={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@can={0xc, {{0x3, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "a2fea83d4ca54c6e"}}}}}, 0x2c) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000000340)=[{&(0x7f0000000600)=""/156, 0x9c}], 0x53, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/109, 0x20001c34}], 0x1, 0x0) mount(&(0x7f0000000440)=@filename='mtd0\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='jffs2\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/fillfile\x00', 0x42, 0x9f) write(r5, &(0x7f0000000540)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="0413c028"], 0x14) r6 = openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x1a000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x4c032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000240), 0x0, &(0x7f0000000280), 0x0) ioctl$DM_LIST_DEVICES(r6, 0xc138fd02, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x200, 0x138, 0x0, 0x0, 0x8010, 0x0, 0x0, {}, "c918f4ef693ac11f6c2d82eeb8ed419b1ec124540267faacc4ee410936e7b1d62b574595d6a2fd4bada59584ee15df1c57a3129a6c7b5cba01a11243393cc09fe0c7a51d41c259ec6c81310989af95d967d67025f60e5b286695630e22e5770a5039a5d16b34bff88b9e76a14b1737fad387a2428dea01b0df5af75af3395f1f70028c92c0c18c1e7528a139d75b5bb9c85ddd7d2273a69510d4acdc41cfb56037572b5f2c5d4705be75d720440571720333ad10b0658776f82c1eef7cf26e7d5bdb1aba7b"}) 11.228369996s ago: executing program 6 (id=1882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000688600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000721f00008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f0000000740)="b800000500000000", &(0x7f0000000780)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents(r4, 0x0, 0x0) r5 = openat$bsg(0xffffff9c, &(0x7f0000000080)='/dev/bsg/1:0:0:0\x00', 0x406800, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x1c, r8, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r8, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x38}, 0x1, 0x0, 0x0, 0x814}, 0x40000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x121802, 0x0) ioctl$BSG_SET_RESERVED_SIZE(r10, 0x2275, &(0x7f0000000040)=0xfffffffc) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000300)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000480)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x1, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x3, 0x2, 0x8, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x1, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xb}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x2, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0x7, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x7, 0x9, '\x00', 0x6}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0xc5}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x0, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) 10.713590294s ago: executing program 6 (id=1883): sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000900)="c99cca1663f237dbe2ade8b42e7de9e0a50e3fb200000000000000000000008cf28ca6a31c2e708a78860ad8451e111049aa312a8b4bed5b276cd46897ed70bdb07b0edb3842b1b32c8484cd117161ac7f3b1381fe318661bb2026953ebbb0ebaf4f11a81b713f7b6b14070de85e8cd9cf72c9634f7414428a", 0x3ff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=""/119, &(0x7f0000000380), &(0x7f00000003c0), 0x7, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0485510, &(0x7f0000000ac0)={0x1, 0x0, 0x4, 0x58e, &(0x7f0000000900)}) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10) socket$pptp(0x18, 0x1, 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x84080, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x541b) setrlimit(0x2, &(0x7f0000000040)={0x2, 0x3}) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000680)={0x24, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000700), 0x0, 0x0) socket(0x23, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x8d00, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000007c0)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) brk(0x5ede6002) 10.571944072s ago: executing program 0 (id=1884): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xad, &(0x7f0000000140)=""/173, 0x40f00, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae5"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={0x0, 0x92}, 0x0, &(0x7f0000000680)="ab351af60c4a2d3a92d8e9458e9f12e604c53a20e64cbd1e5e580ad555f0c1596ff037d3604beb7cefabfea27520a1b3843ef1f44ac2bdb034646e2d210ea1af548a14cf994125b3730588e226803851217ddc498b781e7067e5623c54a44b667b89a94f62c610550653c736a1aa88b6e25b59a1599a4ccc6420af85f84e2c7d594998dbe6d63c0ab2a4e8e4e457375b7d90", 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 9.774049673s ago: executing program 2 (id=1885): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xad, &(0x7f0000000140)=""/173, 0x40f00, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae5"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={0x0, 0x92}, 0x0, &(0x7f0000000680)="ab351af60c4a2d3a92d8e9458e9f12e604c53a20e64cbd1e5e580ad555f0c1596ff037d3604beb7cefabfea27520a1b3843ef1f44ac2bdb034646e2d210ea1af548a14cf994125b3730588e226803851217ddc498b781e7067e5623c54a44b667b89a94f62c610550653c736a1aa88b6e25b59a1599a4ccc6420af85f84e2c7d594998dbe6d63c0ab2a4e8e4e457375b7d90", 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 8.746640623s ago: executing program 0 (id=1886): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/file0\x00', 0x42) r1 = openat(0xffffffffffffff9c, 0x0, 0x16000, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x82000, &(0x7f0000002740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESDEC=r1]) syz_fuse_handle_req(r3, &(0x7f00000005c0)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b7ed4f7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a7890814529440000004e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8046d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f00000025c0)={&(0x7f0000002640)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x41, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000026c0)={0x29, 0x4, 0x0, {0x1, 0x89, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000002700)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7, 0x80000001}}, 0x30) write(r1, 0x0, 0x0) r4 = dup(r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) syz_open_dev$usbmon(0x0, 0x80000001, 0x82002) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r6 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) pause() r10 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r10}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 8.681944507s ago: executing program 2 (id=1887): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r3, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r3, 0x0, 0x489, &(0x7f0000000400), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, r4, 0x0, 0xa0028000}, 0x38) setsockopt(r3, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) setsockopt(r3, 0x0, 0x484, &(0x7f0000000600)="060000007f00000100150000000000006d6800"/44, 0x2c) 6.802054138s ago: executing program 3 (id=1888): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x0) fcntl$addseals(r1, 0x409, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40010) socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'syzkaller0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) 6.716654334s ago: executing program 6 (id=1889): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x1000000008, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x2d) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0x0, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1040}, 0x44040) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r5, 0x5606, 0x9) ioctl$XFS_IOC_FSGROWFSRT(r5, 0x40105870, &(0x7f0000000140)={0x8, 0xa}) r6 = memfd_create(&(0x7f00000002c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r6, 0x2000000) pread64(r3, &(0x7f0000000300)=""/84, 0x54, 0x9) munmap$IORING_OFF_SQ_RING(0x0, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) 6.616743444s ago: executing program 2 (id=1890): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ptrace(0x4206, 0x0) tkill(0x0, 0x12) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f3aa6ea) 5.077657608s ago: executing program 2 (id=1891): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000000000000007000000070b7d772f40346e36f08c9404010000180000000000000008000000", @ANYRES32, @ANYBLOB="64010102ac1414aa10000000000000000700000000000000180000000000000008000000", @ANYRES32, @ANYBLOB="7f0000010a0101008c000000000000000700000086180000000302128f32061ea069046122f20bb4e92a65b783131effffffffac1414bbe0000002ac1e000144185d00000000060000000800000508000000000000ffff83120c7b691124ebd6c9c4f76218a9d6b3748927a36401010264010102e0000002640101000a0101017fc4df62ae1414197f000001000000000000000018"], 0x100}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) ftruncate(r1, 0x4a8e) read$FUSE(r1, &(0x7f00000030c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x48}}, 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x4, 0x2, 0x3}}]}, 0x38}}, 0x0) r8 = openat2(r1, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x440, 0x45, 0x4}, 0x18) quotactl_fd$Q_QUOTAOFF(r8, 0xffffffff80000302, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000300)={0x806, r1, 'id1\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ftruncate(r9, 0x4a8e) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x401, 0x5}, &(0x7f0000000200)=0x18) 4.923446808s ago: executing program 0 (id=1892): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(0x0, &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135", 0x1b, 0xfffffffffffffffe) syz_open_dev$video4linux(0x0, 0x3, 0x42583) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d0000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000040)=0xc) 4.88957895s ago: executing program 6 (id=1893): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b05, &(0x7f0000000080)={'wlan0\x00'}) syz_emit_ethernet(0x1f4, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x1be, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x3, 0xc, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000"}]}}}}}}, 0x0) 4.853206668s ago: executing program 3 (id=1894): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000040)=0x800, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) 3.719841777s ago: executing program 2 (id=1895): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x67, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="03020000008002ff", 0x8) ioctl$DVB_DEMUX_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000100)={0x3, 0x0, r1}) write$binfmt_misc(r3, &(0x7f0000000440)="c188a459c8261ee110b323a9093b458d9df792a1aacb28d2653b184b5b98d9f5958ff835e235558e02baf6f676989d683d523325602512017b093993fa2c3fb5b5b0357aac00ff9d68990642f07a039fec320e43b181868a98c78d4098ba340e0382c8921b353412f11b0fd15b5e06c5a833b0391828cbb8417c25c7483f38f47c7a0b4b81994259e179bc26d9ff60480a2ae69078b9722889bd4e1245f112db8b8c1b60a123ed45684af176d58b3c251745c028b9a2c7ca4d562211fe18d9bdae03f2745ce53493ff5745bf842e5e33ec5d5a809b16c3d2950211704d56c95cf696ee54c0943d5b15a5ce74f3c9e6340baa11c844", 0xf5) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669632e74696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xc) setfsuid(0xee00) write(r1, &(0x7f0000000300)="6164642073797a30203132372e302e302e31833800000000", 0x18) 3.693384381s ago: executing program 0 (id=1896): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x10000000000002) r1 = syz_open_dev$usbfs(&(0x7f0000000380), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000600)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0xe1, &(0x7f0000000640)={0x0, 0x3, 0xf801, 0x224}, 0x8, 0x1, 0x10000007, 0x0, 0x7, 0x7fffffff, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x400000000000041, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e00095a0c"], 0x8) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f00000003c0)={0x0, 0x0, 0x13580}, &(0x7f0000000440), 0x0, &(0x7f0000000480)) write(0xffffffffffffffff, &(0x7f00000004c0)="2700000014000707030e0000120f0a", 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'bond0\x00'}) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, 0x0) 3.324546129s ago: executing program 3 (id=1897): r0 = openat$md_new_array(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r1 = openat$md_sysfs(0xffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5) r2 = openat$md_sysfs(0xffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1) r3 = openat$md_sysfs(0xffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000200)=@str='512', 0x3) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0xc840) r6 = openat$md_sysfs(0xffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r6, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) r7 = openat$md_sysfs(0xffffff9c, &(0x7f0000000300)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r7, &(0x7f0000000340)=@str='0', 0x1) r8 = openat$md_sysfs(0xffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r8, &(0x7f00000003c0)=@str='1', 0x1) r9 = openat$md_sysfs(0xffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r9, &(0x7f0000000440)=@str='active', 0x6) r10 = openat$md(0xffffff9c, &(0x7f0000000480)={'/dev/md', @num=0x0}, 0x2, 0x0) pwrite64(r10, &(0x7f00000004c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) close(r10) write$md_sysfs(r9, &(0x7f0000000500)=@str='clear', 0x5) 3.281459688s ago: executing program 2 (id=1898): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee3799414468108fce3153d5e9b3f18b77e3703bcbb1d41ff7a7ecd8a92b41e393ca75ee901e2f00800000030", @ANYRES16, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x22401, 0x0) write(r4, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d28", 0x96) 336.996408ms ago: executing program 6 (id=1899): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) read$alg(0xffffffffffffffff, &(0x7f0000000300)=""/74, 0x4a) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000000)=""/106, 0x6a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000080)="070009677c5971ec", 0x8}, {0x0}], 0x2) syslog(0x3, &(0x7f0000000000)=""/112, 0x70) 167.101419ms ago: executing program 3 (id=1900): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xad, &(0x7f0000000140)=""/173, 0x40f00, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x4f, &(0x7f00000007c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x19, 0x84, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0xc0586300}, @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={0x0, 0x92}, 0x0, &(0x7f0000000680)="ab351af60c4a2d3a92d8e9458e9f12e604c53a20e64cbd1e5e580ad555f0c1596ff037d3604beb7cefabfea27520a1b3843ef1f44ac2bdb034646e2d210ea1af548a14cf994125b3730588e226803851217ddc498b781e7067e5623c54a44b667b89a94f62c610550653c736a1aa88b6e25b59a1599a4ccc6420af85f84e2c7d594998dbe6d63c0ab2a4e8e4e457375b7d90", 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 0 (id=1901): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ode [ 561.531867][ T5898] usb 8-1: USB disconnect, device number 17 [ 562.601621][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.601671][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.537452][T12315] binfmt_misc: register: failed to install interpreter ./file0 [ 564.791497][T12331] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1577'. [ 565.654073][T12338] openvswitch: netlink: Flow key attr not present in new flow. [ 565.798458][T12339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 566.723382][ T42] kauditd_printk_skb: 64 callbacks suppressed [ 566.723395][ T42] audit: type=1800 audit(1793754144.273:1762): pid=12329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1575" name="bus" dev="ramfs" ino=37357 res=0 errno=-4 [ 569.346236][T12350] binfmt_misc: register: failed to install interpreter ./file0 [ 570.077172][T12362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1587'. [ 570.086754][T12362] FAULT_INJECTION: forcing a failure. [ 570.086754][T12362] name failslab, interval 1, probability 5, space 0, times 0 [ 570.086771][T12362] CPU: 2 UID: 0 PID: 12362 Comm: syz.3.1587 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.086786][T12362] Tainted: [L]=SOFTLOCKUP [ 570.086790][T12362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 570.086796][T12362] Call Trace: [ 570.086800][T12362] [ 570.086804][T12362] dump_stack_lvl+0x100/0x190 [ 570.086824][T12362] should_fail_ex.cold+0x5/0xa [ 570.086842][T12362] should_failslab+0xc2/0x120 [ 570.086875][T12362] __kmalloc_cache_node_noprof+0x94/0x710 [ 570.086889][T12362] ? sbitmap_queue_init_node+0x291/0x4a0 [ 570.086909][T12362] sbitmap_queue_init_node+0x291/0x4a0 [ 570.086928][T12362] blk_mq_init_tags+0x184/0x300 [ 570.086941][T12362] blk_mq_alloc_map_and_rqs+0x244/0xe20 [ 570.086960][T12362] ? blk_mq_update_queue_map+0x227/0x3a0 [ 570.086974][T12362] blk_mq_alloc_tag_set+0x7ff/0x1320 [ 570.086994][T12362] loop_add+0x3b7/0xb60 [ 570.087043][T12362] ? __pfx_loop_add+0x10/0x10 [ 570.087067][T12362] ? __fget_files+0x34/0x3d0 [ 570.087081][T12362] ? find_held_lock+0x2b/0x80 [ 570.087097][T12362] ? __fget_files+0x215/0x3d0 [ 570.087111][T12362] loop_control_ioctl+0xae/0x620 [ 570.087126][T12362] ? __pfx_loop_control_ioctl+0x10/0x10 [ 570.087144][T12362] ? __pfx_loop_control_ioctl+0x10/0x10 [ 570.087158][T12362] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 570.087176][T12362] __do_fast_syscall_32+0x14b/0x8c0 [ 570.087190][T12362] ? lockdep_hardirqs_on+0x7d/0x110 [ 570.087210][T12362] do_fast_syscall_32+0x32/0x70 [ 570.087223][T12362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 570.087237][T12362] RIP: 0023:0xf7f64fbc [ 570.087248][T12362] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 570.087258][T12362] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 570.087270][T12362] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000004c80 [ 570.087276][T12362] RDX: 00000000ffffffe4 RSI: 0000000000000000 RDI: 0000000000000000 [ 570.087282][T12362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 570.087288][T12362] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 570.087294][T12362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.087307][T12362] [ 570.087441][T12362] blk-mq: reduced tag depth (128 -> 64) [ 570.440973][ T42] audit: type=1326 audit(1793754147.863:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 570.441006][ T42] audit: type=1326 audit(1793754147.863:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 570.441027][ T42] audit: type=1326 audit(1793754147.903:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 570.441047][ T42] audit: type=1326 audit(1793754147.903:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 570.441066][ T42] audit: type=1326 audit(1793754147.903:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 570.441084][ T42] audit: type=1326 audit(1793754147.903:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 570.441104][ T42] audit: type=1326 audit(1793754147.913:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 570.441148][ T42] audit: type=1326 audit(1793754147.913:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 570.441230][ T42] audit: type=1326 audit(1793754147.933:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7187f6b code=0x7ffc0000 [ 570.690917][ T64] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 570.822857][T12373] openvswitch: netlink: Flow key attr not present in new flow. [ 570.978820][T12375] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 570.993117][ T64] usb 7-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 571.203858][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.203881][ T64] usb 7-1: Product: syz [ 571.203892][ T64] usb 7-1: Manufacturer: syz [ 571.203903][ T64] usb 7-1: SerialNumber: syz [ 571.760433][ T64] usb 7-1: USB2VGA dongle found at address 22 [ 571.980011][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 571.980143][ T42] audit: type=1326 audit(1793754149.433:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 571.980268][ T42] audit: type=1326 audit(1793754149.433:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 572.074306][ T64] usb 7-1: Allocated 8 output buffers [ 572.185504][ T42] audit: type=1326 audit(1793754149.733:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 572.186445][ T42] audit: type=1326 audit(1793754149.733:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 572.186835][ T42] audit: type=1326 audit(1793754149.733:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 572.213251][ T42] audit: type=1326 audit(1793754149.763:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 572.214839][ T42] audit: type=1326 audit(1793754149.763:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 572.215530][ T42] audit: type=1326 audit(1793754149.763:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 572.221338][ T42] audit: type=1326 audit(1793754149.763:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7187f6b code=0x7ffc0000 [ 572.228296][ T42] audit: type=1326 audit(1793754149.773:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 573.454819][T12371] syz.3.1590 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 573.454846][T12371] CPU: 3 UID: 0 PID: 12371 Comm: syz.3.1590 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.454862][T12371] Tainted: [L]=SOFTLOCKUP [ 573.454866][T12371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 573.454873][T12371] Call Trace: [ 573.454877][T12371] [ 573.454882][T12371] dump_stack_lvl+0x100/0x190 [ 573.454903][T12371] dump_header+0xfb/0x606 [ 573.454916][T12371] oom_kill_process.cold+0xd/0x380 [ 573.454930][T12371] out_of_memory+0x343/0x14c0 [ 573.454951][T12371] ? __pfx_out_of_memory+0x10/0x10 [ 573.454972][T12371] mem_cgroup_out_of_memory+0xc6/0x130 [ 573.454983][T12371] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 573.454994][T12371] ? find_held_lock+0x2b/0x80 [ 573.455040][T12371] ? do_raw_spin_unlock+0x145/0x1e0 [ 573.455056][T12371] ? _raw_spin_unlock+0x28/0x50 [ 573.455070][T12371] try_charge_memcg+0x779/0xf30 [ 573.455089][T12371] ? __pfx_try_charge_memcg+0x10/0x10 [ 573.455104][T12371] ? find_held_lock+0x2b/0x80 [ 573.455118][T12371] ? rcu_read_unlock+0x17/0x60 [ 573.455133][T12371] ? rcu_read_unlock+0x17/0x60 [ 573.455151][T12371] obj_cgroup_charge_pages+0x2b/0x1f0 [ 573.455166][T12371] __memcg_kmem_charge_page+0x1bb/0x4b0 [ 573.455183][T12371] __alloc_frozen_pages_noprof+0x3cf/0x3280 [ 573.455206][T12371] ? lock_acquire+0x1d1/0x380 [ 573.455216][T12371] ? __free_frozen_pages+0x593/0x1110 [ 573.455229][T12371] ? find_held_lock+0x2b/0x80 [ 573.455243][T12371] ? __free_frozen_pages+0x75c/0x1110 [ 573.455256][T12371] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 573.455272][T12371] ? do_raw_spin_unlock+0x145/0x1e0 [ 573.455285][T12371] ? _raw_spin_unlock+0x28/0x50 [ 573.455296][T12371] ? __free_frozen_pages+0x766/0x1110 [ 573.455309][T12371] ? rcu_is_watching+0x13/0xc0 [ 573.455323][T12371] ? trace_mm_page_alloc+0x164/0x1c0 [ 573.455336][T12371] ? __alloc_frozen_pages_noprof+0x306/0x3280 [ 573.455353][T12371] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 573.455365][T12371] ? stack_depot_save_flags+0x49a/0xa10 [ 573.455380][T12371] ? kasan_save_stack+0x3f/0x50 [ 573.455390][T12371] ? kasan_save_stack+0x30/0x50 [ 573.455402][T12371] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 573.455417][T12371] ? do_fast_syscall_32+0x32/0x70 [ 573.455446][T12371] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 573.455467][T12371] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 573.455487][T12371] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 573.455503][T12371] ? policy_nodemask+0xed/0x5e0 [ 573.455518][T12371] alloc_pages_bulk_mempolicy_noprof+0x1a2/0x13f0 [ 573.455537][T12371] ? alloc_pages_mpol+0x260/0x560 [ 573.455551][T12371] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 573.455566][T12371] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 573.455581][T12371] ? __get_vm_area_node+0x22b/0x350 [ 573.455595][T12371] __vmalloc_node_range_noprof+0x8d1/0x1440 [ 573.455613][T12371] ? kvm_dev_ioctl+0x152/0x1ac0 [ 573.455627][T12371] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 573.455641][T12371] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 573.455659][T12371] ? lock_acquire+0x1d1/0x380 [ 573.455671][T12371] ? rcu_is_watching+0x13/0xc0 [ 573.455689][T12371] __kvmalloc_node_noprof+0x3da/0x9b0 [ 573.455701][T12371] ? kvm_dev_ioctl+0x152/0x1ac0 [ 573.455714][T12371] ? alloc_fd+0x471/0x7a0 [ 573.455727][T12371] ? kvm_dev_ioctl+0x152/0x1ac0 [ 573.455743][T12371] kvm_dev_ioctl+0x152/0x1ac0 [ 573.455758][T12371] ? __fget_files+0x34/0x3d0 [ 573.455771][T12371] ? find_held_lock+0x2b/0x80 [ 573.455785][T12371] ? __fget_files+0x215/0x3d0 [ 573.455795][T12371] ? hook_file_ioctl_common+0x140/0x440 [ 573.455810][T12371] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 573.455824][T12371] ? __fget_files+0x21f/0x3d0 [ 573.455838][T12371] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 573.455851][T12371] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 573.455869][T12371] __do_fast_syscall_32+0x14b/0x8c0 [ 573.455885][T12371] do_fast_syscall_32+0x32/0x70 [ 573.455900][T12371] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 573.455913][T12371] RIP: 0023:0xf7f64fbc [ 573.455923][T12371] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 573.455932][T12371] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 573.455943][T12371] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae01 [ 573.455949][T12371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 573.455955][T12371] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.455961][T12371] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 573.455967][T12371] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.455981][T12371] [ 573.456339][T12371] memory: usage 0kB, limit 0kB, failcnt 23 [ 573.456347][T12371] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 573.456353][T12371] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 573.456360][T12371] Memory cgroup stats for /syz3/test: [ 573.456450][T12371] cache 0 [ 573.456454][T12371] rss 0 [ 573.456458][T12371] rss_huge 0 [ 573.456461][T12371] shmem 0 [ 573.456465][T12371] mapped_file 0 [ 573.456469][T12371] dirty 0 [ 573.456472][T12371] writeback 0 [ 573.456476][T12371] workingset_refault_anon 0 [ 573.456480][T12371] workingset_refault_file 0 [ 573.456483][T12371] swap 0 [ 573.456486][T12371] swapcached 0 [ 573.456490][T12371] pgpgin 0 [ 573.456493][T12371] pgpgout 0 [ 573.456496][T12371] pgfault 0 [ 573.456499][T12371] pgmajfault 0 [ 573.456503][T12371] inactive_anon 0 [ 573.456506][T12371] active_anon 0 [ 573.456509][T12371] inactive_file 0 [ 573.456513][T12371] active_file 0 [ 573.456516][T12371] unevictable 0 [ 573.456519][T12371] hierarchical_memory_limit 0 [ 573.456523][T12371] hierarchical_memsw_limit 9223372036854771712 [ 573.456527][T12371] total_cache 0 [ 573.456530][T12371] total_rss 0 [ 573.456534][T12371] total_rss_huge 0 [ 573.456537][T12371] total_shmem 0 [ 573.456540][T12371] total_mapped_file 0 [ 573.456544][T12371] total_dirty 0 [ 573.456547][T12371] total_writeback 0 [ 573.456551][T12371] total_workingset_refault_anon 0 [ 573.456555][T12371] total_workingset_refault_file 0 [ 573.456558][T12371] total_swap 0 [ 573.456562][T12371] total_swapcached 0 [ 573.456565][T12371] total_pgpgin 0 [ 573.456568][T12371] total_pgpgout 0 [ 573.456572][T12371] total_pgfault 0 [ 573.456575][T12371] total_pgmajfault 0 [ 573.456578][T12371] total_inactive_anon 0 [ 573.456582][T12371] total_active_anon 0 [ 573.456585][T12371] total_inactive_file 0 [ 573.456589][T12371] total_active_file 0 [ 573.456592][T12371] total_unevictable 0 [ 573.456596][T12371] anon_cost 0 [ 573.456599][T12371] file_cost 0 [ 573.456602][T12371] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.1590,pid=12369,uid=0 [ 573.459137][T12371] Memory cgroup out of memory: Killed process 12369 (syz.3.1590) total-vm:204860kB, anon-rss:1344kB, file-rss:25996kB, shmem-rss:5344kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 573.618168][ T64] usb 7-1: Failed to early initialize device [ 573.646547][ T64] usb 7-1: USB disconnect, device number 22 [ 576.048866][T12422] binfmt_misc: register: failed to install interpreter ./file0 [ 577.727091][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1601'. [ 583.130423][T12468] binfmt_misc: register: failed to install interpreter ./file0 [ 588.560461][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 588.560473][ T42] audit: type=1326 audit(1793754167.109:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.3.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 588.578598][ T42] audit: type=1326 audit(1793754167.129:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.3.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 588.579053][ T42] audit: type=1326 audit(1793754167.129:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.3.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 588.579237][ T42] audit: type=1326 audit(1793754167.129:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.3.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 588.579577][ T42] audit: type=1326 audit(1793754167.129:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.3.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 588.581919][ T42] audit: type=1326 audit(1793754167.139:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.3.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 588.583517][ T42] audit: type=1326 audit(1793754167.139:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.3.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 588.584363][ T42] audit: type=1326 audit(1793754167.139:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.3.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 588.586121][ T42] audit: type=1326 audit(1793754167.139:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.3.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7157f6b code=0x7ffc0000 [ 588.587343][ T42] audit: type=1326 audit(1793754167.139:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.3.1619" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 589.707011][T12518] binfmt_misc: register: failed to install interpreter ./file0 [ 589.820886][ T6859] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 590.281978][ T6859] usb 8-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 590.288842][ T6859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.288857][ T6859] usb 8-1: Product: syz [ 590.288864][ T6859] usb 8-1: Manufacturer: syz [ 590.288870][ T6859] usb 8-1: SerialNumber: syz [ 590.360237][ T6859] usb 8-1: USB2VGA dongle found at address 18 [ 590.368187][ T6859] usb 8-1: Allocated 8 output buffers [ 590.824036][T12544] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1619'. [ 591.048850][ T6859] usb 8-1: Failed to early initialize device [ 591.061898][ T6859] usb 8-1: USB disconnect, device number 18 [ 593.937649][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 593.937663][ T42] audit: type=1800 audit(1793754172.489:1883): pid=12542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1623" name="bus" dev="ramfs" ino=38136 res=0 errno=-4 [ 594.141440][T12566] binfmt_misc: register: failed to install interpreter ./file0 [ 597.800991][T12584] Invalid ELF header magic: != ELF [ 597.801991][T12584] overlay: Unknown parameter '/' [ 598.038126][T12585] kAFS: bad VL server IP address [ 598.266312][ T42] audit: type=1326 audit(1793754176.819:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 598.266342][ T42] audit: type=1326 audit(1793754176.819:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 598.270257][ T42] audit: type=1326 audit(1793754176.819:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 598.270665][ T42] audit: type=1326 audit(1793754176.819:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 598.271298][ T42] audit: type=1326 audit(1793754176.829:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 598.272474][ T42] audit: type=1326 audit(1793754176.829:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 598.273082][ T42] audit: type=1326 audit(1793754176.829:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 598.273483][ T42] audit: type=1326 audit(1793754176.829:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 598.275176][ T42] audit: type=1326 audit(1793754176.829:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7137f6b code=0x7ffc0000 [ 598.511417][ T5898] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 598.519569][T12598] Invalid ELF header magic: != ELF [ 598.662245][ T5898] usb 10-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 598.677981][ T5898] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.677996][ T5898] usb 10-1: Product: syz [ 598.678003][ T5898] usb 10-1: Manufacturer: syz [ 598.678010][ T5898] usb 10-1: SerialNumber: syz [ 598.721182][ T5898] usb 10-1: USB2VGA dongle found at address 6 [ 598.728208][ T5898] usb 10-1: Allocated 8 output buffers [ 598.946188][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 598.946201][ T42] audit: type=1326 audit(1793754177.499:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 598.946683][ T42] audit: type=1326 audit(1793754177.499:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 599.100855][ T42] audit: type=1326 audit(1793754177.659:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 599.101363][ T42] audit: type=1326 audit(1793754177.659:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 599.101799][ T42] audit: type=1326 audit(1793754177.659:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 599.105231][ T42] audit: type=1326 audit(1793754177.659:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 599.105668][ T42] audit: type=1326 audit(1793754177.659:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 599.106102][ T42] audit: type=1326 audit(1793754177.659:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 599.106868][ T42] audit: type=1326 audit(1793754177.659:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7137f6b code=0x7ffc0000 [ 599.107638][ T42] audit: type=1326 audit(1793754177.659:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.5.1637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 599.637626][T12608] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 600.649023][T12594] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1637'. [ 600.976815][ T5898] usb 10-1: Failed to early initialize device [ 600.989884][ T5898] usb 10-1: USB disconnect, device number 6 [ 601.404421][ T1353] hid-generic 0005:0007:0009.0002: item fetching failed at offset 0/1 [ 601.418589][ T1353] hid-generic 0005:0007:0009.0002: probe with driver hid-generic failed with error -22 [ 601.459946][T12620] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 601.563637][T12627] service_operation: orangefs_mount -- wait timed out; aborting attempt. [ 601.563667][T12627] orangefs_mount: mount request failed with -110 [ 601.569868][T12627] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 601.615538][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 601.650905][ T5869] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 601.651029][ T5869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 601.651124][ T5869] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 601.651206][ T5869] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 20004 - 0 [ 601.651301][ T5869] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 20004 - 0 [ 601.651331][ T5869] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 20004 - 0 [ 601.651360][ T5869] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 20004 - 0 [ 601.651387][ T5869] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 20004 - 0 [ 601.744042][T12628] md/raid10:md0: not clean -- starting background reconstruction [ 601.744053][T12628] md/raid10:md0: active with 1 out of 2 devices [ 601.744312][T12628] md0: detected capacity change from 0 to 2048 [ 601.761577][T12634] md: resync of RAID array md0 [ 601.783018][T12634] md: md0: resync done. [ 602.855975][T12648] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1647'. [ 609.392887][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 609.392907][ T42] audit: type=1800 audit(1793754187.889:1980): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1655" name="bus" dev="ramfs" ino=39351 res=0 errno=-4 [ 609.867957][T12704] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 610.052947][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 610.100374][ T42] audit: type=1326 audit(1793754188.649:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62fbc code=0x7ffc0000 [ 610.100544][ T42] audit: type=1326 audit(1793754188.649:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62fbc code=0x7ffc0000 [ 610.118955][ T42] audit: type=1326 audit(1793754188.669:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f62fbc code=0x7ffc0000 [ 610.119896][ T42] audit: type=1326 audit(1793754188.669:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62fbc code=0x7ffc0000 [ 610.120042][ T42] audit: type=1326 audit(1793754188.669:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62fbc code=0x7ffc0000 [ 610.123762][ T42] audit: type=1326 audit(1793754188.679:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f62fbc code=0x7ffc0000 [ 610.123788][ T42] audit: type=1326 audit(1793754188.679:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62fbc code=0x7ffc0000 [ 610.127181][ T42] audit: type=1326 audit(1793754188.679:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62fbc code=0x7ffc0000 [ 610.127206][ T42] audit: type=1326 audit(1793754188.679:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f62fbc code=0x7ffc0000 [ 610.164841][T12704] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 612.189330][T12724] netlink: 'syz.5.1663': attribute type 1 has an invalid length. [ 613.676802][T12724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.682984][T12726] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 614.451328][T12740] Illegal XDP return value 4294967294 on prog (id 300) dev N/A, expect packet loss! [ 616.848408][T12760] binfmt_misc: register: failed to install interpreter ./file0 [ 618.729258][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'. [ 621.696146][ T1165] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3b19d320-7f93-459b-8f62-94f5271e267c. [ 621.800379][T12788] nvme nvme0: creating 3 I/O queues. [ 621.872146][T12788] nvme nvme0: new ctrl: "testsubsys" [ 623.626898][T12824] rxe_eth0 speed is unknown, defaulting to 1000 [ 623.685334][T12827] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 623.685349][T12827] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 623.690253][T12828] veth0_vlan: left promiscuous mode [ 623.824978][T12831] device-mapper: ioctl: The device has no table. [ 624.003750][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.003794][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.090956][ T9982] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 624.246479][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 624.246502][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 624.246517][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2985 instead [ 624.246533][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x171a instead [ 624.246545][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 624.246559][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 624.246571][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 624.246587][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 624.246611][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 624.246636][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 624.246647][T12839] jffs2: Further such events for this erase block will not be printed [ 624.246960][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 624.246975][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 624.246990][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2985 instead [ 624.247005][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x171a instead [ 624.247019][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 624.247031][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 624.247045][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 624.247062][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 624.247088][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 624.247112][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 624.247123][T12839] jffs2: Further such events for this erase block will not be printed [ 624.247405][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 624.247418][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 624.247430][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x2985 instead [ 624.247446][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x171a instead [ 624.247565][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 624.247581][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 624.247595][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x2985 instead [ 624.247611][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x171a instead [ 624.247700][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 624.247713][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 624.247728][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x2985 instead [ 624.247744][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x171a instead [ 624.247784][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 624.247798][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 624.247812][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x2985 instead [ 624.247826][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x171a instead [ 624.247863][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 624.247876][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 624.247889][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x2985 instead [ 624.247904][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x171a instead [ 624.247941][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 624.247954][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 624.247966][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x2985 instead [ 624.247981][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x171a instead [ 624.248032][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 624.248046][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 624.248062][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x2985 instead [ 624.248078][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x171a instead [ 624.248119][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 624.248131][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 624.248144][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x2985 instead [ 624.248160][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x171a instead [ 624.248195][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 624.248208][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 624.248221][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x2985 instead [ 624.248236][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x171a instead [ 624.248274][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 624.248287][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 624.248300][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x2985 instead [ 624.248321][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x171a instead [ 624.248363][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 624.248377][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 624.248392][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x2985 instead [ 624.248408][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x171a instead [ 624.248446][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 624.248459][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 624.248472][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x2985 instead [ 624.248487][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x171a instead [ 624.248525][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 624.248538][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 624.248552][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x2985 instead [ 624.248566][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x171a instead [ 624.248604][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 624.248617][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 624.248630][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x2985 instead [ 624.248645][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x171a instead [ 624.248695][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 624.248710][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 624.248725][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x2985 instead [ 624.249736][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x171a instead [ 624.249783][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 624.249797][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 624.249812][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x2985 instead [ 624.249826][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x171a instead [ 624.249863][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 624.249876][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 624.249889][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x2985 instead [ 624.249903][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x171a instead [ 624.249941][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 624.249954][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 624.249968][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x2985 instead [ 624.249981][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x171a instead [ 624.250018][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 624.250031][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 624.250045][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x2985 instead [ 624.250060][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x171a instead [ 624.250097][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 624.250110][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 624.250124][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x2985 instead [ 624.250189][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x171a instead [ 624.250233][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 624.250247][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 624.250263][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x2985 instead [ 624.250279][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x171a instead [ 624.250339][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 624.250354][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 624.250369][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x2985 instead [ 624.250385][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x171a instead [ 624.250438][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 624.250451][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 624.250467][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x2985 instead [ 624.250483][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x171a instead [ 624.250524][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 624.250538][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 624.250552][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x2985 instead [ 624.250568][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x171a instead [ 624.250605][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 624.250618][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 624.250632][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x2985 instead [ 624.250648][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x171a instead [ 624.250686][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 624.250698][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 624.250713][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x2985 instead [ 624.251155][ T9982] usb 10-1: Using ep0 maxpacket: 16 [ 624.254447][ T9982] usb 10-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 624.256339][ T9982] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 624.256356][ T9982] usb 10-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 624.256371][ T9982] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 624.256386][ T9982] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 624.256401][ T9982] usb 10-1: config 0 interface 0 has no altsetting 0 [ 624.258291][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x171a instead [ 624.258454][ T9982] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.258471][ T9982] usb 10-1: Product: syz [ 624.258482][ T9982] usb 10-1: Manufacturer: syz [ 624.258494][ T9982] usb 10-1: SerialNumber: syz [ 624.259852][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 624.259917][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 624.259935][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x2985 instead [ 624.259951][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x171a instead [ 624.259992][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 624.260007][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 624.260023][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x2985 instead [ 624.260040][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x171a instead [ 624.260078][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 624.260091][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 624.260105][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x2985 instead [ 624.260120][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x171a instead [ 624.260158][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 624.260170][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 624.260184][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x2985 instead [ 624.260199][T12839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x171a instead [ 624.260227][T12839] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 624.260234][T12839] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 624.262188][ T9982] usb 10-1: config 0 descriptor?? [ 624.262939][T12834] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 624.331004][ T5796] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 624.507622][ T5796] usb 8-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 624.511695][ T5796] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 624.511709][ T5796] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 624.511774][ T5796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.527987][ T5796] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 624.550318][ T5796] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 624.638006][T12812] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 624.648077][ T9982] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input14 [ 624.671953][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1687'. [ 625.211841][ T9982] usb 10-1: USB disconnect, device number 7 [ 626.846685][T12618] usb 8-1: USB disconnect, device number 19 [ 626.849819][T12618] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 626.851518][T12618] spcp8x5 8-1:1.0: device disconnected [ 627.220852][ T5796] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 627.401703][ T5796] usb 5-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 627.402521][ T5796] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 627.402536][ T5796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 627.402546][ T5796] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 627.402563][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.440144][T12873] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 627.485159][ T5796] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 627.564707][ T5796] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 627.714333][ T5796] usb 5-1: USB disconnect, device number 29 [ 627.747425][ T5796] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 627.747743][ T5796] cyberjack 5-1:1.0: device disconnected [ 633.279977][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 634.262926][T12891] input: syz0 as /devices/virtual/input/input15 [ 634.357727][T12931] Invalid ELF header magic: != ELF [ 635.637334][ T54] IPVS: starting estimator thread 0... [ 635.720833][T12938] IPVS: using max 44 ests per chain, 105600 per kthread [ 641.513830][ T42] kauditd_printk_skb: 516 callbacks suppressed [ 641.513845][ T42] audit: type=1326 audit(1793754219.789:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.5.1719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 641.513877][ T42] audit: type=1326 audit(1793754219.789:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.5.1719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 641.513896][ T42] audit: type=1326 audit(1793754219.789:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.5.1719" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 641.513916][ T42] audit: type=1326 audit(1793754219.789:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.5.1719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 641.513936][ T42] audit: type=1326 audit(1793754219.789:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.5.1719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 641.513955][ T42] audit: type=1326 audit(1793754219.789:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.5.1719" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 641.513977][ T42] audit: type=1326 audit(1793754219.789:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.5.1719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 641.513996][ T42] audit: type=1326 audit(1793754219.789:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.5.1719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 641.514016][ T42] audit: type=1326 audit(1793754219.789:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.5.1719" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 641.514035][ T42] audit: type=1326 audit(1793754219.789:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.5.1719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7ffc0000 [ 641.774223][T12965] FAULT_INJECTION: forcing a failure. [ 641.774223][T12965] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 641.774254][T12965] CPU: 2 UID: 0 PID: 12965 Comm: syz.2.1720 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.774279][T12965] Tainted: [L]=SOFTLOCKUP [ 641.774287][T12965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 641.774299][T12965] Call Trace: [ 641.774306][T12965] [ 641.774314][T12965] dump_stack_lvl+0x100/0x190 [ 641.774349][T12965] should_fail_ex.cold+0x5/0xa [ 641.774377][T12965] should_fail_alloc_page+0xeb/0x140 [ 641.774408][T12965] prepare_alloc_pages+0x1f0/0x5b0 [ 641.774431][T12965] ? is_bpf_text_address+0x94/0x1a0 [ 641.774459][T12965] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 641.774488][T12965] ? arch_stack_walk+0xa6/0xf0 [ 641.774524][T12965] ? stack_trace_save+0x8e/0xc0 [ 641.774543][T12965] ? __pfx_stack_trace_save+0x10/0x10 [ 641.774564][T12965] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 641.774616][T12965] ? kasan_save_stack+0x3f/0x50 [ 641.774637][T12965] ? kasan_save_stack+0x30/0x50 [ 641.774655][T12965] ? kasan_save_track+0x14/0x30 [ 641.774674][T12965] ? __kasan_slab_alloc+0x89/0x90 [ 641.774715][T12965] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 641.774745][T12965] ? alloc_vmap_area+0x643/0x2bc0 [ 641.774761][T12965] ? __get_vm_area_node+0x1ed/0x350 [ 641.774780][T12965] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 641.774802][T12965] ? __vmalloc_node_noprof+0xad/0xf0 [ 641.774823][T12965] ? __vmalloc_noprof+0xa3/0x120 [ 641.774842][T12965] ? __vcalloc_noprof+0x4d/0x80 [ 641.774864][T12965] ? kvm_arch_prepare_memory_region+0x35c/0x8c0 [ 641.774892][T12965] ? kvm_set_memslot+0x139/0x1830 [ 641.774917][T12965] ? kvm_set_memory_region+0xe9f/0x1690 [ 641.774941][T12965] ? kvm_vm_ioctl+0x1ef5/0x2950 [ 641.774960][T12965] ? kvm_vm_compat_ioctl+0x2f7/0x410 [ 641.774980][T12965] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 641.775019][T12965] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 641.775044][T12965] ? policy_nodemask+0xed/0x5e0 [ 641.775069][T12965] alloc_pages_mpol+0x201/0x560 [ 641.775093][T12965] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 641.775124][T12965] alloc_pages_noprof+0x1a/0x160 [ 641.775149][T12965] get_free_pages_noprof+0x10/0xb0 [ 641.775167][T12965] __kasan_populate_vmalloc+0xa0/0x210 [ 641.775203][T12965] alloc_vmap_area+0x963/0x2bc0 [ 641.775230][T12965] ? kasan_save_track+0x14/0x30 [ 641.775248][T12965] ? __kasan_kmalloc+0xaa/0xb0 [ 641.775266][T12965] ? __pfx_alloc_vmap_area+0x10/0x10 [ 641.775286][T12965] ? __get_vm_area_node+0x124/0x350 [ 641.775308][T12965] __get_vm_area_node+0x1ed/0x350 [ 641.775333][T12965] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 641.775354][T12965] ? __vcalloc_noprof+0x4d/0x80 [ 641.775383][T12965] ? __lock_acquire+0x5c0/0x1f40 [ 641.775406][T12965] ? __vcalloc_noprof+0x4d/0x80 [ 641.775435][T12965] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 641.775458][T12965] ? lock_acquire+0x1d1/0x380 [ 641.775484][T12965] ? __vcalloc_noprof+0x4d/0x80 [ 641.775504][T12965] __vmalloc_node_noprof+0xad/0xf0 [ 641.775525][T12965] ? __vcalloc_noprof+0x4d/0x80 [ 641.775550][T12965] __vmalloc_noprof+0xa3/0x120 [ 641.775570][T12965] ? __pfx___vmalloc_noprof+0x10/0x10 [ 641.775595][T12965] ? __pfx___mutex_lock+0x10/0x10 [ 641.775627][T12965] __vcalloc_noprof+0x4d/0x80 [ 641.775650][T12965] kvm_arch_prepare_memory_region+0x35c/0x8c0 [ 641.775686][T12965] kvm_set_memslot+0x139/0x1830 [ 641.775717][T12965] kvm_set_memory_region+0xe9f/0x1690 [ 641.775754][T12965] kvm_vm_ioctl+0x1ef5/0x2950 [ 641.775775][T12965] ? kasan_save_stack+0x3f/0x50 [ 641.775793][T12965] ? kasan_save_stack+0x30/0x50 [ 641.775813][T12965] ? kasan_save_track+0x14/0x30 [ 641.775830][T12965] ? kasan_save_free_info+0x3b/0x70 [ 641.775854][T12965] ? __kasan_slab_free+0x5f/0x80 [ 641.775873][T12965] ? kfree+0x22b/0x6d0 [ 641.775894][T12965] ? tomoyo_path_number_perm+0x46d/0x580 [ 641.775919][T12965] ? security_file_ioctl_compat+0xd3/0x230 [ 641.775945][T12965] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 641.775968][T12965] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 641.776026][T12965] ? kasan_quarantine_put+0x104/0x240 [ 641.776043][T12965] ? lockdep_hardirqs_on+0x7d/0x110 [ 641.776067][T12965] ? find_held_lock+0x2b/0x80 [ 641.776092][T12965] ? tomoyo_path_number_perm+0x28f/0x580 [ 641.776138][T12965] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 641.776163][T12965] ? do_vfs_ioctl+0x226/0x13e0 [ 641.776191][T12965] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 641.776222][T12965] kvm_vm_compat_ioctl+0x2f7/0x410 [ 641.776245][T12965] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 641.776264][T12965] ? __fget_files+0x34/0x3d0 [ 641.776285][T12965] ? find_held_lock+0x2b/0x80 [ 641.776308][T12965] ? __fget_files+0x215/0x3d0 [ 641.776327][T12965] ? hook_file_ioctl_common+0x140/0x440 [ 641.776359][T12965] ? __fget_files+0x21f/0x3d0 [ 641.776384][T12965] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 641.776410][T12965] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 641.776442][T12965] __do_fast_syscall_32+0x14b/0x8c0 [ 641.776471][T12965] do_fast_syscall_32+0x32/0x70 [ 641.776496][T12965] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 641.776520][T12965] RIP: 0023:0xf742efbc [ 641.776536][T12965] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 641.776553][T12965] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 641.776572][T12965] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000004020ae46 [ 641.776583][T12965] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 641.776594][T12965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 641.776605][T12965] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 641.776615][T12965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 641.776641][T12965] [ 641.793031][T12965] syz.2.1720: vmalloc error: size 4, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 641.793088][T12965] CPU: 2 UID: 0 PID: 12965 Comm: syz.2.1720 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.793104][T12965] Tainted: [L]=SOFTLOCKUP [ 641.793109][T12965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 641.793117][T12965] Call Trace: [ 641.793121][T12965] [ 641.793126][T12965] dump_stack_lvl+0x100/0x190 [ 641.793146][T12965] warn_alloc.cold+0x9e/0xb2 [ 641.793158][T12965] ? __pfx_warn_alloc+0x10/0x10 [ 641.793188][T12965] ? lockdep_hardirqs_on+0x7d/0x110 [ 641.793203][T12965] ? __get_vm_area_node+0x2f0/0x350 [ 641.793218][T12965] ? __get_vm_area_node+0x22b/0x350 [ 641.793232][T12965] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 641.793249][T12965] ? __lock_acquire+0x5c0/0x1f40 [ 641.793262][T12965] ? __vcalloc_noprof+0x4d/0x80 [ 641.793279][T12965] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 641.793292][T12965] ? lock_acquire+0x1d1/0x380 [ 641.793307][T12965] ? __vcalloc_noprof+0x4d/0x80 [ 641.793320][T12965] __vmalloc_node_noprof+0xad/0xf0 [ 641.793333][T12965] ? __vcalloc_noprof+0x4d/0x80 [ 641.793348][T12965] __vmalloc_noprof+0xa3/0x120 [ 641.793360][T12965] ? __pfx___vmalloc_noprof+0x10/0x10 [ 641.793373][T12965] ? __pfx___mutex_lock+0x10/0x10 [ 641.793390][T12965] __vcalloc_noprof+0x4d/0x80 [ 641.793408][T12965] kvm_arch_prepare_memory_region+0x35c/0x8c0 [ 641.793431][T12965] kvm_set_memslot+0x139/0x1830 [ 641.793453][T12965] kvm_set_memory_region+0xe9f/0x1690 [ 641.793483][T12965] kvm_vm_ioctl+0x1ef5/0x2950 [ 641.793502][T12965] ? kasan_save_stack+0x3f/0x50 [ 641.793520][T12965] ? kasan_save_stack+0x30/0x50 [ 641.793531][T12965] ? kasan_save_track+0x14/0x30 [ 641.793541][T12965] ? kasan_save_free_info+0x3b/0x70 [ 641.793555][T12965] ? __kasan_slab_free+0x5f/0x80 [ 641.793565][T12965] ? kfree+0x22b/0x6d0 [ 641.793578][T12965] ? tomoyo_path_number_perm+0x46d/0x580 [ 641.793591][T12965] ? security_file_ioctl_compat+0xd3/0x230 [ 641.793606][T12965] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 641.793619][T12965] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 641.793651][T12965] ? kasan_quarantine_put+0x104/0x240 [ 641.793661][T12965] ? lockdep_hardirqs_on+0x7d/0x110 [ 641.793675][T12965] ? find_held_lock+0x2b/0x80 [ 641.793690][T12965] ? tomoyo_path_number_perm+0x28f/0x580 [ 641.793716][T12965] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 641.793730][T12965] ? do_vfs_ioctl+0x226/0x13e0 [ 641.793748][T12965] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 641.793766][T12965] kvm_vm_compat_ioctl+0x2f7/0x410 [ 641.793779][T12965] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 641.793790][T12965] ? __fget_files+0x34/0x3d0 [ 641.793802][T12965] ? find_held_lock+0x2b/0x80 [ 641.793816][T12965] ? __fget_files+0x215/0x3d0 [ 641.793826][T12965] ? hook_file_ioctl_common+0x140/0x440 [ 641.793844][T12965] ? __fget_files+0x21f/0x3d0 [ 641.793859][T12965] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 641.793871][T12965] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 641.793906][T12965] __do_fast_syscall_32+0x14b/0x8c0 [ 641.793926][T12965] do_fast_syscall_32+0x32/0x70 [ 641.793942][T12965] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 641.793957][T12965] RIP: 0023:0xf742efbc [ 641.793968][T12965] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 641.793979][T12965] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 641.793990][T12965] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000004020ae46 [ 641.793997][T12965] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 641.794003][T12965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 641.794009][T12965] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 641.794015][T12965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 641.794030][T12965] [ 641.798606][T12965] Mem-Info: [ 641.798615][T12965] active_anon:16942 inactive_anon:485 isolated_anon:0 [ 641.798615][T12965] active_file:6320 inactive_file:19352 isolated_file:0 [ 641.798615][T12965] unevictable:2048 dirty:531 writeback:0 [ 641.798615][T12965] slab_reclaimable:6753 slab_unreclaimable:62009 [ 641.798615][T12965] mapped:34722 shmem:13245 pagetables:1362 [ 641.798615][T12965] sec_pagetables:320 bounce:0 [ 641.798615][T12965] kernel_misc_reclaimable:0 [ 641.798615][T12965] free:24790 free_pcp:5611 free_cma:0 [ 641.798642][T12965] Node 0 active_anon:340kB inactive_anon:76kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7488kB pagetables:1088kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 641.798670][T12965] Node 1 active_anon:67428kB inactive_anon:1864kB active_file:25280kB inactive_file:77408kB unevictable:8192kB isolated(anon):0kB isolated(file):0kB mapped:138864kB dirty:2124kB writeback:0kB shmem:52980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6676kB pagetables:4360kB sec_pagetables:148kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 641.798716][T12965] Node 0 DMA free:2620kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:72kB free_cma:0kB [ 641.798748][T12965] lowmem_reserve[]: 0 256 256 256 256 [ 641.798767][T12965] Node 0 DMA32 free:22372kB boost:10240kB min:21784kB low:24668kB high:27552kB reserved_highatomic:0kB free_highatomic:0kB active_anon:340kB inactive_anon:76kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1032196kB managed:262372kB mlocked:0kB bounce:0kB free_pcp:7584kB local_pcp:3332kB free_cma:0kB [ 641.798796][T12965] lowmem_reserve[]: 0 0 0 0 0 [ 641.798815][T12965] Node 1 DMA32 free:74168kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:67428kB inactive_anon:1864kB active_file:25280kB inactive_file:77408kB unevictable:8192kB writepending:2124kB zspages:1680kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:14788kB local_pcp:1836kB free_cma:0kB [ 641.798845][T12965] lowmem_reserve[]: 0 0 0 0 0 [ 641.798863][T12965] Node 0 DMA: 109*4kB (UE) 29*8kB (UE) 14*16kB (UE) 10*32kB (UE) 6*64kB (UE) 2*128kB (E) 1*256kB (U) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2620kB [ 641.807893][T12965] Node 0 DMA32: 459*4kB (UME) 215*8kB (UME) 102*16kB (UME) 59*32kB (UME) 67*64kB (UME) 20*128kB (UE) 11*256kB (UME) 5*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 22372kB [ 641.808011][T12965] Node 1 DMA32: 122*4kB (UME) 68*8kB (UME) 59*16kB (UME) 421*32kB (UME) 140*64kB (UE) 48*128kB (UME) 24*256kB (UME) 7*512kB (UM) 9*1024kB (UME) 6*2048kB (M) 3*4096kB (M) = 74072kB [ 641.808101][T12965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 641.808109][T12965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 641.808116][T12965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 641.808124][T12965] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 641.808132][T12965] 39184 total pagecache pages [ 641.808136][T12965] 254 pages in swap cache [ 641.808139][T12965] Free swap = 122364kB [ 641.808143][T12965] Total swap = 124996kB [ 641.808147][T12965] 524155 pages RAM [ 641.808151][T12965] 0 pages HighMem/MovableOnly [ 641.808154][T12965] 217670 pages reserved [ 641.808157][T12965] 0 pages cma reserved [ 642.074889][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'. [ 642.376426][T12618] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 642.683988][T12618] usb 10-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 642.723147][T12618] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.723339][T12618] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.958098][T12618] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 642.958410][T12618] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 642.958501][T12618] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 642.998165][T12618] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 643.010700][T12618] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 643.116406][T12618] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 643.141064][T12618] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 643.141101][T12618] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 644.082158][T12618] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 645.744326][ T9982] usb 10-1: USB disconnect, device number 8 [ 645.748114][ T9982] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 646.533023][ T9982] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 646.594157][ T9982] keyspan 10-1:1.0: device disconnected [ 646.814636][T12996] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.646805][T13010] socket: no more sockets [ 648.901440][T12618] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 649.051874][T12618] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 649.212279][T12618] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.212933][T12618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.223581][T12618] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 649.223734][T12618] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 649.223784][T12618] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 649.225445][T12618] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 649.225496][T12618] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 649.239987][T12618] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 649.253460][T12618] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 649.253523][T12618] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 649.257503][T12618] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 649.267256][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'. [ 650.442054][T13043] 9pnet_virtio: no channels available for device syz [ 651.575131][ T24] usb 7-1: USB disconnect, device number 23 [ 651.578120][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 651.579568][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 651.579835][ T24] keyspan 7-1:1.0: device disconnected [ 652.720611][T13058] sctp_transport_update_pmtu: 44 callbacks suppressed [ 652.720627][T13058] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 652.722971][T13058] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 652.725537][T13058] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 652.728228][T13058] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 652.734079][T13058] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 652.737597][T13058] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 652.739558][T13058] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 652.741659][T13058] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 652.748918][T13058] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 652.751502][T13058] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 652.918698][T12618] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 653.373595][T13064] pim6reg: entered allmulticast mode [ 653.957240][T12618] usb 7-1: unable to get BOS descriptor or descriptor too short [ 653.957265][T12618] usb 7-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 653.957282][T12618] usb 7-1: no configurations [ 653.957288][T12618] usb 7-1: can't read configurations, error -22 [ 654.313743][T13064] pim6reg: left allmulticast mode [ 654.470470][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 655.203930][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 655.203943][ T42] audit: type=1326 audit(1793754233.759:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13085 comm="syz.5.1747" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42fbc code=0x0 [ 655.523105][T13090] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 663.467634][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000003) at rIP: 0xffffffff81b4774a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 663.467665][ C0] Call Trace: [ 663.467669][ C0] [ 663.467675][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 663.467691][ C0] ? rcu_is_watching+0x13/0xc0 [ 663.467706][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 663.467723][ C0] mce_cpu_restart+0xd5/0x1f0 [ 663.467735][ C0] __flush_smp_call_function_queue+0x289/0x8c0 [ 663.467751][ C0] __sysvec_call_function+0x81/0x420 [ 663.467761][ C0] sysvec_call_function+0x9e/0xc0 [ 663.467774][ C0] [ 663.467777][ C0] [ 663.467781][ C0] asm_sysvec_call_function+0x1a/0x20 [ 663.467792][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 663.467804][ C0] Code: e7 a2 02 e9 43 61 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 6c 1f 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 663.467813][ C0] RSP: 0018:ffffffff8fc07cf0 EFLAGS: 00000206 [ 663.467822][ C0] RAX: 00000000004c97a3 RBX: ffffffff8fc91540 RCX: ffffffff8bec5325 [ 663.467828][ C0] RDX: 0000000000000001 RSI: ffffffff8e625249 RDI: ffffffff8c835a80 [ 663.467834][ C0] RBP: fffffbfff1f922a8 R08: 0000000000000001 R09: ffffed10055c6825 [ 663.467840][ C0] R10: ffff88802ae3412b R11: 0000000000000001 R12: 0000000000000000 [ 663.467845][ C0] R13: 0000000000000000 R14: 1ffffffff1f80fa2 R15: dffffc0000000000 [ 663.467854][ C0] ? ct_kernel_exit+0x125/0x180 [ 663.467869][ C0] default_idle+0x9/0x10 [ 663.467882][ C0] default_idle_call+0x6c/0xb0 [ 663.467895][ C0] do_idle+0x3ae/0x5b0 [ 663.467907][ C0] ? __pfx_do_idle+0x10/0x10 [ 663.467918][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 663.467933][ C0] cpu_startup_entry+0x4f/0x60 [ 663.467945][ C0] rest_init+0x2d3/0x2e0 [ 663.467959][ C0] ? __pfx_rest_init+0x10/0x10 [ 663.467977][ C0] ? __pfx_kernel_init+0x10/0x10 [ 663.467992][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 663.468003][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 663.468013][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 663.468050][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 663.468072][ C0] start_kernel+0x48e/0x490 [ 663.468086][ C0] x86_64_start_reservations+0x24/0x30 [ 663.468099][ C0] x86_64_start_kernel+0x12b/0x130 [ 663.468112][ C0] common_startup_64+0x13e/0x158 [ 663.468133][ C0] [ 665.601125][T13170] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1771'. [ 665.687371][T13170] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 665.687585][T13170] FAULT_INJECTION: forcing a failure. [ 665.687585][T13170] name failslab, interval 1, probability 5, space 0, times 0 [ 665.687603][T13170] CPU: 2 UID: 0 PID: 13170 Comm: syz.2.1771 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.687619][T13170] Tainted: [L]=SOFTLOCKUP [ 665.687623][T13170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 665.687630][T13170] Call Trace: [ 665.687634][T13170] [ 665.687640][T13170] dump_stack_lvl+0x100/0x190 [ 665.687659][T13170] should_fail_ex.cold+0x5/0xa [ 665.687678][T13170] should_failslab+0xc2/0x120 [ 665.687692][T13170] __kmalloc_cache_noprof+0x91/0x6d0 [ 665.687707][T13170] ? acpi_bind_one+0x2fa/0x650 [ 665.687725][T13170] acpi_bind_one+0x2fa/0x650 [ 665.687741][T13170] ? __pfx_acpi_bind_one+0x10/0x10 [ 665.687757][T13170] ? __kasan_kmalloc+0xaa/0xb0 [ 665.687769][T13170] ? lockdep_init_map_type+0x5c/0x250 [ 665.687784][T13170] acpi_device_notify+0x50/0x510 [ 665.687801][T13170] device_add+0x2b4/0x1970 [ 665.687814][T13170] ? __pfx_device_add+0x10/0x10 [ 665.687824][T13170] ? __pfx_idr_replace+0x10/0x10 [ 665.687839][T13170] ? dput.part.0+0x4a/0x240 [ 665.687855][T13170] ? dput+0x24/0x30 [ 665.687871][T13170] i2c_register_adapter+0x862/0x13f0 [ 665.687885][T13170] ? of_alias_get_id+0xb1/0x110 [ 665.687902][T13170] i801_probe.cold+0x30c/0x8bf [ 665.687918][T13170] ? __pfx_i801_probe+0x10/0x10 [ 665.687934][T13170] ? mark_held_locks+0x40/0x70 [ 665.687945][T13170] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 665.687958][T13170] ? lockdep_hardirqs_on+0x7d/0x110 [ 665.687971][T13170] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 665.687984][T13170] ? __pfx_i801_probe+0x10/0x10 [ 665.687997][T13170] local_pci_probe+0xdd/0x1b0 [ 665.688015][T13170] pci_call_probe+0x176/0x800 [ 665.688025][T13170] ? pci_match_device+0x147/0x7d0 [ 665.688040][T13170] ? __pfx_pci_call_probe+0x10/0x10 [ 665.688053][T13170] ? __pfx_pci_match_device+0x10/0x10 [ 665.688068][T13170] ? pci_find_host_bridge+0x3c/0x80 [ 665.688086][T13170] pci_device_probe+0x25b/0x400 [ 665.688096][T13170] ? __pfx_pci_device_probe+0x10/0x10 [ 665.688110][T13170] ? sysfs_create_link+0x68/0xc0 [ 665.688125][T13170] ? __pfx_pci_device_probe+0x10/0x10 [ 665.688136][T13170] really_probe+0x241/0xa60 [ 665.688153][T13170] __driver_probe_device+0x210/0x460 [ 665.688171][T13170] device_driver_attach+0xaa/0x230 [ 665.688210][T13170] bind_store+0xf4/0x190 [ 665.688223][T13170] ? __pfx_bind_store+0x10/0x10 [ 665.688238][T13170] drv_attr_store+0x74/0xb0 [ 665.688250][T13170] ? __pfx_drv_attr_store+0x10/0x10 [ 665.688262][T13170] sysfs_kf_write+0xf2/0x150 [ 665.688279][T13170] kernfs_fop_write_iter+0x3e0/0x5f0 [ 665.688291][T13170] ? __pfx_sysfs_kf_write+0x10/0x10 [ 665.688306][T13170] vfs_write+0x6af/0x1050 [ 665.688318][T13170] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 665.688331][T13170] ? __pfx_vfs_write+0x10/0x10 [ 665.688341][T13170] ? find_held_lock+0x2b/0x80 [ 665.688365][T13170] ksys_write+0x12a/0x250 [ 665.688376][T13170] ? __pfx_ksys_write+0x10/0x10 [ 665.688391][T13170] __do_fast_syscall_32+0x14b/0x8c0 [ 665.688408][T13170] do_fast_syscall_32+0x32/0x70 [ 665.688423][T13170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 665.688437][T13170] RIP: 0023:0xf742efbc [ 665.688447][T13170] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 665.688457][T13170] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 665.688468][T13170] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800005c0 [ 665.688475][T13170] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 665.688481][T13170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.688487][T13170] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 665.688493][T13170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.688508][T13170] [ 665.957420][T13170] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 666.261187][ T1132] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 666.261212][ T1132] ata1.00: irq_stat 0x40000000 [ 666.261226][ T1132] ata1.00: failed command: READ DMA EXT [ 666.261236][ T1132] ata1.00: cmd 25/00:60:06:5b:01/00:05:00:00:00/e0 tag 14 dma 704512 in [ 666.261236][ T1132] res 41/04:60:06:5b:01/00:05:00:00:00/e0 Emask 0x1 (device error) [ 666.261279][ T1132] ata1.00: status: { DRDY ERR } [ 666.261290][ T1132] ata1.00: error: { ABRT } [ 666.262389][ T1132] ata1.00: configured for UDMA/100 [ 666.262484][ T1132] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 666.262506][ T1132] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 666.262524][ T1132] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 666.262542][ T1132] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 5b 06 00 05 60 00 [ 666.262554][ T1132] I/O error, dev sda, sector 88838 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 666.262659][ T1132] ata1: EH complete [ 666.450748][ C3] Adjusting tsc more than 11% (7259340 vs 7162548) [ 667.342500][T13181] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 667.342518][T13181] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 667.342781][T13181] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 667.342793][T13181] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 669.355272][T13199] device-mapper: table: 248:3: thin-pool: Error getting data device (-EBUSY) [ 669.355288][T13199] device-mapper: ioctl: error adding target to table [ 669.376679][T13199] veth0_vlan: left promiscuous mode [ 669.885066][T13201] device-mapper: ioctl: The device has no table. [ 675.625796][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'. [ 675.736185][T12618] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 675.990445][T12618] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 676.024468][T12618] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.024937][T12618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.255125][T12618] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 676.265873][T12618] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 676.275783][T12618] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 676.287237][T12618] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 676.287743][T12618] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 676.373758][T12618] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 676.392580][T12618] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 676.392661][T12618] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 676.452968][T12618] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 678.483467][ T42] audit: type=1326 audit(1794278545.319:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.3.1784" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 678.483879][ T42] audit: type=1326 audit(1794278545.319:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.3.1784" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 678.484041][ T42] audit: type=1326 audit(1794278545.319:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.3.1784" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 678.484152][ T42] audit: type=1326 audit(1794278545.329:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.3.1784" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 678.484260][ T42] audit: type=1326 audit(1794278545.329:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.3.1784" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 678.484548][ T42] audit: type=1326 audit(1794278545.329:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.3.1784" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 678.485127][ T42] audit: type=1326 audit(1794278545.329:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.3.1784" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 678.485280][ T42] audit: type=1326 audit(1794278545.329:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.3.1784" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 678.485672][ T42] audit: type=1326 audit(1794278545.329:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.3.1784" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 678.485789][ T42] audit: type=1326 audit(1794278545.329:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.3.1784" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 678.833664][ T64] usb 5-1: USB disconnect, device number 30 [ 678.842057][ T64] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 679.040014][ T64] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 679.044045][ T64] keyspan 5-1:1.0: device disconnected [ 680.285628][T13265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 681.029743][T13265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 681.031680][T13265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 681.032823][T13265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 681.033518][T13265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.105024][T13265] Bluetooth: hci3: command tx timeout [ 684.944033][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.944079][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.183086][T13265] Bluetooth: hci3: command tx timeout [ 686.017686][ C2] nvme nvme0: long keepalive RTT (3550 ms) [ 687.262020][T13265] Bluetooth: hci3: command tx timeout [ 687.323044][T13258] rxe_eth0 speed is unknown, defaulting to 1000 [ 687.986123][T13299] e1000e 0000:00:02.0: resetting [ 688.186764][T13299] e1000e 0000:00:02.0: reset done [ 689.341465][T13265] Bluetooth: hci3: command tx timeout [ 689.610555][T13258] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.611387][T13258] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.611456][T13258] bridge_slave_0: entered allmulticast mode [ 689.613425][T13258] bridge_slave_0: entered promiscuous mode [ 689.616552][T13258] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.617924][T13258] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.617987][T13258] bridge_slave_1: entered allmulticast mode [ 689.622336][T13258] bridge_slave_1: entered promiscuous mode [ 689.689529][T13258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.695900][T13258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.758317][T13258] team0: Port device team_slave_0 added [ 689.760172][T13258] team0: Port device team_slave_1 added [ 689.773010][T13258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.773025][T13258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.773037][T13258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.774122][T13258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.774129][T13258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.774141][T13258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.795813][T13258] hsr_slave_0: entered promiscuous mode [ 689.796301][T13258] hsr_slave_1: entered promiscuous mode [ 689.796652][T13258] debugfs: 'hsr0' already exists in 'hsr' [ 689.796661][T13258] Cannot create hsr debugfs directory [ 691.991364][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.991396][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.117689][T13342] pim6reg: entered allmulticast mode [ 692.186989][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.187010][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.221289][ T5796] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 692.278274][T13337] pim6reg: left allmulticast mode [ 692.307068][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.307091][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.354367][T13258] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 692.356417][T13258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.358018][T13258] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 692.360414][T13258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.360839][T13258] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 692.367365][T13258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.369898][T13258] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 692.372802][ T5796] usb 8-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 692.375010][ T5796] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 692.375024][ T5796] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 692.375041][ T5796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.380001][ T5796] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 692.387191][T13258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.397711][ T5796] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 692.400985][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1804'. [ 692.429799][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.429819][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.546443][T13258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.683383][T13258] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.763857][ T208] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.763940][ T208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.773255][ T8499] netdevsim netdevsim5 eth11: set [1, 0] type 2 family 0 port 20004 - 0 [ 692.773283][ T8499] netdevsim netdevsim5 eth10: set [1, 0] type 2 family 0 port 20004 - 0 [ 692.773301][ T8499] netdevsim netdevsim5 eth12: set [1, 0] type 2 family 0 port 20004 - 0 [ 692.889727][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.889774][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.893401][ T8499] netdevsim netdevsim5 eth13: set [1, 0] type 2 family 0 port 20004 - 0 [ 692.898784][ T12] bridge_slave_1: left allmulticast mode [ 692.898798][ T12] bridge_slave_1: left promiscuous mode [ 692.898962][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.900351][ T12] bridge_slave_0: left allmulticast mode [ 692.900363][ T12] bridge_slave_0: left promiscuous mode [ 692.900469][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.458779][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.465796][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.467883][ T12] bond0 (unregistering): Released all slaves [ 693.477312][ T12] bond1 (unregistering): Released all slaves [ 693.562080][ T12] tipc: Disabling bearer [ 693.564037][ T12] tipc: Left network mode [ 693.857564][ T5508] 8021q: adding VLAN 0 to HW filter on device eth10 [ 694.035996][ T1353] usb 8-1: USB disconnect, device number 20 [ 694.092740][ T1353] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 694.094377][ T1353] spcp8x5 8-1:1.0: device disconnected [ 694.210796][T13258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.314504][T13395] e1000e 0000:00:02.0: resetting [ 694.399534][T13395] e1000e 0000:00:02.0: reset done [ 694.444646][ T12] hsr_slave_0: left promiscuous mode [ 694.448314][ T12] hsr_slave_1: left promiscuous mode [ 694.452120][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.452526][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.456943][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.457287][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.689771][ T12] veth1_macvtap: left promiscuous mode [ 694.690757][ T12] veth0_macvtap: left promiscuous mode [ 694.693621][ T12] veth1_vlan: left promiscuous mode [ 694.703440][ T12] veth0_vlan: left promiscuous mode [ 697.059871][ T12] team0 (unregistering): Port device team_slave_1 removed [ 697.094106][ T12] team0 (unregistering): Port device team_slave_0 removed [ 699.209847][ T5508] 8021q: adding VLAN 0 to HW filter on device eth11 [ 699.812838][T13258] veth0_vlan: entered promiscuous mode [ 699.891366][ T5508] 8021q: adding VLAN 0 to HW filter on device eth12 [ 699.900044][ T12] IPVS: stop unused estimator thread 0... [ 699.901100][T13258] veth1_vlan: entered promiscuous mode [ 700.411379][T13258] veth0_macvtap: entered promiscuous mode [ 700.418893][T13258] veth1_macvtap: entered promiscuous mode [ 701.361534][T13258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.393748][T13258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.399714][ T5508] 8021q: adding VLAN 0 to HW filter on device eth13 [ 701.420871][ T8499] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.420908][ T8499] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.420935][ T8499] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.420962][ T8499] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.666206][ T208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.666207][T12401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.666229][ T208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.666230][T12401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.993791][T13499] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 707.993810][T13499] PKCS7: Only support pkcs7_signedData type [ 718.462558][T13570] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 719.962974][T13590] Invalid ELF header magic: != ELF [ 720.003408][T13590] overlay: Unknown parameter '/' [ 720.080862][T13592] netlink: 'syz.0.1848': attribute type 1 has an invalid length. [ 720.116925][T13592] 8021q: adding VLAN 0 to HW filter on device bond3 [ 720.529769][T13589] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 720.529781][T13589] PKCS7: Only support pkcs7_signedData type [ 726.855440][ T9982] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 727.002109][ T9982] usb 7-1: Using ep0 maxpacket: 8 [ 727.007999][ T9982] usb 7-1: unable to get BOS descriptor or descriptor too short [ 727.008082][ T9982] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 727.011419][ T9982] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.011432][ T9982] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 727.011463][ T9982] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 727.019438][ T9982] usb 7-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 727.019479][ T9982] usb 7-1: Product: syz [ 727.019488][ T9982] usb 7-1: Manufacturer: syz [ 727.019562][ T9982] usb 7-1: SerialNumber: syz [ 728.058640][T13660] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1854'. [ 728.144006][T13653] rxe_eth0 speed is unknown, defaulting to 1000 [ 728.902816][T13652] rxe_eth0 speed is unknown, defaulting to 1000 [ 728.905173][ T6859] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 728.980200][T13673] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 729.091995][ T6859] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 729.102609][ T6859] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 729.102624][ T6859] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.102634][ T6859] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 729.102654][ T6859] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.137877][ T6859] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 729.137892][ T6859] usb 8-1: Product: syz [ 729.137899][ T6859] usb 8-1: Manufacturer: syz [ 729.155214][ T6859] cdc_wdm 8-1:1.0: skipping garbage [ 729.155226][ T6859] cdc_wdm 8-1:1.0: skipping garbage [ 729.160626][ T6859] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 729.161413][ T6859] cdc_wdm 8-1:1.0: Unknown control protocol [ 729.310322][T13674] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 729.410905][ T24] usb 8-1: USB disconnect, device number 21 [ 730.041037][ T24] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 730.202086][ T24] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 730.211244][ T24] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 730.211306][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.211316][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 730.211337][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.212975][ T24] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 730.212988][ T24] usb 8-1: Product: syz [ 730.212994][ T24] usb 8-1: Manufacturer: syz [ 730.220316][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 730.220325][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 730.231428][ T24] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 730.231439][ T24] cdc_wdm 8-1:1.0: Unknown control protocol [ 730.853957][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 730.853973][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 730.854150][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 730.854159][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 730.854294][ T24] usb 8-1: USB disconnect, device number 22 [ 730.854346][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 730.854355][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 730.854363][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 732.351996][ T9982] cdc_ncm 7-1:1.0: skipping garbage [ 732.352010][ T9982] cdc_ncm 7-1:1.0: skipping garbage [ 732.352018][ T9982] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 732.352148][ T9982] cdc_ncm 7-1:1.0: bind() failure [ 732.871522][T13693] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 733.201079][ T1132] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 733.201105][ T1132] ata1.00: irq_stat 0x40000000 [ 733.201120][ T1132] ata1.00: failed command: READ DMA EXT [ 733.201131][ T1132] ata1.00: cmd 25/00:40:ee:32:01/00:06:00:00:00/e0 tag 14 dma 819200 in [ 733.201131][ T1132] res 41/04:40:ee:32:01/00:06:00:00:00/e0 Emask 0x1 (device error) [ 733.201177][ T1132] ata1.00: status: { DRDY ERR } [ 733.201188][ T1132] ata1.00: error: { ABRT } [ 733.202111][ T1132] ata1.00: configured for UDMA/100 [ 733.202301][ T1132] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 733.202340][ T1132] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 733.202371][ T1132] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 733.202403][ T1132] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 32 ee 00 06 40 00 [ 733.202423][ T1132] I/O error, dev sda, sector 78574 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 733.202545][ T1132] ata1: EH complete [ 734.219682][ T6859] usb 7-1: USB disconnect, device number 26 [ 736.401128][ T6859] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 737.484535][T13723] overlay: filesystem on ./file0 not supported as upperdir [ 737.501259][ T6859] usb 7-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 737.502086][ T6859] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 737.502099][ T6859] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 737.502118][ T6859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.505400][ T6859] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 737.509746][ T6859] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 737.891536][T13731] input: syz1 as /devices/virtual/input/input16 [ 737.905326][T13734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.905342][T13734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.905921][T13734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.905932][T13734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.277517][ T5796] usb 7-1: USB disconnect, device number 27 [ 739.280613][ T5796] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 739.281707][ T5796] spcp8x5 7-1:1.0: device disconnected [ 740.359451][T13756] syz.6.1877 (13756) used greatest stack depth: 19152 bytes left [ 740.409527][T13752] input: syz1 as /devices/virtual/input/input17 [ 741.620947][ T5796] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 742.229045][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 742.229063][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 742.229072][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2985 instead [ 742.229082][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x171a instead [ 742.229137][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 742.229146][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 742.229154][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 742.229164][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 742.229180][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 742.229196][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 742.229204][T13768] jffs2: Further such events for this erase block will not be printed [ 742.232041][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 742.232054][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 742.232063][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2985 instead [ 742.232073][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x171a instead [ 742.232081][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 742.232089][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 742.232146][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 742.232164][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 742.232183][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 742.232200][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 742.232491][T13768] jffs2: Further such events for this erase block will not be printed [ 742.232762][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 742.232772][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 742.232782][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x2985 instead [ 742.232793][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x171a instead [ 742.232830][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 742.232843][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 742.232851][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x2985 instead [ 742.232860][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x171a instead [ 742.232925][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 742.232935][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 742.232944][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x2985 instead [ 742.232954][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x171a instead [ 742.232976][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 742.232985][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 742.232994][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x2985 instead [ 742.233004][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x171a instead [ 742.233027][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 742.241964][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 742.241978][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x2985 instead [ 742.241988][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x171a instead [ 742.242015][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 742.242023][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 742.242033][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x2985 instead [ 742.242043][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x171a instead [ 742.242117][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 742.242128][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 742.242137][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x2985 instead [ 742.242147][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x171a instead [ 742.242171][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 742.242179][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 742.242187][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x2985 instead [ 742.242196][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x171a instead [ 742.242272][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 742.242284][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 742.242293][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x2985 instead [ 742.242304][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x171a instead [ 742.242328][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 742.242337][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 742.242346][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x2985 instead [ 742.242356][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x171a instead [ 742.242380][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 742.242435][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 742.242446][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x2985 instead [ 742.242455][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x171a instead [ 742.242478][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 742.242486][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 742.242494][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x2985 instead [ 742.242504][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x171a instead [ 742.242526][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 742.242533][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 742.242542][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x2985 instead [ 742.242588][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x171a instead [ 742.242612][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 742.242620][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 742.242628][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x2985 instead [ 742.242637][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x171a instead [ 742.242668][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 742.242677][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 742.242686][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x2985 instead [ 742.242696][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x171a instead [ 742.242766][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 742.242777][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 742.242786][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x2985 instead [ 742.242796][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x171a instead [ 742.242818][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 742.242827][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 742.242836][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x2985 instead [ 742.242846][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x171a instead [ 742.242910][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 742.242921][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 742.242930][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x2985 instead [ 742.242940][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x171a instead [ 742.242963][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 742.242971][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 742.242981][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x2985 instead [ 742.242990][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x171a instead [ 742.243013][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 742.243068][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 742.243078][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x2985 instead [ 742.243087][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x171a instead [ 742.243111][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 742.243118][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 742.243127][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x2985 instead [ 742.243136][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x171a instead [ 742.243158][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 742.243166][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 742.243174][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x2985 instead [ 742.243221][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x171a instead [ 742.243257][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 742.243266][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 742.243275][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x2985 instead [ 742.243285][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x171a instead [ 742.243309][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 742.243317][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 742.243326][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x2985 instead [ 742.243383][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x171a instead [ 742.243409][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 742.243419][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 742.243428][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x2985 instead [ 742.243438][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x171a instead [ 742.243461][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 742.243468][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 742.243476][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x2985 instead [ 742.243485][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x171a instead [ 742.243540][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 742.243550][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 742.243558][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x2985 instead [ 742.254376][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x171a instead [ 742.254413][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 742.254423][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 742.254432][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x2985 instead [ 742.254443][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x171a instead [ 742.254467][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 742.254476][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 742.254535][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x2985 instead [ 742.254546][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x171a instead [ 742.254570][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 742.254578][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 742.254587][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x2985 instead [ 742.254597][T13768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x171a instead [ 742.254614][T13768] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 742.254619][T13768] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 742.790798][T13362] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 742.974567][ T5796] usb 8-1: unable to get BOS descriptor or descriptor too short [ 742.974594][ T5796] usb 8-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40 [ 743.724193][ T5796] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 743.724215][ T5796] usb 8-1: can't read configurations, error -71 [ 743.740760][T13362] usb 11-1: Using ep0 maxpacket: 32 [ 743.741602][T13362] usb 11-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 743.742627][T13362] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.742642][T13362] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.742652][T13362] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 743.742670][T13362] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.743848][T13362] usb 11-1: config 0 descriptor?? [ 744.649858][T13774] mmap: syz.6.1883 (13774): VmData 37502976 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 744.670147][T13362] hid (null): report_id 0 is invalid [ 744.670161][T13362] hid (null): report_id 0 is invalid [ 745.692389][T13362] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5011.0003/input/input18 [ 745.766811][T13362] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5011.0003/input/input19 [ 745.806997][T13362] kye 0003:0458:5011.0003: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 745.836339][T13362] usb 11-1: USB disconnect, device number 2 [ 746.013667][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 746.013694][ T42] audit: type=1326 audit(1794278613.066:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.3.1888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 746.022253][ T42] audit: type=1326 audit(1794278613.076:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.3.1888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 746.040849][ T42] audit: type=1326 audit(1794278613.086:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.3.1888" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 746.041052][ T42] audit: type=1326 audit(1794278613.096:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.3.1888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 746.041135][ T42] audit: type=1326 audit(1794278613.096:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.3.1888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 746.054605][ T42] audit: type=1326 audit(1794278613.106:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.3.1888" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 746.054761][ T42] audit: type=1326 audit(1794278613.106:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.3.1888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 746.055354][ T42] audit: type=1326 audit(1794278613.106:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.3.1888" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 746.055439][ T42] audit: type=1326 audit(1794278613.106:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.3.1888" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f64fbc code=0x7ffc0000 [ 746.055533][ T42] audit: type=1326 audit(1794278613.106:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.3.1888" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f64fe7 code=0x7ffc0000 [ 746.382400][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.382552][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.718700][T13792] fido_id[13792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb11/11-1/report_descriptor': No such file or directory [ 747.999482][T13811] 9pnet_virtio: no channels available for device syz [ 748.038839][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'. [ 749.079978][T13824] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 749.079992][T13824] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 749.229268][T13827] kAFS: bad VL server IP address [ 749.283287][T13362] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 749.384975][T13829] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 749.451422][T13362] usb 11-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 749.452339][T13362] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.452355][T13362] usb 11-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 749.452372][T13362] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.669506][ T54] IPVS: starting estimator thread 0... [ 750.746097][T13838] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 750.770151][T13838] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 750.770560][T13838] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff] [ 750.771222][T13838] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 750.780032][T13838] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 750.790800][T13837] IPVS: using max 45 ests per chain, 108000 per kthread [ 750.975697][T13833] md: md3 stopped. [ 751.107841][T13838] pci 0000:00:01.0: Adding to iommu group 1 [ 751.186104][T13838] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 751.186126][T13838] pci 0000:00:01.0: vgaarb: bridge control possible [ 751.186138][T13838] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 751.215968][T13838] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 751.225935][T13838] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 751.226200][T13838] pci 0000:00:05.0: BAR 1 [mem 0xfeaf8000-0xfeaf8fff] [ 751.227404][T13838] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 751.261094][T13838] pci 0000:00:05.0: Adding to iommu group 5 [ 751.288205][T13838] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 751.293967][T13838] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 751.296561][T13838] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 751.297744][T13838] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 751.299177][T13838] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 751.371297][T13838] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 751.458596][T13838] [drm] Found bochs VGA, ID 0xb0c5. [ 751.458782][T13838] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 751.719677][ T6859] usb 11-1: USB disconnect, device number 3 [ 751.753413][T13838] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 752.667029][T13842] No buffer was provided with the request [ 753.082373][T13838] Console: switching to colour frame buffer device 160x50 [ 753.142684][T13838] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 754.079934][T13838] ================================================================== [ 754.079982][T13838] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 754.080089][T13838] Read of size 1 at addr ffff888022768890 by task syz.2.1898/13838 [ 754.080098][T13838] [ 754.080105][T13838] CPU: 2 UID: 0 PID: 13838 Comm: syz.2.1898 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.080120][T13838] Tainted: [L]=SOFTLOCKUP [ 754.080124][T13838] Hardware name: Q ** replaying previous printk message ** [ 754.080124][T13838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 754.080137][T13838] Call Trace: [ 754.080170][T13838] [ 754.080174][T13838] dump_stack_lvl+0x100/0x190 [ 754.080199][T13838] print_report+0x13d/0x4b0 [ 754.080215][T13838] ? __virt_addr_valid+0x239/0x430 [ 754.080227][T13838] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 754.080239][T13838] kasan_report+0xdf/0x1c0 [ 754.080252][T13838] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 754.080266][T13838] acpi_ns_get_attached_object+0x148/0x1b0 [ 754.080279][T13838] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 754.080291][T13838] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 754.080301][T13838] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 754.080314][T13838] ? acpi_ds_create_operand+0x267/0xc20 [ 754.080330][T13838] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 754.080343][T13838] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 754.080354][T13838] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 754.080368][T13838] ? __asan_memset+0x23/0x50 [ 754.080383][T13838] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 754.080394][T13838] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 754.080409][T13838] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 754.080424][T13838] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 754.080439][T13838] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 754.080450][T13838] acpi_ds_exec_end_op+0xb78/0x1e60 [ 754.080465][T13838] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 754.080480][T13838] acpi_ps_parse_loop+0x5e1/0x26e0 [ 754.080496][T13838] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 754.080511][T13838] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 754.080527][T13838] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 754.080537][T13838] ? acpi_ut_create_thread_state+0x6d/0x170 [ 754.080554][T13838] acpi_ps_parse_aml+0x81e/0x1120 [ 754.080570][T13838] acpi_ps_execute_method+0x5c4/0xe90 [ 754.080582][T13838] acpi_ns_evaluate+0x640/0x1670 [ 754.080595][T13838] acpi_ut_evaluate_object+0xf7/0x610 [ 754.080608][T13838] acpi_rs_get_prt_method_data+0xa0/0x150 [ 754.080620][T13838] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 754.080643][T13838] ? acpi_ut_status_exit+0x111/0x1c0 [ 754.080655][T13838] ? acpi_rs_validate_parameters+0x104/0x210 [ 754.080667][T13838] acpi_get_irq_routing_table+0xb8/0x140 [ 754.080680][T13838] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 754.080693][T13838] ? do_raw_spin_lock+0x128/0x260 [ 754.080706][T13838] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 754.080720][T13838] ? mark_held_locks+0x40/0x70 [ 754.080731][T13838] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 754.080743][T13838] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 754.080800][T13838] ? pci_conf1_read+0x138/0x240 [ 754.080814][T13838] acpi_pci_irq_lookup+0x8e/0x6b0 [ 754.080826][T13838] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 754.080838][T13838] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 754.080850][T13838] ? __driver_probe_device+0x210/0x460 [ 754.080885][T13838] ? __device_attach_driver+0x1df/0x320 [ 754.080900][T13838] ? bus_for_each_drv+0x159/0x1e0 [ 754.080912][T13838] ? __device_attach+0x1e4/0x4c0 [ 754.080927][T13838] acpi_pci_irq_enable+0x1f5/0x6f0 [ 754.080939][T13838] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 754.080952][T13838] ? __pfx_pci_enable_resources+0x10/0x10 [ 754.080965][T13838] ? __pfx___pci_set_power_state+0x10/0x10 [ 754.080977][T13838] pcibios_enable_device+0xb6/0xe0 [ 754.080989][T13838] do_pci_enable_device+0x21f/0x4a0 [ 754.080999][T13838] ? __pfx_do_pci_enable_device+0x10/0x10 [ 754.081009][T13838] ? pci_update_current_state+0x102/0x240 [ 754.081026][T13838] ? __pfx_pci_update_current_state+0x10/0x10 [ 754.081041][T13838] ? write_protect_page.constprop.0+0x80/0x1d10 [ 754.081052][T13838] ? __kasan_kmalloc+0xaa/0xb0 [ 754.081063][T13838] pci_enable_device_flags+0x27c/0x370 [ 754.081077][T13838] ? __pfx_virtio_pci_probe+0x10/0x10 [ 754.081088][T13838] virtio_pci_probe+0x1d5/0x410 [ 754.081100][T13838] local_pci_probe+0xdd/0x1b0 [ 754.081115][T13838] pci_call_probe+0x176/0x800 [ 754.081124][T13838] ? pci_match_device+0x147/0x7d0 [ 754.081139][T13838] ? __pfx_pci_call_probe+0x10/0x10 [ 754.081150][T13838] ? __pfx_pci_match_device+0x10/0x10 [ 754.081165][T13838] ? pci_find_host_bridge+0x3c/0x80 [ 754.081178][T13838] pci_device_probe+0x25b/0x400 [ 754.081188][T13838] ? __pfx_pci_device_probe+0x10/0x10 [ 754.081199][T13838] ? sysfs_create_link+0x68/0xc0 [ 754.081215][T13838] ? __pfx_pci_device_probe+0x10/0x10 [ 754.081225][T13838] really_probe+0x241/0xa60 [ 754.081240][T13838] __driver_probe_device+0x210/0x460 [ 754.081255][T13838] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 754.081267][T13838] driver_probe_device+0x4a/0x140 [ 754.081282][T13838] __device_attach_driver+0x1df/0x320 [ 754.081298][T13838] ? __pfx___device_attach_driver+0x10/0x10 [ 754.081313][T13838] bus_for_each_drv+0x159/0x1e0 [ 754.081325][T13838] ? __pfx_bus_for_each_drv+0x10/0x10 [ 754.081338][T13838] ? lockdep_hardirqs_on+0x7d/0x110 [ 754.081351][T13838] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 754.081367][T13838] __device_attach+0x1e4/0x4c0 [ 754.081385][T13838] ? __pfx___device_attach+0x10/0x10 [ 754.081406][T13838] ? do_raw_spin_unlock+0x145/0x1e0 [ 754.081425][T13838] device_initial_probe+0xaf/0xf0 [ 754.081446][T13838] pci_bus_add_device+0xc5/0x100 [ 754.081466][T13838] pci_bus_add_devices+0x9a/0x1f0 [ 754.081479][T13838] pci_rescan_bus+0x2a/0x40 [ 754.081494][T13838] rescan_store+0xfb/0x130 [ 754.081504][T13838] ? __pfx_rescan_store+0x10/0x10 [ 754.081513][T13838] ? sysfs_file_kobj+0xe4/0x290 [ 754.081526][T13838] ? __pfx_rescan_store+0x10/0x10 [ 754.081535][T13838] bus_attr_store+0x74/0xb0 [ 754.081545][T13838] ? __pfx_bus_attr_store+0x10/0x10 [ 754.081556][T13838] sysfs_kf_write+0xf2/0x150 [ 754.081569][T13838] kernfs_fop_write_iter+0x3e0/0x5f0 [ 754.081579][T13838] ? __pfx_sysfs_kf_write+0x10/0x10 [ 754.081592][T13838] vfs_write+0x6af/0x1050 [ 754.081603][T13838] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 754.081615][T13838] ? __pfx_vfs_write+0x10/0x10 [ 754.081624][T13838] ? find_held_lock+0x2b/0x80 [ 754.081642][T13838] ksys_write+0x12a/0x250 [ 754.081652][T13838] ? __pfx_ksys_write+0x10/0x10 [ 754.081664][T13838] __do_fast_syscall_32+0x14b/0x8c0 [ 754.081678][T13838] do_fast_syscall_32+0x32/0x70 [ 754.081692][T13838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 754.081705][T13838] RIP: 0023:0xf742efbc [ 754.081714][T13838] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 754.081724][T13838] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 754.081744][T13838] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000700 [ 754.081751][T13838] RDX: 0000000000000096 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.081757][T13838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 754.081763][T13838] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 754.081770][T13838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 754.081779][T13838] [ 754.081783][T13838] [ 754.081786][T13838] Allocated by task 1: [ 754.081797][T13838] kasan_save_stack+0x30/0x50 [ 754.081808][T13838] kasan_save_track+0x14/0x30 [ 754.081817][T13838] __kasan_slab_alloc+0x89/0x90 [ 754.081827][T13838] kmem_cache_alloc_noprof+0x269/0x6a0 [ 754.081841][T13838] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 754.081855][T13838] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 754.081868][T13838] acpi_ds_build_internal_object+0x173/0x790 [ 754.081881][T13838] acpi_ds_create_node+0xe3/0x280 [ 754.081893][T13838] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 754.081906][T13838] acpi_ps_parse_loop+0x5e1/0x26e0 [ 754.081919][T13838] acpi_ps_parse_aml+0x81e/0x1120 [ 754.081933][T13838] acpi_ps_execute_table+0x393/0x500 [ 754.081942][T13838] acpi_ns_execute_table+0x596/0x970 [ 754.081953][T13838] acpi_ns_parse_table+0xcb/0x160 [ 754.081964][T13838] acpi_ns_load_table+0xc9/0x490 [ 754.081973][T13838] acpi_tb_load_namespace+0x2b0/0x8f0 [ 754.081986][T13838] acpi_load_tables+0x89/0x160 [ 754.082011][T13838] acpi_init+0x146/0x840 [ 754.082020][T13838] do_one_initcall+0x11c/0x6f0 [ 754.082033][T13838] kernel_init_freeable+0x6ea/0x7b0 [ 754.082051][T13838] kernel_init+0x21/0x1e0 [ 754.082065][T13838] ret_from_fork+0x730/0xd60 [ 754.082075][T13838] ret_from_fork_asm+0x1a/0x30 [ 754.082085][T13838] [ 754.082088][T13838] Freed by task 8399: [ 754.082093][T13838] kasan_save_stack+0x30/0x50 [ 754.082102][T13838] kasan_save_track+0x14/0x30 [ 754.082111][T13838] kasan_save_free_info+0x3b/0x70 [ 754.082124][T13838] __kasan_slab_free+0x5f/0x80 [ 754.082134][T13838] kmem_cache_free+0x127/0x6c0 [ 754.082146][T13838] acpi_os_release_object+0x1c/0x30 [ 754.082155][T13838] acpi_ut_delete_object_desc+0xea/0x130 [ 754.082212][T13838] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 754.082223][T13838] acpi_ut_update_object_reference+0x5f9/0x800 [ 754.082233][T13838] acpi_ut_remove_reference+0x192/0x1d0 [ 754.082243][T13838] acpi_rs_get_prt_method_data+0xcd/0x150 [ 754.082254][T13838] acpi_get_irq_routing_table+0xb8/0x140 [ 754.082265][T13838] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 754.082276][T13838] acpi_pci_irq_lookup+0x8e/0x6b0 [ 754.082286][T13838] acpi_pci_irq_disable+0x1a8/0x360 [ 754.082296][T13838] pcibios_disable_device+0x89/0xb0 [ 754.082306][T13838] do_pci_disable_device+0x9f/0x100 [ 754.082316][T13838] pci_disable_device+0x130/0x270 [ 754.082325][T13838] virtio_pci_remove+0xcf/0x110 [ 754.082334][T13838] pci_device_remove+0xb2/0x1d0 [ 754.082347][T13838] device_remove+0xcb/0x180 [ 754.082364][T13838] device_release_driver_internal+0x441/0x610 [ 754.082379][T13838] pci_stop_bus_device+0x120/0x160 [ 754.082387][T13838] pci_stop_and_remove_bus_device+0x58/0xa0 [ 754.082397][T13838] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 754.082407][T13838] remove_store+0x123/0x140 [ 754.082417][T13838] dev_attr_store+0x58/0x80 [ 754.082426][T13838] sysfs_kf_write+0xf2/0x150 [ 754.082437][T13838] kernfs_fop_write_iter+0x3e0/0x5f0 [ 754.082446][T13838] vfs_write+0x6af/0x1050 [ 754.082455][T13838] ksys_write+0x12a/0x250 [ 754.082463][T13838] __do_fast_syscall_32+0x14b/0x8c0 [ 754.082476][T13838] do_fast_syscall_32+0x32/0x70 [ 754.082488][T13838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 754.082500][T13838] [ 754.082502][T13838] The buggy address belongs to the object at ffff888022768888 [ 754.082502][T13838] which belongs to the cache Acpi-Operand of size 72 [ 754.082511][T13838] The buggy address is located 8 bytes inside of [ 754.082511][T13838] freed 72-byte region [ffff888022768888, ffff8880227688d0) [ 754.082520][T13838] [ 754.082522][T13838] The buggy address belongs to the physical page: [ 754.082527][T13838] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022768e38 pfn:0x22768 [ 754.082537][T13838] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 754.082547][T13838] page_type: f5(slab) [ 754.082556][T13838] raw: 00fff00000000200 ffff88801d44da40 ffffea000089ee10 ffffea000089df50 [ 754.082574][T13838] raw: ffff888022768e38 000000020027000c 00000000f5000000 0000000000000000 [ 754.082579][T13838] page dumped because: kasan: bad access detected [ 754.082608][T13838] page_owner tracks the page as allocated [ 754.082613][T13838] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2621378408 [ 754.082629][T13838] post_alloc_hook+0xfd/0x120 [ 754.082642][T13838] get_page_from_freelist+0x1113/0x35e0 [ 754.082655][T13838] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 754.082669][T13838] new_slab+0xb1/0x6d0 [ 754.082680][T13838] refill_objects+0xe3/0x410 [ 754.082693][T13838] __pcs_replace_empty_main+0x35e/0x650 [ 754.082706][T13838] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 754.082720][T13838] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 754.082733][T13838] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 754.082747][T13838] acpi_ds_build_internal_object+0x173/0x790 [ 754.082760][T13838] acpi_ds_build_internal_package_obj+0x481/0xe60 [ 754.082773][T13838] acpi_ds_eval_data_object_operands+0x2fd/0x640 [ 754.082787][T13838] acpi_ds_exec_end_op+0xe41/0x1e60 [ 754.082800][T13838] acpi_ps_parse_loop+0x5e1/0x26e0 [ 754.082814][T13838] acpi_ps_parse_aml+0x81e/0x1120 [ 754.082828][T13838] acpi_ps_execute_table+0x393/0x500 [ 754.082837][T13838] page_owner free stack trace missing [ 754.082841][T13838] [ 754.082843][T13838] Memory state around the buggy address: [ 754.082848][T13838] ffff888022768780: 00 00 00 fc fc fc fc fa fb fb fb fb fb fb fb fb [ 754.082855][T13838] ffff888022768800: fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc fc [ 754.082861][T13838] >ffff888022768880: fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa fb [ 754.082867][T13838] ^ [ 754.082871][T13838] ffff888022768900: fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb [ 754.082878][T13838] ffff888022768980: fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb [ 754.082883][T13838] ================================================================== [ 754.104334][T13838] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 754.533514][T13838] CPU: 2 UID: 0 PID: 13838 Comm: syz.2.1898 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.536835][T13838] Tainted: [L]=SOFTLOCKUP [ 754.538171][T13838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 754.541285][T13838] Call Trace: [ 754.542354][T13838] [ 754.543293][T13838] dump_stack_lvl+0x100/0x190 [ 754.544776][T13838] vpanic+0x2dc/0x6f8 [ 754.546032][T13838] panic+0xd1/0xe0 [ 754.547219][T13838] ? __pfx_panic+0x10/0x10 [ 754.548624][T13838] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 754.550499][T13838] ? preempt_schedule+0x57/0xd0 [ 754.552045][T13838] check_panic_on_warn.cold+0x19/0x34 [ 754.553710][T13838] end_report.part.0+0x3a/0x90 [ 754.555213][T13838] kasan_report.cold+0xe/0x18 [ 754.556689][T13838] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 754.558560][T13838] acpi_ns_get_attached_object+0x148/0x1b0 [ 754.560371][T13838] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 754.562229][T13838] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 754.563818][T13838] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 754.565818][T13838] ? acpi_ds_create_operand+0x267/0xc20 [ 754.567540][T13838] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 754.569253][T13838] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 754.571180][T13838] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 754.572809][T13838] ? __asan_memset+0x23/0x50 [ 754.574271][T13838] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 754.576134][T13838] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 754.577904][T13838] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 754.579847][T13838] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 754.581687][T13838] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 754.583287][T13838] acpi_ds_exec_end_op+0xb78/0x1e60 [ 754.584913][T13838] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 754.586660][T13838] acpi_ps_parse_loop+0x5e1/0x26e0 [ 754.588256][T13838] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 754.589978][T13838] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 754.591769][T13838] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 754.593622][T13838] ? acpi_ut_create_thread_state+0x6d/0x170 [ 754.595469][T13838] acpi_ps_parse_aml+0x81e/0x1120 [ 754.597039][T13838] acpi_ps_execute_method+0x5c4/0xe90 [ 754.598707][T13838] acpi_ns_evaluate+0x640/0x1670 [ 754.600245][T13838] acpi_ut_evaluate_object+0xf7/0x610 [ 754.601928][T13838] acpi_rs_get_prt_method_data+0xa0/0x150 [ 754.603687][T13838] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 754.605660][T13838] ? acpi_ut_status_exit+0x111/0x1c0 [ 754.607300][T13838] ? acpi_rs_validate_parameters+0x104/0x210 [ 754.609149][T13838] acpi_get_irq_routing_table+0xb8/0x140 [ 754.610926][T13838] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 754.612851][T13838] ? do_raw_spin_lock+0x128/0x260 [ 754.614419][T13838] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 754.616217][T13838] ? mark_held_locks+0x40/0x70 [ 754.617709][T13838] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 754.619661][T13838] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 754.621473][T13838] ? pci_conf1_read+0x138/0x240 [ 754.622991][T13838] acpi_pci_irq_lookup+0x8e/0x6b0 [ 754.624550][T13838] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 754.626289][T13838] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 754.628172][T13838] ? __driver_probe_device+0x210/0x460 [ 754.629880][T13838] ? __device_attach_driver+0x1df/0x320 [ 754.631656][T13838] ? bus_for_each_drv+0x159/0x1e0 [ 754.633229][T13838] ? __device_attach+0x1e4/0x4c0 [ 754.634797][T13838] acpi_pci_irq_enable+0x1f5/0x6f0 [ 754.636398][T13838] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 754.638136][T13838] ? __pfx_pci_enable_resources+0x10/0x10 [ 754.639896][T13838] ? __pfx___pci_set_power_state+0x10/0x10 [ 754.641720][T13838] pcibios_enable_device+0xb6/0xe0 [ 754.643314][T13838] do_pci_enable_device+0x21f/0x4a0 [ 754.644928][T13838] ? __pfx_do_pci_enable_device+0x10/0x10 [ 754.646702][T13838] ? pci_update_current_state+0x102/0x240 [ 754.648466][T13838] ? __pfx_pci_update_current_state+0x10/0x10 [ 754.650361][T13838] ? write_protect_page.constprop.0+0x80/0x1d10 [ 754.652315][T13838] ? __kasan_kmalloc+0xaa/0xb0 [ 754.653810][T13838] pci_enable_device_flags+0x27c/0x370 [ 754.655649][T13838] ? __pfx_virtio_pci_probe+0x10/0x10 [ 754.657347][T13838] virtio_pci_probe+0x1d5/0x410 [ 754.658895][T13838] local_pci_probe+0xdd/0x1b0 [ 754.660380][T13838] pci_call_probe+0x176/0x800 [ 754.661884][T13838] ? pci_match_device+0x147/0x7d0 [ 754.663481][T13838] ? __pfx_pci_call_probe+0x10/0x10 [ 754.665116][T13838] ? __pfx_pci_match_device+0x10/0x10 [ 754.666809][T13838] ? pci_find_host_bridge+0x3c/0x80 [ 754.668446][T13838] pci_device_probe+0x25b/0x400 [ 754.669991][T13838] ? __pfx_pci_device_probe+0x10/0x10 [ 754.671671][T13838] ? sysfs_create_link+0x68/0xc0 [ 754.673228][T13838] ? __pfx_pci_device_probe+0x10/0x10 [ 754.674909][T13838] really_probe+0x241/0xa60 [ 754.676342][T13838] __driver_probe_device+0x210/0x460 [ 754.677994][T13838] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 754.679825][T13838] driver_probe_device+0x4a/0x140 [ 754.681422][T13838] __device_attach_driver+0x1df/0x320 [ 754.683109][T13838] ? __pfx___device_attach_driver+0x10/0x10 [ 754.684958][T13838] bus_for_each_drv+0x159/0x1e0 [ 754.686490][T13838] ? __pfx_bus_for_each_drv+0x10/0x10 [ 754.688169][T13838] ? lockdep_hardirqs_on+0x7d/0x110 [ 754.689814][T13838] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 754.691656][T13838] __device_attach+0x1e4/0x4c0 [ 754.693172][T13838] ? __pfx___device_attach+0x10/0x10 [ 754.694831][T13838] ? do_raw_spin_unlock+0x145/0x1e0 [ 754.696460][T13838] device_initial_probe+0xaf/0xf0 [ 754.697993][T13838] pci_bus_add_device+0xc5/0x100 [ 754.699495][T13838] pci_bus_add_devices+0x9a/0x1f0 [ 754.701075][T13838] pci_rescan_bus+0x2a/0x40 [ 754.702534][T13838] rescan_store+0xfb/0x130 [ 754.703940][T13838] ? __pfx_rescan_store+0x10/0x10 [ 754.705518][T13838] ? sysfs_file_kobj+0xe4/0x290 [ 754.707074][T13838] ? __pfx_rescan_store+0x10/0x10 [ 754.708630][T13838] bus_attr_store+0x74/0xb0 [ 754.710010][T13838] ? __pfx_bus_attr_store+0x10/0x10 [ 754.711644][T13838] sysfs_kf_write+0xf2/0x150 [ 754.713105][T13838] kernfs_fop_write_iter+0x3e0/0x5f0 [ 754.714775][T13838] ? __pfx_sysfs_kf_write+0x10/0x10 [ 754.716407][T13838] vfs_write+0x6af/0x1050 [ 754.717773][T13838] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 754.719601][T13838] ? __pfx_vfs_write+0x10/0x10 [ 754.721132][T13838] ? find_held_lock+0x2b/0x80 [ 754.722602][T13838] ksys_write+0x12a/0x250 [ 754.723907][T13838] ? __pfx_ksys_write+0x10/0x10 [ 754.725431][T13838] __do_fast_syscall_32+0x14b/0x8c0 [ 754.727074][T13838] do_fast_syscall_32+0x32/0x70 [ 754.728614][T13838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 754.730599][T13838] RIP: 0023:0xf742efbc [ 754.731918][T13838] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 754.737841][T13838] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 754.740351][T13838] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000700 [ 754.742816][T13838] RDX: 0000000000000096 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.745265][T13838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 754.747738][T13838] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 754.750194][T13838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 754.752673][T13838] [ 754.754456][T13838] Kernel Offset: disabled [ 754.755817][T13838] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:05:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c112f5 RDI=ffffffff9cf3d5a0 RBP=ffffffff9cf3d560 RSP=ffffc900006af9d8 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=0000000000000006 R15=ffffc900006afda8 RIP=ffffffff85c1131f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809527e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f79f0a0fe9c CR3=000000000fd96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 59c9c2351938051e e6464493df77d1de ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6840a8de53600c1d 1e25aa8fd5c7aa31 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e7d5c2217660aa4 7a73b78681b5a886 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 22cdffbf17411df1 7ae58dbf6ff8caf1 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5b3242f30c87ea5 43d40e3ca2e200cb ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 acc60d6e1f25209c 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d96abde5ec76fb35 ccb844b237d8726b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 02adb52100000000 f4c7ec2b2060185e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cf379e8a57a12c31 e4ae15d81b564bc7 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 48c4b848f13a3e66 e6577ec518760dfa ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75006465696669 63657073206e6f69 74706f20676e6f6c 207974706d65000a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636572696420746f 6f722065676e6168 632074276e616300 7269646863660027 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4640574c4105514a 4a570540424b444d 460551024b444600 574c414d46430002 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801e352580 RSI=ffffffff81b82e9e RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000003 R9 =0000000000000006 R10=ffff88802af243fb R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b82e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809537e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080002000 CR3=000000000fd96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff930529dc RDX=1ffff9200093edb1 RSI=ffffc900049f7f48 RDI=ffffc900049f6d88 RBP=ffffc900049f7f48 RSP=ffffc900049f6cf8 R8 =ffffffff930529e0 R9 =0000000000000007 R10=0000000000000200 R11=000000000000001f R12=00000000000000a8 R13=ffffc900049f6d88 R14=ffffc900049f7f48 R15=ffffc900049f7f48 RIP=ffffffff81bb17fc RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809547e000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73ef2f0 CR3=000000004cba2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000001c9cdcae52d RBX=ffff88802b124040 RCX=00000000000006e0 RDX=00000000000001c9 RSI=ffffffff81fd5805 RDI=0000000000000001 RBP=000000afaa36f845 RSP=ffffc900005e8cf8 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=1ffff920000bd1a9 R13=0000000000000001 R14=0000000000000001 R15=ffff88802b124080 RIP=ffffffff81fd5818 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0c165eec80 ffffffff 00c00000 GS =0000 ffff88809557e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5416b08 CR3=000000002281f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff21a59d0b 00007fff21a59d0b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff21a5a210 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff21a5a210 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 78655f697063615f 7866705f5f203f20 205d383338333154 5b5d313033303830 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79726f7463657269 6420726f20656c69 662068637573206f 4e203a27726f7470 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6972637365645f74 726f7065722f312d 31312f3131627375 2f362e6463685f79 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6d75642f6d726f 6674616c702f7365 63697665642f7379 732f272074612072 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f74706972637365 642074726f706572 206e65706f206f74 2064656c69614620 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000