last executing test programs: 20.397662379s ago: executing program 2 (id=4540): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) r6 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) ioctl$CDROMPLAYBLK(r6, 0x5317, &(0x7f0000000000)={0x5, 0x9}) 18.393375543s ago: executing program 2 (id=4545): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) r6 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) ioctl$CDROMPLAYBLK(r6, 0x5317, &(0x7f0000000000)={0x5, 0x9}) 15.997104932s ago: executing program 2 (id=4548): ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000400)=@usbdevfs_disconnect={0xcf}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) r9 = openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000001e00)={0x53, 0xfffffffffffffffb, 0xfc0, 0x2, @scatter={0x2, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f00000006c0)=""/183, 0xb7}]}, &(0x7f0000000d40)="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", &(0x7f0000001d40)=""/125, 0x58, 0x10014, 0x2, &(0x7f0000001dc0)}) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 13.383688001s ago: executing program 0 (id=4553): mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b0009008000", 0x2c}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285628, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000004000)=""/4099, 0x1003) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r6, 0x0, 0x0) 13.29684217s ago: executing program 3 (id=4554): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010023bd70a664dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x7, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, 0x0, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfa", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x8) 12.723497819s ago: executing program 1 (id=4555): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) epoll_create(0x4) socket(0x28, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x5, 0x1, 0xb, 0xa}, {}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000a80)='GPL\x00'}, 0x94) r8 = syz_open_dev$rtc(&(0x7f00000000c0), 0x4, 0x4200) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x7, 0x28, 0x4, 0x6, 0x5, 0x2, 0x0, 0x64}}) 12.147838985s ago: executing program 3 (id=4556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="148000001000010000000000000000000500000ae4000000090a010400000000000000000a000004b1000d40cbe9549d3749204723753b3469c62cb5057069bbb2d69a7d811411d9c61221571df1c8259a84e67b502eafc344744bd359075c5ca67973f51eb874149c3ad6fb18cf256885be99098c2f152a745e3a7f5f496a11d4bffc4ee880e5d84c75dafddfb36809257fef13db7a1e82eef968defb0fb5d5c4933bd568228b5264640244c0eb0e0a6c2360217e82938411aaea5586273440a86a3a5568bbaeda29d1b00cae12b6b51fd657acbb86949ece00000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000015c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800c000100636f756e746572001c0002800c00024000000000000000070c000140000000000000000a140000001100010000000000000000000300000a"], 0x1a4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) gettid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a010400000000000000000a0000010900010073797a310000000058000480340001800c0001007061796c6f6164002400028008"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3], 0x70}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="851000000400000095000000000000001800000000000000000000000000000085100000feffffff85100000fcffffffbed0bdab650cad59d65151fee70f82a3f6557714fe5e41bab7e71295d860479226d814cf6824add1168e6fecd68f924a4140559333b8a01a7d29f7fc53446f2b6946868ce2b5a7d17f25d191677abf2277c3bbaca4e797604ad39458a2603d4eb1606a933038df12e38a534683da3627f16042868afb126a25546a4f120ac79efa2705"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="09000000010017", 0x7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/cgroup\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0xffffffffffffff8e, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x9}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000040), 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) 11.879802414s ago: executing program 3 (id=4557): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) write$sysctl(r3, &(0x7f0000000040)='2\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x27, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 11.30305365s ago: executing program 3 (id=4558): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4d, 0x2000) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x207, 0x80742, 0x0, 0x32315659, 0x2, 0x490, 0x1, 0xfffffffd, 0xfeedcafe, 0x3, 0x0, 0x1}}) ptrace$poke(0x420f, r1, 0x0, 0x101) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'lo\x00'}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x18) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x143400, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000020c0)='fdinfo/3\x00') r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000040)={0x0, 0x5fc4, 0x400, 0x1, 0x16}, &(0x7f00000000c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe64, 0x8, 0x2, 0xa, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20, 0x0, 0x396}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x84dc, 0x20, 0x3, 0xf3, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x8, 0x0, 0x23a, 0x0, r0}}], 0x4, &(0x7f0000000380)={0x2e, 0x4, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x4, 0x530, 0x0, &(0x7f0000001080)=@buf_1k="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"}}, &(0x7f0000002100)) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 11.089464013s ago: executing program 3 (id=4559): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() setrlimit(0x0, &(0x7f0000000100)={0xb, 0x3}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x3f, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000300)=@default_ibss_ssid, 0x6, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x4, 0x0, 0xf9, 0xa, 0x60, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xffffffffffffeffd, 0x50}, {0x5}, 0x5, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x850) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a00"], 0xb8}}, 0x4000) 9.660900465s ago: executing program 1 (id=4560): socket$l2tp6(0xa, 0x2, 0x73) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x19d740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000105, 0x0, 0x10}]}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0xa, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r6, r3, 0x0, r3}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000240)={0x13, 0x10, 0x7, {0x0, r5, 0x3}}, 0x18) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r9, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs$userns(0x0, 0x0) sendfile(r8, r9, 0x0, 0x8000fb00) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, 0x0, 0x0) 8.775412143s ago: executing program 1 (id=4561): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), 0x0) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 7.471283738s ago: executing program 0 (id=4562): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x1000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfded, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000001440)=""/40, &(0x7f0000001480)=0x28) r6 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r6, 0x40046109, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x20000) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000240)=0x82) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) 6.734329904s ago: executing program 2 (id=4563): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x3a, 0x5d, 0x40, 0x5f9, 0xffff, 0x619f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbd, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x7f, 0xc7, 0x0, 0xff, 0x2, 0xc1, 0x6}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105200, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000540)={r6}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000480)={r6, @in6={{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, 0x200, 0xf, 0x2, 0x9, 0x44, 0x2, 0x8}, 0x9c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x204, 0x8, 0x3, r6}, &(0x7f0000000180)=0x10) 5.544481924s ago: executing program 3 (id=4564): r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) 4.053256068s ago: executing program 1 (id=4565): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0xc, 0xd, 0x3eaa, 0xed67a8a992421365, @dev={0xfe, 0x80, '\x00', 0x35}, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x7800, 0x7, 0x7}}) r2 = socket(0x400000000010, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, 0x0, 0xff41) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newtclass={0xd4, 0x28, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffe5}, {0x2, 0x6}, {0xd, 0x9}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x9}}}, @c_atm={{0x8}, {0x7acfbf4a21c1a864, 0x2, [@TCA_ATM_HDR={0x33, 0x3, "091615142750439a602cd444c88b7c5acc4652e8139a3a8c0924de9ff856ac906f2748317e8d9d26726baa5b859cbc"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0x5}}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0xffff}}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_HDR={0x14, 0x3, "85c5def2aed4b9be280ba3a85e4791a9"}, @TCA_ATM_FD={0x8, 0x1, r4}]}}, @c_dsmark={{}, {0x0, 0x2, @TCA_DSMARK_MASK={0x0, 0x4, 0x7}}}]}, 0xd4}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/92, 0x5c}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1}, 0x2000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = memfd_create(&(0x7f00000005c0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x10\x00\x00\x00\x00\x00\x00\x00\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x981q\xcc%\x98\xa0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb4vDI\xc8\x91\x87\x1fuYG7}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x8e\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xcaBH\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xcd,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x0e\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xb9\xe0\xf2\x10\xe00x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xb}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xea}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 3.758410592s ago: executing program 0 (id=4566): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r1, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.525979364s ago: executing program 2 (id=4567): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) write$sysctl(r3, &(0x7f0000000040)='2\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x27, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 3.211137109s ago: executing program 0 (id=4568): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0xa5, @string={0xa5, 0x3, "0cbb7500d60f1db8023bb07b7731b84c2ac45aaf1074303a8a4ad64a9b9db4e9da30ac16576aec762b6d0c0af2ac288452d7d9e1bbb55078a42ffc8960f07f592b730000000000000000000000000000374accc986d9cda59160a8d1db2829ee8d4243c84ff24ad75c8aefae547c08e3720a5f407c0c46f51277e81d08362280bda9a90c3691d3f7147ab0f96185cbbe6786c3a2ee63cc436d2e389245be59f7460dd3"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x44, &(0x7f0000001e00)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), 0x4) landlock_restrict_self(0xffffffffffffffff, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$I2C(&(0x7f0000000080), 0x9, 0x400) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'geneve0\x00', 0x0}) ioctl(r5, 0x8b1a, &(0x7f0000000040)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 3.095087864s ago: executing program 1 (id=4569): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) r6 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) ioctl$CDROMPLAYBLK(r6, 0x5317, &(0x7f0000000000)={0x5, 0x9}) 2.793287033s ago: executing program 2 (id=4570): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), 0x0) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 2.016434703s ago: executing program 0 (id=4571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 669.665298ms ago: executing program 1 (id=4572): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) r3 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x815) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 0s ago: executing program 0 (id=4573): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x6, 0x9, 0xf, 0x3, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x1, 0x6, 0xff, 0x0, 0x80}}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000840000e861d4672061f8c78f290000000e000002", @ANYRES32=r3], 0x1c, 0x2400e044}, 0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r3, 0x4, 0x30}, &(0x7f0000000340)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240), 0x8) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x140001) ioctl$DRM_IOCTL_SET_MASTER(r8, 0x641e) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r9 = socket(0x10, 0x803, 0x0) write(r9, &(0x7f0000000040)="1c0000005e001f3814584707f9f4ffffff000000250000001ff80020", 0x1c) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "7c1afa6b76001fe2156a0a7c8e9c7397"}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @empty}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x844) setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) kernel console output (not intermixed with test programs): process `syz.3.3842'. [ 1318.324042][T25478] fuse: Bad value for 'fd' [ 1318.556278][T25484] No source specified [ 1319.307716][T19086] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1319.409137][T25498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3847'. [ 1319.415892][T25498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3847'. [ 1319.518161][T25497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1319.908196][ T5932] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1320.065780][ T5932] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 1320.086714][ T5932] usb 8-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1320.099602][ T5932] usb 8-1: config 0 has no interface number 0 [ 1320.103989][ T5932] usb 8-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 1320.109677][ T5932] usb 8-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 1320.115339][ T5932] usb 8-1: config 0 interface 143 has no altsetting 0 [ 1320.121730][ T5932] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1320.125656][ T5932] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.130087][ T5932] usb 8-1: Product: syz [ 1320.131989][ T5932] usb 8-1: Manufacturer: syz [ 1320.134039][ T5932] usb 8-1: SerialNumber: syz [ 1320.141779][ T5932] usb 8-1: config 0 descriptor?? [ 1320.183347][T25513] 9p: Bad value for 'wfdno' [ 1320.378496][ T5932] usb 8-1: USB disconnect, device number 24 [ 1320.665658][T25523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3853'. [ 1320.798161][ T5855] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1320.958058][ T5855] usb 8-1: Using ep0 maxpacket: 16 [ 1320.962029][ T5855] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 1320.966292][ T5855] usb 8-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1320.972622][ T5855] usb 8-1: config 0 has no interface number 0 [ 1320.975027][ T5855] usb 8-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 1320.980088][ T5855] usb 8-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 1320.985086][ T5855] usb 8-1: config 0 interface 143 has no altsetting 0 [ 1320.993587][ T5855] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1321.001108][ T5855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.004114][ T5855] usb 8-1: Product: syz [ 1321.005675][ T5855] usb 8-1: Manufacturer: syz [ 1321.008239][ T5855] usb 8-1: SerialNumber: syz [ 1321.012405][ T5855] usb 8-1: config 0 descriptor?? [ 1321.285549][T25504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.296781][T25533] fuse: Bad value for 'fd' [ 1321.304600][T25504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.358502][ T5855] usb 8-1: USB disconnect, device number 25 [ 1321.374395][T25534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3855'. [ 1321.382009][T25534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3855'. [ 1322.180277][T25554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3859'. [ 1323.588943][T25582] __nla_validate_parse: 1 callbacks suppressed [ 1323.589167][T25582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3864'. [ 1323.610085][T25579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3862'. [ 1323.673684][T25584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3864'. [ 1323.687873][T25584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3864'. [ 1324.393277][T25592] warn_alloc: 1 callbacks suppressed [ 1324.393295][T25592] syz.2.3867: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1324.395486][T25592] CPU: 2 UID: 0 PID: 25592 Comm: syz.2.3867 Tainted: G L syzkaller #0 PREEMPT(full) [ 1324.395505][T25592] Tainted: [L]=SOFTLOCKUP [ 1324.395509][T25592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1324.395517][T25592] Call Trace: [ 1324.395521][T25592] [ 1324.395527][T25592] dump_stack_lvl+0x100/0x190 [ 1324.395545][T25592] warn_alloc.cold+0x94/0xa8 [ 1324.395557][T25592] ? __pfx_warn_alloc+0x10/0x10 [ 1324.395572][T25592] ? kasan_save_stack+0x3f/0x50 [ 1324.395588][T25592] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1324.395600][T25592] ? vb2_vmalloc_alloc+0xf9/0x410 [ 1324.395613][T25592] ? __vb2_queue_alloc+0x8d5/0x1160 [ 1324.395624][T25592] ? vb2_core_create_bufs+0x5fa/0xa30 [ 1324.395635][T25592] ? vb2_create_bufs+0x40c/0x830 [ 1324.395652][T25592] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 1324.395663][T25592] ? vidioc_create_bufs+0x7d/0xf0 [ 1324.395677][T25592] ? v4l_create_bufs+0x17d/0x270 [ 1324.395691][T25592] ? video_usercopy+0x3d3/0x14c0 [ 1324.395706][T25592] ? v4l2_ioctl+0x1bd/0x250 [ 1324.395722][T25592] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 1324.395752][T25592] ? vb2_vmalloc_alloc+0x135/0x410 [ 1324.395771][T25592] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1324.395795][T25592] ? vb2_vmalloc_alloc+0x135/0x410 [ 1324.395812][T25592] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1324.395832][T25592] ? kasan_save_track+0x14/0x30 [ 1324.395845][T25592] ? __kasan_kmalloc+0xaa/0xb0 [ 1324.395861][T25592] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1324.395873][T25592] ? vb2_vmalloc_alloc+0x135/0x410 [ 1324.395887][T25592] vmalloc_user_noprof+0x9e/0xe0 [ 1324.395905][T25592] ? vb2_vmalloc_alloc+0x135/0x410 [ 1324.395919][T25592] vb2_vmalloc_alloc+0x135/0x410 [ 1324.395932][T25592] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1324.395947][T25592] __vb2_queue_alloc+0x8d5/0x1160 [ 1324.395976][T25592] vb2_core_create_bufs+0x5fa/0xa30 [ 1324.395997][T25592] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 1324.396025][T25592] ? lock_acquire+0x1b9/0x370 [ 1324.396052][T25592] vb2_create_bufs+0x40c/0x830 [ 1324.396072][T25592] ? __pfx_vb2_create_bufs+0x10/0x10 [ 1324.396090][T25592] ? v4l_sanitize_colorspace+0x220/0x410 [ 1324.396113][T25592] vb2_ioctl_create_bufs+0x244/0x3e0 [ 1324.396124][T25592] ? v4l2_compat_get_user+0x883/0x11f0 [ 1324.396137][T25592] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1324.396156][T25592] vidioc_create_bufs+0x7d/0xf0 [ 1324.396171][T25592] v4l_create_bufs+0x17d/0x270 [ 1324.396186][T25592] __video_do_ioctl+0xb2a/0xdf0 [ 1324.396204][T25592] ? trace_kmalloc+0xeb/0x110 [ 1324.396219][T25592] ? __pfx___video_do_ioctl+0x10/0x10 [ 1324.396237][T25592] ? video_usercopy+0x145/0x14c0 [ 1324.396256][T25592] video_usercopy+0x3d3/0x14c0 [ 1324.396274][T25592] ? __pfx___video_do_ioctl+0x10/0x10 [ 1324.396291][T25592] ? __pfx_video_usercopy+0x10/0x10 [ 1324.396312][T25592] ? __fget_files+0x215/0x3d0 [ 1324.396322][T25592] ? hook_file_ioctl_common+0x140/0x440 [ 1324.396341][T25592] v4l2_ioctl+0x1bd/0x250 [ 1324.396360][T25592] v4l2_compat_ioctl32+0x20f/0x2d0 [ 1324.396374][T25592] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1324.396388][T25592] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1324.396407][T25592] __do_fast_syscall_32+0xe7/0x970 [ 1324.396422][T25592] ? lockdep_hardirqs_on+0x78/0x100 [ 1324.396438][T25592] do_fast_syscall_32+0x32/0x70 [ 1324.396454][T25592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1324.396470][T25592] RIP: 0023:0xf708efec [ 1324.396484][T25592] Code: Unable to access opcode bytes at 0xf708efc2. [ 1324.396489][T25592] RSP: 002b:00000000f543b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1324.396500][T25592] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0f8565c [ 1324.396507][T25592] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1324.396514][T25592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1324.396520][T25592] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1324.396527][T25592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1324.396546][T25592] [ 1324.397230][T25592] Mem-Info: [ 1324.397310][T25592] active_anon:11450 inactive_anon:13923 isolated_anon:0 [ 1324.397310][T25592] active_file:2548 inactive_file:7366 isolated_file:0 [ 1324.397310][T25592] unevictable:768 dirty:650 writeback:0 [ 1324.397310][T25592] slab_reclaimable:6734 slab_unreclaimable:67219 [ 1324.397310][T25592] mapped:25865 shmem:23573 pagetables:1098 [ 1324.397310][T25592] sec_pagetables:326 bounce:0 [ 1324.397310][T25592] kernel_misc_reclaimable:0 [ 1324.397310][T25592] free:30259 free_pcp:10489 free_cma:0 [ 1324.397418][T25592] Node 0 active_anon:536kB inactive_anon:580kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7040kB pagetables:1188kB sec_pagetables:1096kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1324.398357][T25592] Node 1 active_anon:45264kB inactive_anon:55112kB active_file:10192kB inactive_file:29464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103432kB dirty:2600kB writeback:0kB shmem:91684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6988kB pagetables:3204kB sec_pagetables:208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1324.398582][T25592] Node 0 DMA free:3052kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1324.398870][T25592] lowmem_reserve[]: 0 280 280 280 280 [ 1324.398911][T25592] Node 0 DMA32 free:33760kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:536kB inactive_anon:580kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:688kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:528kB local_pcp:0kB free_cma:0kB [ 1324.398968][T25592] lowmem_reserve[]: 0 0 0 0 0 [ 1324.399058][T25592] Node 1 DMA32 free:84224kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45264kB inactive_anon:55112kB active_file:10192kB inactive_file:29464kB unevictable:1536kB writepending:2600kB zspages:6428kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:41412kB local_pcp:6592kB free_cma:0kB [ 1324.399117][T25592] lowmem_reserve[]: 0 0 0 0 0 [ 1324.399155][T25592] Node 0 DMA: 169*4kB (UM) 5*8kB (UM) 2*16kB (M) 14*32kB (UM) 7*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 3052kB [ 1324.399338][T25592] Node 0 DMA32: 834*4kB (UME) 199*8kB (UE) 98*16kB (UE) 252*32kB (UME) 74*64kB (UME) 23*128kB (UME) 7*256kB (UME) 5*512kB (M) 3*1024kB (M) 0*2048kB 1*4096kB (U) = 33760kB [ 1324.408331][T25592] Node 1 DMA32: 673*4kB (ME) 168*8kB (UME) 247*16kB (UME) 131*32kB (UME) 141*64kB (UME) 79*128kB (UME) 19*256kB (UME) 46*512kB (UM) 12*1024kB (UM) 6*2048kB (UM) 0*4096kB = 84308kB [ 1324.408497][T25592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1324.408514][T25592] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 1324.408527][T25592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1324.408543][T25592] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1324.408555][T25592] 33697 total pagecache pages [ 1324.408563][T25592] 1261 pages in swap cache [ 1324.618673][T25601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3868'. [ 1324.622591][T25592] Free swap = 400kB [ 1324.700220][T25601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3868'. [ 1324.735143][T25592] Total swap = 124996kB [ 1324.736960][T25592] 524155 pages RAM [ 1324.739653][T25592] 0 pages HighMem/MovableOnly [ 1324.741702][T25592] 211532 pages reserved [ 1324.743469][T25592] 0 pages cma reserved [ 1325.889726][T25626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3872'. [ 1325.961282][T25627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'. [ 1326.425542][T25636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1326.456738][T25632] ptrace attach of ""[25633] was attempted by "/syz-executor exec"[25632] [ 1326.819786][T25632] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 1328.526107][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3880'. [ 1328.705668][ T5932] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1328.727089][T25680] Invalid ELF header magic: != ELF [ 1328.794519][T25680] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1328.796964][T25680] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1328.800452][T25680] vhci_hcd vhci_hcd.0: Device attached [ 1329.048185][ T5899] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 1329.302212][T25681] vhci_hcd: connection reset by peer [ 1329.304520][ T5861] vhci_hcd vhci_hcd.3: stop threads [ 1329.306188][ T5861] vhci_hcd vhci_hcd.3: release socket [ 1329.308192][ T5861] vhci_hcd vhci_hcd.3: disconnect device [ 1330.131112][T25712] netlink: 'syz.3.3884': attribute type 2 has an invalid length. [ 1330.134536][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3884'. [ 1330.308461][T25712] : entered promiscuous mode [ 1332.706359][T25772] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 1332.742223][T25766] ptrace attach of ""[25767] was attempted by "/syz-executor exec"[25766] [ 1334.187681][ T5899] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1335.839824][T25820] siw: device registration error -23 [ 1337.677515][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 1337.680214][ T42] audit: type=1800 audit(1785702972.014:1104): pid=25850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3905" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1337.730497][T25852] netlink: 'syz.0.3909': attribute type 9 has an invalid length. [ 1337.731322][T25848] ptrace attach of ""[25849] was attempted by "/syz-executor exec"[25848] [ 1337.733790][T25852] netlink: 'syz.0.3909': attribute type 1 has an invalid length. [ 1337.740034][T25852] netlink: 'syz.0.3909': attribute type 8 has an invalid length. [ 1337.833740][T25848] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 1338.549364][T25867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3912'. [ 1338.568921][T25867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3912'. [ 1338.599006][T25867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3912'. [ 1339.600880][T25884] wg2 speed is unknown, defaulting to 1000 [ 1340.469084][T25894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3917'. [ 1341.302450][T25913] wg2 speed is unknown, defaulting to 1000 [ 1341.561364][T25916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1341.612338][T25916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1341.653854][T25916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1342.670523][T25927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3924'. [ 1342.960085][T25929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3924'. [ 1343.485687][T25942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3925'. [ 1343.750063][T25940] syz.3.3927: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1343.756334][T25940] CPU: 2 UID: 0 PID: 25940 Comm: syz.3.3927 Tainted: G L syzkaller #0 PREEMPT(full) [ 1343.756383][T25940] Tainted: [L]=SOFTLOCKUP [ 1343.756392][T25940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1343.756404][T25940] Call Trace: [ 1343.756411][T25940] [ 1343.756420][T25940] dump_stack_lvl+0x100/0x190 [ 1343.756450][T25940] warn_alloc.cold+0x94/0xa8 [ 1343.756472][T25940] ? __pfx_warn_alloc+0x10/0x10 [ 1343.756502][T25940] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1343.756531][T25940] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1343.756566][T25940] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1343.756593][T25940] ? __lock_acquire+0x49f/0x1a40 [ 1343.756632][T25940] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1343.756658][T25940] ? find_held_lock+0x2b/0x80 [ 1343.756683][T25940] ? __free_frozen_pages+0x747/0x1090 [ 1343.756711][T25940] ? __free_frozen_pages+0x747/0x1090 [ 1343.756741][T25940] ? do_raw_spin_unlock+0x145/0x1e0 [ 1343.756761][T25940] ? _raw_spin_unlock+0x28/0x50 [ 1343.756785][T25940] ? lockdep_hardirqs_on+0x78/0x100 [ 1343.756812][T25940] ? irqentry_exit+0x24d/0xa00 [ 1343.756849][T25940] __folio_alloc_noprof+0x13/0x260 [ 1343.756873][T25940] alloc_migration_target+0x1d7/0x6d0 [ 1343.756905][T25940] migrate_pages_batch+0x5dc/0x45c0 [ 1343.756937][T25940] ? __pfx_alloc_migration_target+0x10/0x10 [ 1343.756969][T25940] ? migrate_pages_sync+0x12c/0x880 [ 1343.756997][T25940] ? migrate_pages_sync+0x588/0x880 [ 1343.757026][T25940] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1343.757058][T25940] ? __lock_acquire+0x49f/0x1a40 [ 1343.757085][T25940] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1343.757111][T25940] ? __lock_acquire+0x49f/0x1a40 [ 1343.757139][T25940] ? __css_rstat_updated+0x1ce/0x5a0 [ 1343.757168][T25940] migrate_pages+0x1950/0x2850 [ 1343.757188][T25940] ? __lock_acquire+0x49f/0x1a40 [ 1343.757206][T25940] ? __pfx_alloc_migration_target+0x10/0x10 [ 1343.757226][T25940] ? __pfx_migrate_pages+0x10/0x10 [ 1343.757250][T25940] ? __lock_acquire+0x49f/0x1a40 [ 1343.757276][T25940] ? mtree_load+0x32d/0xa90 [ 1343.757301][T25940] move_pages_and_store_status+0xf1/0x230 [ 1343.757334][T25940] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1343.757371][T25940] kernel_move_pages+0xc89/0x14a0 [ 1343.757407][T25940] ? __pfx_kernel_move_pages+0x10/0x10 [ 1343.757440][T25940] ? xfd_validate_state+0x129/0x190 [ 1343.757466][T25940] __ia32_sys_move_pages+0xdd/0x1b0 [ 1343.757492][T25940] ? __do_fast_syscall_32+0x98/0x970 [ 1343.757516][T25940] ? lockdep_hardirqs_on+0x78/0x100 [ 1343.757554][T25940] __do_fast_syscall_32+0xe7/0x970 [ 1343.757573][T25940] do_fast_syscall_32+0x32/0x70 [ 1343.757589][T25940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1343.757604][T25940] RIP: 0023:0xf7f77fec [ 1343.757619][T25940] Code: Unable to access opcode bytes at 0xf7f77fc2. [ 1343.757624][T25940] RSP: 002b:00000000f53f450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1343.757636][T25940] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 1343.757644][T25940] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 1343.757651][T25940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1343.757657][T25940] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1343.757664][T25940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1343.757678][T25940] [ 1343.877247][T25940] Mem-Info: [ 1343.879113][T25940] active_anon:14505 inactive_anon:6538 isolated_anon:12 [ 1343.879113][T25940] active_file:1153 inactive_file:12718 isolated_file:0 [ 1343.879113][T25940] unevictable:786 dirty:412 writeback:0 [ 1343.879113][T25940] slab_reclaimable:6771 slab_unreclaimable:67643 [ 1343.879113][T25940] mapped:26079 shmem:18816 pagetables:1065 [ 1343.879113][T25940] sec_pagetables:328 bounce:0 [ 1343.879113][T25940] kernel_misc_reclaimable:0 [ 1343.879113][T25940] free:43816 free_pcp:683 free_cma:0 [ 1343.895501][T25940] Node 0 active_anon:536kB inactive_anon:580kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7008kB pagetables:1188kB sec_pagetables:1096kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1343.909259][T25940] Node 1 active_anon:57584kB inactive_anon:25572kB active_file:4912kB inactive_file:53772kB unevictable:1608kB isolated(anon):48kB isolated(file):0kB mapped:104388kB dirty:1648kB writeback:0kB shmem:72656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7232kB pagetables:3072kB sec_pagetables:216kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1343.920828][T25940] Node 0 DMA free:3052kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.932340][T25940] lowmem_reserve[]: 0 280 280 280 280 [ 1343.935130][T25940] Node 0 DMA32 free:34104kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:536kB inactive_anon:580kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:684kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.947347][T25940] lowmem_reserve[]: 0 0 0 0 0 [ 1343.949830][T25940] Node 1 DMA32 free:131008kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57784kB inactive_anon:25572kB active_file:4912kB inactive_file:53772kB unevictable:1608kB writepending:1648kB zspages:6380kB present:1048432kB managed:948212kB mlocked:72kB bounce:0kB free_pcp:6248kB local_pcp:1336kB free_cma:0kB [ 1343.960970][T25940] lowmem_reserve[]: 0 0 0 0 0 [ 1343.962636][T25940] Node 0 DMA: 169*4kB (UM) 5*8kB (UM) 2*16kB (M) 14*32kB (UM) 7*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 3052kB [ 1343.967482][T25940] Node 0 DMA32: 856*4kB (UME) 221*8kB (UME) 106*16kB (UME) 251*32kB (UME) 74*64kB (UME) 23*128kB (UME) 7*256kB (UME) 5*512kB (M) 3*1024kB (M) 0*2048kB 1*4096kB (U) = 34120kB [ 1343.974627][T25940] Node 1 DMA32: 337*4kB (UME) 2352*8kB (UME) 1076*16kB (UME) 687*32kB (UME) 207*64kB (UME) 65*128kB (UME) 21*256kB (UME) 25*512kB (UM) 5*1024kB (UM) 11*2048kB (UM) 1*4096kB (M) = 130852kB [ 1343.981475][T25940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.984523][T25940] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 1343.987516][T25940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.991684][T25940] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1343.994645][T25940] 33759 total pagecache pages [ 1343.996236][T25940] 1268 pages in swap cache [ 1343.998304][T25940] Free swap = 8kB [ 1343.999617][T25940] Total swap = 124996kB [ 1344.001034][T25940] 524155 pages RAM [ 1344.002501][T25940] 0 pages HighMem/MovableOnly [ 1344.004082][T25940] 211532 pages reserved [ 1344.005554][T25940] 0 pages cma reserved [ 1345.352971][T25965] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1345.355782][T25965] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1345.377768][T25965] vhci_hcd vhci_hcd.0: Device attached [ 1345.657837][T19086] usb 40-1: SetAddress Request (87) to port 0 [ 1345.659905][T19086] usb 40-1: new SuperSpeed USB device number 87 using vhci_hcd [ 1345.921769][T25982] __nla_validate_parse: 2 callbacks suppressed [ 1345.921784][T25982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3935'. [ 1345.930717][T25982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3935'. [ 1346.793319][T25973] vhci_hcd: connection reset by peer [ 1346.795921][T12183] vhci_hcd vhci_hcd.1: stop threads [ 1346.798276][T12183] vhci_hcd vhci_hcd.1: release socket [ 1346.800673][T12183] vhci_hcd vhci_hcd.1: disconnect device [ 1347.162909][ T42] audit: type=1326 audit(1785702981.504:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25991 comm="syz.2.3937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1347.176920][ T42] audit: type=1326 audit(1785702981.514:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25991 comm="syz.2.3937" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1347.200402][ T42] audit: type=1326 audit(1785702981.514:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25991 comm="syz.2.3937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1347.216026][ T42] audit: type=1326 audit(1785702981.514:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25991 comm="syz.2.3937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1347.225201][ T42] audit: type=1326 audit(1785702981.514:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25991 comm="syz.2.3937" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1347.233570][ T42] audit: type=1326 audit(1785702981.514:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25991 comm="syz.2.3937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1347.250642][ T42] audit: type=1326 audit(1785702981.514:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25991 comm="syz.2.3937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1347.273377][ T42] audit: type=1326 audit(1785702981.524:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25991 comm="syz.2.3937" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1347.303251][ T42] audit: type=1326 audit(1785702981.524:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25991 comm="syz.2.3937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1347.327192][ T42] audit: type=1326 audit(1785702981.524:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25991 comm="syz.2.3937" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1348.776869][T26023] binder: 26021:26023 ioctl 400c620e 0 returned -14 [ 1349.374278][T26032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3944'. [ 1349.383602][T26032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3944'. [ 1349.965341][T26040] overlay: Unknown parameter '/' [ 1350.020920][T26041] bridge_slave_0: default FDB implementation only supports local addresses [ 1350.491698][T26056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3949'. [ 1350.495346][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3949'. [ 1350.794452][T19086] usb 40-1: device descriptor read/8, error -110 [ 1351.278662][T19086] usb usb40-port1: attempt power cycle [ 1351.740310][T26073] 9p: Bad value for 'rfdno' [ 1351.852780][T26073] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3953'. [ 1351.868776][T19086] usb usb40-port1: unable to enumerate USB device [ 1352.363396][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 1352.363413][ T42] audit: type=1326 audit(1785702986.704:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.1.3955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1352.375489][ T42] audit: type=1326 audit(1785702986.714:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.1.3955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1352.384597][ T42] audit: type=1326 audit(1785702986.724:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.1.3955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1352.392981][ T42] audit: type=1326 audit(1785702986.724:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.1.3955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1352.401588][ T42] audit: type=1326 audit(1785702986.724:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.1.3955" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1352.411818][ T42] audit: type=1326 audit(1785702986.744:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.1.3955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1352.422863][ T42] audit: type=1326 audit(1785702986.754:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.1.3955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1352.430518][ T42] audit: type=1326 audit(1785702986.754:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.1.3955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1352.439773][ T42] audit: type=1326 audit(1785702986.754:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.1.3955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1352.448507][ T42] audit: type=1326 audit(1785702986.754:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.1.3955" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1352.535820][T26089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1352.639758][T26093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1352.643235][T26093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1353.494395][T26107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3958'. [ 1353.499847][T26107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3958'. [ 1353.577510][T26110] wg2 speed is unknown, defaulting to 1000 [ 1354.413525][T26119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3962'. [ 1354.468442][T26122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3962'. [ 1356.152964][T26145] qrtr: Invalid version 0 [ 1356.202109][T26145] syzkaller1: entered promiscuous mode [ 1356.204539][T26145] syzkaller1: entered allmulticast mode [ 1357.925535][T26191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1357.932944][T26191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1357.937614][T26191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1358.043767][T26192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3977'. [ 1358.085825][T26192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3977'. [ 1359.029234][T26203] netlink: 'syz.0.3980': attribute type 2 has an invalid length. [ 1360.213184][T26227] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3984'. [ 1360.935533][T26236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3985'. [ 1360.941694][T26236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3985'. [ 1360.947159][T26236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3985'. [ 1361.170209][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.664821][T26247] input input133: cannot allocate more than FF_MAX_EFFECTS effects [ 1364.181975][T26289] /dev/nullb0: Can't open blockdev [ 1364.361420][T26293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3995'. [ 1364.376926][T26286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3995'. [ 1364.565798][T26288] syz2: rxe_newlink: already configured on wg2 [ 1364.867823][T26303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3998'. [ 1365.471433][T26315] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4000'. [ 1365.590417][T26321] overlayfs: overlapping lowerdir path [ 1365.601211][T26321] random: crng reseeded on system resumption [ 1366.018425][T26326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4002'. [ 1366.022779][T26326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4002'. [ 1366.928096][T26342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4005'. [ 1366.949388][T26342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4005'. [ 1370.108901][T26403] netlink: 'syz.3.4018': attribute type 2 has an invalid length. [ 1370.585176][T26415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4019'. [ 1370.594608][T26414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4019'. [ 1371.926147][T26424] ptrace attach of ""[26425] was attempted by "/syz-executor exec"[26424] [ 1373.394606][T26442] syz.0.4024: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1373.408161][T26442] CPU: 2 UID: 0 PID: 26442 Comm: syz.0.4024 Tainted: G L syzkaller #0 PREEMPT(full) [ 1373.408182][T26442] Tainted: [L]=SOFTLOCKUP [ 1373.408186][T26442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1373.408193][T26442] Call Trace: [ 1373.408198][T26442] [ 1373.408204][T26442] dump_stack_lvl+0x100/0x190 [ 1373.408222][T26442] warn_alloc.cold+0x94/0xa8 [ 1373.408235][T26442] ? __pfx_warn_alloc+0x10/0x10 [ 1373.408251][T26442] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1373.408269][T26442] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1373.408286][T26442] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1373.408302][T26442] ? __lock_acquire+0x49f/0x1a40 [ 1373.408325][T26442] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1373.408341][T26442] ? find_held_lock+0x2b/0x80 [ 1373.408354][T26442] ? __free_frozen_pages+0x747/0x1090 [ 1373.408372][T26442] ? __free_frozen_pages+0x747/0x1090 [ 1373.408391][T26442] ? do_raw_spin_unlock+0x145/0x1e0 [ 1373.408404][T26442] ? _raw_spin_unlock+0x28/0x50 [ 1373.408419][T26442] ? irqentry_exit+0x24d/0xa00 [ 1373.408441][T26442] __folio_alloc_noprof+0x13/0x260 [ 1373.408454][T26442] alloc_migration_target+0x1d7/0x6d0 [ 1373.408473][T26442] migrate_pages_batch+0x5dc/0x45c0 [ 1373.408492][T26442] ? __pfx_alloc_migration_target+0x10/0x10 [ 1373.408512][T26442] ? migrate_pages_sync+0x12c/0x880 [ 1373.408530][T26442] ? migrate_pages_sync+0x588/0x880 [ 1373.408547][T26442] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1373.408584][T26442] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1373.408606][T26442] ? __lock_acquire+0x49f/0x1a40 [ 1373.408622][T26442] ? __css_rstat_updated+0x1ce/0x5a0 [ 1373.408642][T26442] migrate_pages+0x1950/0x2850 [ 1373.408661][T26442] ? __lock_acquire+0x49f/0x1a40 [ 1373.408679][T26442] ? __pfx_alloc_migration_target+0x10/0x10 [ 1373.408699][T26442] ? __pfx_migrate_pages+0x10/0x10 [ 1373.408720][T26442] ? __lock_acquire+0x49f/0x1a40 [ 1373.408739][T26442] ? mtree_load+0x32d/0xa90 [ 1373.408757][T26442] move_pages_and_store_status+0xf1/0x230 [ 1373.408777][T26442] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1373.408800][T26442] kernel_move_pages+0xc89/0x14a0 [ 1373.408823][T26442] ? __pfx_kernel_move_pages+0x10/0x10 [ 1373.408845][T26442] ? xfd_validate_state+0x129/0x190 [ 1373.408862][T26442] __ia32_sys_move_pages+0xdd/0x1b0 [ 1373.408881][T26442] ? __do_fast_syscall_32+0x98/0x970 [ 1373.408897][T26442] ? lockdep_hardirqs_on+0x78/0x100 [ 1373.408911][T26442] __do_fast_syscall_32+0xe7/0x970 [ 1373.408929][T26442] do_fast_syscall_32+0x32/0x70 [ 1373.408945][T26442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1373.408960][T26442] RIP: 0023:0xf6fdefec [ 1373.408976][T26442] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 1373.408981][T26442] RSP: 002b:00000000f538b50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1373.408997][T26442] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 1373.409007][T26442] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 1373.409017][T26442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1373.409026][T26442] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1373.409034][T26442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1373.409054][T26442] [ 1373.409086][T26442] Mem-Info: [ 1373.409098][T26442] active_anon:5917 inactive_anon:25683 isolated_anon:12 [ 1373.409098][T26442] active_file:5567 inactive_file:13215 isolated_file:0 [ 1373.409098][T26442] unevictable:1261 dirty:758 writeback:0 [ 1373.409098][T26442] slab_reclaimable:7086 slab_unreclaimable:66005 [ 1373.409098][T26442] mapped:32215 shmem:29646 pagetables:1135 [ 1373.409098][T26442] sec_pagetables:333 bounce:0 [ 1373.409098][T26442] kernel_misc_reclaimable:0 [ 1373.409098][T26442] free:25735 free_pcp:6019 free_cma:0 [ 1373.409135][T26442] Node 0 active_anon:1488kB inactive_anon:580kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:980kB dirty:0kB writeback:0kB shmem:3560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7072kB pagetables:1192kB sec_pagetables:1096kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1373.409176][T26442] Node 1 active_anon:22180kB inactive_anon:102152kB active_file:22268kB inactive_file:52860kB unevictable:3508kB isolated(anon):48kB isolated(file):0kB mapped:127880kB dirty:3032kB writeback:0kB shmem:115024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7264kB pagetables:3348kB sec_pagetables:236kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1373.409206][T26442] Node 0 DMA free:3052kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1373.409239][T26442] lowmem_reserve[]: 0 280 280 280 280 [ 1373.409262][T26442] Node 0 DMA32 free:30464kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1488kB inactive_anon:580kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:680kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:3112kB local_pcp:172kB free_cma:0kB [ 1373.409295][T26442] lowmem_reserve[]: 0 0 0 0 0 [ 1373.409317][T26442] Node 1 DMA32 free:69424kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22180kB inactive_anon:102152kB active_file:22268kB inactive_file:52860kB unevictable:3508kB writepending:3032kB zspages:6380kB present:1048432kB managed:948212kB mlocked:1972kB bounce:0kB free_pcp:20948kB local_pcp:2388kB free_cma:0kB [ 1373.409349][T26442] lowmem_reserve[]: 0 0 0 0 0 [ 1373.409370][T26442] Node 0 DMA: 169*4kB (UM) 5*8kB (UM) 2*16kB (M) 14*32kB (UM) 7*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 3052kB [ 1373.409454][T26442] Node 0 DMA32: 606*4kB (UME) 197*8kB (UME) 94*16kB (UE) 218*32kB (UME) 55*64kB (UME) 23*128kB (UME) 7*256kB (UME) 5*512kB (M) 3*1024kB (M) 0*2048kB 1*4096kB (U) = 30464kB [ 1373.409544][T26442] Node 1 DMA32: 2220*4kB (UME) 1118*8kB (UME) 462*16kB (UME) 255*32kB (UME) 53*64kB (UM) 37*128kB (UME) 15*256kB (UME) 23*512kB (U) 2*1024kB (UM) 3*2048kB (U) 1*4096kB (M) = 69408kB [ 1373.409643][T26442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.409653][T26442] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 1373.409662][T26442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.409671][T26442] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1373.409680][T26442] 48706 total pagecache pages [ 1373.409685][T26442] 1279 pages in swap cache [ 1373.409690][T26442] Free swap = 8kB [ 1373.409694][T26442] Total swap = 124996kB [ 1373.409699][T26442] 524155 pages RAM [ 1373.409703][T26442] 0 pages HighMem/MovableOnly [ 1373.409707][T26442] 211532 pages reserved [ 1373.409712][T26442] 0 pages cma reserved [ 1375.823441][T26497] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4035'. [ 1375.851379][T26498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4033'. [ 1375.951092][T26504] overlayfs: overlapping lowerdir path [ 1375.988836][T26504] random: crng reseeded on system resumption [ 1377.389233][T26518] Invalid source name [ 1377.398389][T26518] UBIFS error (pid: 26518): cannot open "./file0", error -22 [ 1377.627510][T26523] input: syz0 as /devices/virtual/input/input134 [ 1378.709449][T26538] wg2 speed is unknown, defaulting to 1000 [ 1379.295242][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4045'. [ 1379.500560][T26554] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4046'. [ 1379.520547][T26554] overlayfs: failed to clone lowerpath [ 1379.720561][T26558] Cannot find add_set index 0 as target [ 1379.773177][T19086] libceph: connect (1)[c::]:6789 error -101 [ 1379.776394][T19086] libceph: mon0 (1)[c::]:6789 connect error [ 1379.784041][T19086] libceph: connect (1)[c::]:6789 error -101 [ 1379.787192][T19086] libceph: mon0 (1)[c::]:6789 connect error [ 1380.047884][T19086] libceph: connect (1)[c::]:6789 error -101 [ 1380.050072][T19086] libceph: mon0 (1)[c::]:6789 connect error [ 1380.557875][T19086] libceph: connect (1)[c::]:6789 error -101 [ 1380.559976][T19086] libceph: mon0 (1)[c::]:6789 connect error [ 1380.560770][T26558] ceph: No mds server is up or the cluster is laggy [ 1380.854335][T26566] netlink: 'syz.2.4049': attribute type 2 has an invalid length. [ 1382.271559][T26595] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4053'. [ 1383.233134][T26607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4056'. [ 1386.164294][T26638] netlink: 'syz.1.4063': attribute type 2 has an invalid length. [ 1387.247038][T26661] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4067'. [ 1388.190097][T26681] syz_tun: entered allmulticast mode [ 1388.241411][T26681] syz_tun: left allmulticast mode [ 1388.535829][T26689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4072'. [ 1388.562951][T26689] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1388.568599][T26689] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1388.574932][T26689] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1388.625245][T26689] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1388.758560][T26689] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1388.924005][T26695] tipc: Started in network mode [ 1388.928039][T26695] tipc: Node identity 4, cluster identity 4711 [ 1388.935706][T26695] tipc: Node number set to 4 [ 1389.490898][T26693] syz.2.4071: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1389.502673][T26693] CPU: 1 UID: 0 PID: 26693 Comm: syz.2.4071 Tainted: G L syzkaller #0 PREEMPT(full) [ 1389.502702][T26693] Tainted: [L]=SOFTLOCKUP [ 1389.502708][T26693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1389.502719][T26693] Call Trace: [ 1389.502725][T26693] [ 1389.502733][T26693] dump_stack_lvl+0x100/0x190 [ 1389.502758][T26693] warn_alloc.cold+0x94/0xa8 [ 1389.502777][T26693] ? __pfx_warn_alloc+0x10/0x10 [ 1389.502801][T26693] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1389.502826][T26693] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1389.502851][T26693] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1389.502874][T26693] ? __lock_acquire+0x49f/0x1a40 [ 1389.502906][T26693] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1389.502934][T26693] ? find_held_lock+0x2b/0x80 [ 1389.502953][T26693] ? __free_frozen_pages+0x747/0x1090 [ 1389.502978][T26693] ? __free_frozen_pages+0x747/0x1090 [ 1389.503004][T26693] ? do_raw_spin_unlock+0x145/0x1e0 [ 1389.503023][T26693] ? _raw_spin_unlock+0x28/0x50 [ 1389.503045][T26693] ? __pfx_alloc_migration_target+0x10/0x10 [ 1389.503079][T26693] __folio_alloc_noprof+0x13/0x260 [ 1389.503098][T26693] alloc_migration_target+0x1d7/0x6d0 [ 1389.503124][T26693] migrate_pages_batch+0x5dc/0x45c0 [ 1389.503152][T26693] ? __pfx_alloc_migration_target+0x10/0x10 [ 1389.503180][T26693] ? migrate_pages_sync+0x12c/0x880 [ 1389.503208][T26693] ? migrate_pages_sync+0x588/0x880 [ 1389.503233][T26693] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1389.503262][T26693] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1389.503285][T26693] ? __free_object+0x2a8/0x3f0 [ 1389.503309][T26693] ? register_lock_class+0x40/0x560 [ 1389.503337][T26693] ? __lock_acquire+0x49f/0x1a40 [ 1389.503359][T26693] ? __css_rstat_updated+0x1ce/0x5a0 [ 1389.503387][T26693] migrate_pages+0x1950/0x2850 [ 1389.503413][T26693] ? __lock_acquire+0x49f/0x1a40 [ 1389.503438][T26693] ? __pfx_alloc_migration_target+0x10/0x10 [ 1389.503467][T26693] ? __pfx_migrate_pages+0x10/0x10 [ 1389.503495][T26693] ? __lock_acquire+0x49f/0x1a40 [ 1389.503522][T26693] ? mtree_load+0x32d/0xa90 [ 1389.503548][T26693] move_pages_and_store_status+0xf1/0x230 [ 1389.503575][T26693] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1389.503609][T26693] kernel_move_pages+0xc89/0x14a0 [ 1389.503642][T26693] ? __pfx_kernel_move_pages+0x10/0x10 [ 1389.503673][T26693] ? xfd_validate_state+0x129/0x190 [ 1389.503692][T26693] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1389.503718][T26693] __ia32_sys_move_pages+0xdd/0x1b0 [ 1389.503742][T26693] ? __do_fast_syscall_32+0x98/0x970 [ 1389.503765][T26693] ? lockdep_hardirqs_on+0x78/0x100 [ 1389.503786][T26693] __do_fast_syscall_32+0xe7/0x970 [ 1389.503811][T26693] do_fast_syscall_32+0x32/0x70 [ 1389.503833][T26693] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1389.503855][T26693] RIP: 0023:0xf708efec [ 1389.503875][T26693] Code: Unable to access opcode bytes at 0xf708efc2. [ 1389.503882][T26693] RSP: 002b:00000000f543b50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1389.503899][T26693] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 1389.503910][T26693] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 1389.503921][T26693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1389.503935][T26693] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1389.503945][T26693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1389.503966][T26693] [ 1389.503973][T26693] Mem-Info: [ 1389.632018][T26693] active_anon:10520 inactive_anon:11610 isolated_anon:12 [ 1389.632018][T26693] active_file:4461 inactive_file:15466 isolated_file:0 [ 1389.632018][T26693] unevictable:768 dirty:743 writeback:0 [ 1389.632018][T26693] slab_reclaimable:7361 slab_unreclaimable:66193 [ 1389.632018][T26693] mapped:25720 shmem:18809 pagetables:1143 [ 1389.632018][T26693] sec_pagetables:336 bounce:0 [ 1389.632018][T26693] kernel_misc_reclaimable:0 [ 1389.632018][T26693] free:37135 free_pcp:3839 free_cma:0 [ 1389.652342][T26693] Node 0 active_anon:536kB inactive_anon:580kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6976kB pagetables:1188kB sec_pagetables:1096kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1389.664845][T26693] Node 1 active_anon:41544kB inactive_anon:45860kB active_file:17844kB inactive_file:61864kB unevictable:1536kB isolated(anon):48kB isolated(file):0kB mapped:102852kB dirty:2972kB writeback:0kB shmem:72628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:7128kB pagetables:3384kB sec_pagetables:248kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1389.714070][T26693] Node 0 DMA free:3052kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1389.928483][T26693] lowmem_reserve[]: 0 280 280 280 280 [ 1389.930402][T26693] Node 0 DMA32 free:34600kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:536kB inactive_anon:580kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:680kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1389.989861][T26693] lowmem_reserve[]: 0 0 0 0 0 [ 1389.993814][T26693] Node 1 DMA32 free:101748kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37512kB inactive_anon:45860kB active_file:17844kB inactive_file:61864kB unevictable:5736kB writepending:2972kB zspages:6380kB present:1048432kB managed:948212kB mlocked:4200kB bounce:0kB free_pcp:20508kB local_pcp:6716kB free_cma:0kB [ 1390.006788][T26693] lowmem_reserve[]: 0 0 0 0 0 [ 1390.026473][T26693] Node 0 DMA: 169*4kB (UM) 5*8kB (UM) 2*16kB (M) 14*32kB (UM) 7*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 3052kB [ 1390.034489][T26693] Node 0 DMA32: 880*4kB (UME) 237*8kB (UME) 110*16kB (UME) 255*32kB (UME) 75*64kB (UME) 23*128kB (UME) 7*256kB (UME) 5*512kB (M) 3*1024kB (M) 0*2048kB 1*4096kB (U) = 34600kB [ 1390.043081][T26693] Node 1 DMA32: 43*4kB (E) 648*8kB (UME) 422*16kB (UME) 143*32kB (UME) 77*64kB (UME) 63*128kB (ME) 44*256kB (UME) 39*512kB (UM) 28*1024kB (UME) 3*2048kB (U) 1*4096kB (M) = 99820kB [ 1390.051529][T26693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1390.055982][T26693] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 1390.060309][T26693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1390.063667][T26693] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1390.067431][T26693] 38993 total pagecache pages [ 1390.069931][T26693] 1283 pages in swap cache [ 1390.072000][T26693] Free swap = 108kB [ 1390.073716][T26693] Total swap = 124996kB [ 1390.075450][T26693] 524155 pages RAM [ 1390.076739][T26693] 0 pages HighMem/MovableOnly [ 1390.080963][T26693] 211532 pages reserved [ 1390.084096][T26693] 0 pages cma reserved [ 1390.944926][T26730] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1390.947194][T26730] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1390.950448][T26730] vhci_hcd vhci_hcd.0: Device attached [ 1391.071616][T26735] rdma_rxe: rxe_newlink: failed to add wg2 [ 1391.267765][T19086] usb 42-1: SetAddress Request (82) to port 0 [ 1391.270430][T19086] usb 42-1: new SuperSpeed USB device number 82 using vhci_hcd [ 1391.594920][T26731] vhci_hcd: connection reset by peer [ 1391.598409][ T7294] vhci_hcd vhci_hcd.2: stop threads [ 1391.601602][ T7294] vhci_hcd vhci_hcd.2: release socket [ 1391.605037][ T7294] vhci_hcd vhci_hcd.2: disconnect device [ 1391.864806][T26744] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4082'. [ 1391.949021][T26748] overlayfs: overlapping lowerdir path [ 1391.957111][T26748] random: crng reseeded on system resumption [ 1393.484243][ T42] kauditd_printk_skb: 431 callbacks suppressed [ 1393.484256][ T42] audit: type=1804 audit(1785703027.824:1583): pid=26758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4087" name="/newroot/979/file1/file0" dev="9p" ino=77361153 res=1 errno=0 [ 1393.568276][T26763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4084'. [ 1393.580200][T26763] siw: device registration error -23 [ 1393.889900][T26760] netlink: 'syz.3.4085': attribute type 1 has an invalid length. [ 1393.936846][T26760] bond11: entered promiscuous mode [ 1393.939562][T26760] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1395.078214][T26775] netlink: 'syz.0.4096': attribute type 1 has an invalid length. [ 1395.252049][T26775] bond10: entered promiscuous mode [ 1395.256788][T26775] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1396.418335][T19086] usb 42-1: device descriptor read/8, error -110 [ 1396.493216][T26803] Cannot find set identified by id 2 to match [ 1396.537742][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 1396.555024][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 1396.903076][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 1396.911313][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 1397.263634][T19086] usb usb42-port1: attempt power cycle [ 1397.263660][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1397.268930][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1397.435500][T26803] ceph: No mds server is up or the cluster is laggy [ 1397.525466][T26818] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1397.528314][T26818] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1397.547472][T26818] vhci_hcd vhci_hcd.0: Device attached [ 1397.785400][T26822] rdma_rxe: rxe_newlink: failed to add wg2 [ 1397.808080][ T5899] usb 44-1: SetAddress Request (86) to port 0 [ 1397.810772][ T5899] usb 44-1: new SuperSpeed USB device number 86 using vhci_hcd [ 1397.853779][T19086] usb usb42-port1: unable to enumerate USB device [ 1398.277641][T26820] vhci_hcd: connection reset by peer [ 1398.279759][T12183] vhci_hcd vhci_hcd.3: stop threads [ 1398.282037][T12183] vhci_hcd vhci_hcd.3: release socket [ 1398.284616][T12183] vhci_hcd vhci_hcd.3: disconnect device [ 1399.321174][T26851] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1399.324401][T26851] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1399.359330][T26851] vhci_hcd vhci_hcd.0: Device attached [ 1399.657916][T19086] usb 40-1: SetAddress Request (91) to port 0 [ 1399.660329][T19086] usb 40-1: new SuperSpeed USB device number 91 using vhci_hcd [ 1399.830318][T26849] warn_alloc: 1 callbacks suppressed [ 1399.830357][T26849] syz.2.4103: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1399.843088][T26849] CPU: 3 UID: 0 PID: 26849 Comm: syz.2.4103 Tainted: G L syzkaller #0 PREEMPT(full) [ 1399.843119][T26849] Tainted: [L]=SOFTLOCKUP [ 1399.843124][T26849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1399.843131][T26849] Call Trace: [ 1399.843136][T26849] [ 1399.843141][T26849] dump_stack_lvl+0x100/0x190 [ 1399.843159][T26849] warn_alloc.cold+0x94/0xa8 [ 1399.843171][T26849] ? __pfx_warn_alloc+0x10/0x10 [ 1399.843187][T26849] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1399.843205][T26849] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1399.843222][T26849] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1399.843240][T26849] ? __lock_acquire+0x49f/0x1a40 [ 1399.843262][T26849] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1399.843277][T26849] ? find_held_lock+0x2b/0x80 [ 1399.843290][T26849] ? __free_frozen_pages+0x747/0x1090 [ 1399.843308][T26849] ? __free_frozen_pages+0x747/0x1090 [ 1399.843328][T26849] ? do_raw_spin_unlock+0x145/0x1e0 [ 1399.843346][T26849] ? _raw_spin_unlock+0x28/0x50 [ 1399.843368][T26849] ? irqentry_exit+0x24d/0xa00 [ 1399.843403][T26849] __folio_alloc_noprof+0x13/0x260 [ 1399.843421][T26849] alloc_migration_target+0x1d7/0x6d0 [ 1399.843450][T26849] migrate_pages_batch+0x5dc/0x45c0 [ 1399.843479][T26849] ? __pfx_alloc_migration_target+0x10/0x10 [ 1399.843509][T26849] ? migrate_pages_sync+0x12c/0x880 [ 1399.843534][T26849] ? migrate_pages_sync+0x588/0x880 [ 1399.843553][T26849] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1399.843573][T26849] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1399.843594][T26849] ? __lock_acquire+0x49f/0x1a40 [ 1399.843610][T26849] ? __css_rstat_updated+0x1ce/0x5a0 [ 1399.843630][T26849] migrate_pages+0x1950/0x2850 [ 1399.843649][T26849] ? __lock_acquire+0x49f/0x1a40 [ 1399.843667][T26849] ? __pfx_alloc_migration_target+0x10/0x10 [ 1399.843687][T26849] ? __pfx_migrate_pages+0x10/0x10 [ 1399.843707][T26849] ? __lock_acquire+0x49f/0x1a40 [ 1399.843726][T26849] ? mtree_load+0x32d/0xa90 [ 1399.843744][T26849] move_pages_and_store_status+0xf1/0x230 [ 1399.843764][T26849] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1399.843787][T26849] kernel_move_pages+0xc89/0x14a0 [ 1399.843810][T26849] ? __pfx_kernel_move_pages+0x10/0x10 [ 1399.843832][T26849] ? xfd_validate_state+0x129/0x190 [ 1399.843849][T26849] __ia32_sys_move_pages+0xdd/0x1b0 [ 1399.843867][T26849] ? __do_fast_syscall_32+0x98/0x970 [ 1399.843883][T26849] ? lockdep_hardirqs_on+0x78/0x100 [ 1399.843898][T26849] __do_fast_syscall_32+0xe7/0x970 [ 1399.843915][T26849] do_fast_syscall_32+0x32/0x70 [ 1399.843932][T26849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1399.843946][T26849] RIP: 0023:0xf708efec [ 1399.843960][T26849] Code: Unable to access opcode bytes at 0xf708efc2. [ 1399.843965][T26849] RSP: 002b:00000000f543b50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1399.843977][T26849] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 1399.843985][T26849] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 1399.843992][T26849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1399.843998][T26849] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1399.844005][T26849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1399.844018][T26849] [ 1399.844163][T26849] Mem-Info: [ 1399.958626][T26849] active_anon:15003 inactive_anon:11609 isolated_anon:12 [ 1399.958626][T26849] active_file:4461 inactive_file:15413 isolated_file:0 [ 1399.958626][T26849] unevictable:768 dirty:660 writeback:0 [ 1399.958626][T26849] slab_reclaimable:6886 slab_unreclaimable:66528 [ 1399.958626][T26849] mapped:32470 shmem:24529 pagetables:1127 [ 1399.958626][T26849] sec_pagetables:336 bounce:0 [ 1399.958626][T26849] kernel_misc_reclaimable:0 [ 1399.958626][T26849] free:35142 free_pcp:6148 free_cma:0 [ 1399.990802][T26849] Node 0 active_anon:536kB inactive_anon:580kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7008kB pagetables:1188kB sec_pagetables:1096kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1400.001790][T26849] Node 1 active_anon:59576kB inactive_anon:45856kB active_file:17844kB inactive_file:61652kB unevictable:1536kB isolated(anon):48kB isolated(file):0kB mapped:129852kB dirty:2640kB writeback:0kB shmem:95508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7360kB pagetables:3320kB sec_pagetables:248kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1400.015211][T26849] Node 0 DMA free:3052kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1400.027274][T26849] lowmem_reserve[]: 0 280 280 280 280 [ 1400.030957][T26849] Node 0 DMA32 free:34600kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:536kB inactive_anon:580kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:680kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:60kB free_cma:0kB [ 1400.041561][T26849] lowmem_reserve[]: 0 0 0 0 0 [ 1400.043616][T26849] Node 1 DMA32 free:102916kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59776kB inactive_anon:45856kB active_file:17844kB inactive_file:61652kB unevictable:1536kB writepending:2640kB zspages:6380kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:24224kB local_pcp:13396kB free_cma:0kB [ 1400.055737][T26849] lowmem_reserve[]: 0 0 0 0 0 [ 1400.057481][T26849] Node 0 DMA: 169*4kB (UM) 5*8kB (UM) 2*16kB (M) 14*32kB (UM) 7*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 3052kB [ 1400.063062][T26849] Node 0 DMA32: 880*4kB (UME) 237*8kB (UME) 110*16kB (UME) 255*32kB (UME) 75*64kB (UME) 23*128kB (UME) 7*256kB (UME) 5*512kB (M) 3*1024kB (M) 0*2048kB 1*4096kB (U) = 34600kB [ 1400.071547][T26849] Node 1 DMA32: 1789*4kB (UME) 803*8kB (UME) 219*16kB (UME) 280*32kB (UME) 119*64kB (UME) 80*128kB (UME) 26*256kB (UME) 36*512kB (UM) 27*1024kB (UME) 3*2048kB (M) 0*4096kB = 102780kB [ 1400.078958][T26849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1400.082335][T26849] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 1400.085321][T26849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1400.089151][T26849] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1400.092616][T26849] 44660 total pagecache pages [ 1400.094284][T26849] 1283 pages in swap cache [ 1400.095861][T26849] Free swap = 0kB [ 1400.097191][T26849] Total swap = 124996kB [ 1400.099151][T26849] 524155 pages RAM [ 1400.101339][T26849] 0 pages HighMem/MovableOnly [ 1400.103228][T26849] 211532 pages reserved [ 1400.104660][T26849] 0 pages cma reserved [ 1400.468797][T26853] vhci_hcd: connection reset by peer [ 1400.470759][T12183] vhci_hcd vhci_hcd.1: stop threads [ 1400.472443][T12183] vhci_hcd vhci_hcd.1: release socket [ 1400.477216][T12183] vhci_hcd vhci_hcd.1: disconnect device [ 1401.449686][T26886] nd_pmem pfn0.0: probe with driver nd_pmem failed with error -16 [ 1401.669488][T26891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4110'. [ 1401.717683][ T5897] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1401.920306][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.923839][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.926902][ T5897] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1401.932738][ T5897] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1401.935857][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.945310][ T5897] usb 8-1: config 0 descriptor?? [ 1402.434095][ T5897] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1402.837839][ T5899] usb 44-1: device descriptor read/8, error -110 [ 1402.984719][T26913] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1402.986821][T26913] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1402.999813][T26913] vhci_hcd vhci_hcd.0: Device attached [ 1403.163716][T26916] rdma_rxe: rxe_newlink: failed to add wg2 [ 1403.245538][ T5899] usb usb44-port1: attempt power cycle [ 1403.520262][T26914] vhci_hcd: connection closed [ 1403.520709][ T5861] vhci_hcd vhci_hcd.1: stop threads [ 1403.525029][ T5861] vhci_hcd vhci_hcd.1: release socket [ 1403.527749][ T5861] vhci_hcd vhci_hcd.1: disconnect device [ 1403.818271][ T5899] usb usb44-port1: unable to enumerate USB device [ 1404.404113][T26936] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1404.406207][T26936] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1404.411712][T26936] vhci_hcd vhci_hcd.0: Device attached [ 1404.435652][ T5897] usb 8-1: USB disconnect, device number 26 [ 1404.550431][T26942] overlayfs: failed to clone upperpath [ 1404.757891][ T5899] usb 44-1: SetAddress Request (90) to port 0 [ 1404.760171][T19086] usb 40-1: device descriptor read/8, error -110 [ 1404.762556][ T5899] usb 44-1: new SuperSpeed USB device number 90 using vhci_hcd [ 1405.016334][T26938] vhci_hcd: connection reset by peer [ 1405.019029][ T5861] vhci_hcd vhci_hcd.3: stop threads [ 1405.021458][ T5861] vhci_hcd vhci_hcd.3: release socket [ 1405.023876][ T5861] vhci_hcd vhci_hcd.3: disconnect device [ 1405.149708][T19086] usb usb40-port1: attempt power cycle [ 1405.671435][T26961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4123'. [ 1405.711020][T19086] usb usb40-port1: unable to enumerate USB device [ 1407.536173][T26986] syz2: rxe_newlink: already configured on wg2 [ 1409.151222][T27013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4134'. [ 1409.486590][T27026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4143'. [ 1409.503568][T27025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4143'. [ 1409.750556][T27028] overlay: Unknown parameter '/' [ 1409.753723][T27028] netlink: zone id is out of range [ 1409.755526][T27028] netlink: zone id is out of range [ 1409.757433][T27028] netlink: zone id is out of range [ 1409.797767][ T5899] usb 44-1: device descriptor read/8, error -110 [ 1410.117950][T27033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4138'. [ 1410.198458][ T5899] usb usb44-port1: attempt power cycle [ 1410.720823][T27046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4141'. [ 1410.758325][ T5899] usb usb44-port1: unable to enumerate USB device [ 1410.760716][T27044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4141'. [ 1411.067826][T27050] netlink: zone id is out of range [ 1411.069689][T27050] netlink: zone id is out of range [ 1411.071433][T27050] netlink: zone id is out of range [ 1411.073381][T27050] netlink: zone id is out of range [ 1411.075314][T27050] netlink: zone id is out of range [ 1411.077199][T27050] netlink: zone id is out of range [ 1411.079754][T27050] netlink: zone id is out of range [ 1411.800466][T27061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4153'. [ 1411.804367][T27061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4153'. [ 1412.304981][T27064] tipc: Cannot configure node identity twice [ 1412.678472][T27077] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4147'. [ 1412.745132][T27078] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1412.747784][T27078] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1412.756487][T27078] vhci_hcd vhci_hcd.0: Device attached [ 1413.140742][ T5899] usb 44-1: SetAddress Request (94) to port 0 [ 1413.149609][ T5899] usb 44-1: new SuperSpeed USB device number 94 using vhci_hcd [ 1413.202332][T27078] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1414.162437][T27079] vhci_hcd: connection reset by peer [ 1414.167823][ T5861] vhci_hcd vhci_hcd.3: stop threads [ 1414.170640][ T5861] vhci_hcd vhci_hcd.3: release socket [ 1414.174386][ T5861] vhci_hcd vhci_hcd.3: disconnect device [ 1414.242635][T27103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4152'. [ 1414.622604][T27105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4161'. [ 1414.626895][T27105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4161'. [ 1415.715198][ T42] audit: type=1804 audit(1785703050.054:1584): pid=27125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4159" name="/newroot/1030/file1/file0" dev="9p" ino=77361153 res=1 errno=0 [ 1418.111140][T27156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4166'. [ 1418.117252][T27156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4166'. [ 1418.277648][ T5899] usb 44-1: device descriptor read/8, error -110 [ 1418.668218][ T5899] usb usb44-port1: attempt power cycle [ 1419.096380][T27177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4167'. [ 1419.113261][T27170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4167'. [ 1419.228322][ T5899] usb usb44-port1: unable to enumerate USB device [ 1419.317722][T16838] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1419.337136][T27166] netlink: 'syz.1.4168': attribute type 1 has an invalid length. [ 1419.366012][T27166] bond0: entered promiscuous mode [ 1419.369185][T27166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.478376][T16838] usb 7-1: Using ep0 maxpacket: 32 [ 1419.481607][T16838] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1419.484370][T16838] usb 7-1: config 0 has no interface number 0 [ 1419.488170][T16838] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1419.491147][T16838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.493627][T16838] usb 7-1: Product: syz [ 1419.495047][T16838] usb 7-1: Manufacturer: syz [ 1419.496589][T16838] usb 7-1: SerialNumber: syz [ 1419.500562][T16838] usb 7-1: config 0 descriptor?? [ 1419.508197][T16838] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1419.511363][T16838] usb 7-1: selecting invalid altsetting 1 [ 1419.513248][T16838] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1419.548755][T16838] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1419.552932][T16838] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1419.555662][T16838] usb 7-1: media controller created [ 1419.562971][T16838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1419.805387][T27181] kvm: apic: phys broadcast and lowest prio [ 1419.852360][T27181] net2280 0000:00:02.0: unbind [ 1420.692525][T16838] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1420.702869][T16838] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1420.810275][T16838] usb 7-1: USB disconnect, device number 19 [ 1420.913849][T27209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4173'. [ 1420.917172][T27209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4173'. [ 1421.143263][T27213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4176'. [ 1421.146771][T27213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4176'. [ 1421.641872][T27221] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1421.644700][T27221] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1421.671771][T27221] vhci_hcd vhci_hcd.0: Device attached [ 1422.008086][ T5899] usb 42-1: SetAddress Request (86) to port 0 [ 1422.013334][ T5899] usb 42-1: new SuperSpeed USB device number 86 using vhci_hcd [ 1422.405343][T27222] vhci_hcd: connection reset by peer [ 1422.409619][ T7294] vhci_hcd vhci_hcd.2: stop threads [ 1422.411988][ T7294] vhci_hcd vhci_hcd.2: release socket [ 1422.414376][ T7294] vhci_hcd vhci_hcd.2: disconnect device [ 1422.501881][T27242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4180'. [ 1422.505738][T27242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4180'. [ 1422.609068][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.502629][T27275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4192'. [ 1423.512135][T27275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4192'. [ 1424.915946][T27301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4188'. [ 1424.925361][T27301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4188'. [ 1425.428736][T27309] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1425.431159][T27309] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1425.443493][T27309] vhci_hcd vhci_hcd.0: Device attached [ 1425.576767][T27308] warn_alloc: 1 callbacks suppressed [ 1425.576782][T27308] syz.3.4198: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1425.588096][T27308] CPU: 1 UID: 0 PID: 27308 Comm: syz.3.4198 Tainted: G L syzkaller #0 PREEMPT(full) [ 1425.588115][T27308] Tainted: [L]=SOFTLOCKUP [ 1425.588119][T27308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1425.588126][T27308] Call Trace: [ 1425.588130][T27308] [ 1425.588135][T27308] dump_stack_lvl+0x100/0x190 [ 1425.588153][T27308] warn_alloc.cold+0x94/0xa8 [ 1425.588165][T27308] ? __pfx_warn_alloc+0x10/0x10 [ 1425.588181][T27308] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1425.588198][T27308] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1425.588215][T27308] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1425.588231][T27308] ? __lock_acquire+0x49f/0x1a40 [ 1425.588253][T27308] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1425.588270][T27308] ? find_held_lock+0x2b/0x80 [ 1425.588283][T27308] ? __free_frozen_pages+0x747/0x1090 [ 1425.588301][T27308] ? __free_frozen_pages+0x747/0x1090 [ 1425.588320][T27308] ? do_raw_spin_unlock+0x145/0x1e0 [ 1425.588333][T27308] ? _raw_spin_unlock+0x28/0x50 [ 1425.588354][T27308] __folio_alloc_noprof+0x13/0x260 [ 1425.588368][T27308] alloc_migration_target+0x1d7/0x6d0 [ 1425.588386][T27308] migrate_pages_batch+0x5dc/0x45c0 [ 1425.588405][T27308] ? __pfx_alloc_migration_target+0x10/0x10 [ 1425.588424][T27308] ? migrate_pages_sync+0x12c/0x880 [ 1425.588441][T27308] ? migrate_pages_sync+0x588/0x880 [ 1425.588459][T27308] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1425.588479][T27308] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1425.588499][T27308] ? __lock_acquire+0x49f/0x1a40 [ 1425.588516][T27308] ? __css_rstat_updated+0x1ce/0x5a0 [ 1425.588535][T27308] migrate_pages+0x1950/0x2850 [ 1425.588557][T27308] ? __lock_acquire+0x49f/0x1a40 [ 1425.588582][T27308] ? __pfx_alloc_migration_target+0x10/0x10 [ 1425.588609][T27308] ? __pfx_migrate_pages+0x10/0x10 [ 1425.588630][T27308] ? __lock_acquire+0x49f/0x1a40 [ 1425.588649][T27308] ? mtree_load+0x32d/0xa90 [ 1425.588667][T27308] move_pages_and_store_status+0xf1/0x230 [ 1425.588686][T27308] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1425.588709][T27308] kernel_move_pages+0xc89/0x14a0 [ 1425.588732][T27308] ? __pfx_kernel_move_pages+0x10/0x10 [ 1425.588753][T27308] ? xfd_validate_state+0x129/0x190 [ 1425.588775][T27308] __ia32_sys_move_pages+0xdd/0x1b0 [ 1425.588794][T27308] ? __do_fast_syscall_32+0x98/0x970 [ 1425.588810][T27308] ? lockdep_hardirqs_on+0x78/0x100 [ 1425.588825][T27308] __do_fast_syscall_32+0xe7/0x970 [ 1425.588843][T27308] do_fast_syscall_32+0x32/0x70 [ 1425.588859][T27308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1425.588874][T27308] RIP: 0023:0xf7f77fec [ 1425.588887][T27308] Code: Unable to access opcode bytes at 0xf7f77fc2. [ 1425.588904][T27308] RSP: 002b:00000000f53f450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1425.588918][T27308] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 1425.588925][T27308] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 1425.588932][T27308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1425.588939][T27308] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1425.588946][T27308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1425.588960][T27308] [ 1425.588986][T27308] Mem-Info: [ 1425.688012][T27308] active_anon:14350 inactive_anon:13504 isolated_anon:12 [ 1425.688012][T27308] active_file:4391 inactive_file:14853 isolated_file:0 [ 1425.688012][T27308] unevictable:768 dirty:592 writeback:0 [ 1425.688012][T27308] slab_reclaimable:6756 slab_unreclaimable:68124 [ 1425.688012][T27308] mapped:28848 shmem:25775 pagetables:1196 [ 1425.688012][T27308] sec_pagetables:332 bounce:0 [ 1425.688012][T27308] kernel_misc_reclaimable:0 [ 1425.688012][T27308] free:31943 free_pcp:11269 free_cma:0 [ 1425.702908][T27308] Node 0 active_anon:536kB inactive_anon:580kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6944kB pagetables:1188kB sec_pagetables:1092kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1425.717154][T27308] Node 1 active_anon:55864kB inactive_anon:53436kB active_file:17564kB inactive_file:59412kB unevictable:1536kB isolated(anon):48kB isolated(file):0kB mapped:115364kB dirty:2368kB writeback:0kB shmem:99692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7320kB pagetables:3596kB sec_pagetables:236kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1425.731380][T27308] Node 0 DMA free:3052kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1425.757757][T27308] lowmem_reserve[]: 0 280 280 280 280 [ 1425.767715][T27308] Node 0 DMA32 free:34788kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:536kB inactive_anon:580kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:680kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:40kB free_cma:0kB [ 1425.780816][T27308] lowmem_reserve[]: 0 0 0 0 0 [ 1425.782990][T27308] Node 1 DMA32 free:105332kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45592kB inactive_anon:53436kB active_file:17564kB inactive_file:59412kB unevictable:1536kB writepending:2368kB zspages:6380kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:40988kB local_pcp:11828kB free_cma:0kB [ 1425.795241][T27308] lowmem_reserve[]: 0 0 0 0 0 [ 1425.797082][T27308] Node 0 DMA: 169*4kB (UM) 5*8kB (UM) 2*16kB (M) 14*32kB (UM) 7*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 3052kB [ 1425.803556][T27308] Node 0 DMA32: 893*4kB (UME) 240*8kB (UME) 111*16kB (UME) 256*32kB (UME) 76*64kB (UME) 23*128kB (UME) 7*256kB (UME) 5*512kB (M) 3*1024kB (M) 0*2048kB 1*4096kB (U) = 34788kB [ 1425.810158][T27308] Node 1 DMA32: 3502*4kB (UME) 1561*8kB (UME) 482*16kB (UME) 46*32kB (UME) 17*64kB (UME) 42*128kB (ME) 43*256kB (UME) 36*512kB (UM) 27*1024kB (UM) 1*2048kB (U) 1*4096kB (U) = 105376kB [ 1425.816817][T27308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1425.820521][T27308] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 1425.824364][T27308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1425.834195][T27308] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1425.837444][T27308] 41204 total pagecache pages [ 1425.840383][T27308] 1286 pages in swap cache [ 1425.842378][T27308] Free swap = 112kB [ 1425.844114][T27308] Total swap = 124996kB [ 1425.846065][T27308] 524155 pages RAM [ 1425.847910][T27308] 0 pages HighMem/MovableOnly [ 1425.849892][T27308] 211532 pages reserved [ 1425.851778][T27308] 0 pages cma reserved [ 1426.029148][T27310] vhci_hcd: connection closed [ 1426.029565][ T5861] vhci_hcd vhci_hcd.2: stop threads [ 1426.036864][ T5861] vhci_hcd vhci_hcd.2: release socket [ 1426.043121][ T5861] vhci_hcd vhci_hcd.2: disconnect device [ 1427.168169][ T5899] usb 42-1: device descriptor read/8, error -110 [ 1427.558643][ T5899] usb usb42-port1: attempt power cycle [ 1427.599394][T27340] netlink: 'syz.2.4196': attribute type 1 has an invalid length. [ 1427.626896][T27340] bond9: entered promiscuous mode [ 1427.629572][T27340] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1428.148490][ T5899] usb usb42-port1: unable to enumerate USB device [ 1428.215548][T27353] net_ratelimit: 14 callbacks suppressed [ 1428.215562][T27353] netlink: zone id is out of range [ 1428.223165][T27353] netlink: zone id is out of range [ 1428.228133][T27353] netlink: zone id is out of range [ 1428.231800][T27353] netlink: zone id is out of range [ 1428.236211][T27353] netlink: zone id is out of range [ 1428.242775][T27353] netlink: zone id is out of range [ 1428.246678][T27353] netlink: zone id is out of range [ 1428.250323][T27353] netlink: zone id is out of range [ 1428.252939][T27353] netlink: zone id is out of range [ 1428.255483][T27353] netlink: zone id is out of range [ 1428.713060][T27365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4201'. [ 1428.717796][T27365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4201'. [ 1431.320075][T27393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4207'. [ 1431.377288][T27395] netlink: 'syz.1.4208': attribute type 1 has an invalid length. [ 1431.380019][T27395] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4208'. [ 1433.112387][T27431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4213'. [ 1433.122157][T27431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4213'. [ 1433.559070][T27435] wg2 speed is unknown, defaulting to 1000 [ 1433.942136][T27439] netlink: 'syz.3.4218': attribute type 1 has an invalid length. [ 1434.650351][T27450] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1434.652968][T27450] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1434.691045][T27450] vhci_hcd vhci_hcd.0: Device attached [ 1434.968051][ T10] usb 44-1: SetAddress Request (98) to port 0 [ 1434.973695][ T10] usb 44-1: new SuperSpeed USB device number 98 using vhci_hcd [ 1435.078290][T27456] vhci_hcd: connection reset by peer [ 1435.081050][ T5861] vhci_hcd vhci_hcd.3: stop threads [ 1435.084333][ T5861] vhci_hcd vhci_hcd.3: release socket [ 1435.088337][ T5861] vhci_hcd vhci_hcd.3: disconnect device [ 1437.837379][T27512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4232'. [ 1437.847416][T27512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4232'. [ 1437.968450][T27494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.266575][T27518] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1439.148381][T27534] net_ratelimit: 11 callbacks suppressed [ 1439.148397][T27534] netlink: zone id is out of range [ 1439.152087][T27534] netlink: zone id is out of range [ 1439.154704][T27534] netlink: zone id is out of range [ 1439.156643][T27534] netlink: zone id is out of range [ 1439.163206][T27534] netlink: zone id is out of range [ 1439.165459][T27534] netlink: zone id is out of range [ 1439.167306][T27534] netlink: zone id is out of range [ 1439.169749][T27534] netlink: zone id is out of range [ 1439.171669][T27534] netlink: zone id is out of range [ 1439.173394][T27534] netlink: zone id is out of range [ 1439.430209][T27536] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1440.037691][ T10] usb 44-1: device descriptor read/8, error -110 [ 1441.216477][ T10] usb usb44-port1: attempt power cycle [ 1441.536231][T27564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4247'. [ 1441.541041][T27564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4247'. [ 1441.846264][ T10] usb usb44-port1: unable to enumerate USB device [ 1443.893920][T27600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4254'. [ 1446.231698][T27653] ptrace attach of ""[27654] was attempted by "/syz-executor exec"[27653] [ 1446.256183][ T42] audit: type=1800 audit(1785703080.594:1585): pid=27653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4263" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 1446.421890][T27658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4268'. [ 1446.478501][T21129] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 1446.629925][T21129] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1446.633243][T21129] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.636805][T21129] usb 7-1: config 0 has no interface number 0 [ 1446.639964][T21129] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1446.643440][T21129] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1446.647230][T21129] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1446.650751][T21129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.658404][T21129] usb 7-1: config 0 descriptor?? [ 1446.660902][T27651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1446.666046][T21129] ldusb 7-1:0.55: Interrupt in endpoint not found [ 1448.404185][T27683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4273'. [ 1448.420255][T27683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4273'. [ 1448.793710][T27688] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1448.796286][T27688] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1448.907065][T27688] vhci_hcd vhci_hcd.0: Device attached [ 1449.206015][T16838] usb 7-1: USB disconnect, device number 20 [ 1449.387731][ T5899] usb 40-1: SetAddress Request (95) to port 0 [ 1449.389772][ T5899] usb 40-1: new SuperSpeed USB device number 95 using vhci_hcd [ 1449.481270][T27690] vhci_hcd: connection reset by peer [ 1449.484494][T12183] vhci_hcd vhci_hcd.1: stop threads [ 1449.486301][T12183] vhci_hcd vhci_hcd.1: release socket [ 1449.488566][T12183] vhci_hcd vhci_hcd.1: disconnect device [ 1449.725832][T27713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4279'. [ 1449.809066][T27710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4277'. [ 1449.870222][T27714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4277'. [ 1449.898386][T21129] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1450.052581][T21129] usb 8-1: config 0 has no interfaces? [ 1450.054513][T21129] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1450.060291][T21129] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.335207][T21129] usb 8-1: config 0 descriptor?? [ 1450.657502][T27717] usb 8-1: USB disconnect, device number 27 [ 1453.772820][T27761] Invalid ELF header magic: != ELF [ 1454.333867][T27768] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1454.335968][T27768] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1454.347764][T27768] vhci_hcd vhci_hcd.0: Device attached [ 1454.862963][ T5899] usb 40-1: device descriptor read/8, error -110 [ 1454.866168][T27761] overlayfs: failed to resolve '/': -2 [ 1455.056905][T27776] netlink: 'syz.1.4290': attribute type 3 has an invalid length. [ 1455.069114][T27776] netlink: 'syz.1.4290': attribute type 3 has an invalid length. [ 1455.078144][T27776] netlink: 'syz.1.4290': attribute type 3 has an invalid length. [ 1455.083237][T27776] netlink: 'syz.1.4290': attribute type 3 has an invalid length. [ 1455.087629][T27776] netlink: 'syz.1.4290': attribute type 3 has an invalid length. [ 1455.090868][T27776] netlink: 'syz.1.4290': attribute type 3 has an invalid length. [ 1455.097830][T19086] usb 42-1: SetAddress Request (90) to port 0 [ 1455.098087][T27769] vhci_hcd: connection closed [ 1455.100069][T19086] usb 42-1: new SuperSpeed USB device number 90 using vhci_hcd [ 1455.104296][ T7294] vhci_hcd vhci_hcd.2: stop threads [ 1455.106788][ T7294] vhci_hcd vhci_hcd.2: release socket [ 1455.115102][T27776] netlink: 'syz.1.4290': attribute type 3 has an invalid length. [ 1455.115704][ T7294] vhci_hcd vhci_hcd.2: disconnect device [ 1455.118450][T27776] netlink: 'syz.1.4290': attribute type 3 has an invalid length. [ 1455.127046][T27776] netlink: 'syz.1.4290': attribute type 3 has an invalid length. [ 1455.133798][T27780] netlink: 199736 bytes leftover after parsing attributes in process `syz.1.4290'. [ 1455.136909][T27780] net_ratelimit: 11 callbacks suppressed [ 1455.136918][T27780] openvswitch: netlink: Message has 512 unknown bytes. [ 1455.148245][T27776] netlink: 'syz.1.4290': attribute type 3 has an invalid length. [ 1455.200018][T19086] usb 42-1: enqueue for inactive port 0 [ 1455.249040][ T5899] usb usb40-port1: attempt power cycle [ 1455.589841][T19086] usb usb42-port1: attempt power cycle [ 1455.808813][ T5899] usb usb40-port1: unable to enumerate USB device [ 1456.154235][T19086] usb usb42-port1: unable to enumerate USB device [ 1458.158116][ T41] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1459.093655][ T41] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1459.098074][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.102668][ T41] usb 8-1: Product: syz [ 1459.104029][ T41] usb 8-1: Manufacturer: syz [ 1459.105628][ T41] usb 8-1: SerialNumber: syz [ 1459.182637][T16838] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1459.253515][T27851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4305'. [ 1460.198107][T16838] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1460.204295][T16838] ath9k_htc: Failed to initialize the device [ 1460.246470][T16838] usb 8-1: ath9k_htc: USB layer deinitialized [ 1460.868030][T27889] siw: device registration error -23 [ 1461.022728][ T41] usb 8-1: USB disconnect, device number 28 [ 1461.434978][T27903] input: syz1 as /devices/virtual/input/input135 [ 1461.453134][T27903] db_root: cannot open: ./my_ [ 1462.492127][T27921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1464.505566][T27961] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1464.507780][T27961] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1464.521164][T27961] vhci_hcd vhci_hcd.0: Device attached [ 1464.867686][ T5899] usb 44-1: SetAddress Request (102) to port 0 [ 1464.872708][ T5899] usb 44-1: new SuperSpeed USB device number 102 using vhci_hcd [ 1465.223959][T27981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4328'. [ 1465.539465][T27962] vhci_hcd: connection reset by peer [ 1465.541434][ T7294] vhci_hcd vhci_hcd.3: stop threads [ 1465.543154][ T7294] vhci_hcd vhci_hcd.3: release socket [ 1465.544972][ T7294] vhci_hcd vhci_hcd.3: disconnect device [ 1465.849494][T27990] CIFS: Attempting to mount //127.0.0.1/share [ 1466.756564][T27990] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1466.807722][T27990] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1467.348785][T28018] wg2 speed is unknown, defaulting to 1000 [ 1468.594477][T28047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4339'. [ 1469.317820][ T10] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1469.469101][ T10] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 1469.472040][ T10] usb 6-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1469.475280][ T10] usb 6-1: config 0 has no interface number 0 [ 1469.477223][ T10] usb 6-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 1469.480838][ T10] usb 6-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 1469.484982][ T10] usb 6-1: config 0 interface 143 has no altsetting 0 [ 1469.488699][ T10] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1469.491713][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.494763][ T10] usb 6-1: Product: syz [ 1469.496471][ T10] usb 6-1: Manufacturer: syz [ 1469.498617][ T10] usb 6-1: SerialNumber: syz [ 1469.502587][ T10] usb 6-1: config 0 descriptor?? [ 1469.717060][ T10] usb 6-1: USB disconnect, device number 33 [ 1469.958172][ T5899] usb 44-1: device descriptor read/8, error -110 [ 1470.167776][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1470.272113][T28059] binder: 28055:28059 ioctl 401c7012 0 returned -22 [ 1470.311314][T28059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4344'. [ 1470.351602][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1470.352048][ T5899] usb usb44-port1: attempt power cycle [ 1470.492142][ T10] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 1470.640080][ T10] usb 6-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1470.680932][ T10] usb 6-1: config 0 has no interface number 0 [ 1470.682979][ T10] usb 6-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 1470.719293][ T10] usb 6-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 1470.725372][ T10] usb 6-1: config 0 interface 143 has no altsetting 0 [ 1470.760424][ T10] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1470.766674][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.770324][ T10] usb 6-1: Product: syz [ 1470.772070][ T10] usb 6-1: Manufacturer: syz [ 1470.774288][ T10] usb 6-1: SerialNumber: syz [ 1470.849575][ T10] usb 6-1: config 0 descriptor?? [ 1470.983708][ T5899] usb usb44-port1: unable to enumerate USB device [ 1471.183140][T28051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.189231][T28051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.206042][ T10] usb 6-1: USB disconnect, device number 34 [ 1471.641227][T28074] validate_nla: 25 callbacks suppressed [ 1471.641251][T28074] netlink: 'syz.3.4345': attribute type 10 has an invalid length. [ 1471.680674][T28070] 8021q: adding VLAN 0 to HW filter on device .` [ 1471.712094][T28070] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1472.120704][T28086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4348'. [ 1474.476986][T28125] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1475.720303][T28149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4361'. [ 1476.625461][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.631389][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.635501][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.638485][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.641210][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.645222][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.650517][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.654876][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.658855][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.666152][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.704873][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.756029][T28167] netlink: 199240 bytes leftover after parsing attributes in process `syz.2.4365'. [ 1476.759998][T28167] openvswitch: netlink: Message has 512 unknown bytes. [ 1476.773927][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.787744][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.839227][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.842119][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1476.853579][T28163] netlink: 'syz.2.4365': attribute type 3 has an invalid length. [ 1477.174903][T28171] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1477.236361][T28171] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1477.239889][T28171] overlayfs: failed to look up (tracing) for ino (-66) [ 1478.647579][T28187] zram0: detected capacity change from 8 to 0 [ 1478.714511][T28187] wg2 speed is unknown, defaulting to 1000 [ 1479.115070][T28201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4373'. [ 1479.644131][T28203] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1479.949465][ T41] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1480.066864][T28215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4377'. [ 1480.110007][ T41] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1480.115818][ T41] usb 6-1: not running at top speed; connect to a high speed hub [ 1480.121867][ T41] usb 6-1: config 10 has an invalid interface number: 3 but max is 0 [ 1480.126454][ T41] usb 6-1: config 10 has no interface number 0 [ 1480.130311][ T41] usb 6-1: config 10 interface 3 has no altsetting 0 [ 1480.138264][ T41] usb 6-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2 [ 1480.138287][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.138301][ T41] usb 6-1: Product: syz [ 1480.138312][ T41] usb 6-1: Manufacturer: syz [ 1480.138324][ T41] usb 6-1: SerialNumber: syz [ 1480.436336][ T41] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 1480.441564][ T41] usb 6-1: selecting invalid altsetting 0 [ 1480.445557][ T2520] pvrusb2: Invalid write control endpoint [ 1480.450565][ T41] usb 6-1: USB disconnect, device number 35 [ 1480.534949][ T2520] pvrusb2: Invalid write control endpoint [ 1480.539259][ T2520] pvrusb2: Invalid write control endpoint [ 1480.542812][ T2520] pvrusb2: Invalid write control endpoint [ 1480.545241][ T2520] pvrusb2: Invalid write control endpoint [ 1480.547715][ T2520] pvrusb2: Invalid write control endpoint [ 1480.550247][ T2520] pvrusb2: Invalid write control endpoint [ 1480.552638][ T2520] pvrusb2: Invalid write control endpoint [ 1480.555032][ T2520] pvrusb2: Invalid write control endpoint [ 1480.557389][ T2520] pvrusb2: Invalid write control endpoint [ 1480.559943][ T2520] pvrusb2: Invalid write control endpoint [ 1480.562268][ T2520] pvrusb2: Invalid write control endpoint [ 1480.564668][ T2520] pvrusb2: Invalid write control endpoint [ 1480.567053][ T2520] pvrusb2: Invalid write control endpoint [ 1480.569524][ T2520] pvrusb2: Invalid write control endpoint [ 1480.571899][ T2520] pvrusb2: Invalid write control endpoint [ 1480.574290][ T2520] pvrusb2: Invalid write control endpoint [ 1480.576667][ T2520] pvrusb2: Invalid write control endpoint [ 1480.579261][ T2520] pvrusb2: Invalid write control endpoint [ 1480.581576][ T2520] pvrusb2: Invalid write control endpoint [ 1480.583689][ T2520] pvrusb2: Invalid write control endpoint [ 1480.586005][ T2520] pvrusb2: Invalid write control endpoint [ 1480.588462][ T2520] pvrusb2: Invalid write control endpoint [ 1480.590849][ T2520] pvrusb2: Invalid write control endpoint [ 1480.593224][ T2520] pvrusb2: Invalid write control endpoint [ 1480.595627][ T2520] pvrusb2: Invalid write control endpoint [ 1480.598198][ T2520] pvrusb2: Invalid write control endpoint [ 1480.600639][ T2520] pvrusb2: Invalid write control endpoint [ 1480.602733][ T2520] pvrusb2: Invalid write control endpoint [ 1480.604542][ T2520] pvrusb2: Invalid write control endpoint [ 1480.606358][ T2520] pvrusb2: Invalid write control endpoint [ 1480.608297][ T2520] pvrusb2: Invalid write control endpoint [ 1480.610189][ T2520] pvrusb2: Invalid write control endpoint [ 1480.617133][ T2520] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1480.643463][ T2520] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_a) [ 1480.648272][ T2520] pvrusb2: Invalid write control endpoint [ 1480.650157][ T2520] pvrusb2: Invalid write control endpoint [ 1480.652033][ T2520] pvrusb2: Invalid write control endpoint [ 1480.653868][ T2520] pvrusb2: Invalid write control endpoint [ 1480.655687][ T2520] pvrusb2: Invalid write control endpoint [ 1480.657727][ T2520] pvrusb2: Invalid write control endpoint [ 1480.659608][ T2520] pvrusb2: Invalid write control endpoint [ 1480.661848][ T2520] pvrusb2: Invalid write control endpoint [ 1480.663702][ T2520] pvrusb2: Invalid write control endpoint [ 1480.665519][ T2520] pvrusb2: Invalid write control endpoint [ 1480.667360][ T2520] pvrusb2: Invalid write control endpoint [ 1480.669294][ T2520] pvrusb2: Invalid write control endpoint [ 1480.674421][ T2520] pvrusb2: Invalid write control endpoint [ 1480.676278][ T2520] pvrusb2: Invalid write control endpoint [ 1480.678301][ T2520] pvrusb2: Invalid write control endpoint [ 1480.680197][ T2520] pvrusb2: Invalid write control endpoint [ 1480.682064][ T2520] pvrusb2: Invalid write control endpoint [ 1480.683930][ T2520] pvrusb2: Invalid write control endpoint [ 1480.685755][ T2520] pvrusb2: Invalid write control endpoint [ 1480.687673][ T2520] pvrusb2: Invalid write control endpoint [ 1480.689489][ T2520] pvrusb2: Invalid write control endpoint [ 1480.699235][ T2520] pvrusb2: Attached sub-driver cs53l32a [ 1480.720284][ T2520] pvrusb2: Invalid write control endpoint [ 1480.722563][ T2520] pvrusb2: Invalid write control endpoint [ 1480.724377][ T2520] pvrusb2: Invalid write control endpoint [ 1480.727698][ T2520] pvrusb2: Invalid write control endpoint [ 1480.729497][ T2520] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1480.735843][ T2520] pvrusb2: Device being rendered inoperable [ 1480.745898][ T2520] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1480.752247][ T2520] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1481.002350][T28227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4380'. [ 1481.013059][T28227] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4380'. [ 1481.950703][T28241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4382'. [ 1482.326174][T28254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4384'. [ 1483.063148][T28260] binder: 28256:28260 ioctl c0306201 800003c0 returned -14 [ 1483.111309][T28262] overlayfs: failed to resolve '/ile0': -2 [ 1484.280479][T21604] Bluetooth: hci4: Frame reassembly failed (-84) [ 1484.313446][ T42] audit: type=1804 audit(1785703117.651:1586): pid=28284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4392" name="/newroot/1125/bus/bus" dev="overlay" ino=6514 res=1 errno=0 [ 1484.348652][ T42] audit: type=1326 audit(1785703117.691:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.1.4393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1484.355878][ T42] audit: type=1326 audit(1785703117.691:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.1.4393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1484.363815][ T42] audit: type=1326 audit(1785703117.711:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.1.4393" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1484.375539][ T42] audit: type=1326 audit(1785703117.711:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.1.4393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1484.382646][ T42] audit: type=1326 audit(1785703117.711:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.1.4393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1484.392967][ T42] audit: type=1326 audit(1785703117.711:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.1.4393" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1484.402993][ T42] audit: type=1326 audit(1785703117.711:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.1.4393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1484.412508][ T42] audit: type=1326 audit(1785703117.711:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.1.4393" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1484.422291][ T42] audit: type=1326 audit(1785703117.711:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.1.4393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1484.476108][T28287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1484.503480][T28287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1486.170905][T28303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4396'. [ 1486.280465][T12052] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1487.374430][T28321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4399'. [ 1488.410737][T28334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4401'. [ 1488.649082][T28342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4404'. [ 1488.671325][T28342] gretap1: entered promiscuous mode [ 1489.624442][T28358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4408'. [ 1490.264143][T28361] syz_tun: entered allmulticast mode [ 1490.312102][T28361] syz_tun: left allmulticast mode [ 1490.384733][T28374] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1490.688316][T28385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4414'. [ 1490.698392][T28386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4413'. [ 1491.435693][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 1491.435711][ T42] audit: type=1800 audit(1785703124.771:1638): pid=28393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4416" name="UDC" dev="configfs" ino=116294 res=0 errno=0 [ 1491.490686][T28393] configfs-gadget.g1 gadget.0: HOST MAC ca:e1:f5:c7:1c:37 [ 1491.493106][T28393] configfs-gadget.g1 gadget.0: MAC 56:97:83:59:ff:10 [ 1491.548634][ T42] audit: type=1326 audit(1785703124.821:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28389 comm="syz.2.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1491.668827][T28394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4415'. [ 1491.673304][ T42] audit: type=1326 audit(1785703124.821:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28389 comm="syz.2.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1491.681984][ T42] audit: type=1326 audit(1785703124.821:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28389 comm="syz.2.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1491.682568][T28394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4415'. [ 1491.689304][ T42] audit: type=1326 audit(1785703124.821:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28389 comm="syz.2.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1491.689331][ T42] audit: type=1326 audit(1785703124.821:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28389 comm="syz.2.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1491.689354][ T42] audit: type=1326 audit(1785703124.821:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28389 comm="syz.2.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1491.689375][ T42] audit: type=1326 audit(1785703124.821:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28389 comm="syz.2.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1491.689398][ T42] audit: type=1326 audit(1785703124.821:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28389 comm="syz.2.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1491.689420][ T42] audit: type=1326 audit(1785703124.821:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28389 comm="syz.2.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1491.811506][T28410] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1491.813633][T28410] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1491.822132][T28410] vhci_hcd vhci_hcd.0: Device attached [ 1491.855157][T28410] rdma_rxe: rxe_newlink: failed to add wg2 [ 1492.087694][ T5899] usb 40-1: SetAddress Request (99) to port 0 [ 1492.090465][ T5899] usb 40-1: new SuperSpeed USB device number 99 using vhci_hcd [ 1492.414101][T28411] vhci_hcd: connection reset by peer [ 1492.419463][ T5861] vhci_hcd vhci_hcd.1: stop threads [ 1492.421299][ T5861] vhci_hcd vhci_hcd.1: release socket [ 1492.423448][ T5861] vhci_hcd vhci_hcd.1: disconnect device [ 1492.756390][T28436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1493.718768][T27717] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1493.878986][T27717] usb 7-1: Using ep0 maxpacket: 8 [ 1493.883252][T27717] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1493.886893][T27717] usb 7-1: config 0 has no interface number 0 [ 1493.890740][T27717] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1493.895151][T27717] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1493.900534][T27717] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1493.905282][T27717] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1493.911560][T27717] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1493.915439][T27717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.935508][T27717] usb 7-1: config 0 descriptor?? [ 1493.952891][T27717] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1494.054395][T28464] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1494.091798][T28456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4424'. [ 1494.755482][T28467] wg2 speed is unknown, defaulting to 1000 [ 1494.796921][T19086] usb 7-1: USB disconnect, device number 21 [ 1494.796979][ C2] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 1494.808778][T19086] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1494.808797][T28450] ldusb: No device or device unplugged -19 [ 1496.168093][T28517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4431'. [ 1496.621466][T28527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4432'. [ 1497.206525][ T5899] usb 40-1: device descriptor read/8, error -110 [ 1497.663699][ T5899] usb usb40-port1: attempt power cycle [ 1498.001659][T28549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4436'. [ 1498.403635][T28566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4437'. [ 1498.410970][ T5899] usb usb40-port1: unable to enumerate USB device [ 1499.546032][T28585] Cannot find set identified by id 0 to match [ 1501.542177][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 1501.542237][ T42] audit: type=1804 audit(1785703134.881:1688): pid=28618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4457" name="file0" dev="tmpfs" ino=6537 res=1 errno=0 [ 1501.556143][T28620] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1501.806446][T28628] Set syz0 is full, maxelem 0 reached [ 1501.822923][T28630] 9pnet_virtio: no channels available for device c::: [ 1501.871610][T14252] Bluetooth: hci4: sending frame failed (-49) [ 1501.883389][T12052] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1502.174704][T28643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4452'. [ 1502.620573][ T42] audit: type=1800 audit(1785703135.961:1689): pid=28650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4455" name="UDC" dev="configfs" ino=117110 res=0 errno=0 [ 1503.506109][T28658] overlayfs: failed to clone upperpath [ 1505.458583][T28699] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1506.600716][T28726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4468'. [ 1506.604114][T28726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4468'. [ 1506.638421][T28725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4467'. [ 1506.670972][T11591] Bluetooth: hci4: Frame reassembly failed (-84) [ 1506.673035][T11579] Bluetooth: hci4: Frame reassembly failed (-84) [ 1506.734404][ T42] audit: type=1804 audit(1785703140.071:1690): pid=28727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4469" name="/newroot/1108/bus/bus" dev="overlay" ino=6448 res=1 errno=0 [ 1507.529314][T28736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4471'. [ 1508.677841][T14252] Bluetooth: hci4: command 0x1003 tx timeout [ 1508.678492][T12052] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1508.986534][T28754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4474'. [ 1509.389092][T28769] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1510.183596][T28785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4480'. [ 1510.266363][T28798] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4483'. [ 1510.504731][T28799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4482'. [ 1510.745205][T28799] wg2 speed is unknown, defaulting to 1000 [ 1511.841266][ T1162] Bluetooth: hci4: Frame reassembly failed (-90) [ 1511.870573][ T42] audit: type=1804 audit(1785703145.211:1691): pid=28816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4484" name="/newroot/1080/bus/bus" dev="overlay" ino=6144 res=1 errno=0 [ 1513.877710][T14252] Bluetooth: hci4: command 0x1003 tx timeout [ 1513.877745][T12052] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1514.173637][T28839] fuse: fd is not a fuse device [ 1514.395990][T28846] overlayfs: failed lookup in lower (newroot/1112, name='file1', err=-40): overlapping layers [ 1514.573977][T28849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4493'. [ 1515.923065][T28868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4498'. [ 1516.746471][T28877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4501'. [ 1516.971714][T28886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4503'. [ 1517.063650][T28886] can0: slcan on ttyS3. [ 1517.504591][T28886] can0 (unregistered): slcan off ttyS3. [ 1517.932198][T28891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4500'. [ 1518.665365][T28892] syz2: rxe_newlink: already configured on wg2 [ 1521.326066][T28937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4513'. [ 1521.687080][T28943] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1521.941935][T28943] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1521.947661][T28943] overlayfs: failed to look up (tracing) for ino (-66) [ 1522.152922][T28945] 9p: Bad value for 'rfdno' [ 1522.238667][ T42] audit: type=1804 audit(1785703155.581:1692): pid=28946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4516" name="/newroot/1154/cgroup.controllers" dev="tmpfs" ino=6671 res=1 errno=0 [ 1522.252796][ T42] audit: type=1800 audit(1785703155.591:1693): pid=28946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4516" name="cgroup.controllers" dev="tmpfs" ino=6671 res=0 errno=0 [ 1524.864525][T28974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4523'. [ 1525.741201][T28979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4525'. [ 1526.448815][T28984] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1526.450917][T28984] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1526.459196][T28984] vhci_hcd vhci_hcd.0: Device attached [ 1526.484394][T28993] vhci_hcd: connection closed [ 1526.484559][ T7294] vhci_hcd vhci_hcd.3: stop threads [ 1526.489646][ T7294] vhci_hcd vhci_hcd.3: release socket [ 1526.495242][ T7294] vhci_hcd vhci_hcd.3: disconnect device [ 1526.501772][T28995] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1526.503852][T28995] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1526.507276][T28995] vhci_hcd vhci_hcd.0: Device attached [ 1526.847787][ T5899] usb 42-1: SetAddress Request (94) to port 0 [ 1526.851803][ T5899] usb 42-1: new SuperSpeed USB device number 94 using vhci_hcd [ 1526.932157][T28995] rdma_rxe: rxe_newlink: failed to add wg2 [ 1527.043054][T29007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4530'. [ 1527.419014][T29010] wg2 speed is unknown, defaulting to 1000 [ 1528.068415][T28996] vhci_hcd: connection reset by peer [ 1528.083299][T12183] vhci_hcd vhci_hcd.2: stop threads [ 1528.086066][T12183] vhci_hcd vhci_hcd.2: release socket [ 1528.090572][T12183] vhci_hcd vhci_hcd.2: disconnect device [ 1528.091990][ T42] audit: type=1800 audit(1785703161.441:1694): pid=29018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4533" name="local" dev="configfs" ino=120869 res=0 errno=0 [ 1528.501610][T29032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4535'. [ 1528.517749][ T5897] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1528.667599][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 1528.671427][ T5897] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1528.677770][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.688847][ T5897] usb 6-1: config 0 descriptor?? [ 1528.706658][ T5897] as10x_usb: device has been detected [ 1528.710581][ T5897] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1528.717976][ T5897] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1528.722266][T29035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4536'. [ 1528.728683][ T5897] as10x_usb: error during firmware upload part1 [ 1528.731108][ T5897] Registered device nBox DVB-T Dongle [ 1528.756480][T29035] erspan0: left promiscuous mode [ 1528.916184][T29035] bridge1: left promiscuous mode [ 1528.919133][T29035] bridge1: left allmulticast mode [ 1528.921308][T29035] geneve4: left allmulticast mode [ 1528.931616][T29035] bridge2: left promiscuous mode [ 1528.933311][T27717] usb 6-1: USB disconnect, device number 36 [ 1528.936170][T29035] bridge2: left allmulticast mode [ 1528.943642][T29035] bridge3: left promiscuous mode [ 1528.947191][T29035] bridge3: left allmulticast mode [ 1528.977243][T29035] bond9: left promiscuous mode [ 1528.993754][T27717] Unregistered device nBox DVB-T Dongle [ 1528.996160][T27717] as10x_usb: device has been disconnected [ 1529.450924][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 1529.453248][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 1529.498779][T29041] ceph: No mds server is up or the cluster is laggy [ 1529.605233][T29056] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1529.631779][T29053] overlayfs: statfs failed on './file0' [ 1532.094513][T29089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4542'. [ 1532.638293][ T5899] usb 42-1: device descriptor read/8, error -110 [ 1532.969532][T26584] syz0: Port: 1 Link DOWN [ 1532.994419][T29080] wg2 speed is unknown, defaulting to 1000 [ 1533.031556][ T5899] usb usb42-port1: attempt power cycle [ 1534.095858][ T5899] usb usb42-port1: unable to enumerate USB device [ 1534.155732][T29099] validate_nla: 19 callbacks suppressed [ 1534.155784][T29099] netlink: 'syz.0.4546': attribute type 10 has an invalid length. [ 1535.305566][T29130] netlink: 'syz.1.4551': attribute type 1 has an invalid length. [ 1535.323832][T29130] bond8: entered promiscuous mode [ 1535.325912][T29130] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1535.374810][T29130] bond8: (slave bridge3): making interface the new active one [ 1535.377313][T29130] bridge3: entered promiscuous mode [ 1535.382343][T29130] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 1535.518451][T29136] 9p: Bad value for 'wfdno' [ 1535.576403][T29136] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1535.602337][T29136] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1535.604665][T29136] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1535.607078][T29136] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1535.618155][T29136] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1535.724264][T29136] pci 0000:00:01.0: Adding to iommu group 1 [ 1536.212882][T29136] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1536.215429][T29136] pci 0000:00:01.0: vgaarb: bridge control possible [ 1536.217669][T29136] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1536.228298][T29136] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 1536.242204][T29136] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 1536.245982][T29136] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 1536.249806][T29136] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 1536.252458][T29136] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 1536.255084][T29136] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 1536.259525][T29136] pci 0000:00:02.0: enabling Extended Tags [ 1536.464906][T29136] pci 0000:00:02.0: Adding to iommu group 2 [ 1536.493308][T29136] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1536.496844][T29136] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 1536.501111][T29136] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 1536.505788][T29136] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 1536.511649][T29136] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 1536.516056][T29136] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1536.521628][T29136] pci 0000:00:02.0: BAR 2 [io 0x2020-0x203f]: assigned [ 1536.529968][T29136] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1536.543771][T29136] [drm] Found bochs VGA, ID 0xb0c5. [ 1536.546023][T29136] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1536.551907][T29136] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 1536.606397][T29136] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 1536.685074][T29136] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 1537.186876][T29136] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 1537.201739][T29136] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 1537.210005][T29136] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 1537.516624][T29120] x_tables: duplicate underflow at hook 1 [ 1537.941552][ T5459] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1538.030761][T29165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4556'. [ 1538.138691][T29165] bond9: left promiscuous mode [ 1538.141520][T29165] bond9: left allmulticast mode [ 1538.143898][T29165] macvlan2: left allmulticast mode [ 1538.149510][T29165] bridge1: left promiscuous mode [ 1538.151864][T29165] bridge1: left allmulticast mode [ 1538.154165][T29165] geneve2: left allmulticast mode [ 1538.163383][T29165] macvlan5: left promiscuous mode [ 1538.165827][T29165] macvlan5: left allmulticast mode [ 1538.170806][T29165] bond11: left promiscuous mode [ 1538.382454][ T10] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 1540.502189][T29199] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1540.504539][T29199] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1540.566032][T29199] vhci_hcd vhci_hcd.0: Device attached [ 1541.292442][T19086] usb 44-1: SetAddress Request (106) to port 0 [ 1541.294686][T19086] usb 44-1: new SuperSpeed USB device number 106 using vhci_hcd [ 1542.630724][T29202] vhci_hcd: connection reset by peer [ 1542.632798][ T7294] vhci_hcd vhci_hcd.3: stop threads [ 1542.634721][ T7294] vhci_hcd vhci_hcd.3: release socket [ 1542.637280][ T7294] vhci_hcd vhci_hcd.3: disconnect device [ 1543.688171][T27717] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1543.840388][T27717] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1543.844863][T27717] usb 7-1: config 189 has an invalid interface number: 127 but max is 0 [ 1543.849507][T27717] usb 7-1: config 189 has no interface number 0 [ 1543.852275][T27717] usb 7-1: config 189 interface 127 has no altsetting 0 [ 1543.857306][T27717] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1543.862620][T27717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.866002][T27717] usb 7-1: Product: syz [ 1543.868416][T27717] usb 7-1: Manufacturer: syz [ 1543.870335][T27717] usb 7-1: SerialNumber: syz [ 1546.358574][T19086] usb 44-1: device descriptor read/8, error -110 [ 1546.551039][T27717] usbserial_generic 7-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1546.577070][T29241] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1546.580705][T29240] IPVS: stopping backup sync thread 29241 ... [ 1546.763114][T19086] usb usb44-port1: attempt power cycle [ 1547.020051][T27717] usbserial_generic 7-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1547.023525][T27717] usbserial_generic 7-1:189.127: device has no bulk endpoints [ 1547.026275][T27717] safe_serial 7-1:189.127: safe_serial converter detected [ 1547.036016][T27717] safe_serial 7-1:189.127: probe with driver safe_serial failed with error -22 [ 1547.040860][T27717] usb 7-1: USB disconnect, device number 22 [ 1548.106344][T19086] usb usb44-port1: unable to enumerate USB device [ 1550.098029][T27717] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1550.190857][T29294] BUG: unable to handle page fault for address: fffffffffffffc10 [ 1550.193982][T29294] #PF: supervisor read access in kernel mode [ 1550.196705][T29294] #PF: error_code(0x0000) - not-present page [ 1550.200810][T29294] PGD e997067 P4D e997067 PUD e999067 PMD 0 [ 1550.203324][T29294] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 1550.205595][T29294] CPU: 2 UID: 0 PID: 29294 Comm: syz.0.4573 Tainted: G L syzkaller #0 PREEMPT(full) [ 1550.210021][T29294] Tainted: [L]=SOFTLOCKUP [ 1550.211802][T29294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1550.215793][T29294] RIP: 0010:strnlen+0x4b/0x80 [ 1550.217894][T29294] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 1550.225580][T29294] RSP: 0018:ffffc900077d6fb0 EFLAGS: 00010246 [ 1550.228044][T29294] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1550.231332][T29294] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 1550.234564][T29294] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 1550.237814][T29294] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 1550.241085][T29294] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 1550.244050][T29294] FS: 0000000000000000(0000) GS:ffff888096ddf000(0063) knlGS:00000000f53acb40 [ 1550.247546][T29294] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1550.249748][T29294] CR2: fffffffffffffc10 CR3: 0000000059b4a000 CR4: 0000000000352ef0 [ 1550.253006][T29294] Call Trace: [ 1550.254432][T29294] [ 1550.255688][T29294] ? look_up_lock_class+0x55/0x120 [ 1550.257831][T29294] trace_event_raw_event_drv_net_setup_tc+0x100/0x5d0 [ 1550.260618][T29294] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 1550.263658][T29294] ? __pfx___might_resched+0x10/0x10 [ 1550.265884][T29294] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 1550.268233][T29294] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 1550.270838][T29294] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 1550.273292][T29294] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 1550.275956][T29294] ? __pfx_down_write+0x10/0x10 [ 1550.278071][T29294] tcf_block_get_ext+0x7ed/0x1950 [ 1550.280169][T29294] tcf_block_get+0xa8/0x100 [ 1550.282059][T29294] ? __pfx_tcf_block_get+0x10/0x10 [ 1550.284176][T29294] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1550.286749][T29294] ? __pfx_qdisc_watchdog+0x10/0x10 [ 1550.288769][T29294] htb_init+0x202/0xd90 [ 1550.290540][T29294] ? ref_tracker_alloc+0x307/0x590 [ 1550.292730][T29294] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1550.294997][T29294] ? qdisc_alloc+0x7cc/0xb30 [ 1550.296938][T29294] ? qdisc_create+0x70/0x1060 [ 1550.298918][T29294] ? __pfx_htb_init+0x10/0x10 [ 1550.300878][T29294] ? netlink_unicast+0x585/0x850 [ 1550.302469][T29294] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1550.304947][T29294] ? qdisc_alloc+0x81b/0xb30 [ 1550.306882][T29294] ? __pfx_htb_init+0x10/0x10 [ 1550.308738][T29294] qdisc_create+0x47b/0x1060 [ 1550.310636][T29294] tc_modify_qdisc+0xdcf/0x2120 [ 1550.312710][T29294] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1550.314912][T29294] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1550.317112][T29294] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1550.319156][T29294] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1550.321414][T29294] ? ref_tracker_free+0x37e/0x6c0 [ 1550.323491][T29294] netlink_rcv_skb+0x159/0x420 [ 1550.325491][T29294] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1550.327726][T29294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1550.329717][T29294] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1550.331837][T29294] netlink_unicast+0x585/0x850 [ 1550.333840][T29294] ? __pfx_netlink_unicast+0x10/0x10 [ 1550.335938][T29294] netlink_sendmsg+0x8b0/0xda0 [ 1550.337667][T29294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1550.339849][T29294] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1550.341609][T29294] ____sys_sendmsg+0xa4d/0xbe0 [ 1550.343117][T29294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1550.344781][T29294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1550.346433][T29294] ___sys_sendmsg+0x190/0x1e0 [ 1550.347902][T29294] ? __pfx____sys_sendmsg+0x10/0x10 [ 1550.349671][T29294] ? futex_wait+0x11e/0x370 [ 1550.351449][T29294] ? find_held_lock+0x2b/0x80 [ 1550.353416][T29294] __sys_sendmsg+0x160/0x210 [ 1550.355351][T29294] ? __pfx___sys_sendmsg+0x10/0x10 [ 1550.357406][T29294] __do_fast_syscall_32+0xe7/0x970 [ 1550.359519][T29294] ? lockdep_hardirqs_on+0x78/0x100 [ 1550.361702][T29294] do_fast_syscall_32+0x32/0x70 [ 1550.363730][T29294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1550.366309][T29294] RIP: 0023:0xf6fdefec [ 1550.367991][T29294] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 1550.370713][T29294] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1550.374143][T29294] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800012c0 [ 1550.377328][T29294] RDX: 0000000020008850 RSI: 0000000000000000 RDI: 0000000000000000 [ 1550.380559][T29294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1550.383780][T29294] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1550.386985][T29294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1550.389774][T29294] [ 1550.391060][T29294] Modules linked in: [ 1550.392704][T29294] CR2: fffffffffffffc10 [ 1550.394222][T29294] ---[ end trace 0000000000000000 ]--- [ 1550.396339][T29294] RIP: 0010:strnlen+0x4b/0x80 [ 1550.398337][T29294] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 1550.405658][T29294] RSP: 0018:ffffc900077d6fb0 EFLAGS: 00010246 [ 1550.408128][T29294] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1550.411214][T29294] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 1550.414455][T29294] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 1550.417684][T29294] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 1550.420466][T29294] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 1550.423340][T29294] FS: 0000000000000000(0000) GS:ffff888096ddf000(0063) knlGS:00000000f53acb40 [ 1550.426667][T29294] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1550.428745][T29294] CR2: 00000000f6fdf000 CR3: 0000000059b4a000 CR4: 0000000000352ef0 [ 1550.431710][T29294] Kernel panic - not syncing: Fatal exception [ 1550.434863][T29294] Kernel Offset: disabled [ 1550.436666][T29294] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:39:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000001b4fc4c RBX=ffffffff8e891480 RCX=ffffffff8bb892d5 RDX=0000000000000001 RSI=ffffffff8c400a00 RDI=ffffffff81de9497 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000000 R9 =ffffed100564678d R10=ffff88802b233c6b R11=ffffffff81d5692c R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f0a190 CR3=0000000064c06000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90007cb8000 RBX=ffffc90007cbf718 RCX=ffffc90007cc0000 RDX=ffffc90007cc0000 RSI=ffff888057a34a80 RDI=ffffc90007cbf638 RBP=dffffc0000000000 RSP=ffffc90007cbf608 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90007cbf688 R11=000000000000756b R12=fffff52000f97ed3 R13=fffff52000f97ed2 R14=ffffc90007cbf688 R15=ffffc90007cbf690 RIP=ffffffff810014b0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7248a50 CR3=0000000059987000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a09d75 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc900077d6810 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=000000000000006f R14=ffffffff9b6f71ff R15=ffffffff85a09d10 RIP=ffffffff85a09d9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffffffffffffc10 CR3=0000000059b4a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000178e364 RBX=ffff88801c7f2540 RCX=ffffffff8bb892d5 RDX=0000000000000001 RSI=ffffffff8c400a00 RDI=ffffffff81de9497 RBP=ffffed10038fe4a8 RSP=ffffc9000048fe00 R8 =0000000000000000 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=ffffffff81d5692c R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800012c0 CR3=00000000671e4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000