last executing test programs: 5.748812488s ago: executing program 2 (id=5121): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYBLOB="fcffff000000000067049c0bd125b5", @ANYRES16, @ANYRES32, @ANYRESOCT], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.677405031s ago: executing program 2 (id=5122): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x7}, @my=0x1, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000580)={r2, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x12, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3ad87531f7071a74df2cfc06c89f3d9e234b30c50997d5bef409ff2176ff7bfe2f7b6aa54cc50a1fcaed1e831fa7c0a7be998e1b228400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x6, 0x9]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0xdc, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000400)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r3) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000500), 0x4) dup2(r4, r4) 4.808708495s ago: executing program 2 (id=5125): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000003c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000200)=0x1, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) userfaultfd(0x80001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendto$netrom(r1, &(0x7f0000000100)="555e28cd33730e701cbc5b6ef0b564b07a55b65035c4", 0x16, 0x4000, &(0x7f0000000140)={{0x3, @default, 0x6}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) msgctl$IPC_RMID(0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r5 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x799b, 0xcca2, 0x44, 0x0, 0x0) 4.51895134s ago: executing program 2 (id=5127): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x40014) 3.390139463s ago: executing program 0 (id=5132): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 2.140021092s ago: executing program 0 (id=5135): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000003c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000200)=0x1, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) userfaultfd(0x80001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendto$netrom(r1, &(0x7f0000000100)="555e28cd33730e701cbc5b6ef0b564b07a55b65035c4", 0x16, 0x4000, &(0x7f0000000140)={{0x3, @default, 0x6}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) msgctl$IPC_RMID(0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r5 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x799b, 0xcca2, 0x44, 0x0, 0x0) 1.321105285s ago: executing program 3 (id=5138): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) setresuid(0x0, 0xee01, 0x0) capset(&(0x7f0000000980)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x9, 0x8000004, 0x7, 0x4}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e24, 0x7, @remote, 0x80000001}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e71cc7172c856b141e3f5e87e6ab615ea37c452b4043f3c0bbf0138f5f33e33eae79f3e12b1380800c30a1c48cdff0300f64800"}, 0xd8) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = epoll_create1(0x0) epoll_pwait(r9, &(0x7f00000002c0)=[{}], 0x1, 0x8001, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x30000011}) sendmsg$nl_route_sched(r7, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44851}, 0x20000400) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x400000}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x946}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x8001}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf47}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {}, {}, {0x40}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xec5}], [{}, {}, {}, {0x3}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x6237f348ff2383ba}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaaaae462e9870000084d020000280064000003069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100007907800e7"], 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r11, 0x25, 0x0, @void}, 0x10) bind(r4, &(0x7f00000000c0)=@can={0x1d, r11}, 0x80) 1.251424324s ago: executing program 2 (id=5139): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000500)="050000000000000081830704009ab276a997d5ba672242aa26f11e9c0846c45a030f0413798a553de71fa5eedf60f233b3b3cd5002c065680fcbba507ef9cf4f80539d54fd175bb1fcc435a8529dd576f82bcdcec1445e6c7cd6a6d39b8677274ad23a18f81bec832e46a0ca92629819010329bf8e7bfe7fe943588098822bafecf7cd890c5d4a1f0065489b82", 0x8d) (fail_nth: 2) 1.250858011s ago: executing program 0 (id=5140): socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006e00)=ANY=[@ANYBLOB="0c00060000000c009b12f4"], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)}}], 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x2, 0x1) r3 = syz_io_uring_setup(0x332e, &(0x7f0000000480)={0x0, 0xaeb7, 0x40, 0x3, 0x2d9}, &(0x7f00000001c0), &(0x7f0000000400)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/94, 0x5e}], 0x1}}], 0x1, 0x102, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000500)={r2}, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.080605648s ago: executing program 2 (id=5141): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) 1.005087121s ago: executing program 1 (id=5142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8850) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000d08000440000000160900010073797a30000000000900020073797a320000000014d600001100010000000000000000000700000a"], 0x78}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe88, 0x30, 0x25, 0x0, 0x0, {}, [{0xe74, 0x1, [@m_pedit={0xe70, 0x1, 0x0, 0x0, {{0xa}, {0xe44, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x20, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0xfff}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000}], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe88}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'batadv_slave_1\x00', 0x1000}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x4004, @fd_index=0x6, 0x8, &(0x7f0000002080)=""/4096, 0x1000, 0xa, 0x1, {0x0, r11}}) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000040)=0x2) 950.417311ms ago: executing program 3 (id=5143): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x48) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/97, 0x1000000, 0x1000, 0x5, 0x1}, 0x20) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') 691.321064ms ago: executing program 1 (id=5144): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12180, 0x60) close(r0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000040)) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000080)={0x4d800000, "b7f00c9da4b663ba82564a092ded61e4a5089a9a08ad860672d882427b728e15", 0x8, 0x0, 0x0, 0x4, 0x3}) setxattr$incfs_id(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) r1 = socket(0x1a, 0x80006, 0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000001c0)) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000240)=@l2tp, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/10, 0xa}, {&(0x7f0000000740)=""/61, 0x3d}, {&(0x7f0000000780)=""/179, 0xb3}], 0x9}, 0x9}, {{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000940)=""/30, 0x1e}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/82, 0x52}, {&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f0000000b40)=""/43, 0x2b}], 0x5, &(0x7f0000000bc0)=""/72, 0x48}, 0x6}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c40)=""/20, 0x14}, {&(0x7f0000000c80)=""/120, 0x78}, {&(0x7f0000000d00)=""/161, 0xa1}, {&(0x7f0000000dc0)=""/170, 0xaa}, {&(0x7f0000000e80)=""/56, 0x38}, {&(0x7f0000000ec0)=""/253, 0xfd}], 0x6}, 0x6}, {{&(0x7f0000001000)=@generic, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/177, 0xb1}], 0x1, &(0x7f0000001180)=""/27, 0x1b}, 0x3}, {{&(0x7f00000011c0)=@l2tp6, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001240)=""/130, 0x82}, {&(0x7f0000001300)=""/147, 0x93}], 0x2, &(0x7f0000001400)=""/205, 0xcd}, 0x7fff}, {{&(0x7f0000001500)=@nl=@proc, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001580)=""/134, 0x86}, {&(0x7f0000001640)=""/97, 0x61}, {&(0x7f00000016c0)=""/239, 0xef}, {&(0x7f00000017c0)}, {&(0x7f0000001800)=""/94, 0x5e}, {&(0x7f0000001880)=""/218, 0xda}, {&(0x7f0000001980)=""/108, 0x6c}, {&(0x7f0000001a00)=""/89, 0x59}, {&(0x7f0000001a80)=""/126, 0x7e}], 0x9}, 0x3}, {{&(0x7f0000001bc0)=@alg, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c40)=""/113, 0x71}, {&(0x7f0000001cc0)=""/15, 0xf}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)=""/34, 0x22}, {&(0x7f0000001d80)=""/92, 0x5c}, {&(0x7f0000001e00)=""/9, 0x9}, {&(0x7f0000001e40)=""/35, 0x23}], 0x7, &(0x7f0000001ec0)=""/240, 0xf0}, 0x4e736620}], 0x7, 0x100, &(0x7f00000020c0)={0x0, 0x989680}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000002100)={0x3}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002140)={0x0, 0x0}) sched_setattr(r3, &(0x7f0000002180)={0x38, 0x6, 0x2, 0xa, 0x5ef, 0x3, 0xff, 0xfff, 0x0, 0x7}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000021c0)={0x400, 0xe665, 0x7b, 0xdd9, 0x2, "ba946ea749b05aa99d7ca27aad26835c0190a8", 0xfffffff9, 0x101}) socket$inet(0x2, 0x80000, 0x3) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r4 = openat$tun(0xffffff9c, &(0x7f0000002200), 0x18100, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000002240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000022c0), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000002480)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002300)={0x10c, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x75c}, {0xc}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4850}, 0x480d4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000024c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000002540)={0x6, 0x118, 0xfa00, {{0x8, 0x4, "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", 0xdb, 0xa, 0x2, 0x9b, 0x1, 0x9, 0x9}, r7}}, 0x120) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000002680)={{0x1d, 0x7}, 'port0\x00', 0x0, 0x1000, 0x4, 0x6, 0xd9, 0x0, 0x400, 0x0, 0x3, 0x4e}) connect$tipc(r1, &(0x7f0000002740)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x4}}, 0x10) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000027c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002800)={0xac, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000005}, 0x84) r9 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000002940), 0x400800, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000002980)=0x4f) 602.667299ms ago: executing program 1 (id=5145): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 504.058143ms ago: executing program 1 (id=5146): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) r3 = dup(r1) r4 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d8", 0xe) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)="6db50725c08c11bbd2f097b245b4d706b776a9cf888bccd256c6b1a652da6b1254508f0a2d41949416f99928db60b4280aad0c3f014ff4654ffea04c8853cd9dfc", 0x41}], 0x1}], 0x1, 0xc000) io_setup(0xff, &(0x7f0000000380)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x14, 0x1e, 0x109}, 0x14}}, 0x44090) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x1, 0x4}, 'syz0\x00', 0x10}) ioctl$UI_SET_KEYBIT(r10, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r10, 0x5501) 357.185763ms ago: executing program 0 (id=5147): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1100000004000000040000000200000010000000", @ANYRESHEX=r1, @ANYBLOB, @ANYRES16, @ANYRES32, @ANYRESOCT], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r3 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 355.511774ms ago: executing program 0 (id=5148): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b40)=[{{&(0x7f0000000200)={0xfffd, 0x4e23, 0x2, @loopback, 0x1ff}, 0x1c, 0x0}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c, 0x0}}], 0x2, 0x400c015) 291.89861ms ago: executing program 3 (id=5149): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe88, 0x30, 0x25, 0x0, 0x0, {}, [{0xe74, 0x1, [@m_pedit={0xe70, 0x1, 0x0, 0x0, {{0xa}, {0xe44, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x20, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0xfff}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000}], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe88}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'batadv_slave_1\x00', 0x1000}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffcb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "1f8271b57326d2cd06c77f7141082f8bc18164a8cde63d55c42552f43f2cb0126f46de26c849626f8f1e92ec1693d6580135c73acfe420c078830b68732dd35588582d1623a87e1c705a6260fccb8a9723b1299a305b1fe6d1858aad80f29d43bc45d44ee93b8a1cd5a2f7bd1c8d4711330bd8e17da2ca0f428712c1f913fd0526a82497ee4888b2695491dabe3af483ec6c939b9ab1893cada806b245f320eeb8005c6a6b520e65a4449408ae841b548e6e309f3b9ad5fbd764d7338052495f89a82be087b692eb11f5b9153d0a3f22b5586c2078662e25d9ab57d339904f6e824fc2b705ac50cde174f48bb04e934ea306e91be9343d09e05192691250e303"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000080)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x4004, @fd_index=0x6, 0x8, &(0x7f0000002080)=""/4096, 0x1000, 0xa, 0x1, {0x0, r10}}) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r8, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 291.624398ms ago: executing program 0 (id=5150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x42, 0x1) request_key(&(0x7f0000000140)='big_key\x00', 0x0, 0x0, 0xfffffffffffffff9) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x70, &(0x7f0000000040)=ANY=[@ANYBLOB="12090000000000082505a1a4400001e0020109025e00020105c0952fad190d5203090400000102b232"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d", @ANYRESHEX], 0xf8) r3 = openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi1\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x3c4, 0xd, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x8000, 0x4, 0x723, 0x6, 0x7, 0x13, 0x4000100, 0xfeffffa7, 0xd, 0x59, 0x1, 0x3ff, 0x9, 0x1f7, 0xe2e3, 0xaa14, 0x3, 0x6, 0xa, 0x7, 0x2, 0x6]}) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="000000000300000000000000"], 0x50) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) recvfrom$inet(r4, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000000000000000000000000000000000000000e03ac0024b6acc2fb47eb49cc5cad4cd1f129b9fd33078c655886860b694207dc2e8d2aa133273d4d0030fe70e10bb28f8265deddfb4f47aac100f5a77a1", @ANYRES32=0x0, @ANYBLOB="850b010000000000140003006d6163736563300000000000000000000a000100aaaaaaaaaabb0000", @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000303010100000000000000000000000a08000340000000013f32306859d3726c51a0be5d44bbc50c1d8580c88a80936048bdf10ffcad92c1ef4526755671f3ab9872f32e570dc1ba826d9786c5d971be396214ce7d14a75bcd19ebb61f60fa6b6a15f6f6e9f222ec637269b5d95919c0bf469192c806bf23856c99d7760500180497d34ddb7fc576160e8b6c06dea7126909642df4c60670f081991b973bb8367b4dfa18d5dd09e1"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d03, &(0x7f0000000240)) 289.208484ms ago: executing program 1 (id=5151): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) setresuid(0x0, 0xee01, 0x0) capset(&(0x7f0000000980)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x9, 0x8000004, 0x7, 0x4}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "1cb315f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}]}}]}, 0x14c}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e24, 0x7, @remote, 0x80000001}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e71cc7172c856b141e3f5e87e6ab615ea37c452b4043f3c0bbf0138f5f33e33eae79f3e12b1380800c30a1c48cdff0300f64800"}, 0xd8) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = epoll_create1(0x0) epoll_pwait(r9, &(0x7f00000002c0)=[{}], 0x1, 0x8001, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x30000011}) sendmsg$nl_route_sched(r7, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44851}, 0x20000400) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x400000}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x946}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x8001}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf47}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {}, {}, {0x40}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xec5}], [{}, {}, {}, {0x3}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x6237f348ff2383ba}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaaaae462e9870000084d020000280064000003069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100007907800e7"], 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r11, 0x25, 0x0, @void}, 0x10) bind(r4, &(0x7f00000000c0)=@can={0x1d, r11}, 0x80) 158.165509ms ago: executing program 3 (id=5152): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x40104d14, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000700)={0x3, 0x0, @ioapic={0x4, 0x2, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x4}, {}, {}, {0x0, 0x2}, {}, {0x2}, {}, {}, {0x0, 0x0, 0x40, '\x00', 0x8}, {}, {}, {}, {}, {0x0, 0x40}, {0xfd}, {0xf}, {0x0, 0x2}, {}, {}, {}, {0x3f}, {0x0, 0x0, 0xb6, '\x00', 0xe}]}}) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r4, 0x7b3, &(0x7f0000000000)) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 59.638347ms ago: executing program 1 (id=5153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000019c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (fail_nth: 6) 708.256µs ago: executing program 3 (id=5154): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 3 (id=5155): socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006e00)=ANY=[@ANYBLOB="0c00060000000c009b12f4"], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)}}], 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x2, 0x1) r3 = syz_io_uring_setup(0x332e, &(0x7f0000000480)={0x0, 0xaeb7, 0x40, 0x3, 0x2d9}, &(0x7f00000001c0), &(0x7f0000000400)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/94, 0x5e}], 0x1}}], 0x1, 0x102, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000500)={r2}, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): 03:0955:7214.0030: unknown main item tag 0x0 [ 1041.005621][T12498] shield 0003:0955:7214.0030: unknown main item tag 0x0 [ 1041.008575][T12498] shield 0003:0955:7214.0030: unknown main item tag 0x0 [ 1041.020690][T12498] shield 0003:0955:7214.0030: unknown main item tag 0x0 [ 1041.030803][T12498] input: HID 0955:7214 Haptics as /devices/virtual/input/input127 [ 1041.054022][T12498] shield 0003:0955:7214.0030: Registered Thunderstrike controller [ 1041.058572][T12498] shield 0003:0955:7214.0030: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1041.102322][T23461] input: syz0 as /devices/virtual/input/input128 [ 1041.184794][T23444] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4639'. [ 1041.190402][ T24] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1041.196631][ T6023] usb 5-1: USB disconnect, device number 50 [ 1041.199300][ T24] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1041.207619][ T24] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1041.213533][ T24] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1041.694583][T23471] fuse: Bad value for 'fd' [ 1042.315125][T23483] fuse: Bad value for 'fd' [ 1042.387614][T23488] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1042.390453][T23488] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1042.401750][T23488] vhci_hcd vhci_hcd.0: Device attached [ 1043.392164][T23504] input: syz0 as /devices/virtual/input/input129 [ 1043.613171][T23489] vhci_hcd: connection closed [ 1043.613482][ T1148] vhci_hcd vhci_hcd.1: stop threads [ 1043.619399][ T1148] vhci_hcd vhci_hcd.1: release socket [ 1043.631557][ T1148] vhci_hcd vhci_hcd.1: disconnect device [ 1044.026385][T23514] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4659'. [ 1044.080280][T12764] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1044.190323][ T1455] usb 40-1: device descriptor read/8, error -110 [ 1044.290350][T12764] usb 7-1: Using ep0 maxpacket: 16 [ 1044.294442][T12764] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.299187][T12764] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.303405][T12764] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1044.308913][T12764] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1044.313005][T12764] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.320623][T12764] usb 7-1: config 0 descriptor?? [ 1044.580956][ T1455] usb usb40-port1: attempt power cycle [ 1044.732743][T12764] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 1044.735739][T12764] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 1044.738740][T12764] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 1044.755486][T12764] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 1044.758494][T12764] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 1044.772087][T12764] input: HID 0955:7214 Haptics as /devices/virtual/input/input130 [ 1044.810965][T12764] shield 0003:0955:7214.0031: Registered Thunderstrike controller [ 1044.818002][T12764] shield 0003:0955:7214.0031: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1044.930830][T23509] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4658'. [ 1044.949044][T12880] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1044.956267][T12880] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1044.961407][T12764] usb 7-1: USB disconnect, device number 51 [ 1044.965531][T12880] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1044.974017][T12880] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1045.150883][ T1455] usb usb40-port1: unable to enumerate USB device [ 1045.477226][T23529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4663'. [ 1046.921365][T23553] FAULT_INJECTION: forcing a failure. [ 1046.921365][T23553] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.926140][T23553] CPU: 2 UID: 0 PID: 23553 Comm: syz.1.4669 Tainted: G L syzkaller #0 PREEMPT(full) [ 1046.926159][T23553] Tainted: [L]=SOFTLOCKUP [ 1046.926163][T23553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1046.926171][T23553] Call Trace: [ 1046.926176][T23553] [ 1046.926180][T23553] dump_stack_lvl+0x16c/0x1f0 [ 1046.926198][T23553] should_fail_ex+0x512/0x640 [ 1046.926216][T23553] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 1046.926234][T23553] should_failslab+0xc2/0x120 [ 1046.926252][T23553] __kmalloc_cache_node_noprof+0x83/0x830 [ 1046.926268][T23553] ? __pfx_css_rstat_updated+0x10/0x10 [ 1046.926280][T23553] ? __get_vm_area_node+0x101/0x330 [ 1046.926300][T23553] ? __get_vm_area_node+0x101/0x330 [ 1046.926316][T23553] ? mod_memcg_lruvec_state+0x381/0x5f0 [ 1046.926329][T23553] __get_vm_area_node+0x101/0x330 [ 1046.926348][T23553] __vmalloc_node_range_noprof+0x247/0x16b0 [ 1046.926367][T23553] ? vhost_task_create+0x1d2/0x370 [ 1046.926380][T23553] ? local_lock_release+0x99/0x130 [ 1046.926394][T23553] ? vhost_task_create+0x1d2/0x370 [ 1046.926409][T23553] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1046.926429][T23553] ? __memcg_slab_post_alloc_hook+0x472/0x880 [ 1046.926450][T23553] ? rcu_is_watching+0x12/0xc0 [ 1046.926467][T23553] ? vhost_task_create+0x1d2/0x370 [ 1046.926492][T23553] __vmalloc_node_noprof+0xad/0xf0 [ 1046.926510][T23553] ? vhost_task_create+0x1d2/0x370 [ 1046.926528][T23553] copy_process+0x619/0x7430 [ 1046.926552][T23553] ? __pfx_copy_process+0x10/0x10 [ 1046.926570][T23553] ? lockdep_init_map_type+0x5c/0x270 [ 1046.926583][T23553] ? lockdep_init_map_type+0x5c/0x270 [ 1046.926594][T23553] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1046.926614][T23553] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1046.926630][T23553] vhost_task_create+0x1d2/0x370 [ 1046.926642][T23553] ? __pfx_vhost_task_create+0x10/0x10 [ 1046.926659][T23553] ? __pfx_vhost_task_fn+0x10/0x10 [ 1046.926673][T23553] ? __pfx___mutex_lock+0x10/0x10 [ 1046.926691][T23553] kvm_mmu_post_init_vm+0x1b7/0x380 [ 1046.926707][T23553] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 1046.926721][T23553] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 1046.926741][T23553] kvm_vcpu_ioctl+0x76d/0x16d0 [ 1046.926760][T23553] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1046.926777][T23553] ? tomoyo_path_number_perm+0x18d/0x580 [ 1046.926797][T23553] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1046.926819][T23553] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1046.926837][T23553] ? do_vfs_ioctl+0x128/0x14f0 [ 1046.926851][T23553] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1046.926870][T23553] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 1046.926888][T23553] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1046.926906][T23553] ? __fget_files+0x20e/0x3c0 [ 1046.926920][T23553] ? __fput_deferred+0x480/0x480 [ 1046.926933][T23553] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1046.926951][T23553] __ia32_compat_sys_ioctl+0x242/0x370 [ 1046.926966][T23553] __do_fast_syscall_32+0xe8/0x680 [ 1046.926983][T23553] do_fast_syscall_32+0x32/0x80 [ 1046.926997][T23553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1046.927010][T23553] RIP: 0023:0xf70bd579 [ 1046.927020][T23553] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1046.927031][T23553] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1046.927041][T23553] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1046.927048][T23553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1046.927055][T23553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1046.927061][T23553] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1046.927068][T23553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1046.927082][T23553] [ 1046.927156][T23553] syz.1.4669: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1047.059603][T23553] CPU: 2 UID: 0 PID: 23553 Comm: syz.1.4669 Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.059622][T23553] Tainted: [L]=SOFTLOCKUP [ 1047.059626][T23553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1047.059633][T23553] Call Trace: [ 1047.059638][T23553] [ 1047.059642][T23553] dump_stack_lvl+0x16c/0x1f0 [ 1047.059661][T23553] warn_alloc+0x248/0x3a0 [ 1047.059676][T23553] ? __pfx_warn_alloc+0x10/0x10 [ 1047.059689][T23553] ? trace_kmalloc+0x2b/0xb0 [ 1047.059705][T23553] ? __kmalloc_cache_node_noprof+0x2ed/0x830 [ 1047.059725][T23553] ? __kasan_kmalloc+0x8a/0xb0 [ 1047.059741][T23553] ? __get_vm_area_node+0x208/0x330 [ 1047.059763][T23553] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 1047.059783][T23553] ? local_lock_release+0x99/0x130 [ 1047.059798][T23553] ? vhost_task_create+0x1d2/0x370 [ 1047.059815][T23553] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1047.059835][T23553] ? __memcg_slab_post_alloc_hook+0x472/0x880 [ 1047.059858][T23553] ? rcu_is_watching+0x12/0xc0 [ 1047.059876][T23553] ? vhost_task_create+0x1d2/0x370 [ 1047.059888][T23553] __vmalloc_node_noprof+0xad/0xf0 [ 1047.059907][T23553] ? vhost_task_create+0x1d2/0x370 [ 1047.059921][T23553] copy_process+0x619/0x7430 [ 1047.059946][T23553] ? __pfx_copy_process+0x10/0x10 [ 1047.059965][T23553] ? lockdep_init_map_type+0x5c/0x270 [ 1047.059978][T23553] ? lockdep_init_map_type+0x5c/0x270 [ 1047.059990][T23553] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1047.060011][T23553] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1047.060029][T23553] vhost_task_create+0x1d2/0x370 [ 1047.060041][T23553] ? __pfx_vhost_task_create+0x10/0x10 [ 1047.060059][T23553] ? __pfx_vhost_task_fn+0x10/0x10 [ 1047.060073][T23553] ? __pfx___mutex_lock+0x10/0x10 [ 1047.060093][T23553] kvm_mmu_post_init_vm+0x1b7/0x380 [ 1047.060109][T23553] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 1047.060124][T23553] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 1047.060145][T23553] kvm_vcpu_ioctl+0x76d/0x16d0 [ 1047.060164][T23553] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1047.060183][T23553] ? tomoyo_path_number_perm+0x18d/0x580 [ 1047.060203][T23553] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1047.060227][T23553] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1047.060247][T23553] ? do_vfs_ioctl+0x128/0x14f0 [ 1047.060261][T23553] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1047.060281][T23553] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 1047.060300][T23553] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1047.060318][T23553] ? __fget_files+0x20e/0x3c0 [ 1047.060334][T23553] ? __fput_deferred+0x480/0x480 [ 1047.060348][T23553] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1047.060367][T23553] __ia32_compat_sys_ioctl+0x242/0x370 [ 1047.060398][T23553] __do_fast_syscall_32+0xe8/0x680 [ 1047.060415][T23553] do_fast_syscall_32+0x32/0x80 [ 1047.060430][T23553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1047.060446][T23553] RIP: 0023:0xf70bd579 [ 1047.060456][T23553] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1047.060468][T23553] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1047.060479][T23553] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1047.060487][T23553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1047.060494][T23553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1047.060500][T23553] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1047.060507][T23553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1047.060522][T23553] [ 1047.060558][T23553] Mem-Info: [ 1047.060566][T23553] active_anon:5539 inactive_anon:1338 isolated_anon:0 [ 1047.060566][T23553] active_file:7929 inactive_file:12234 isolated_file:0 [ 1047.060566][T23553] unevictable:1768 dirty:267 writeback:0 [ 1047.060566][T23553] slab_reclaimable:6283 slab_unreclaimable:56644 [ 1047.060566][T23553] mapped:28674 shmem:5908 pagetables:1362 [ 1047.060566][T23553] sec_pagetables:332 bounce:0 [ 1047.060566][T23553] kernel_misc_reclaimable:0 [ 1047.060566][T23553] free:60238 free_pcp:13778 free_cma:0 [ 1047.060597][T23553] Node 0 active_anon:500kB inactive_anon:800kB active_file:0kB inactive_file:144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:272kB dirty:0kB writeback:0kB shmem:3668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9376kB pagetables:1616kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB [ 1047.060627][T23553] Node 1 active_anon:21656kB inactive_anon:4552kB active_file:31716kB inactive_file:48792kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:114424kB dirty:1068kB writeback:0kB shmem:19964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4084kB pagetables:3832kB sec_pagetables:188kB all_unreclaimable? no Balloon:0kB [ 1047.060656][T23553] Node 0 DMA free:2448kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1047.060690][T23553] lowmem_reserve[]: 0 289 289 289 289 [ 1047.060714][T23553] Node 0 DMA32 free:27268kB boost:10240kB min:23572kB low:26904kB high:30236kB reserved_highatomic:2048KB free_highatomic:1672KB active_anon:500kB inactive_anon:800kB active_file:0kB inactive_file:144kB unevictable:3536kB writepending:0kB zspages:212kB present:1032196kB managed:296868kB mlocked:0kB bounce:0kB free_pcp:9448kB local_pcp:1948kB free_cma:0kB [ 1047.060751][T23553] lowmem_reserve[]: 0 0 0 0 0 [ 1047.060773][T23553] Node 1 DMA32 free:211236kB boost:10240kB min:57384kB low:69168kB high:80952kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21656kB inactive_anon:4552kB active_file:31716kB inactive_file:48792kB unevictable:3536kB writepending:1068kB zspages:4816kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:45632kB local_pcp:6992kB free_cma:0kB [ 1047.060809][T23553] lowmem_reserve[]: 0 0 0 0 0 [ 1047.060832][T23553] Node 0 DMA: 26*4kB (U) 13*8kB (UE) 10*16kB (UE) 9*32kB (UE) 4*64kB (UE) 2*128kB (E) 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 2448kB [ 1047.060941][T23553] Node 0 DMA32: 1077*4kB (UMEH) 594*8kB (UMEH) 262*16kB (UMEH) 70*32kB (UMEH) 40*64kB (UMEH) 28*128kB (UMEH) 10*256kB (UMEH) 2*512kB (MH) 0*1024kB 1*2048kB (U) 0*4096kB = 27268kB [ 1047.061037][T23553] Node 1 DMA32: 2577*4kB (UME) 2882*8kB (UME) 2515*16kB (UME) 185*32kB (UM) 33*64kB (UME) 104*128kB (UM) 168*256kB (UM) 81*512kB (UM) 17*1024kB (UM) 7*2048kB (UM) 0*4096kB = 211172kB [ 1047.061136][T23553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1047.061147][T23553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1047.061156][T23553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1047.061166][T23553] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1047.061175][T23553] 27574 total pagecache pages [ 1047.061180][T23553] 1507 pages in swap cache [ 1047.061185][T23553] Free swap = 103820kB [ 1047.061190][T23553] Total swap = 124996kB [ 1047.061195][T23553] 524155 pages RAM [ 1047.061199][T23553] 0 pages HighMem/MovableOnly [ 1047.061203][T23553] 209045 pages reserved [ 1047.061207][T23553] 0 pages cma reserved [ 1047.717797][T12498] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1047.877394][T12498] usb 6-1: Using ep0 maxpacket: 16 [ 1047.880638][T12498] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.884093][T12498] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.887195][T12498] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1047.891798][T12498] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1047.894719][T12498] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.920059][T12498] usb 6-1: config 0 descriptor?? [ 1048.531431][T23559] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4671'. [ 1048.537974][T12498] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 1048.540380][T12498] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 1048.542645][T12498] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 1048.561683][T12498] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 1048.564747][T12498] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 1048.569471][T23571] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1048.570473][T12498] input: HID 0955:7214 Haptics as /devices/virtual/input/input131 [ 1048.572305][T23571] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1048.574612][T23571] vhci_hcd vhci_hcd.0: Device attached [ 1048.595497][T12498] shield 0003:0955:7214.0032: Registered Thunderstrike controller [ 1048.600250][T12498] shield 0003:0955:7214.0032: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1048.657138][ T24] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1048.667409][T12498] usb 6-1: USB disconnect, device number 45 [ 1048.677049][ T24] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1048.680628][ T24] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1048.684315][ T24] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1048.737827][T23576] vhci_hcd: connection closed [ 1048.738620][ T1140] vhci_hcd vhci_hcd.2: stop threads [ 1048.748220][ T1140] vhci_hcd vhci_hcd.2: release socket [ 1048.756748][ T1140] vhci_hcd vhci_hcd.2: disconnect device [ 1048.806722][ T1455] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 1048.809323][T12764] libceph: connect (1)[c::]:6789 error -101 [ 1048.809647][ T1455] usb 41-1: enqueue for inactive port 0 [ 1048.812223][T12764] libceph: mon0 (1)[c::]:6789 connect error [ 1048.877009][ T1455] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1048.960292][T23579] ceph: No mds server is up or the cluster is laggy [ 1049.074474][T23589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.135944][T23589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.144537][T23589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.277644][T12764] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1049.791416][T12764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.796093][T12764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.799556][T12764] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1049.804148][T12764] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1049.807598][T12764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.812365][T12764] usb 5-1: config 0 descriptor?? [ 1050.229869][T12764] plantronics 0003:047F:FFFF.0033: reserved main item tag 0xe [ 1050.247218][T12764] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 1050.301285][T12764] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1050.852775][T12764] usb 5-1: USB disconnect, device number 51 [ 1051.409585][T23610] netlink: 'syz.0.4683': attribute type 2 has an invalid length. [ 1051.412049][T23610] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4683'. [ 1052.594952][T23628] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1052.606059][T23628] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1052.609279][T23628] overlayfs: failed to look up (tracing) for ino (-66) [ 1052.614520][T23628] overlayfs: failed to resolve './file1': -2 [ 1053.443656][ T24] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1053.613152][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1053.624192][ T24] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.628250][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1053.632698][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.143845][T23673] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1055.161814][T23673] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1055.166067][T23673] overlayfs: failed to look up (tracing) for ino (-66) [ 1055.171709][T23673] overlayfs: failed to resolve './file1': -2 [ 1056.214984][ T34] usb 7-1: USB disconnect, device number 52 [ 1058.159731][T12880] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1058.329762][T12880] usb 5-1: Using ep0 maxpacket: 8 [ 1058.333600][T12880] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.339447][T12880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1058.346190][T12880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.374202][T23734] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1058.377123][T23734] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1058.381468][T23734] vhci_hcd vhci_hcd.0: Device attached [ 1058.415504][T23737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4714'. [ 1058.680033][T15678] usb 42-1: SetAddress Request (85) to port 0 [ 1058.682758][T15678] usb 42-1: new SuperSpeed USB device number 85 using vhci_hcd [ 1058.983128][T23735] vhci_hcd: connection reset by peer [ 1058.985700][T19389] vhci_hcd vhci_hcd.2: stop threads [ 1058.987832][T19389] vhci_hcd vhci_hcd.2: release socket [ 1058.990310][T19389] vhci_hcd vhci_hcd.2: disconnect device [ 1059.819228][T23751] FAULT_INJECTION: forcing a failure. [ 1059.819228][T23751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.824777][T23751] CPU: 3 UID: 0 PID: 23751 Comm: syz.2.4718 Tainted: G L syzkaller #0 PREEMPT(full) [ 1059.824806][T23751] Tainted: [L]=SOFTLOCKUP [ 1059.824812][T23751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1059.824822][T23751] Call Trace: [ 1059.824828][T23751] [ 1059.824838][T23751] dump_stack_lvl+0x16c/0x1f0 [ 1059.824865][T23751] should_fail_ex+0x512/0x640 [ 1059.824897][T23751] _copy_to_user+0x32/0xd0 [ 1059.824924][T23751] simple_read_from_buffer+0xcb/0x170 [ 1059.824949][T23751] proc_fail_nth_read+0x197/0x240 [ 1059.824979][T23751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1059.825005][T23751] ? rw_verify_area+0xcf/0x6c0 [ 1059.825019][T23751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1059.825040][T23751] vfs_read+0x1e4/0xcf0 [ 1059.825064][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1059.825080][T23751] ? __pfx_vfs_read+0x10/0x10 [ 1059.825094][T23751] ? find_held_lock+0x2b/0x80 [ 1059.825113][T23751] ? __fget_files+0x20e/0x3c0 [ 1059.825132][T23751] ksys_read+0x12a/0x250 [ 1059.825147][T23751] ? __pfx_ksys_read+0x10/0x10 [ 1059.825193][T23751] __do_fast_syscall_32+0xe8/0x680 [ 1059.825216][T23751] do_fast_syscall_32+0x32/0x80 [ 1059.825230][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1059.825244][T23751] RIP: 0023:0xf7ff2579 [ 1059.825253][T23751] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1059.825264][T23751] RSP: 002b:00000000f54e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1059.825275][T23751] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54e6620 [ 1059.825282][T23751] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 1059.825289][T23751] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1059.825295][T23751] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1059.825302][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1059.825316][T23751] [ 1060.053950][T23756] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1060.056746][T23756] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1060.061107][T23756] vhci_hcd vhci_hcd.0: Device attached [ 1060.358913][T12498] usb 40-1: SetAddress Request (102) to port 0 [ 1060.367258][T12498] usb 40-1: new SuperSpeed USB device number 102 using vhci_hcd [ 1060.563941][T23757] vhci_hcd: connection reset by peer [ 1060.566332][T19389] vhci_hcd vhci_hcd.1: stop threads [ 1060.568302][T19389] vhci_hcd vhci_hcd.1: release socket [ 1060.570652][T19389] vhci_hcd vhci_hcd.1: disconnect device [ 1061.112323][ T34] usb 5-1: USB disconnect, device number 52 [ 1061.723199][T23784] FAULT_INJECTION: forcing a failure. [ 1061.723199][T23784] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.727569][T23784] CPU: 0 UID: 0 PID: 23784 Comm: syz.3.4728 Tainted: G L syzkaller #0 PREEMPT(full) [ 1061.727589][T23784] Tainted: [L]=SOFTLOCKUP [ 1061.727593][T23784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1061.727600][T23784] Call Trace: [ 1061.727605][T23784] [ 1061.727609][T23784] dump_stack_lvl+0x16c/0x1f0 [ 1061.727627][T23784] should_fail_ex+0x512/0x640 [ 1061.727646][T23784] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1061.727666][T23784] should_failslab+0xc2/0x120 [ 1061.727691][T23784] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1061.727714][T23784] ? __alloc_skb+0x156/0x410 [ 1061.727747][T23784] ? __alloc_skb+0x156/0x410 [ 1061.727773][T23784] __alloc_skb+0x156/0x410 [ 1061.727798][T23784] ? __alloc_skb+0x35d/0x410 [ 1061.727824][T23784] ? __pfx___alloc_skb+0x10/0x10 [ 1061.727852][T23784] ? netlink_autobind.isra.0+0x158/0x370 [ 1061.727881][T23784] netlink_alloc_large_skb+0x69/0x140 [ 1061.727897][T23784] netlink_sendmsg+0x698/0xdd0 [ 1061.727914][T23784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1061.727929][T23784] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1061.727947][T23784] ____sys_sendmsg+0xa5d/0xc30 [ 1061.727964][T23784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1061.727978][T23784] ? get_compat_msghdr+0x11a/0x170 [ 1061.727994][T23784] ___sys_sendmsg+0x134/0x1d0 [ 1061.728007][T23784] ? __pfx____sys_sendmsg+0x10/0x10 [ 1061.728024][T23784] ? find_held_lock+0x2b/0x80 [ 1061.728047][T23784] __sys_sendmsg+0x16d/0x220 [ 1061.728059][T23784] ? __pfx___sys_sendmsg+0x10/0x10 [ 1061.728078][T23784] __do_fast_syscall_32+0xe8/0x680 [ 1061.728094][T23784] do_fast_syscall_32+0x32/0x80 [ 1061.728109][T23784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1061.728123][T23784] RIP: 0023:0xf7fb5579 [ 1061.728138][T23784] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1061.728149][T23784] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1061.728160][T23784] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 1061.728167][T23784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1061.728174][T23784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1061.728180][T23784] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1061.728186][T23784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1061.728200][T23784] [ 1061.825102][T23786] dlm: non-version read from control device 34 [ 1061.859658][ T40] audit: type=1400 audit(1765355547.534:1118): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1062.756399][ T34] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1062.976551][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 1062.980084][ T34] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.983384][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1062.986497][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.129721][T23819] FAULT_INJECTION: forcing a failure. [ 1063.129721][T23819] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.134300][T23819] CPU: 0 UID: 0 PID: 23819 Comm: syz.0.4734 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.134320][T23819] Tainted: [L]=SOFTLOCKUP [ 1063.134324][T23819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1063.134330][T23819] Call Trace: [ 1063.134336][T23819] [ 1063.134342][T23819] dump_stack_lvl+0x16c/0x1f0 [ 1063.134359][T23819] should_fail_ex+0x512/0x640 [ 1063.134381][T23819] should_failslab+0xc2/0x120 [ 1063.134398][T23819] kmem_cache_alloc_noprof+0x83/0x770 [ 1063.134411][T23819] ? skb_clone+0x190/0x3f0 [ 1063.134425][T23819] ? skb_clone+0x190/0x3f0 [ 1063.134435][T23819] skb_clone+0x190/0x3f0 [ 1063.134447][T23819] ip_mc_output+0x72d/0xc40 [ 1063.134464][T23819] __ip_queue_xmit+0xf75/0x2330 [ 1063.134483][T23819] l2tp_xmit_skb+0x905/0x1920 [ 1063.134502][T23819] ? pppol2tp_sendmsg+0x460/0x5f0 [ 1063.134519][T23819] pppol2tp_sendmsg+0x473/0x5f0 [ 1063.134539][T23819] ____sys_sendmsg+0xa5d/0xc30 [ 1063.134556][T23819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1063.134570][T23819] ? get_compat_msghdr+0x11a/0x170 [ 1063.134583][T23819] ? __pfx__kstrtoull+0x10/0x10 [ 1063.134599][T23819] ___sys_sendmsg+0x134/0x1d0 [ 1063.134611][T23819] ? __pfx____sys_sendmsg+0x10/0x10 [ 1063.134638][T23819] __sys_sendmmsg+0x2f9/0x420 [ 1063.134651][T23819] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1063.134666][T23819] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1063.134687][T23819] ? fput+0x70/0xf0 [ 1063.134697][T23819] ? ksys_write+0x1ac/0x250 [ 1063.134712][T23819] ? __pfx_ksys_write+0x10/0x10 [ 1063.134730][T23819] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1063.134741][T23819] ? lockdep_hardirqs_on+0x7c/0x110 [ 1063.134754][T23819] __do_fast_syscall_32+0xe8/0x680 [ 1063.134771][T23819] do_fast_syscall_32+0x32/0x80 [ 1063.134785][T23819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1063.134800][T23819] RIP: 0023:0xf7fd6579 [ 1063.134809][T23819] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1063.134820][T23819] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1063.134831][T23819] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004380 [ 1063.134838][T23819] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1063.134845][T23819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1063.134851][T23819] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1063.134857][T23819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1063.134871][T23819] [ 1063.775691][T15678] usb 42-1: device descriptor read/8, error -110 [ 1064.059294][T12880] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1064.237554][T12880] usb 6-1: device descriptor read/64, error -71 [ 1064.456168][T15678] usb usb42-port1: attempt power cycle [ 1064.475106][T12880] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1064.615039][T12880] usb 6-1: device descriptor read/64, error -71 [ 1064.725177][T12880] usb usb6-port1: attempt power cycle [ 1064.834837][T12764] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1064.986411][T12764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.990536][T12764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.994444][T12764] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1065.000735][T12764] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1065.005030][T12764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.011738][T12764] usb 5-1: config 0 descriptor?? [ 1065.017589][T15678] usb usb42-port1: unable to enumerate USB device [ 1065.064740][T12880] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1065.464469][T12498] usb 40-1: device descriptor read/8, error -110 [ 1065.532922][ T34] usb 8-1: USB disconnect, device number 37 [ 1065.731200][T12764] plantronics 0003:047F:FFFF.0034: reserved main item tag 0xe [ 1065.869415][T12498] usb usb40-port1: attempt power cycle [ 1065.941677][T12880] usb 6-1: device descriptor read/8, error -71 [ 1065.943538][T12764] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 1065.949424][T12764] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1065.956259][T12764] usb 5-1: USB disconnect, device number 53 [ 1065.996253][T23854] fido_id[23854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory [ 1066.183855][T12880] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1066.456285][T12498] usb usb40-port1: unable to enumerate USB device [ 1066.465250][T12880] usb 6-1: device descriptor read/8, error -71 [ 1066.574104][T12880] usb usb6-port1: unable to enumerate USB device [ 1067.176820][T23877] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1067.178961][T23877] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1067.182179][T23877] vhci_hcd vhci_hcd.0: Device attached [ 1067.420574][ T5952] Bluetooth: hci0: link tx timeout [ 1067.424543][ T5952] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1067.598835][T23895] FAULT_INJECTION: forcing a failure. [ 1067.598835][T23895] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.603773][T23895] CPU: 3 UID: 0 PID: 23895 Comm: syz.1.4755 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.603800][T23895] Tainted: [L]=SOFTLOCKUP [ 1067.603806][T23895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1067.603817][T23895] Call Trace: [ 1067.603823][T23895] [ 1067.603831][T23895] dump_stack_lvl+0x16c/0x1f0 [ 1067.603857][T23895] should_fail_ex+0x512/0x640 [ 1067.603883][T23895] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1067.603907][T23895] should_failslab+0xc2/0x120 [ 1067.603932][T23895] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1067.603952][T23895] ? __lock_acquire+0x436/0x2890 [ 1067.603966][T23895] ? __alloc_skb+0x156/0x410 [ 1067.603995][T23895] ? __alloc_skb+0x156/0x410 [ 1067.604017][T23895] __alloc_skb+0x156/0x410 [ 1067.604042][T23895] ? __pfx___alloc_skb+0x10/0x10 [ 1067.604069][T23895] ? tcp_chrono_stop+0x95/0x420 [ 1067.604091][T23895] tcp_stream_alloc_skb+0x34/0x670 [ 1067.604145][T23895] tcp_connect+0xe35/0x5240 [ 1067.604185][T23895] ? __pfx_tcp_connect+0x10/0x10 [ 1067.604201][T23895] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1067.604234][T23895] ? inet6_hash_connect+0xe2/0x180 [ 1067.604259][T23895] tcp_v6_connect+0x15fb/0x21d0 [ 1067.604282][T23895] ? stack_trace_save+0x8e/0xc0 [ 1067.604314][T23895] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1067.604338][T23895] ? kasan_save_stack+0x42/0x60 [ 1067.604361][T23895] ? __kasan_kmalloc+0xaa/0xb0 [ 1067.604381][T23895] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 1067.604404][T23895] ? tcp_sendmsg_locked+0x2410/0x42a0 [ 1067.604428][T23895] ? tcp_sendmsg+0x2e/0x50 [ 1067.604449][T23895] ? inet6_sendmsg+0xb9/0x140 [ 1067.604468][T23895] ? __sys_sendto+0x376/0x520 [ 1067.604509][T23895] ? __inet_stream_connect+0x915/0xf50 [ 1067.604535][T23895] __inet_stream_connect+0x915/0xf50 [ 1067.604567][T23895] ? __pfx___inet_stream_connect+0x10/0x10 [ 1067.604606][T23895] tcp_sendmsg_fastopen+0x3ed/0x750 [ 1067.604637][T23895] tcp_sendmsg_locked+0x2410/0x42a0 [ 1067.604670][T23895] ? __lock_acquire+0x436/0x2890 [ 1067.604690][T23895] ? __pfx___might_resched+0x10/0x10 [ 1067.604715][T23895] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1067.604743][T23895] ? do_raw_spin_lock+0x12c/0x2b0 [ 1067.604763][T23895] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1067.604788][T23895] ? __local_bh_enable_ip+0xa4/0x120 [ 1067.604814][T23895] tcp_sendmsg+0x2e/0x50 [ 1067.604837][T23895] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1067.604861][T23895] inet6_sendmsg+0xb9/0x140 [ 1067.604882][T23895] __sys_sendto+0x376/0x520 [ 1067.604908][T23895] ? __pfx___sys_sendto+0x10/0x10 [ 1067.604957][T23895] ? ksys_write+0x1ac/0x250 [ 1067.604980][T23895] ? __pfx_ksys_write+0x10/0x10 [ 1067.605007][T23895] __ia32_sys_sendto+0xdd/0x1b0 [ 1067.605031][T23895] ? __do_fast_syscall_32+0x9a/0x680 [ 1067.605053][T23895] ? lockdep_hardirqs_on+0x7c/0x110 [ 1067.605072][T23895] __do_fast_syscall_32+0xe8/0x680 [ 1067.605116][T23895] do_fast_syscall_32+0x32/0x80 [ 1067.605140][T23895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1067.605165][T23895] RIP: 0023:0xf70bd579 [ 1067.605180][T23895] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1067.605195][T23895] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 1067.605213][T23895] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1067.605224][T23895] RDX: 0000000000000001 RSI: 0000000020000045 RDI: 00000000800001c0 [ 1067.605235][T23895] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1067.605245][T23895] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1067.605255][T23895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1067.605279][T23895] [ 1067.733230][T12880] usb 44-1: SetAddress Request (34) to port 0 [ 1067.755031][T12880] usb 44-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1067.789180][T23878] vhci_hcd: connection reset by peer [ 1067.794147][ T91] vhci_hcd vhci_hcd.3: stop threads [ 1067.796660][ T91] vhci_hcd vhci_hcd.3: release socket [ 1067.798581][ T91] vhci_hcd vhci_hcd.3: disconnect device [ 1068.022601][T23900] input: syz0 as /devices/virtual/input/input132 [ 1068.422390][ T34] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1068.583977][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.588682][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.593158][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1068.598997][ T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1068.603328][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.610444][ T34] usb 5-1: config 0 descriptor?? [ 1068.622215][T12498] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1068.752096][T12498] usb 8-1: device descriptor read/64, error -71 [ 1068.991876][T12498] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1069.007674][T23914] tipc: Enabling of bearer rejected, failed to enable media [ 1069.023312][ T34] plantronics 0003:047F:FFFF.0035: reserved main item tag 0xe [ 1069.044076][ T34] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1069.055861][ T34] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1069.121744][T12498] usb 8-1: device descriptor read/64, error -71 [ 1069.231991][T12498] usb usb8-port1: attempt power cycle [ 1069.356050][ T24] usb 5-1: USB disconnect, device number 54 [ 1069.454288][ T5950] Bluetooth: hci0: command 0x0406 tx timeout [ 1069.581405][T12498] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1069.602088][T12498] usb 8-1: device descriptor read/8, error -71 [ 1069.851178][T12498] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1069.882851][T12498] usb 8-1: device descriptor read/8, error -71 [ 1069.991343][T12498] usb usb8-port1: unable to enumerate USB device [ 1070.223141][T23934] input: syz0 as /devices/virtual/input/input133 [ 1070.677183][T23939] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1070.679920][T23939] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1070.683655][T23939] vhci_hcd vhci_hcd.0: Device attached [ 1070.960779][ T34] usb 40-1: SetAddress Request (106) to port 0 [ 1070.965788][ T34] usb 40-1: new SuperSpeed USB device number 106 using vhci_hcd [ 1071.273881][T23940] vhci_hcd: connection reset by peer [ 1071.279569][ T91] vhci_hcd vhci_hcd.1: stop threads [ 1071.285382][ T91] vhci_hcd vhci_hcd.1: release socket [ 1071.288116][ T91] vhci_hcd vhci_hcd.1: disconnect device [ 1071.442692][T23947] siw: device registration error -23 [ 1071.480178][T23950] loop6: detected capacity change from 0 to 7 [ 1071.484239][T23384] Dev loop6: unable to read RDB block 7 [ 1071.486370][T23384] loop6: AHDI p3 p4 [ 1071.487738][T23384] loop6: partition table partially beyond EOD, truncated [ 1071.492225][T23384] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1071.499235][T23950] Dev loop6: unable to read RDB block 7 [ 1071.501175][T23950] loop6: AHDI p3 p4 [ 1071.502664][T23950] loop6: partition table partially beyond EOD, truncated [ 1071.506787][T23950] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1071.909785][T15678] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1072.150880][T15678] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.154806][T15678] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.158678][T15678] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1072.164128][T15678] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1072.167539][T15678] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.179731][T15678] usb 8-1: config 0 descriptor?? [ 1072.594735][T15678] plantronics 0003:047F:FFFF.0036: reserved main item tag 0xe [ 1072.597470][T15678] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1072.615955][T15678] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1072.844720][ T1455] usb 8-1: USB disconnect, device number 42 [ 1072.895561][T23982] input: syz0 as /devices/virtual/input/input134 [ 1073.112434][T12880] usb 44-1: device descriptor read/8, error -110 [ 1073.268740][T17635] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1073.352431][T23990] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1073.400120][T17635] usb 5-1: device descriptor read/64, error -71 [ 1073.414003][T23990] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1073.418195][T23990] overlayfs: failed to look up (tracing) for ino (-66) [ 1073.509837][T12880] usb usb44-port1: attempt power cycle [ 1073.512503][T23993] FAULT_INJECTION: forcing a failure. [ 1073.512503][T23993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1073.516761][T23993] CPU: 3 UID: 0 PID: 23993 Comm: syz.3.4784 Tainted: G L syzkaller #0 PREEMPT(full) [ 1073.516780][T23993] Tainted: [L]=SOFTLOCKUP [ 1073.516784][T23993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1073.516791][T23993] Call Trace: [ 1073.516795][T23993] [ 1073.516800][T23993] dump_stack_lvl+0x16c/0x1f0 [ 1073.516819][T23993] should_fail_ex+0x512/0x640 [ 1073.516838][T23993] should_fail_alloc_page+0xe7/0x130 [ 1073.516857][T23993] prepare_alloc_pages+0x401/0x670 [ 1073.516876][T23993] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1073.516910][T23993] ? should_fail_alloc_page+0xee/0x130 [ 1073.516938][T23993] ? rcu_is_watching+0x12/0xc0 [ 1073.516963][T23993] ? trace_mm_page_alloc+0x11b/0x180 [ 1073.516980][T23993] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 1073.516995][T23993] ? __pfx_stack_trace_save+0x10/0x10 [ 1073.517012][T23993] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1073.517027][T23993] ? stack_depot_save_flags+0x29/0x9b0 [ 1073.517067][T23993] ? find_held_lock+0x2b/0x80 [ 1073.517096][T23993] ? alloc_vmap_area+0x66f/0x2a50 [ 1073.517119][T23993] ? __vmalloc_node_range_noprof+0x247/0x16b0 [ 1073.517145][T23993] ? __vmalloc_noprof+0xa3/0x120 [ 1073.517162][T23993] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1073.517181][T23993] ? bpf_prog_alloc+0x3b/0x230 [ 1073.517200][T23993] ? bpf_prog_load+0x19bc/0x2cc0 [ 1073.517216][T23993] ? __sys_bpf+0x3e72/0x4980 [ 1073.517224][T23993] ? __ia32_sys_bpf+0x76/0xe0 [ 1073.517234][T23993] ? __do_fast_syscall_32+0xe8/0x680 [ 1073.517254][T23993] alloc_pages_bulk_noprof+0x77a/0x1410 [ 1073.517271][T23993] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1073.517289][T23993] ? policy_nodemask+0xea/0x4e0 [ 1073.517308][T23993] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1073.517322][T23993] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1073.517344][T23993] __kasan_populate_vmalloc+0xfb/0x220 [ 1073.517362][T23993] alloc_vmap_area+0x98d/0x2a50 [ 1073.517383][T23993] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1073.517403][T23993] __get_vm_area_node+0x1ca/0x330 [ 1073.517422][T23993] __vmalloc_node_range_noprof+0x247/0x16b0 [ 1073.517441][T23993] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1073.517454][T23993] ? post_alloc_hook+0x19e/0x220 [ 1073.517469][T23993] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1073.517485][T23993] ? __pfx___might_resched+0x10/0x10 [ 1073.517502][T23993] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1073.517521][T23993] ? should_fail_alloc_page+0xee/0x130 [ 1073.517539][T23993] ? rcu_is_watching+0x12/0xc0 [ 1073.517553][T23993] ? trace_mm_page_alloc+0x11b/0x180 [ 1073.517571][T23993] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1073.517584][T23993] __vmalloc_node_noprof+0xad/0xf0 [ 1073.517602][T23993] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1073.517617][T23993] __vmalloc_noprof+0xa3/0x120 [ 1073.517627][T23993] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1073.517640][T23993] ? apparmor_capable+0x1d7/0x4e0 [ 1073.517658][T23993] bpf_prog_alloc_no_stats+0x58/0x600 [ 1073.517672][T23993] ? security_capable+0x7e/0x260 [ 1073.517689][T23993] bpf_prog_alloc+0x3b/0x230 [ 1073.517701][T23993] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1073.517718][T23993] bpf_prog_load+0x19bc/0x2cc0 [ 1073.517735][T23993] ? _parse_integer_limit+0x17f/0x1d0 [ 1073.517751][T23993] ? __pfx_bpf_prog_load+0x10/0x10 [ 1073.517767][T23993] ? __lock_acquire+0x436/0x2890 [ 1073.517791][T23993] __sys_bpf+0x3e72/0x4980 [ 1073.517804][T23993] ? __pfx___sys_bpf+0x10/0x10 [ 1073.517813][T23993] ? find_held_lock+0x2b/0x80 [ 1073.517830][T23993] ? find_held_lock+0x2b/0x80 [ 1073.517847][T23993] ? __mutex_unlock_slowpath+0x161/0x790 [ 1073.517870][T23993] ? fput+0x70/0xf0 [ 1073.517881][T23993] ? ksys_write+0x1ac/0x250 [ 1073.517896][T23993] ? __pfx_ksys_write+0x10/0x10 [ 1073.517913][T23993] __ia32_sys_bpf+0x76/0xe0 [ 1073.517924][T23993] ? lockdep_hardirqs_on+0x7c/0x110 [ 1073.517938][T23993] __do_fast_syscall_32+0xe8/0x680 [ 1073.517955][T23993] do_fast_syscall_32+0x32/0x80 [ 1073.517970][T23993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1073.517984][T23993] RIP: 0023:0xf7fb5579 [ 1073.517993][T23993] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1073.518005][T23993] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1073.518016][T23993] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 1073.518024][T23993] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1073.518030][T23993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1073.518036][T23993] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1073.518043][T23993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1073.518056][T23993] [ 1073.518094][T23993] syz.3.4784: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1073.693798][T23993] CPU: 3 UID: 0 PID: 23993 Comm: syz.3.4784 Tainted: G L syzkaller #0 PREEMPT(full) [ 1073.693826][T23993] Tainted: [L]=SOFTLOCKUP [ 1073.693832][T23993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1073.693844][T23993] Call Trace: [ 1073.693850][T23993] [ 1073.693857][T23993] dump_stack_lvl+0x16c/0x1f0 [ 1073.693886][T23993] warn_alloc+0x248/0x3a0 [ 1073.693910][T23993] ? __pfx_warn_alloc+0x10/0x10 [ 1073.693931][T23993] ? kfree+0x2f8/0x6e0 [ 1073.693950][T23993] ? __get_vm_area_node+0x2cd/0x330 [ 1073.693983][T23993] ? __get_vm_area_node+0x2cd/0x330 [ 1073.694008][T23993] ? __get_vm_area_node+0x1dc/0x330 [ 1073.694031][T23993] ? __get_vm_area_node+0x208/0x330 [ 1073.694063][T23993] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 1073.694092][T23993] ? post_alloc_hook+0x19e/0x220 [ 1073.694118][T23993] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1073.694145][T23993] ? __pfx___might_resched+0x10/0x10 [ 1073.694175][T23993] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1073.694206][T23993] ? should_fail_alloc_page+0xee/0x130 [ 1073.694236][T23993] ? rcu_is_watching+0x12/0xc0 [ 1073.694260][T23993] ? trace_mm_page_alloc+0x11b/0x180 [ 1073.694298][T23993] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1073.694321][T23993] __vmalloc_node_noprof+0xad/0xf0 [ 1073.694350][T23993] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1073.694376][T23993] __vmalloc_noprof+0xa3/0x120 [ 1073.694393][T23993] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1073.694416][T23993] ? apparmor_capable+0x1d7/0x4e0 [ 1073.694445][T23993] bpf_prog_alloc_no_stats+0x58/0x600 [ 1073.694467][T23993] ? security_capable+0x7e/0x260 [ 1073.694492][T23993] bpf_prog_alloc+0x3b/0x230 [ 1073.694513][T23993] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1073.694542][T23993] bpf_prog_load+0x19bc/0x2cc0 [ 1073.694568][T23993] ? _parse_integer_limit+0x17f/0x1d0 [ 1073.694593][T23993] ? __pfx_bpf_prog_load+0x10/0x10 [ 1073.694617][T23993] ? __lock_acquire+0x436/0x2890 [ 1073.694663][T23993] __sys_bpf+0x3e72/0x4980 [ 1073.694683][T23993] ? __pfx___sys_bpf+0x10/0x10 [ 1073.694700][T23993] ? find_held_lock+0x2b/0x80 [ 1073.694729][T23993] ? find_held_lock+0x2b/0x80 [ 1073.694757][T23993] ? __mutex_unlock_slowpath+0x161/0x790 [ 1073.694794][T23993] ? fput+0x70/0xf0 [ 1073.694810][T23993] ? ksys_write+0x1ac/0x250 [ 1073.694833][T23993] ? __pfx_ksys_write+0x10/0x10 [ 1073.694860][T23993] __ia32_sys_bpf+0x76/0xe0 [ 1073.694875][T23993] ? lockdep_hardirqs_on+0x7c/0x110 [ 1073.694894][T23993] __do_fast_syscall_32+0xe8/0x680 [ 1073.694917][T23993] do_fast_syscall_32+0x32/0x80 [ 1073.694938][T23993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1073.694983][T23993] RIP: 0023:0xf7fb5579 [ 1073.694998][T23993] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1073.695014][T23993] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1073.695033][T23993] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 1073.695044][T23993] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1073.695055][T23993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1073.695065][T23993] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1073.695076][T23993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1073.695101][T23993] [ 1073.695154][T23993] Mem-Info: [ 1073.833217][T23993] active_anon:4303 inactive_anon:1346 isolated_anon:0 [ 1073.833217][T23993] active_file:5476 inactive_file:13472 isolated_file:0 [ 1073.833217][T23993] unevictable:1768 dirty:549 writeback:0 [ 1073.833217][T23993] slab_reclaimable:6239 slab_unreclaimable:56617 [ 1073.833217][T23993] mapped:27610 shmem:4662 pagetables:1312 [ 1073.833217][T23993] sec_pagetables:332 bounce:0 [ 1073.833217][T23993] kernel_misc_reclaimable:0 [ 1073.833217][T23993] free:58570 free_pcp:17931 free_cma:0 [ 1073.851670][T23993] Node 0 active_anon:508kB inactive_anon:784kB active_file:0kB inactive_file:144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:272kB dirty:0kB writeback:0kB shmem:3668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9372kB pagetables:1616kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB [ 1073.864387][T23993] Node 1 active_anon:16648kB inactive_anon:4600kB active_file:21904kB inactive_file:53744kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:110128kB dirty:2196kB writeback:0kB shmem:14976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4096kB pagetables:3700kB sec_pagetables:188kB all_unreclaimable? no Balloon:0kB [ 1073.877221][T23993] Node 0 DMA free:2448kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1073.887756][T23993] lowmem_reserve[]: 0 289 289 289 289 [ 1073.890237][T17635] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1073.893007][T23993] Node 0 DMA32 free:26996kB boost:10240kB min:23572kB low:26904kB high:30236kB reserved_highatomic:2048KB free_highatomic:1672KB active_anon:508kB inactive_anon:784kB active_file:0kB inactive_file:144kB unevictable:3536kB writepending:0kB zspages:160kB present:1032196kB managed:296868kB mlocked:0kB bounce:0kB free_pcp:10052kB local_pcp:2244kB free_cma:0kB [ 1073.903941][T23993] lowmem_reserve[]: 0 0 0 0 0 [ 1073.905512][T23993] Node 1 DMA32 free:207368kB boost:8192kB min:55336kB low:67120kB high:78904kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16648kB inactive_anon:4600kB active_file:21904kB inactive_file:53744kB unevictable:3536kB writepending:2196kB zspages:4792kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:59060kB local_pcp:14732kB free_cma:0kB [ 1073.916209][T23993] lowmem_reserve[]: 0 0 0 0 0 [ 1073.917891][T23993] Node 0 DMA: 26*4kB (U) 13*8kB (UE) 10*16kB (UE) 9*32kB (UE) 4*64kB (UE) 2*128kB (E) 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 2448kB [ 1073.922707][T23993] Node 0 DMA32: 1109*4kB (UMEH) 592*8kB (UMEH) 262*16kB (UMEH) 72*32kB (UMEH) 41*64kB (UMEH) 28*128kB (UMEH) 10*256kB (UMEH) 3*512kB (UMH) 1*1024kB (U) 0*2048kB 0*4096kB = 26996kB [ 1073.928493][T23993] Node 1 DMA32: 2191*4kB (UME) 2783*8kB (UME) 2576*16kB (UME) 318*32kB (UME) 99*64kB (UME) 84*128kB (UME) 151*256kB (UM) 84*512kB (UM) 12*1024kB (UM) 5*2048kB (UM) 1*4096kB (M) = 207796kB [ 1073.935308][T23993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1073.939300][T23993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1073.943207][T23993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1073.947132][T23993] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1073.951032][T23993] 25119 total pagecache pages [ 1073.953063][T23993] 1514 pages in swap cache [ 1073.954971][T23993] Free swap = 103956kB [ 1073.956580][T23993] Total swap = 124996kB [ 1073.957944][T23993] 524155 pages RAM [ 1073.959354][T23993] 0 pages HighMem/MovableOnly [ 1073.961323][T23993] 209045 pages reserved [ 1073.963064][T23993] 0 pages cma reserved [ 1074.038219][T17635] usb 5-1: device descriptor read/64, error -71 [ 1074.090655][T12880] usb usb44-port1: unable to enumerate USB device [ 1074.158454][T17635] usb usb5-port1: attempt power cycle [ 1074.507878][T17635] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1074.528220][T17635] usb 5-1: device descriptor read/8, error -71 [ 1074.777690][T17635] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1074.798155][T17635] usb 5-1: device descriptor read/8, error -71 [ 1074.907757][T17635] usb usb5-port1: unable to enumerate USB device [ 1075.647130][T17635] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1075.668581][T24023] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1075.696408][T24023] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1075.700873][T24023] overlayfs: failed to look up (tracing) for ino (-66) [ 1075.808268][T17635] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.812232][T17635] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.815606][T17635] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1075.820782][T17635] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1075.824525][T17635] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.829717][T17635] usb 8-1: config 0 descriptor?? [ 1076.016890][ T34] usb 40-1: device descriptor read/8, error -110 [ 1076.240097][T17635] plantronics 0003:047F:FFFF.0037: reserved main item tag 0xe [ 1076.242892][T17635] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1076.257959][T17635] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1076.408094][ T34] usb usb40-port1: attempt power cycle [ 1076.510089][T17635] usb 8-1: USB disconnect, device number 43 [ 1076.657229][T24030] fido_id[24030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 1077.172706][ T34] usb usb40-port1: unable to enumerate USB device [ 1077.199531][T24054] FAULT_INJECTION: forcing a failure. [ 1077.199531][T24054] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.203527][T24054] CPU: 0 UID: 0 PID: 24054 Comm: syz.0.4802 Tainted: G L syzkaller #0 PREEMPT(full) [ 1077.203546][T24054] Tainted: [L]=SOFTLOCKUP [ 1077.203550][T24054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1077.203557][T24054] Call Trace: [ 1077.203562][T24054] [ 1077.203567][T24054] dump_stack_lvl+0x16c/0x1f0 [ 1077.203585][T24054] should_fail_ex+0x512/0x640 [ 1077.203603][T24054] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1077.203615][T24054] should_failslab+0xc2/0x120 [ 1077.203632][T24054] kmem_cache_alloc_noprof+0x83/0x770 [ 1077.203645][T24054] ? skb_clone+0x190/0x3f0 [ 1077.203661][T24054] ? skb_clone+0x190/0x3f0 [ 1077.203671][T24054] skb_clone+0x190/0x3f0 [ 1077.203682][T24054] netlink_deliver_tap+0xabd/0xd30 [ 1077.203698][T24054] netlink_unicast+0x64c/0x870 [ 1077.203713][T24054] ? __pfx_netlink_unicast+0x10/0x10 [ 1077.203726][T24054] ? __pfx___might_resched+0x10/0x10 [ 1077.203747][T24054] netlink_sendmsg+0x8c8/0xdd0 [ 1077.203769][T24054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1077.203787][T24054] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1077.203805][T24054] ____sys_sendmsg+0xa5d/0xc30 [ 1077.203821][T24054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1077.203835][T24054] ? get_compat_msghdr+0x11a/0x170 [ 1077.203852][T24054] ___sys_sendmsg+0x134/0x1d0 [ 1077.203865][T24054] ? __pfx____sys_sendmsg+0x10/0x10 [ 1077.203883][T24054] ? find_held_lock+0x2b/0x80 [ 1077.203905][T24054] __sys_sendmsg+0x16d/0x220 [ 1077.203917][T24054] ? __pfx___sys_sendmsg+0x10/0x10 [ 1077.203937][T24054] __do_fast_syscall_32+0xe8/0x680 [ 1077.203959][T24054] do_fast_syscall_32+0x32/0x80 [ 1077.203980][T24054] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1077.203995][T24054] RIP: 0023:0xf7fd6579 [ 1077.204005][T24054] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1077.204016][T24054] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1077.204027][T24054] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002a80 [ 1077.204034][T24054] RDX: 0000000000040044 RSI: 0000000000000000 RDI: 0000000000000000 [ 1077.204040][T24054] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1077.204046][T24054] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1077.204053][T24054] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1077.204066][T24054] [ 1077.554237][T24065] input: syz0 as /devices/virtual/input/input135 [ 1077.599213][T24065] netdevsim netdevsim2: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1077.954438][T24070] mkiss: ax0: crc mode is auto. [ 1079.194501][ T34] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1079.355963][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.359985][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.363949][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1079.373913][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1079.378060][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.385691][ T34] usb 7-1: config 0 descriptor?? [ 1079.400121][ T5952] Bluetooth: hci3: Unknown advertising packet type: 0x78 [ 1079.400148][ T5952] Bluetooth: hci3: adv larger than maximum supported [ 1079.402853][ T5952] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1079.877197][ T34] plantronics 0003:047F:FFFF.0038: reserved main item tag 0xe [ 1079.905612][ T34] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1080.003043][ T34] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1080.202942][T15678] usb 7-1: USB disconnect, device number 53 [ 1080.228594][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4812'. [ 1080.231781][T24098] netlink: 'syz.0.4812': attribute type 5 has an invalid length. [ 1080.236572][T24098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4812'. [ 1080.272251][T24098] geneve2: entered promiscuous mode [ 1080.274482][T24098] geneve2: entered allmulticast mode [ 1080.284555][ T4075] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1080.287485][ T4075] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1080.290238][ T4075] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1080.302665][ T4075] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1081.113208][T24095] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1081.826042][T24128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4820'. [ 1081.848394][T24128] macvlan2: entered allmulticast mode [ 1081.850212][T24128] veth1_vlan: entered allmulticast mode [ 1081.855760][T24128] veth1_vlan: left allmulticast mode [ 1082.162668][ T5952] Bluetooth: hci0: command 0x0406 tx timeout [ 1084.559100][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1084.561658][ T1142] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.564408][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1084.565081][ T1142] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1084.568032][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1084.574334][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1084.576871][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1084.632674][T24161] wg2 speed is unknown, defaulting to 1000 [ 1084.781538][T24165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4830'. [ 1085.353563][ T1142] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.358907][ T1142] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1085.514372][ T1142] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.518194][ T1142] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1085.583054][ T1142] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.586139][ T1142] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1085.838168][T24161] chnl_net:caif_netlink_parms(): no params data found [ 1086.114583][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.124754][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.131235][ T1142] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1086.136113][ T1142] bond0 (unregistering): Released all slaves [ 1086.142671][ T1142] bond1 (unregistering): Released all slaves [ 1086.151403][ T1142] bond2 (unregistering): Released all slaves [ 1086.243553][T24161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.245915][T24161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.248154][T24161] bridge_slave_0: entered allmulticast mode [ 1086.266336][T24161] bridge_slave_0: entered promiscuous mode [ 1086.269362][T24161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.279546][T24161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.282028][T24161] bridge_slave_1: entered allmulticast mode [ 1086.284794][T24161] bridge_slave_1: entered promiscuous mode [ 1086.314197][T24161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.358044][T24161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.371395][ T1142] tipc: Left network mode [ 1086.395710][T24161] team0: Port device team_slave_0 added [ 1086.410726][T24161] team0: Port device team_slave_1 added [ 1086.411302][ T1142] IPVS: stopping backup sync thread 18950 ... [ 1086.487280][T24161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.490041][T24161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.500290][T24161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.529484][T24161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.532061][T24161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.548714][T24161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.600653][T24161] hsr_slave_0: entered promiscuous mode [ 1086.603013][T24161] hsr_slave_1: entered promiscuous mode [ 1086.605139][T24161] debugfs: 'hsr0' already exists in 'hsr' [ 1086.607005][T24161] Cannot create hsr debugfs directory [ 1086.649500][ T5950] Bluetooth: hci2: command tx timeout [ 1087.235497][ T1142] hsr_slave_0: left promiscuous mode [ 1087.257476][ T1142] hsr_slave_1: left promiscuous mode [ 1087.259934][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.262329][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.284868][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.296075][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.364523][ T1142] veth1_macvtap: left promiscuous mode [ 1087.371229][ T1142] veth0_macvtap: left promiscuous mode [ 1087.378921][ T1142] veth1_vlan: left promiscuous mode [ 1087.381328][ T1142] veth0_vlan: left promiscuous mode [ 1087.514781][ T1142] pim6reg (unregistering): left allmulticast mode [ 1087.882647][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 1087.920203][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 1088.416883][ T40] audit: type=1326 audit(1765355574.103:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.1.4844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1088.433441][ T40] audit: type=1326 audit(1765355574.123:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.1.4844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1088.440565][ T40] audit: type=1326 audit(1765355574.123:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.1.4844" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1088.447564][ T40] audit: type=1326 audit(1765355574.123:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.1.4844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1088.468025][ T40] audit: type=1326 audit(1765355574.123:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.1.4844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 1088.606000][ T1142] IPVS: stop unused estimator thread 0... [ 1088.627919][T12880] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1088.680441][T24161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1088.684765][T24161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1088.695765][T24161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1088.701682][T24161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1088.717911][ T5950] Bluetooth: hci2: command tx timeout [ 1088.738006][T14734] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1088.767935][T24161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.777838][T24161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.779106][T12880] usb 8-1: Using ep0 maxpacket: 8 [ 1088.782928][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.785282][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.789804][T12880] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1088.791499][T19389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.793099][T12880] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1088.794545][T19389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.797320][T12880] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1088.803439][T12880] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1088.808312][T12880] usb 8-1: language id specifier not provided by device, defaulting to English [ 1088.814127][T12880] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1088.817492][T12880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.820645][T12880] usb 8-1: Product: syz [ 1088.822077][T12880] usb 8-1: Manufacturer: syz [ 1088.823604][T12880] usb 8-1: SerialNumber: syz [ 1088.829791][T24161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1088.917708][T14734] usb 6-1: Using ep0 maxpacket: 16 [ 1088.920609][T14734] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1088.923332][T14734] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1088.926477][T14734] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1088.931010][T14734] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1088.933902][T14734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.935600][T24161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.936394][T14734] usb 6-1: Product: syz [ 1088.941011][T14734] usb 6-1: Manufacturer: syz [ 1088.942498][T14734] usb 6-1: SerialNumber: syz [ 1088.962606][T24161] veth0_vlan: entered promiscuous mode [ 1088.968828][T24161] veth1_vlan: entered promiscuous mode [ 1088.986835][T24161] veth0_macvtap: entered promiscuous mode [ 1088.991471][T24161] veth1_macvtap: entered promiscuous mode [ 1089.003067][T24161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.009878][T24161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.016637][T19389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.020537][T19389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.023961][T19389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.026780][T19389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.041607][T24228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4851'. [ 1089.087369][T19389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.091252][T19389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.113686][T19389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.116219][T19389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.150812][T14734] usb 6-1: 0:2 : does not exist [ 1089.161818][T14734] usb 6-1: USB disconnect, device number 50 [ 1089.162046][T12880] usb 8-1: 0:2 : does not exist [ 1089.176835][T12880] usb 8-1: USB disconnect, device number 44 [ 1089.203069][T24263] udevd[24263]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1089.212353][T23384] udevd[23384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1090.779827][ T40] audit: type=1326 audit(1765355576.474:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.2.4862" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff2579 code=0x0 [ 1090.807852][ T5950] Bluetooth: hci2: command tx timeout [ 1091.139059][T24309] wg2 speed is unknown, defaulting to 1000 [ 1091.398831][T12880] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1091.546176][T12880] usb 8-1: device descriptor read/64, error -71 [ 1091.785727][T12880] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1091.925670][T12880] usb 8-1: device descriptor read/64, error -71 [ 1092.045892][T12880] usb usb8-port1: attempt power cycle [ 1092.443860][T24329] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1092.447692][T24329] overlayfs: overlapping lowerdir path [ 1092.506478][T24330] overlayfs: failed to resolve './file1': -2 [ 1092.534713][T12880] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1092.567053][T12880] usb 8-1: device descriptor read/8, error -71 [ 1092.805086][T12880] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1092.829058][T12880] usb 8-1: device descriptor read/8, error -71 [ 1092.885044][ T5950] Bluetooth: hci2: command tx timeout [ 1092.935055][T12880] usb usb8-port1: unable to enumerate USB device [ 1094.296525][T24354] Bluetooth: MGMT ver 1.23 [ 1094.373201][T24354] mac80211_hwsim hwsim26 : renamed from wlan1 (while UP) [ 1094.733136][ T5950] Bluetooth: hci1: Unknown advertising packet type: 0x78 [ 1094.733175][ T5950] Bluetooth: hci1: adv larger than maximum supported [ 1094.736333][ T5950] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1096.355073][T24387] fuse: Bad value for 'group_id' [ 1096.356863][T24387] fuse: Bad value for 'group_id' [ 1096.601957][ T5950] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 1096.602578][ T5950] Bluetooth: hci2: adv larger than maximum supported [ 1096.605814][ T5950] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1097.013625][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1097.032406][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1097.038243][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1097.041763][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1097.045393][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1097.076857][T24397] wg2 speed is unknown, defaulting to 1000 [ 1097.597976][T24397] chnl_net:caif_netlink_parms(): no params data found [ 1097.687265][ T1142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.741084][T24397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.748183][T24397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.761640][T24397] bridge_slave_0: entered allmulticast mode [ 1097.764276][T24397] bridge_slave_0: entered promiscuous mode [ 1097.772651][T24397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.777357][T24397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.784508][T24397] bridge_slave_1: entered allmulticast mode [ 1097.793303][T24397] bridge_slave_1: entered promiscuous mode [ 1097.812630][ T1142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.874047][T24397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.882838][T24397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.924020][T24397] team0: Port device team_slave_0 added [ 1097.933026][T24397] team0: Port device team_slave_1 added [ 1097.967382][T24397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.969673][T24397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.980032][T24397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.987964][T24397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.990300][T24397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.001148][T24397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.045747][ T1142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.117384][T24397] hsr_slave_0: entered promiscuous mode [ 1098.122941][T24397] hsr_slave_1: entered promiscuous mode [ 1098.127619][T24397] debugfs: 'hsr0' already exists in 'hsr' [ 1098.130047][T24397] Cannot create hsr debugfs directory [ 1098.328641][ T1142] bridge_slave_1: left allmulticast mode [ 1098.332682][ T1142] bridge_slave_1: left promiscuous mode [ 1098.335184][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.338699][ T1142] bridge_slave_0: left allmulticast mode [ 1098.340506][ T1142] bridge_slave_0: left promiscuous mode [ 1098.342645][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.664854][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.669646][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.675604][ T1142] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1098.680277][ T1142] bond0 (unregistering): Released all slaves [ 1098.689003][ T1142] bond1 (unregistering): Released all slaves [ 1098.708543][ T34] wg2 speed is unknown, defaulting to 1000 [ 1098.710411][ T34] syz2: Port: 1 Link DOWN [ 1098.741368][ T34] wg2 speed is unknown, defaulting to 1000 [ 1098.747981][ T5952] Bluetooth: hci0: Unknown advertising packet type: 0x78 [ 1098.748030][ T5952] Bluetooth: hci0: adv larger than maximum supported [ 1098.753398][ T5952] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1098.806260][ T1142] tipc: Left network mode [ 1099.110688][ T5952] Bluetooth: hci4: command tx timeout [ 1099.118125][ T1142] hsr_slave_0: left promiscuous mode [ 1099.120407][ T1142] hsr_slave_1: left promiscuous mode [ 1099.123213][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.126002][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.129748][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1099.132945][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.149721][ T1142] veth1_macvtap: left promiscuous mode [ 1099.152229][ T1142] veth0_macvtap: left promiscuous mode [ 1099.154914][ T1142] veth1_vlan: left promiscuous mode [ 1099.157190][ T1142] veth0_vlan: left promiscuous mode [ 1099.858130][T19389] smc: removing ib device syz2 [ 1100.403091][T24397] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1100.407507][T24397] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1100.411890][T24397] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1100.417400][T24397] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1100.594990][T24397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.615676][T24397] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.626700][T19389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.629670][T19389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.637623][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.640597][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.887473][ T1142] IPVS: stop unused estimator thread 0... [ 1100.932750][T24397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.971273][T24397] veth0_vlan: entered promiscuous mode [ 1100.976108][T24397] veth1_vlan: entered promiscuous mode [ 1100.997955][T24397] veth0_macvtap: entered promiscuous mode [ 1101.011264][T24397] veth1_macvtap: entered promiscuous mode [ 1101.034396][T24397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.043558][T24397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.052561][ T7794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.058700][ T7794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.062577][ T7794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.067119][ T7794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.142306][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.144882][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.164722][ T7794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.167811][ T7794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.189413][ T5952] Bluetooth: hci4: command tx timeout [ 1101.499099][ T9] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1101.614421][T12764] IPVS: starting estimator thread 0... [ 1101.658062][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.666182][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.673960][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1101.703886][T24504] IPVS: using max 41 ests per chain, 98400 per kthread [ 1101.718091][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1101.721531][T24507] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1101.724096][T24507] overlayfs: overlapping lowerdir path [ 1101.751277][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.759072][T24507] overlayfs: failed to resolve './file1': -2 [ 1101.780808][ T9] usb 8-1: config 0 descriptor?? [ 1102.269458][ T9] plantronics 0003:047F:FFFF.0039: reserved main item tag 0xe [ 1102.279236][ T9] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1102.365007][ T9] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1102.570668][ T9] usb 8-1: USB disconnect, device number 49 [ 1102.764449][T24514] fido_id[24514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 1102.937252][T24524] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1102.976333][T24524] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1102.980119][T24524] overlayfs: failed to look up (tracing) for ino (-66) [ 1103.269277][ T5952] Bluetooth: hci4: command tx timeout [ 1103.711887][T24531] input: syz0 as /devices/virtual/input/input136 [ 1105.356477][ T5952] Bluetooth: hci4: command tx timeout [ 1108.606739][T24601] input: syz0 as /devices/virtual/input/input137 [ 1109.679352][ T5952] Bluetooth: hci1: Unknown advertising packet type: 0x78 [ 1109.679371][ T5952] Bluetooth: hci1: adv larger than maximum supported [ 1109.681735][ T5952] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1113.951395][ T24] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1114.112107][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.115793][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.118921][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1114.123227][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1114.126153][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.130395][ T24] usb 7-1: config 0 descriptor?? [ 1114.766644][ T24] plantronics 0003:047F:FFFF.003A: reserved main item tag 0xe [ 1115.143510][ T24] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1115.184555][ T24] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1115.192508][ T24] usb 7-1: USB disconnect, device number 54 [ 1115.236969][T24704] fido_id[24704]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 1115.375303][ T5952] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 1115.375322][ T5952] Bluetooth: hci2: adv larger than maximum supported [ 1115.377735][ T5952] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1115.637759][T24716] input: syz0 as /devices/virtual/input/input138 [ 1117.788211][ T34] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1117.940739][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.956104][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.966499][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1117.979898][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1117.986451][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.003988][ T34] usb 6-1: config 0 descriptor?? [ 1118.005250][ T5952] Bluetooth: hci0: Unknown advertising packet type: 0x78 [ 1118.006142][ T5952] Bluetooth: hci0: adv larger than maximum supported [ 1118.010207][ T5952] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1118.416283][ T34] plantronics 0003:047F:FFFF.003B: reserved main item tag 0xe [ 1118.418843][ T34] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1118.426169][ T34] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1118.709983][ T24] usb 6-1: USB disconnect, device number 51 [ 1118.888100][T15678] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1119.054650][T15678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.059312][T15678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.063404][T15678] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1119.069940][T15678] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1119.073155][T15678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.087154][T15678] usb 5-1: config 0 descriptor?? [ 1119.549136][T15678] plantronics 0003:047F:FFFF.003C: reserved main item tag 0xe [ 1119.557054][T15678] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1119.567503][T15678] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1119.825595][ T34] usb 5-1: USB disconnect, device number 59 [ 1120.138884][T24784] fuse: Unknown parameter 'grou00000000000000000000' [ 1120.551559][T24795] overlayfs: failed to resolve './file1': -2 [ 1121.197793][ T5952] Bluetooth: hci1: Unknown advertising packet type: 0x78 [ 1121.197951][ T5952] Bluetooth: hci1: adv larger than maximum supported [ 1121.201093][ T5952] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1121.645718][T12880] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1121.807275][T12880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.811489][T12880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.815420][T12880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1121.821125][T12880] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1121.824818][T12880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.836054][T12880] usb 5-1: config 0 descriptor?? [ 1122.262498][T12880] plantronics 0003:047F:FFFF.003D: reserved main item tag 0xe [ 1122.271417][T12880] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1122.279534][T12880] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1122.619977][ T24] usb 5-1: USB disconnect, device number 60 [ 1123.304826][T24836] fuse: Unknown parameter 'grou00000000000000000000' [ 1123.827492][T24261] IPVS: starting estimator thread 0... [ 1123.924356][T24853] IPVS: using max 41 ests per chain, 98400 per kthread [ 1123.972104][T24855] overlayfs: failed to resolve './file1': -2 [ 1124.383636][T24859] input: syz0 as /devices/virtual/input/input139 [ 1125.343643][ T34] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1125.494657][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.498972][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.502733][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1125.507309][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1125.510533][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.516111][ T34] usb 8-1: config 0 descriptor?? [ 1125.808748][T24886] overlayfs: missing 'lowerdir' [ 1125.859041][T24883] input: syz0 as /devices/virtual/input/input140 [ 1125.869423][T24889] overlayfs: failed to resolve './file1': -2 [ 1126.018419][ T34] plantronics 0003:047F:FFFF.003E: reserved main item tag 0xe [ 1126.021517][ T34] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1126.094696][ T34] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1126.189492][T23427] usb 8-1: USB disconnect, device number 50 [ 1126.246000][T24893] fido_id[24893]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 1128.966454][T24931] FAULT_INJECTION: forcing a failure. [ 1128.966454][T24931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.972593][T24931] CPU: 0 UID: 0 PID: 24931 Comm: syz.0.5024 Tainted: G L syzkaller #0 PREEMPT(full) [ 1128.972622][T24931] Tainted: [L]=SOFTLOCKUP [ 1128.972628][T24931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1128.972638][T24931] Call Trace: [ 1128.972644][T24931] [ 1128.972651][T24931] dump_stack_lvl+0x16c/0x1f0 [ 1128.972676][T24931] should_fail_ex+0x512/0x640 [ 1128.972704][T24931] _copy_from_user+0x2e/0xd0 [ 1128.972728][T24931] kstrtouint_from_user+0xd6/0x1d0 [ 1128.972747][T24931] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1128.972764][T24931] ? __lock_acquire+0x436/0x2890 [ 1128.972790][T24931] proc_fail_nth_write+0x83/0x220 [ 1128.972806][T24931] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1128.972827][T24931] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1128.972842][T24931] vfs_write+0x2a0/0x11d0 [ 1128.972866][T24931] ? __pfx___mutex_lock+0x10/0x10 [ 1128.972888][T24931] ? __pfx_vfs_write+0x10/0x10 [ 1128.972909][T24931] ? find_held_lock+0x2b/0x80 [ 1128.972935][T24931] ? __fget_files+0x20e/0x3c0 [ 1128.972963][T24931] ksys_write+0x12a/0x250 [ 1128.972985][T24931] ? __pfx_ksys_write+0x10/0x10 [ 1128.973008][T24931] ? do_user_addr_fault+0x843/0x1370 [ 1128.973032][T24931] __do_fast_syscall_32+0xe8/0x680 [ 1128.973055][T24931] do_fast_syscall_32+0x32/0x80 [ 1128.973075][T24931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1128.973095][T24931] RIP: 0023:0xf7ff2579 [ 1128.973109][T24931] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1128.973124][T24931] RSP: 002b:00000000f54e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1128.973140][T24931] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54e6620 [ 1128.973151][T24931] RDX: 0000000000000001 RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 1128.973160][T24931] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1128.973170][T24931] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1128.973179][T24931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1128.973201][T24931] [ 1129.402113][T24261] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1129.651909][T24261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.655668][T24261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.659013][T24261] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1129.663304][T24261] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1129.666338][T24261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.673735][T24261] usb 5-1: config 0 descriptor?? [ 1130.091118][T24261] plantronics 0003:047F:FFFF.003F: reserved main item tag 0xe [ 1130.093501][T24261] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1130.104506][T24261] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1130.405261][T18670] usb 5-1: USB disconnect, device number 61 [ 1131.261211][T24971] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1131.263314][T24971] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1131.266415][T24971] vhci_hcd vhci_hcd.0: Device attached [ 1131.529346][ T24] usb 38-1: SetAddress Request (56) to port 0 [ 1131.532856][ T24] usb 38-1: new SuperSpeed USB device number 56 using vhci_hcd [ 1131.835507][T24972] vhci_hcd: connection reset by peer [ 1131.838429][ T4075] vhci_hcd vhci_hcd.0: stop threads [ 1131.840728][ T4075] vhci_hcd vhci_hcd.0: release socket [ 1131.842661][ T4075] vhci_hcd vhci_hcd.0: disconnect device [ 1132.561048][T24986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5038'. [ 1132.596604][ T5952] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 1132.596623][ T5952] Bluetooth: hci2: adv larger than maximum supported [ 1132.599606][ T5952] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1133.161602][ T5952] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 1133.161622][ T5952] Bluetooth: hci2: adv larger than maximum supported [ 1133.164007][ T5952] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1134.551366][T25020] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 1134.560697][T25020] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 1134.615834][ T5952] Bluetooth: hci1: Unknown advertising packet type: 0x78 [ 1134.615863][ T5952] Bluetooth: hci1: adv larger than maximum supported [ 1134.619201][ T5952] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1135.192641][ T40] audit: type=1326 audit(1765355620.914:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25036 comm="syz.1.5054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1135.199694][ T40] audit: type=1326 audit(1765355620.914:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25036 comm="syz.1.5054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1135.206547][ T40] audit: type=1326 audit(1765355620.924:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25036 comm="syz.1.5054" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1135.215102][ T40] audit: type=1326 audit(1765355620.924:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25036 comm="syz.1.5054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1135.222520][ T40] audit: type=1326 audit(1765355620.924:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25036 comm="syz.1.5054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1135.229543][ T40] audit: type=1326 audit(1765355620.924:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25036 comm="syz.1.5054" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1135.236458][ T40] audit: type=1326 audit(1765355620.924:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25036 comm="syz.1.5054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1135.243575][ T40] audit: type=1326 audit(1765355620.924:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25036 comm="syz.1.5054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1135.250515][ T40] audit: type=1326 audit(1765355620.924:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25036 comm="syz.1.5054" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1135.257892][ T40] audit: type=1326 audit(1765355620.924:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25036 comm="syz.1.5054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1136.051630][T25051] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1136.053807][T25051] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1136.058334][T25051] vhci_hcd vhci_hcd.0: Device attached [ 1136.066136][T25051] afs: Unknown parameter 'ETm9e dzϮwfxa` [ 1136.066136][T25051] 3o%%1I&"țfZ\8yGReaty9|1$\ [ 1143.364901][T25159] dump_stack_lvl+0x16c/0x1f0 [ 1143.364919][T25159] should_fail_ex+0x512/0x640 [ 1143.364937][T25159] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1143.364953][T25159] should_failslab+0xc2/0x120 [ 1143.364971][T25159] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1143.364984][T25159] ? alloc_vmap_area+0x66f/0x2a50 [ 1143.364999][T25159] ? __pfx___might_resched+0x10/0x10 [ 1143.365018][T25159] ? alloc_vmap_area+0x66f/0x2a50 [ 1143.365032][T25159] alloc_vmap_area+0x66f/0x2a50 [ 1143.365054][T25159] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1143.365073][T25159] __get_vm_area_node+0x1ca/0x330 [ 1143.365093][T25159] __vmalloc_node_range_noprof+0x247/0x16b0 [ 1143.365112][T25159] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1143.365127][T25159] ? process_measurement+0x1e6/0x22d0 [ 1143.365146][T25159] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1143.365163][T25159] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1143.365185][T25159] ? __lock_acquire+0x436/0x2890 [ 1143.365197][T25159] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1143.365211][T25159] __vmalloc_node_noprof+0xad/0xf0 [ 1143.365229][T25159] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1143.365244][T25159] __vmalloc_noprof+0xa3/0x120 [ 1143.365254][T25159] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1143.365265][T25159] ? __resched_curr+0xfd/0x3b0 [ 1143.365280][T25159] ? apparmor_capable+0x1d7/0x4e0 [ 1143.365297][T25159] bpf_prog_alloc_no_stats+0x58/0x600 [ 1143.365311][T25159] ? security_capable+0x7e/0x260 [ 1143.365327][T25159] bpf_prog_alloc+0x3b/0x230 [ 1143.365340][T25159] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1143.365358][T25159] bpf_prog_load+0x19bc/0x2cc0 [ 1143.365379][T25159] ? __pfx_bpf_prog_load+0x10/0x10 [ 1143.365395][T25159] ? __lock_acquire+0x436/0x2890 [ 1143.365406][T25159] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1143.365437][T25159] __sys_bpf+0x3e72/0x4980 [ 1143.365449][T25159] ? __pfx___sys_bpf+0x10/0x10 [ 1143.365459][T25159] ? find_held_lock+0x2b/0x80 [ 1143.365476][T25159] ? find_held_lock+0x2b/0x80 [ 1143.365493][T25159] ? __mutex_unlock_slowpath+0x161/0x790 [ 1143.365516][T25159] ? fput+0x70/0xf0 [ 1143.365526][T25159] ? ksys_write+0x1ac/0x250 [ 1143.365541][T25159] ? __pfx_ksys_write+0x10/0x10 [ 1143.365559][T25159] __ia32_sys_bpf+0x76/0xe0 [ 1143.365569][T25159] ? lockdep_hardirqs_on+0x7c/0x110 [ 1143.365582][T25159] __do_fast_syscall_32+0xe8/0x680 [ 1143.365598][T25159] do_fast_syscall_32+0x32/0x80 [ 1143.365612][T25159] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1143.365627][T25159] RIP: 0023:0xf7ff2579 [ 1143.365636][T25159] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1143.365647][T25159] RSP: 002b:00000000f54c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1143.365658][T25159] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 1143.365670][T25159] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1143.365677][T25159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1143.365683][T25159] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1143.365690][T25159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1143.365703][T25159] [ 1143.365772][T25159] syz.2.5086: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1143.481667][T25159] CPU: 0 UID: 0 PID: 25159 Comm: syz.2.5086 Tainted: G L syzkaller #0 PREEMPT(full) [ 1143.481685][T25159] Tainted: [L]=SOFTLOCKUP [ 1143.481689][T25159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1143.481696][T25159] Call Trace: [ 1143.481701][T25159] [ 1143.481706][T25159] dump_stack_lvl+0x16c/0x1f0 [ 1143.481723][T25159] warn_alloc+0x248/0x3a0 [ 1143.481738][T25159] ? __pfx_warn_alloc+0x10/0x10 [ 1143.481773][T25159] ? kfree+0x2f8/0x6e0 [ 1143.481785][T25159] ? __get_vm_area_node+0x2cd/0x330 [ 1143.481805][T25159] ? __get_vm_area_node+0x2cd/0x330 [ 1143.481821][T25159] ? __get_vm_area_node+0x1dc/0x330 [ 1143.481837][T25159] ? __get_vm_area_node+0x208/0x330 [ 1143.481856][T25159] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 1143.481875][T25159] ? process_measurement+0x1e6/0x22d0 [ 1143.481893][T25159] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1143.481912][T25159] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1143.481933][T25159] ? __lock_acquire+0x436/0x2890 [ 1143.481946][T25159] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1143.481960][T25159] __vmalloc_node_noprof+0xad/0xf0 [ 1143.481978][T25159] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1143.481993][T25159] __vmalloc_noprof+0xa3/0x120 [ 1143.482003][T25159] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1143.482013][T25159] ? __resched_curr+0xfd/0x3b0 [ 1143.482029][T25159] ? apparmor_capable+0x1d7/0x4e0 [ 1143.482046][T25159] bpf_prog_alloc_no_stats+0x58/0x600 [ 1143.482060][T25159] ? security_capable+0x7e/0x260 [ 1143.482076][T25159] bpf_prog_alloc+0x3b/0x230 [ 1143.482088][T25159] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1143.482106][T25159] bpf_prog_load+0x19bc/0x2cc0 [ 1143.482127][T25159] ? __pfx_bpf_prog_load+0x10/0x10 [ 1143.482143][T25159] ? __lock_acquire+0x436/0x2890 [ 1143.482154][T25159] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1143.482185][T25159] __sys_bpf+0x3e72/0x4980 [ 1143.482197][T25159] ? __pfx___sys_bpf+0x10/0x10 [ 1143.482207][T25159] ? find_held_lock+0x2b/0x80 [ 1143.482224][T25159] ? find_held_lock+0x2b/0x80 [ 1143.482241][T25159] ? __mutex_unlock_slowpath+0x161/0x790 [ 1143.482264][T25159] ? fput+0x70/0xf0 [ 1143.482274][T25159] ? ksys_write+0x1ac/0x250 [ 1143.482289][T25159] ? __pfx_ksys_write+0x10/0x10 [ 1143.482307][T25159] __ia32_sys_bpf+0x76/0xe0 [ 1143.482317][T25159] ? lockdep_hardirqs_on+0x7c/0x110 [ 1143.482330][T25159] __do_fast_syscall_32+0xe8/0x680 [ 1143.482346][T25159] do_fast_syscall_32+0x32/0x80 [ 1143.482360][T25159] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1143.482374][T25159] RIP: 0023:0xf7ff2579 [ 1143.482383][T25159] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1143.482394][T25159] RSP: 002b:00000000f54c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1143.482405][T25159] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 1143.482412][T25159] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1143.482419][T25159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1143.482426][T25159] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1143.482432][T25159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1143.482446][T25159] [ 1143.482505][T25159] Mem-Info: [ 1143.588458][T25159] active_anon:7883 inactive_anon:1903 isolated_anon:0 [ 1143.588458][T25159] active_file:1532 inactive_file:5942 isolated_file:0 [ 1143.588458][T25159] unevictable:3788 dirty:126 writeback:0 [ 1143.588458][T25159] slab_reclaimable:6157 slab_unreclaimable:54864 [ 1143.588458][T25159] mapped:29668 shmem:8739 pagetables:1261 [ 1143.588458][T25159] sec_pagetables:335 bounce:0 [ 1143.588458][T25159] kernel_misc_reclaimable:0 [ 1143.588458][T25159] free:81158 free_pcp:2524 free_cma:0 [ 1143.602608][T25159] Node 0 active_anon:2684kB inactive_anon:1056kB active_file:0kB inactive_file:160kB unevictable:4104kB isolated(anon):0kB isolated(file):0kB mapped:352kB dirty:0kB writeback:0kB shmem:6104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10144kB pagetables:1828kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB [ 1143.612385][T25159] Node 1 active_anon:28848kB inactive_anon:6556kB active_file:6128kB inactive_file:23608kB unevictable:11048kB isolated(anon):0kB isolated(file):0kB mapped:118320kB dirty:504kB writeback:0kB shmem:28852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3544kB pagetables:3216kB sec_pagetables:192kB all_unreclaimable? no Balloon:0kB [ 1143.622515][T25159] Node 0 DMA free:2080kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:0kB free_cma:0kB [ 1143.631898][T25159] lowmem_reserve[]: 0 289 289 289 289 [ 1143.633913][T25159] Node 0 DMA32 free:18072kB boost:2048kB min:15380kB low:18712kB high:22044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2524kB inactive_anon:1056kB active_file:0kB inactive_file:160kB unevictable:4104kB writepending:0kB zspages:264kB present:1032196kB managed:296868kB mlocked:568kB bounce:0kB free_pcp:4576kB local_pcp:64kB free_cma:0kB [ 1143.644669][T25159] lowmem_reserve[]: 0 0 0 0 0 [ 1143.646422][T25159] Node 1 DMA32 free:304480kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28848kB inactive_anon:6556kB active_file:6128kB inactive_file:23608kB unevictable:11048kB writepending:504kB zspages:4968kB present:1048432kB managed:948212kB mlocked:7624kB bounce:0kB free_pcp:5372kB local_pcp:568kB free_cma:0kB [ 1143.656926][T25159] lowmem_reserve[]: 0 0 0 0 0 [ 1143.658541][T25159] Node 0 DMA: 18*4kB (U) 5*8kB (UM) 9*16kB (U) 5*32kB (UM) 2*64kB (U) 0*128kB 2*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2080kB [ 1143.663415][T25159] Node 0 DMA32: 404*4kB (UE) 415*8kB (UE) 241*16kB (UE) 98*32kB (UME) 34*64kB (UME) 21*128kB (UME) 3*256kB (UE) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18072kB [ 1143.669022][T25159] Node 1 DMA32: 2515*4kB (UE) 3291*8kB (UME) 2740*16kB (UME) 574*32kB (UME) 181*64kB (UME) 166*128kB (UME) 251*256kB (UME) 162*512kB (UM) 21*1024kB (UM) 2*2048kB (U) 0*4096kB = 304228kB [ 1143.675474][T25159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1143.678551][T25159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1143.681435][T25159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1143.684536][T25159] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1143.687438][T25159] 17496 total pagecache pages [ 1143.688945][T25159] 1287 pages in swap cache [ 1143.690402][T25159] Free swap = 102860kB [ 1143.691880][T25159] Total swap = 124996kB [ 1143.693306][T25159] 524155 pages RAM [ 1143.694552][T25159] 0 pages HighMem/MovableOnly [ 1143.696122][T25159] 209045 pages reserved [ 1143.697513][T25159] 0 pages cma reserved [ 1143.763508][T25163] 9pnet_virtio: no channels available for device syz [ 1144.568051][T25175] overlayfs: failed to resolve './file1': -2 [ 1145.483646][ T5952] Bluetooth: hci0: Unknown advertising packet type: 0x78 [ 1145.483666][ T5952] Bluetooth: hci0: adv larger than maximum supported [ 1145.489425][ T5952] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1145.520138][T25185] overlayfs: failed to resolve './file1': -2 [ 1146.521272][T25206] fuse: Bad value for 'user_id' [ 1146.523361][T25206] fuse: Bad value for 'user_id' [ 1147.770449][T25245] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1147.772538][T25245] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1147.774910][T25245] vhci_hcd vhci_hcd.0: Device attached [ 1148.089347][T24261] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 1148.621764][T25249] vhci_hcd: connection reset by peer [ 1148.626598][ T1187] vhci_hcd vhci_hcd.2: stop threads [ 1148.629151][ T1187] vhci_hcd vhci_hcd.2: release socket [ 1148.631502][ T1187] vhci_hcd vhci_hcd.2: disconnect device [ 1149.464153][T25275] fuse: Bad value for 'user_id' [ 1149.466471][T25275] fuse: Bad value for 'user_id' [ 1150.527534][T18670] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1150.697247][T18670] usb 6-1: Using ep0 maxpacket: 32 [ 1150.703868][T18670] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1150.709971][T18670] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1150.714338][T18670] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1150.718705][T18670] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1150.722881][T18670] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1150.730402][T18670] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1150.733512][T18670] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1150.736308][T18670] usb 6-1: Product: syz [ 1150.737786][T18670] usb 6-1: Manufacturer: syz [ 1150.739370][T18670] usb 6-1: SerialNumber: syz [ 1150.747389][T18670] usb 6-1: config 0 descriptor?? [ 1150.761665][T18670] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1150.772021][T18670] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1150.888981][T25295] input: syz0 as /devices/virtual/input/input141 [ 1151.016375][T25293] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1151.016480][T17635] usb 6-1: USB disconnect, device number 53 [ 1151.019546][ C2] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 1151.025878][T17635] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1151.436820][T24487] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1151.587747][T24487] usb 7-1: Using ep0 maxpacket: 16 [ 1151.592322][T24487] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.596898][T24487] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1151.602211][T24487] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1151.605977][T24487] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.617182][T24487] usb 7-1: config 0 descriptor?? [ 1151.622713][T24487] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1152.392025][T25322] fuse: Bad value for 'fd' [ 1152.556130][T12880] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1152.574322][T25324] netlink: 'syz.2.5127': attribute type 2 has an invalid length. [ 1152.577389][T25324] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5127'. [ 1152.756536][T12880] usb 5-1: Using ep0 maxpacket: 8 [ 1152.760864][T12880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1152.764283][T12880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1152.769216][T12880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1152.772726][T12880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1152.777946][T12880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1152.781286][T12880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.925904][T24487] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1152.992753][T12880] usb 5-1: usb_control_msg returned -32 [ 1152.998749][T12880] usbtmc 5-1:16.0: can't read capabilities [ 1153.006556][T12880] usb 5-1: USB disconnect, device number 62 [ 1153.087879][T24487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.091335][T24487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.094521][T24487] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1153.098785][T24487] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1153.102160][T24487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.116511][T24487] usb 6-1: config 0 descriptor?? [ 1153.341219][T25330] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1153.352081][T25330] overlayfs: failed to resolve './file1': -2 [ 1153.385940][T24261] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1153.603347][T24487] plantronics 0003:047F:FFFF.0040: reserved main item tag 0xe [ 1153.619056][T24487] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1153.721031][T24487] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1154.163887][T17635] usb 6-1: USB disconnect, device number 54 [ 1154.181504][T25340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5136'. [ 1154.187185][T25340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5136'. [ 1154.190276][T25340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5136'. [ 1154.348229][T25345] netlink: 284 bytes leftover after parsing attributes in process `syz.3.5137'. [ 1154.415892][ T34] usb 7-1: USB disconnect, device number 55 [ 1154.514093][T25352] FAULT_INJECTION: forcing a failure. [ 1154.514093][T25352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.519595][T25352] CPU: 0 UID: 0 PID: 25352 Comm: syz.2.5139 Tainted: G L syzkaller #0 PREEMPT(full) [ 1154.519618][T25352] Tainted: [L]=SOFTLOCKUP [ 1154.519623][T25352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1154.519630][T25352] Call Trace: [ 1154.519634][T25352] [ 1154.519638][T25352] dump_stack_lvl+0x16c/0x1f0 [ 1154.519657][T25352] should_fail_ex+0x512/0x640 [ 1154.519676][T25352] _copy_from_user+0x2e/0xd0 [ 1154.519694][T25352] do_ip_setsockopt+0x2266/0x3790 [ 1154.519714][T25352] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1154.519730][T25352] ? __pfx___might_resched+0x10/0x10 [ 1154.519749][T25352] ? aa_sk_perm+0x2f2/0xae0 [ 1154.519759][T25352] ? ksys_write+0x190/0x250 [ 1154.519776][T25352] ? __pfx_aa_sk_perm+0x10/0x10 [ 1154.519789][T25352] ip_setsockopt+0x59/0xf0 [ 1154.519807][T25352] udp_setsockopt+0x7d/0xd0 [ 1154.519822][T25352] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1154.519838][T25352] do_sock_setsockopt+0xf3/0x1d0 [ 1154.519853][T25352] __sys_setsockopt+0x120/0x1a0 [ 1154.519866][T25352] __ia32_sys_setsockopt+0xbc/0x160 [ 1154.519876][T25352] ? __do_fast_syscall_32+0x9a/0x680 [ 1154.519890][T25352] ? lockdep_hardirqs_on+0x7c/0x110 [ 1154.519904][T25352] __do_fast_syscall_32+0xe8/0x680 [ 1154.519919][T25352] do_fast_syscall_32+0x32/0x80 [ 1154.519934][T25352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1154.519948][T25352] RIP: 0023:0xf7ff2579 [ 1154.519957][T25352] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1154.519968][T25352] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 1154.519979][T25352] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1154.519986][T25352] RDX: 0000000000000030 RSI: 0000000080000500 RDI: 000000000000008d [ 1154.519993][T25352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1154.519999][T25352] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1154.520005][T25352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1154.520019][T25352] [ 1155.281075][T25372] input: syz0 as /devices/virtual/input/input142 [ 1155.439802][T25379] netlink: 284 bytes leftover after parsing attributes in process `syz.3.5149'. [ 1155.516563][ T5952] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 1155.516600][ T5952] Bluetooth: hci2: adv larger than maximum supported [ 1155.519840][ T5952] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1155.594773][T25386] netlink: 'syz.3.5152': attribute type 10 has an invalid length. [ 1155.819106][T25393] FAULT_INJECTION: forcing a failure. [ 1155.819106][T25393] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.824287][T25393] CPU: 3 UID: 0 PID: 25393 Comm: syz.1.5153 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.824340][T25393] Tainted: [L]=SOFTLOCKUP [ 1155.824346][T25393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1155.824356][T25393] Call Trace: [ 1155.824363][T25393] [ 1155.824372][T25393] dump_stack_lvl+0x16c/0x1f0 [ 1155.824398][T25393] should_fail_ex+0x512/0x640 [ 1155.824424][T25393] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1155.824445][T25393] should_failslab+0xc2/0x120 [ 1155.824470][T25393] __kmalloc_cache_noprof+0x80/0x800 [ 1155.824489][T25393] ? qfq_change_class+0xcf8/0x1da0 [ 1155.824512][T25393] ? qfq_change_class+0xcf8/0x1da0 [ 1155.824531][T25393] qfq_change_class+0xcf8/0x1da0 [ 1155.824571][T25393] ? __pfx_qfq_change_class+0x10/0x10 [ 1155.824594][T25393] ? qdisc_match_from_root+0x16f/0x260 [ 1155.824622][T25393] ? __pfx_qfq_change_class+0x10/0x10 [ 1155.824641][T25393] tc_ctl_tclass+0x59d/0x16c0 [ 1155.824669][T25393] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 1155.824690][T25393] ? __mutex_lock+0x27b/0x1ca0 [ 1155.824713][T25393] ? rtnetlink_rcv_msg+0x371/0xe90 [ 1155.824732][T25393] ? __lock_acquire+0x436/0x2890 [ 1155.824770][T25393] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 1155.824793][T25393] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1155.824814][T25393] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1155.824841][T25393] ? ref_tracker_free+0x37c/0x830 [ 1155.824861][T25393] netlink_rcv_skb+0x158/0x420 [ 1155.824880][T25393] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1155.824901][T25393] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1155.824931][T25393] ? netlink_deliver_tap+0x1ae/0xd30 [ 1155.824954][T25393] netlink_unicast+0x5aa/0x870 [ 1155.824978][T25393] ? __pfx_netlink_unicast+0x10/0x10 [ 1155.825008][T25393] netlink_sendmsg+0x8c8/0xdd0 [ 1155.825032][T25393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1155.825055][T25393] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1155.825083][T25393] ____sys_sendmsg+0xa5d/0xc30 [ 1155.825109][T25393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1155.825129][T25393] ? get_compat_msghdr+0x11a/0x170 [ 1155.825158][T25393] ___sys_sendmsg+0x134/0x1d0 [ 1155.825177][T25393] ? __pfx____sys_sendmsg+0x10/0x10 [ 1155.825207][T25393] ? find_held_lock+0x2b/0x80 [ 1155.825246][T25393] __sys_sendmsg+0x16d/0x220 [ 1155.825264][T25393] ? __pfx___sys_sendmsg+0x10/0x10 [ 1155.825292][T25393] ? do_user_addr_fault+0x843/0x1370 [ 1155.825317][T25393] __do_fast_syscall_32+0xe8/0x680 [ 1155.825341][T25393] do_fast_syscall_32+0x32/0x80 [ 1155.825363][T25393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1155.825383][T25393] RIP: 0023:0xf7f76579 [ 1155.825397][T25393] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1155.825412][T25393] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1155.825429][T25393] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 1155.825440][T25393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1155.825449][T25393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1155.825459][T25393] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1155.825468][T25393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1155.825491][T25393] [ 1155.827247][T25392] ================================================================== [ 1155.936425][T25392] BUG: KASAN: slab-use-after-free in qfq_reset_qdisc+0x323/0x420 [ 1155.938875][T25392] Read of size 8 at addr ffff888024d07850 by task syz.1.5153/25392 [ 1155.942400][T25392] [ 1155.943543][T25392] CPU: 3 UID: 0 PID: 25392 Comm: syz.1.5153 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.943560][T25392] Tainted: [L]=SOFTLOCKUP [ 1155.943564][T25392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1155.943948][T25392] Call Trace: [ 1155.943955][T25392] [ 1155.943961][T25392] dump_stack_lvl+0x116/0x1f0 [ 1155.943977][T25392] print_report+0xcd/0x630 [ 1155.943994][T25392] ? __virt_addr_valid+0x81/0x610 [ 1155.944011][T25392] ? __phys_addr+0xe8/0x180 [ 1155.944028][T25392] ? qfq_reset_qdisc+0x323/0x420 [ 1155.944040][T25392] kasan_report+0xe0/0x110 [ 1155.944055][T25392] ? qfq_reset_qdisc+0x323/0x420 [ 1155.944069][T25392] qfq_reset_qdisc+0x323/0x420 [ 1155.944082][T25392] ? synchronize_rcu_expedited+0x3b9/0x460 [ 1155.944096][T25392] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 1155.944108][T25392] qdisc_reset+0xe0/0x630 [ 1155.944126][T25392] __qdisc_destroy+0xd3/0x4a0 [ 1155.944143][T25392] qdisc_put+0xab/0xe0 [ 1155.944159][T25392] dev_shutdown+0x1d0/0x430 [ 1155.944170][T25392] unregister_netdevice_many_notify+0xb37/0x2590 [ 1155.944187][T25392] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1155.944201][T25392] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1155.944215][T25392] unregister_netdevice_queue+0x305/0x3c0 [ 1155.944229][T25392] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1155.944242][T25392] ? linkwatch_schedule_work+0x181/0x1c0 [ 1155.944258][T25392] ? linkwatch_fire_event+0x6f/0x270 [ 1155.944273][T25392] __tun_detach+0x119c/0x1490 [ 1155.944290][T25392] ? __pfx_tun_chr_close+0x10/0x10 [ 1155.944322][T25392] tun_chr_close+0xc2/0x230 [ 1155.944337][T25392] __fput+0x402/0xb70 [ 1155.944349][T25392] task_work_run+0x150/0x240 [ 1155.944361][T25392] ? __pfx_task_work_run+0x10/0x10 [ 1155.944373][T25392] ? __do_sys_close_range+0x278/0x730 [ 1155.944390][T25392] exit_to_user_mode_loop+0xfb/0x540 [ 1155.944405][T25392] __do_fast_syscall_32+0x4a4/0x680 [ 1155.944420][T25392] do_fast_syscall_32+0x32/0x80 [ 1155.944434][T25392] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1155.944449][T25392] RIP: 0023:0xf7f76579 [ 1155.944459][T25392] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1155.944470][T25392] RSP: 002b:00000000ff91fe9c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 1155.944481][T25392] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1155.944488][T25392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1155.944494][T25392] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1155.944501][T25392] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1155.944508][T25392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1155.944518][T25392] [ 1155.944521][T25392] [ 1156.031653][T25392] Allocated by task 25393: [ 1156.033101][T25392] kasan_save_stack+0x33/0x60 [ 1156.034650][T25392] kasan_save_track+0x14/0x30 [ 1156.036176][T25392] __kasan_kmalloc+0xaa/0xb0 [ 1156.037680][T25392] qfq_change_class+0x2ba/0x1da0 [ 1156.039279][T25392] tc_ctl_tclass+0x59d/0x16c0 [ 1156.040805][T25392] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1156.042391][T25392] netlink_rcv_skb+0x158/0x420 [ 1156.043961][T25392] netlink_unicast+0x5aa/0x870 [ 1156.045520][T25392] netlink_sendmsg+0x8c8/0xdd0 [ 1156.047070][T25392] ____sys_sendmsg+0xa5d/0xc30 [ 1156.048631][T25392] ___sys_sendmsg+0x134/0x1d0 [ 1156.050144][T25392] __sys_sendmsg+0x16d/0x220 [ 1156.051635][T25392] __do_fast_syscall_32+0xe8/0x680 [ 1156.053284][T25392] do_fast_syscall_32+0x32/0x80 [ 1156.054853][T25392] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1156.056888][T25392] [ 1156.057675][T25392] Freed by task 25393: [ 1156.058986][T25392] kasan_save_stack+0x33/0x60 [ 1156.060508][T25392] kasan_save_track+0x14/0x30 [ 1156.062030][T25392] kasan_save_free_info+0x3b/0x60 [ 1156.063648][T25392] __kasan_slab_free+0x5f/0x80 [ 1156.065199][T25392] kfree+0x2f8/0x6e0 [ 1156.066482][T25392] qfq_change_class+0x1576/0x1da0 [ 1156.068099][T25392] tc_ctl_tclass+0x59d/0x16c0 [ 1156.069628][T25392] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1156.071219][T25392] netlink_rcv_skb+0x158/0x420 [ 1156.072775][T25392] netlink_unicast+0x5aa/0x870 [ 1156.074316][T25392] netlink_sendmsg+0x8c8/0xdd0 [ 1156.075862][T25392] ____sys_sendmsg+0xa5d/0xc30 [ 1156.077437][T25392] ___sys_sendmsg+0x134/0x1d0 [ 1156.078957][T25392] __sys_sendmsg+0x16d/0x220 [ 1156.080467][T25392] __do_fast_syscall_32+0xe8/0x680 [ 1156.082122][T25392] do_fast_syscall_32+0x32/0x80 [ 1156.083702][T25392] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1156.085725][T25392] [ 1156.086509][T25392] The buggy address belongs to the object at ffff888024d07800 [ 1156.086509][T25392] which belongs to the cache kmalloc-128 of size 128 [ 1156.090961][T25392] The buggy address is located 80 bytes inside of [ 1156.090961][T25392] freed 128-byte region [ffff888024d07800, ffff888024d07880) [ 1156.095246][T25392] [ 1156.096030][T25392] The buggy address belongs to the physical page: [ 1156.098091][T25392] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24d07 [ 1156.100876][T25392] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1156.103279][T25392] page_type: f5(slab) [ 1156.104579][T25392] raw: 00fff00000000000 ffff88801b442a00 0000000000000000 dead000000000001 [ 1156.107295][T25392] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1156.110016][T25392] page dumped because: kasan: bad access detected [ 1156.112066][T25392] page_owner tracks the page as allocated [ 1156.113914][T25392] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 15055, tgid 15054 (syz.3.2328), ts 624568304789, free_ts 624536163301 [ 1156.120075][T25392] post_alloc_hook+0x1af/0x220 [ 1156.121644][T25392] get_page_from_freelist+0xd0b/0x31a0 [ 1156.123407][T25392] __alloc_frozen_pages_noprof+0x6d7/0x2430 [ 1156.125310][T25392] new_slab+0xaf/0x430 [ 1156.126636][T25392] ___slab_alloc+0xe18/0x1c90 [ 1156.128144][T25392] __slab_alloc.constprop.0+0x63/0x110 [ 1156.129832][T25392] __kmalloc_node_noprof+0x4d8/0x930 [ 1156.131531][T25392] alloc_slab_obj_exts+0x43/0xf0 [ 1156.133148][T25392] __memcg_slab_post_alloc_hook+0x24b/0x880 [ 1156.135052][T25392] __kmalloc_node_track_caller_noprof+0x6e3/0x930 [ 1156.137113][T25392] kmalloc_reserve+0xef/0x2c0 [ 1156.138629][T25392] __alloc_skb+0x186/0x410 [ 1156.140071][T25392] alloc_skb_with_frags+0xe0/0x860 [ 1156.141725][T25392] sock_alloc_send_pskb+0x7f9/0x980 [ 1156.143402][T25392] unix_dgram_sendmsg+0x3bc/0x1830 [ 1156.145055][T25392] ____sys_sendmsg+0xa5d/0xc30 [ 1156.146598][T25392] page last free pid 7261 tgid 7261 stack trace: [ 1156.148625][T25392] __free_frozen_pages+0x7df/0x1170 [ 1156.150295][T25392] vfree+0x1fd/0xb50 [ 1156.151569][T25392] delayed_vfree_work+0x56/0x70 [ 1156.153160][T25392] process_one_work+0x9ba/0x1b20 [ 1156.154785][T25392] worker_thread+0x6c8/0xf10 [ 1156.156285][T25392] kthread+0x3c5/0x780 [ 1156.157623][T25392] ret_from_fork+0x983/0xb10 [ 1156.159121][T25392] ret_from_fork_asm+0x1a/0x30 [ 1156.160675][T25392] [ 1156.161453][T25392] Memory state around the buggy address: [ 1156.163244][T25392] ffff888024d07700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 1156.165819][T25392] ffff888024d07780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1156.168355][T25392] >ffff888024d07800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1156.170880][T25392] ^ [ 1156.173017][T25392] ffff888024d07880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1156.175577][T25392] ffff888024d07900: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 1156.178200][T25392] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1156.206987][T25392] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1156.209407][T25392] CPU: 3 UID: 0 PID: 25392 Comm: syz.1.5153 Tainted: G L syzkaller #0 PREEMPT(full) [ 1156.212843][T25392] Tainted: [L]=SOFTLOCKUP [ 1156.214257][T25392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1156.217762][T25392] Call Trace: [ 1156.218911][T25392] [ 1156.219867][T25392] dump_stack_lvl+0x3d/0x1f0 [ 1156.221374][T25392] vpanic+0x640/0x6f0 [ 1156.222683][T25392] panic+0xca/0xd0 [ 1156.223907][T25392] ? __pfx_panic+0x10/0x10 [ 1156.225355][T25392] ? qfq_reset_qdisc+0x323/0x420 [ 1156.226979][T25392] ? preempt_schedule_common+0x44/0xc0 [ 1156.228733][T25392] ? preempt_schedule_thunk+0x16/0x30 [ 1156.230452][T25392] ? check_panic_on_warn+0x1f/0xb0 [ 1156.232108][T25392] check_panic_on_warn+0xab/0xb0 [ 1156.233738][T25392] end_report+0x107/0x160 [ 1156.235139][T25392] kasan_report+0xee/0x110 [ 1156.236614][T25392] ? qfq_reset_qdisc+0x323/0x420 [ 1156.238213][T25392] qfq_reset_qdisc+0x323/0x420 [ 1156.239761][T25392] ? synchronize_rcu_expedited+0x3b9/0x460 [ 1156.241645][T25392] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 1156.243356][T25392] qdisc_reset+0xe0/0x630 [ 1156.244805][T25392] __qdisc_destroy+0xd3/0x4a0 [ 1156.246321][T25392] qdisc_put+0xab/0xe0 [ 1156.247610][T25392] dev_shutdown+0x1d0/0x430 [ 1156.249054][T25392] unregister_netdevice_many_notify+0xb37/0x2590 [ 1156.251023][T25392] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1156.253090][T25392] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1156.255029][T25392] unregister_netdevice_queue+0x305/0x3c0 [ 1156.256855][T25392] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1156.258822][T25392] ? linkwatch_schedule_work+0x181/0x1c0 [ 1156.260631][T25392] ? linkwatch_fire_event+0x6f/0x270 [ 1156.262260][T25392] __tun_detach+0x119c/0x1490 [ 1156.263806][T25392] ? __pfx_tun_chr_close+0x10/0x10 [ 1156.265408][T25392] tun_chr_close+0xc2/0x230 [ 1156.266881][T25392] __fput+0x402/0xb70 [ 1156.268183][T25392] task_work_run+0x150/0x240 [ 1156.269673][T25392] ? __pfx_task_work_run+0x10/0x10 [ 1156.271284][T25392] ? __do_sys_close_range+0x278/0x730 [ 1156.273035][T25392] exit_to_user_mode_loop+0xfb/0x540 [ 1156.274780][T25392] __do_fast_syscall_32+0x4a4/0x680 [ 1156.276476][T25392] do_fast_syscall_32+0x32/0x80 [ 1156.278052][T25392] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1156.280071][T25392] RIP: 0023:0xf7f76579 [ 1156.281406][T25392] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1156.287527][T25392] RSP: 002b:00000000ff91fe9c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 1156.290181][T25392] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1156.292727][T25392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1156.295306][T25392] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1156.297858][T25392] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1156.300386][T25392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1156.302924][T25392] [ 1156.304642][T25392] Kernel Offset: disabled [ 1156.306121][T25392] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:29:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000001f138df RBX=0000000000000000 RCX=ffffffff8b74b6d9 RDX=0000000000000000 RSI=ffffffff8dac806f RDI=ffffffff8bf2a700 RBP=fffffbfff1c12f68 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100564673d R10=ffff88802b2339eb R11=ffffffff8e098670 R12=0000000000000000 R13=ffffffff8e097b40 R14=ffffffff9088acd0 R15=0000000000000000 RIP=ffffffff8b749dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097702000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000a000 CR3=00000000231f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b542ec0 RCX=ffffffff81b1f211 RDX=ffff8880404dc980 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900006cf220 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff8880404dd4b0 R12=dffffc0000000000 R13=ffffed10056a85d9 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81b1f211 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097802000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f742e080 CR3=00000000231f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b542ea0 RCX=ffffffff81b1f211 RDX=ffff888024454980 RSI=ffffffff81b1f1eb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90004057808 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff8880244554b0 R12=dffffc0000000000 R13=ffffed10056a85d5 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81b1f1ed RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097902000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000031863fff CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=0000000000000003 RCX=1ffffffff3582c50 RDX=0000000000000000 RSI=ffffffff819c05c5 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900035376e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=3230383838666666 R12=1ffff920006a6ee1 R13=0000000000000000 R14=ffffffff8cf51ea0 R15=ffffc900035377c0 RIP=ffffffff819c05d5 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097a02000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5465fac CR3=00000000231f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000