last executing test programs: 11m42.443319359s ago: executing program 0 (id=10): r0 = socket$inet(0x2, 0x3, 0x105) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000140)='afs\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x1bb) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) tee(0xffffffffffffffff, r0, 0x1, 0x7) symlinkat(&(0x7f00000002c0)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./drv\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./drv/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0000:00:1f.3', 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f00000009c0)={0xa, 0x4e22, 0x33, @private0={0xfc, 0x0, '\x00', 0x4}, 0x6}, 0xffffffffffffffae) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000a40)=0x3, 0x4) mkdirat(r1, &(0x7f00000003c0)='./drv\x00', 0x91) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000580)='0000:00:1f.3', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x20001, 0x42) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0x6, 0x8001}}, 0x30) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) 11m42.404879813s ago: executing program 0 (id=12): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000a80)=0x3, 0x4) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0xaa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r4, r5, 0x0) readv(r5, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/48, 0x30}, {&(0x7f0000000a40)=""/42, 0x2a}], 0x2) 11m41.882787232s ago: executing program 0 (id=17): r0 = syz_open_procfs(0x0, &(0x7f0000000a00)='net/vlan/config\x00') read$ptp(r0, &(0x7f0000000a40)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./my_configfs\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./config\x00', &(0x7f00000008c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000940)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_udp(0x2, 0x2, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000180), &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ecryptfs\x00', 0x0, &(0x7f0000000240)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') openat$dir(0xffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x10080, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) 11m41.710442557s ago: executing program 0 (id=18): mlockall(0x4) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000100)="000000000000000000000000000000000000000001") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x181403, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x40000000, 0x0, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/rfcomm0\x00', 0x802, 0x0) write(r4, &(0x7f0000000300)="c7401b1e0741d6201c31a1d182ded8d555d2", 0x12) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 11m41.616906751s ago: executing program 0 (id=19): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) close(0x3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) mkdirat(r1, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0xf0) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000006240)=0x1, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000062c0), r0) 11m41.19989018s ago: executing program 0 (id=23): r0 = syz_clone(0x48000080, &(0x7f00000044c0)="3d3e489f992200ce3e000000006d14", 0xf, 0x0, &(0x7f0000000140), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = userfaultfd(0x801) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0xfffffec1) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0xfffffce2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r1, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/21], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x69c000) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000180)={0x1d, r5}, 0x10) 11m41.114220395s ago: executing program 32 (id=23): r0 = syz_clone(0x48000080, &(0x7f00000044c0)="3d3e489f992200ce3e000000006d14", 0xf, 0x0, &(0x7f0000000140), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = userfaultfd(0x801) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0xfffffec1) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0xfffffce2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r1, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/21], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x69c000) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000180)={0x1d, r5}, 0x10) 52.706330045s ago: executing program 3 (id=1106): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0x0, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0xfffff9, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) r5 = eventfd(0x5f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x200400c5}, 0x4000800) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000005c0)={r3, &(0x7f0000000600)='%\x00', 0x0, &(0x7f0000000640)={@align=0x7fffffffffffffff, {0x6, 0x8e70, 0x9, 0x4}}, 0x2c, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x3}) ioctl$TIOCSETD(r6, 0x5423, 0x0) capset(0x0, &(0x7f0000000700)={0x200000, 0x200000}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000740)={0x7ff, 0x0, 0x0, r5}) 47.069056429s ago: executing program 3 (id=1114): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b700000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 43.470979041s ago: executing program 3 (id=1115): socket$inet6(0xa, 0x1, 0x84) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000240)=0x2) r5 = openat$ndctl0(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000180)={0x101, {0x4, 0xa2, 0xf7, 0x87, 0x232f0922}}) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x2) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x13) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f00000052c0)={0x0, 0x0, &(0x7f0000005280)={&(0x7f0000005100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d6}, 0x840) sendmsg$NL80211_CMD_SET_WDS_PEER(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="d4313a4eab98"}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008001}, 0xc040) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x118, 0x1f, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x105, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x8, 0xeb, 0x0, 0x0, @u32=0xffffffff}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x0, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) 41.35459576s ago: executing program 3 (id=1119): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002dc0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002e00)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002e40)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 37.996423218s ago: executing program 3 (id=1125): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ptrace(0x4206, 0x0) tkill(0x0, 0x12) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r3, r3, 0x0, 0x8000000f3aa6ea) 31.686553325s ago: executing program 3 (id=1132): getpid() r0 = mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\x06A\xbb\x9d;\xe8\xf6\xffj\t\x00\x00\x00\t\xd7\xbe\xcf\x1c\xf9\x840;H\x00\x00\x00\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf79Cm\x01\xcc\xc5\xa7N\xb9\xfd\x100\xa5\x04\xf5\x85T\x1f\xc2S]\xea\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x00\x00\x00\x00\x00\x00\x055c=\xc0xcP\xf8l\x00\x96\xb1\xc0?\xb6P\xbe\xd9\x7f\b\xf6{\x9c\xe2:.w&\x00\x1a\xb96\x86\x16\xb1[!E\b,x\x8e0\xb8\x9c\xce\xad\x15\xc4\xabE\xdab\xb5\xba\xa1\x177$\xc0\x04\xe3\x00\xa20\xb7\x98:V\xae', 0x6e93ebbbcc0884f2, 0x2, 0x0) mq_getsetattr(r0, &(0x7f0000000140)={0x800, 0x9, 0x9, 0x9a}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0xa00000000000, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read(r1, 0x0, 0x0) write$cgroup_pid(r1, 0x0, 0x0) close(r1) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xc00) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000240)={{0x3, 0x2, 0x4, 0x1, 0x800002}, 0x100400000000, 0xf, 0x88}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002680)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x2d, 0x10001, 0x3, 0x2, 0x6, 0xffff, 0xfffff801, 0x0, 0x0, 0x10, 0x3}}, 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4a, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 28.05125176s ago: executing program 2 (id=1133): r0 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000040601010000000000000000010000050500010007000000e5b8313d5168e287ff1474249a839e2d448342e6f1b190e88642acafdf1e0b482d4031be5ba7b48c2df454732c7158846ade9a8697c7dd58fe112439f86b13bf31e6b92965c439518c9c34eb0ed885f5a1a22788ab0bca77bcc3f8218fef39d0714a79c0303981e91eaff47db4"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000440)={'bond0\x00', @ifru_names='gretap0\x00'}) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r9, 0x2000000, 0x7, 0x0, &(0x7f0000000cc0)="630b008646dc3f", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) bind$inet(r2, 0x0, 0x0) 22.593347503s ago: executing program 1 (id=1137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='/dev/nullb1', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='1', 0x1) gettid() openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='loop', 0x4) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r5, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) 17.263827443s ago: executing program 4 (id=1140): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r2, r2, 0x7, 0x1, &(0x7f0000000040)='9', 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x7}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='md0', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r6, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r6, 0x400c0930, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet6(r0, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004010) 15.48262693s ago: executing program 33 (id=1132): getpid() r0 = mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\x06A\xbb\x9d;\xe8\xf6\xffj\t\x00\x00\x00\t\xd7\xbe\xcf\x1c\xf9\x840;H\x00\x00\x00\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf79Cm\x01\xcc\xc5\xa7N\xb9\xfd\x100\xa5\x04\xf5\x85T\x1f\xc2S]\xea\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x00\x00\x00\x00\x00\x00\x055c=\xc0xcP\xf8l\x00\x96\xb1\xc0?\xb6P\xbe\xd9\x7f\b\xf6{\x9c\xe2:.w&\x00\x1a\xb96\x86\x16\xb1[!E\b,x\x8e0\xb8\x9c\xce\xad\x15\xc4\xabE\xdab\xb5\xba\xa1\x177$\xc0\x04\xe3\x00\xa20\xb7\x98:V\xae', 0x6e93ebbbcc0884f2, 0x2, 0x0) mq_getsetattr(r0, &(0x7f0000000140)={0x800, 0x9, 0x9, 0x9a}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0xa00000000000, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read(r1, 0x0, 0x0) write$cgroup_pid(r1, 0x0, 0x0) close(r1) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xc00) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000240)={{0x3, 0x2, 0x4, 0x1, 0x800002}, 0x100400000000, 0xf, 0x88}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002680)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x2d, 0x10001, 0x3, 0x2, 0x6, 0xffff, 0xfffff801, 0x0, 0x0, 0x10, 0x3}}, 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4a, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 15.482461899s ago: executing program 1 (id=1142): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x53) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) unshare(0x40400) recvfrom$unix(0xffffffffffffffff, &(0x7f00000003c0)=""/36, 0x24, 0x40000000, &(0x7f0000000400)=@file={0x1, './config/usb_gadget/g1/functions/uvc.0\x00'}, 0x6e) syz_open_dev$video(0x0, 0x7, 0x40) r0 = mq_open(&(0x7f00000004c0)='R}\x00', 0x40, 0x60, 0x0) mq_getsetattr(r0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000500), 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4fbc28850532331bce3d561a29de429dcdb9307a8188d5e432b7512b76b16d5f64455344a98241cdeb1ff83c6b63e7fd2a86a49dd9973f9014769ed2c90fd000547ab584203f565fba2cc424a502def66aaca33abcc5c1a73b621e2bcf7522ecc56052c3f94855a77065f36e62acf6b77fae40c308f17628abebe8a0494f35d0011fdc8c4ba16400cb5650b5db5ec510cf532b64c2f3556ae00858656f8c12e9689f564eb7d4a14af99fc7fbae6745e7e943d2aa9e8b866e6fa3e2eacdba9bef9c3c8d8984e390152cc64bbf0cd9d3110ab8", @ANYRES16=r3], 0x20}}, 0x1000000) 15.32316576s ago: executing program 2 (id=1143): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4020) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x32, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x9, 0x5, 0x9, 0x100, 0x4}, @jmp={0x5, 0x0, 0x1, 0x55346af92d421a1b, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, r5, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0xffff, 0x7}, {0xf, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888) close(r6) 13.444665095s ago: executing program 1 (id=1144): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00008f3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) brk(0x200000ffc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000000800)=""/102392, 0x18ff8) getpgid(r0) mkdir(&(0x7f0000019900)='./cgroup/../file0\x00', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1234, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000380), &(0x7f00000003c0)=@udp=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r4], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffe, 0x0, 0x9, 0x0, &(0x7f0000000680)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0}, 0x50) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) 13.179538557s ago: executing program 4 (id=1145): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x43e41, 0x0) r2 = io_uring_setup(0x383a, &(0x7f0000000000)={0x0, 0x4178, 0x40, 0x3, 0x3d6}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x3fc}, 0x10) r9 = socket(0x2d, 0x2, 0x0) connect$netlink(r9, &(0x7f0000000200)=@unspec={0x2d, 0xa00}, 0xc) sendmmsg(r3, &(0x7f0000000200), 0x4000000000000e4, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r10}, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000680)="3d25ff5b19c4cbe601706ae6b5db", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff0}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.883354892s ago: executing program 4 (id=1146): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e00010100803209040000040806620007050102000200042401000705820200020004240200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/protocols\x00') read$FUSE(r3, &(0x7f0000000600)={0x2020}, 0x2020) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002640)={'veth0_to_hsr\x00', 0x1000}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002680)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000026c0)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000002700)=0x1, 0x4) sendmsg$can_raw(r4, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) recvmmsg(r4, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000002880)=[{0x0}, {&(0x7f00000028c0)=""/253, 0xfd}], 0x2}, 0x5c2b8000}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002a00)=""/242, 0xf2}], 0x1}, 0x5}], 0x3, 0x40000043, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000002b00)={{0x1, 0x1, 0x400}}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002b40), 0x2842, 0x0) pipe2(&(0x7f0000002b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r6, 0x0, r7, 0x0, 0x7c1f, 0x8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5423) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002bc0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x0, 0x0, 0x4000, 0x100, 0x0, 0x200}) 10.286960254s ago: executing program 1 (id=1147): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000000) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_0\x00', &(0x7f0000000400)=@ethtool_ts_info}) 9.479624015s ago: executing program 2 (id=1148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000004d00)="885db5d8af37e1c26671ddb06c420947aa7c2c378313dbffc7aa41c08600014cef413ce27a7e63c414e2000063c7038e1434467f6c1139746710d54ab1387e587652203231409c85608b205eed215918785d5870672448479cb2108c32cb97825a2cb6d154e87c581c85cc95c4040b81c19bf3ef3eb7e684dc61049081b579a71f91e2916d09e1438073ed69b779704410baf750e54e779df0634c8c", &(0x7f0000004c80)=""/77}, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) mkdir(&(0x7f00000027c0)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00', 0x138) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004b80)={0x4, 0x4, &(0x7f0000004c40)=@framed={{0x18, 0x2, 0x0, 0x0, 0x70}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000004e00)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000004940)={0x90, 0xffffffffffffffda, r2, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100000, {0x2, 0x1, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, r3, r4, 0x3, 0x3}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000002800)='./config\x00', 0x0, 0x4000000, &(0x7f0000004a00)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',version=9p2000,m0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000840)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x3, 0x80000, r0}) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e21, 0xb4, @remote, 0x7}, {0xa, 0x4e20, 0x13f0a3f8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe0000000}, 0x1, {[0x4, 0x67, 0x8, 0x1, 0x7, 0x401, 0x3, 0x800]}}, 0x5c) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001300290a000080000000000007000000", @ANYRES32=r1, @ANYBLOB="100000000000000004000c00"], 0x24}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r5 = add_key(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f00000006c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x20000040) write(r6, &(0x7f0000000080)="3f000000010003", 0x7) bind$packet(r4, &(0x7f0000000700)={0x11, 0x10, r7, 0x1, 0x6, 0x6, @local}, 0x14) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local}) 7.10458128s ago: executing program 2 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x4, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x16e) mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r3, &(0x7f0000000440)=""/9, 0xfffffd87) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/1, 0x1}, {0x0, 0x2}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0xfffffffffffffd73, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r7, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0xfffffffffffffda6}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r7, 0x405, 0x70bd23, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 6.692948698s ago: executing program 1 (id=1152): r0 = openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi1\x00', 0x20402, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80086408, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{}, {}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x610000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4}, 0x4) bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2b}}}}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000480)=0x9, 0x12) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000340)={'wlan1\x00', @multicast}) 1.129369006s ago: executing program 4 (id=1153): pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2}}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000780)=""/185, 0xb9, 0x3c) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88fb}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa00}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x1d, 0x7, 0x1, 0x0, "429e25552e9e1563eb6052dc94f4b2d86841e9b28c1c84619b"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r3, r1, 0x21, 0x10, 0x0, @void, @value=r1}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2}, 0x38) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e21, 0x104, @loopback, 0x1}, @ib={0x1b, 0x40, 0x80000001, {"b35e601d9833f3973863a02ebc5b5dd3"}, 0x4, 0x7, 0x3663}}}, 0x118) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x20002) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 957.520848ms ago: executing program 2 (id=1154): syz_open_procfs(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x12, 0x43, 0x0, @loopback}}}}}, 0x0) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x180, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0x1, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x20, 0x62}, {@in6=@mcast2, 0x104d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x801, 0x0, 0x4, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfdffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2b, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @algo_crypt={0x48, 0x2, {{'cts-cbc-aes-ce\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r4, 0x5eae78d9c54e9d3f, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f94b54cce6396c3599431c882366da01"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1000000}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 757.425586ms ago: executing program 1 (id=1155): syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x23, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0xa7c, r0}, 0x38) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x844) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='net/udp6\x00') preadv(r3, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/210, 0xd2}], 0x1, 0x2ffac000, 0x804) write$tun(r3, &(0x7f0000000e40)={@void, @val={0x1, 0x80, 0xfff2, 0x7fff, 0x3, 0x9}, @eth={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@can={0xc, {{0x3, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "a2fea83d4ca54c6e"}}}}}, 0x2c) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000000340)=[{&(0x7f0000000600)=""/156, 0x9c}], 0x53, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/109, 0x20001c34}], 0x1, 0x0) mount(&(0x7f0000000440)=@filename='mtd0\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='jffs2\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/fillfile\x00', 0x42, 0x9f) write(r5, &(0x7f0000000540)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="0413c028"], 0x14) r6 = openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x1a000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x4c032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000240), 0x0, &(0x7f0000000280), 0x0) ioctl$DM_LIST_DEVICES(r6, 0xc138fd02, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x200, 0x138, 0x0, 0x0, 0x8010, 0x0, 0x0, {}, "c918f4ef693ac11f6c2d82eeb8ed419b1ec124540267faacc4ee410936e7b1d62b574595d6a2fd4bada59584ee15df1c57a3129a6c7b5cba01a11243393cc09fe0c7a51d41c259ec6c81310989af95d967d67025f60e5b286695630e22e5770a5039a5d16b34bff88b9e76a14b1737fad387a2428dea01b0df5af75af3395f1f70028c92c0c18c1e7528a139d75b5bb9c85ddd7d2273a69510d4acdc41cfb56037572b5f2c5d4705be75d720440571720333ad10b0658776f82c1eef7cf26e7d5bdb1aba7b"}) 0s ago: executing program 4 (id=1156): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x42c, 0x2f4, 0x0, 0xfeffffff, 0x2f4, 0x164, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@uncond, 0x0, 0x130, 0x164, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x1, 0xa7b, 'kmp\x00', "3c5e69989c4fddddc310d2aecb2b7800bc6d05ad2624d23793f73b2b23fd0c23df00fd8780dad203746483c3b206a0e9100effe4644f70c4af7a01c952cc54a384f00f9eeecc070bca4fdebc14faecc7e8ed8d5f6d3496f8029c33538fe7865d2c44b44f94219b25d64eec46ba77d39e74a917e37b59fa608974d955788accad", 0x69, 0x1, {0xef90}}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x6, @multicast2, @empty, @gre_key=0x8, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {0x0, 0x7}, [@common=@ttl={{0x24}, {0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x164}}, {{@uncond, 0x0, 0xa4, 0xd8, 0x0, {}, [@common=@unspec=@devgroup={{0x34}, {0x9, 0xffffffff, 0x9, 0x4, 0x8}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x45}, @dev={0xac, 0x14, 0x14, 0x1a}, @port=0x4e22, @icmp_id=0x64}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0x0, 'wlan0\x00', 'macsec0\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x7, @empty, @multicast2, @icmp_id=0x66, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x488) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000000140)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001"], 0x104}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:1f.3/remove\x00', 0x1, 0x0) r8 = io_uring_setup(0x115a, &(0x7f00000006c0)={0x0, 0x3ca, 0x40, 0x3, 0x117}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0xc, &(0x7f00000007c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, 0x0, 0x6c) write(r7, &(0x7f0000000800)='1\n\x00', 0x2) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000940)=0x7555, &(0x7f0000000980)=0x2) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@remote, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x80000, 0x0, 0xfffffffffffffffc, 0xff}, 0x7, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffffffe, 0xff}, 0x0, @in6=@private1, 0x3507, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0x20000}}, 0xa4) syz_open_dev$sg(&(0x7f0000000000), 0x5336, 0x0) kernel console output (not intermixed with test programs): 68kB min:37512kB low:40396kB high:43280kB reserved_highatomic:2048kB free_highatomic:256kB active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:1428kB present:1032196kB managed:262420kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 476.402588][ T9691] lowmem_reserve[]: 0 0 0 0 0 [ 476.402604][ T9691] Node 1 DMA32 free:128396kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:5284kB inactive_anon:5696kB active_file:32968kB inactive_file:44444kB unevictable:2000kB writepending:184kB zspages:4684kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:29692kB local_pcp:22728kB free_cma:0kB [ 476.402631][ T9691] lowmem_reserve[]: 0 0 0 0 0 [ 476.402647][ T9691] Node 0 DMA: 118*4kB (UM) 12*8kB (UM) 7*16kB (UM) 17*32kB (U) 3*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2824kB [ 476.402716][ T9691] Node 0 DMA32: 534*4kB (UMEH) 164*8kB (UMEH) 68*16kB (UMEH) 148*32kB (UMEH) 53*64kB (UME) 18*128kB (UME) 7*256kB (U) 8*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 29048kB [ 476.402800][ T9691] Node 1 DMA32: 2287*4kB (UME) 1636*8kB (UM) 893*16kB (UME) 334*32kB (UME) 316*64kB (UME) 140*128kB (UME) 60*256kB (UME) 20*512kB (UM) 11*1024kB (UM) 3*2048kB (M) 0*4096kB = 128364kB [ 476.402882][ T9691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.402890][ T9691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 476.402898][ T9691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.402907][ T9691] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 476.402914][ T9691] 21666 total pagecache pages [ 476.402919][ T9691] 1308 pages in swap cache [ 476.402923][ T9691] Free swap = 100728kB [ 476.402927][ T9691] Total swap = 124996kB [ 476.402931][ T9691] 524155 pages RAM [ 476.402934][ T9691] 0 pages HighMem/MovableOnly [ 476.402937][ T9691] 217658 pages reserved [ 476.402941][ T9691] 0 pages cma reserved [ 476.806530][ T9693] service_operation: orangefs_mount -- wait timed out; aborting attempt. [ 476.806543][ T9693] orangefs_mount: mount request failed with -110 [ 476.866769][ T9693] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 477.083026][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 477.083054][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 477.083071][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 477.083087][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 483.053567][ T42] audit: type=1326 audit(1793626996.535:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.2.883" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73cefbc code=0x0 [ 487.037975][ T9749] syz.1.889: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 487.038019][ T9749] CPU: 2 UID: 0 PID: 9749 Comm: syz.1.889 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.038034][ T9749] Tainted: [L]=SOFTLOCKUP [ 487.038038][ T9749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 487.038045][ T9749] Call Trace: [ 487.038049][ T9749] [ 487.038054][ T9749] dump_stack_lvl+0x100/0x190 [ 487.038073][ T9749] ? do_replace+0x1c6/0x490 [ 487.038085][ T9749] warn_alloc.cold+0x9e/0xb2 [ 487.038098][ T9749] ? __pfx_warn_alloc+0x10/0x10 [ 487.038122][ T9749] ? do_replace+0x1c6/0x490 [ 487.038134][ T9749] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 487.038152][ T9749] ? do_replace+0x1c6/0x490 [ 487.038165][ T9749] ? do_raw_spin_lock+0x128/0x260 [ 487.038180][ T9749] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 487.038193][ T9749] ? __lock_acquire+0x5c0/0x1f40 [ 487.038205][ T9749] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 487.038219][ T9749] ? do_replace+0x1c6/0x490 [ 487.038230][ T9749] __vmalloc_node_noprof+0xad/0xf0 [ 487.038241][ T9749] ? do_replace+0x1c6/0x490 [ 487.038254][ T9749] __vmalloc_noprof+0xa3/0x120 [ 487.038266][ T9749] ? __pfx___vmalloc_noprof+0x10/0x10 [ 487.038282][ T9749] do_replace+0x1c6/0x490 [ 487.038295][ T9749] ? __pfx_do_replace+0x10/0x10 [ 487.038312][ T9749] ? register_lock_class+0x3f/0x7b0 [ 487.038338][ T9749] compat_do_replace+0x589/0x7a0 [ 487.038355][ T9749] ? __pfx_compat_do_replace+0x10/0x10 [ 487.038369][ T9749] ? hook_capable+0x1bc/0x500 [ 487.038386][ T9749] ? bpf_lsm_capable+0x9/0x10 [ 487.038397][ T9749] ? security_capable+0x80/0x260 [ 487.038412][ T9749] do_ebt_set_ctl+0x3f4/0x4a0 [ 487.038427][ T9749] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 487.038442][ T9749] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 487.038457][ T9749] ? futex_wake+0x4ea/0x5e0 [ 487.038471][ T9749] ? nf_sockopt_find.isra.0+0x222/0x290 [ 487.038485][ T9749] nf_setsockopt+0x8d/0xf0 [ 487.038498][ T9749] ip_setsockopt+0xcb/0xf0 [ 487.038515][ T9749] tcp_setsockopt+0xa7/0x100 [ 487.038527][ T9749] smc_setsockopt+0x1b6/0xad0 [ 487.038539][ T9749] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 487.038553][ T9749] ? __pfx_smc_setsockopt+0x10/0x10 [ 487.038565][ T9749] ? aa_sock_opt_perm+0x114/0x1e0 [ 487.038578][ T9749] ? __pfx_smc_setsockopt+0x10/0x10 [ 487.038591][ T9749] do_sock_setsockopt+0xf3/0x1d0 [ 487.038609][ T9749] __sys_setsockopt+0x119/0x190 [ 487.038627][ T9749] __ia32_sys_setsockopt+0xbc/0x160 [ 487.038640][ T9749] ? __might_fault+0x111/0x140 [ 487.038654][ T9749] __do_fast_syscall_32+0x14b/0x8c0 [ 487.038670][ T9749] do_fast_syscall_32+0x32/0x70 [ 487.038689][ T9749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 487.038703][ T9749] RIP: 0023:0xf73defbc [ 487.038713][ T9749] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 487.038724][ T9749] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 487.038735][ T9749] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 487.038742][ T9749] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 487.038749][ T9749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.038756][ T9749] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 487.038762][ T9749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.038777][ T9749] [ 487.038891][ T9749] Mem-Info: [ 487.038898][ T9749] active_anon:3189 inactive_anon:1444 isolated_anon:0 [ 487.038898][ T9749] active_file:8030 inactive_file:11188 isolated_file:0 [ 487.038898][ T9749] unevictable:1010 dirty:341 writeback:0 [ 487.038898][ T9749] slab_reclaimable:6616 slab_unreclaimable:58364 [ 487.038898][ T9749] mapped:23979 shmem:3601 pagetables:1310 [ 487.038898][ T9749] sec_pagetables:314 bounce:0 [ 487.038898][ T9749] kernel_misc_reclaimable:0 [ 487.038898][ T9749] free:36343 free_pcp:3563 free_cma:0 [ 487.038926][ T9749] Node 0 active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8000kB pagetables:1116kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 487.038953][ T9749] Node 1 active_anon:12756kB inactive_anon:5724kB active_file:32120kB inactive_file:44752kB unevictable:2040kB isolated(anon):0kB isolated(file):0kB mapped:95892kB dirty:1364kB writeback:0kB shmem:12404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6336kB pagetables:4124kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 487.038981][ T9749] Node 0 DMA free:2824kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.039011][ T9749] lowmem_reserve[]: 0 256 256 256 256 [ 487.039029][ T9749] Node 0 DMA32 free:28148kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:2048kB free_highatomic:256kB active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:1428kB present:1032196kB managed:262420kB mlocked:0kB bounce:0kB free_pcp:924kB local_pcp:924kB free_cma:0kB [ 487.039060][ T9749] lowmem_reserve[]: 0 0 0 0 0 [ 487.039076][ T9749] Node 1 DMA32 free:114400kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12756kB inactive_anon:5724kB active_file:32120kB inactive_file:44752kB unevictable:2040kB writepending:1364kB zspages:4660kB present:1048432kB managed:948208kB mlocked:40kB bounce:0kB free_pcp:13328kB local_pcp:12044kB free_cma:0kB [ 487.039104][ T9749] lowmem_reserve[]: 0 0 0 0 0 [ 487.039120][ T9749] Node 0 DMA: 118*4kB (UM) 12*8kB (UM) 7*16kB (UM) 17*32kB (U) 3*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2824kB [ 487.039189][ T9749] Node 0 DMA32: 309*4kB (UMEH) 164*8kB (UMEH) 68*16kB (UMEH) 148*32kB (UMEH) 53*64kB (UME) 18*128kB (UME) 7*256kB (U) 8*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 28148kB [ 487.039263][ T9749] Node 1 DMA32: 1086*4kB (UE) 1214*8kB (UE) 756*16kB (UME) 489*32kB (UME) 312*64kB (UME) 75*128kB (UME) 42*256kB (UME) 13*512kB (M) 11*1024kB (UM) 5*2048kB (UM) 1*4096kB (U) = 114376kB [ 487.039339][ T9749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.039348][ T9749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 487.039355][ T9749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.039362][ T9749] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 487.039370][ T9749] 24134 total pagecache pages [ 487.039373][ T9749] 1316 pages in swap cache [ 487.039377][ T9749] Free swap = 100732kB [ 487.039381][ T9749] Total swap = 124996kB [ 487.039384][ T9749] 524155 pages RAM [ 487.039388][ T9749] 0 pages HighMem/MovableOnly [ 487.039391][ T9749] 217658 pages reserved [ 487.039394][ T9749] 0 pages cma reserved [ 489.669488][ T9759] dummy0: left promiscuous mode [ 489.782752][ T9759] netlink: 'syz.2.892': attribute type 10 has an invalid length. [ 489.782770][ T9759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.892'. [ 489.783515][ T9759] dummy0: entered promiscuous mode [ 499.533594][ T9832] syz.2.903: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 499.533637][ T9832] CPU: 2 UID: 0 PID: 9832 Comm: syz.2.903 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.533652][ T9832] Tainted: [L]=SOFTLOCKUP [ 499.533656][ T9832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 499.533662][ T9832] Call Trace: [ 499.533667][ T9832] [ 499.533672][ T9832] dump_stack_lvl+0x100/0x190 [ 499.533700][ T9832] ? do_replace+0x1c6/0x490 [ 499.533715][ T9832] warn_alloc.cold+0x9e/0xb2 [ 499.533728][ T9832] ? __pfx_warn_alloc+0x10/0x10 [ 499.533748][ T9832] ? __lock_acquire+0x5c0/0x1f40 [ 499.533766][ T9832] ? do_replace+0x1c6/0x490 [ 499.533778][ T9832] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 499.533791][ T9832] ? clockevents_program_event+0x1bf/0x820 [ 499.533807][ T9832] ? find_held_lock+0x2b/0x80 [ 499.533821][ T9832] ? clockevents_program_event+0x1bf/0x820 [ 499.533837][ T9832] ? clockevents_program_event+0x1bf/0x820 [ 499.533854][ T9832] ? do_replace+0x1c6/0x490 [ 499.533865][ T9832] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 499.533882][ T9832] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 499.533894][ T9832] ? __lock_acquire+0x5c0/0x1f40 [ 499.533906][ T9832] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 499.533920][ T9832] ? do_replace+0x1c6/0x490 [ 499.533931][ T9832] __vmalloc_node_noprof+0xad/0xf0 [ 499.533943][ T9832] ? do_replace+0x1c6/0x490 [ 499.533956][ T9832] __vmalloc_noprof+0xa3/0x120 [ 499.533967][ T9832] ? __pfx___vmalloc_noprof+0x10/0x10 [ 499.533983][ T9832] do_replace+0x1c6/0x490 [ 499.533996][ T9832] ? __pfx_do_replace+0x10/0x10 [ 499.534014][ T9832] ? register_lock_class+0x3f/0x7b0 [ 499.534028][ T9832] compat_do_replace+0x589/0x7a0 [ 499.534041][ T9832] ? __pfx_compat_do_replace+0x10/0x10 [ 499.534056][ T9832] ? hook_capable+0x1bc/0x500 [ 499.534072][ T9832] ? bpf_lsm_capable+0x9/0x10 [ 499.534083][ T9832] ? security_capable+0x80/0x260 [ 499.534096][ T9832] do_ebt_set_ctl+0x3f4/0x4a0 [ 499.534110][ T9832] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 499.534123][ T9832] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 499.534138][ T9832] ? futex_wake+0x4ea/0x5e0 [ 499.534152][ T9832] ? nf_sockopt_find.isra.0+0x222/0x290 [ 499.534165][ T9832] nf_setsockopt+0x8d/0xf0 [ 499.534178][ T9832] ip_setsockopt+0xcb/0xf0 [ 499.534195][ T9832] tcp_setsockopt+0xa7/0x100 [ 499.534207][ T9832] smc_setsockopt+0x1b6/0xad0 [ 499.534219][ T9832] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 499.534232][ T9832] ? __pfx_smc_setsockopt+0x10/0x10 [ 499.534244][ T9832] ? aa_sock_opt_perm+0x114/0x1e0 [ 499.534256][ T9832] ? __pfx_smc_setsockopt+0x10/0x10 [ 499.534268][ T9832] do_sock_setsockopt+0xf3/0x1d0 [ 499.534286][ T9832] __sys_setsockopt+0x119/0x190 [ 499.534303][ T9832] __ia32_sys_setsockopt+0xbc/0x160 [ 499.534316][ T9832] ? __might_fault+0x111/0x140 [ 499.534329][ T9832] __do_fast_syscall_32+0x14b/0x8c0 [ 499.534345][ T9832] do_fast_syscall_32+0x32/0x70 [ 499.534358][ T9832] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 499.534372][ T9832] RIP: 0023:0xf73cefbc [ 499.534381][ T9832] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 499.534390][ T9832] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 499.534400][ T9832] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 499.534406][ T9832] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 499.534412][ T9832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 499.534418][ T9832] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 499.534424][ T9832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.534437][ T9832] [ 499.534441][ T9832] Mem-Info: [ 499.534446][ T9832] active_anon:1053 inactive_anon:1456 isolated_anon:0 [ 499.534446][ T9832] active_file:8030 inactive_file:12137 isolated_file:0 [ 499.534446][ T9832] unevictable:1000 dirty:495 writeback:0 [ 499.534446][ T9832] slab_reclaimable:6600 slab_unreclaimable:58506 [ 499.534446][ T9832] mapped:23137 shmem:1462 pagetables:1314 [ 499.534446][ T9832] sec_pagetables:314 bounce:0 [ 499.534446][ T9832] kernel_misc_reclaimable:0 [ 499.534446][ T9832] free:38251 free_pcp:9160 free_cma:0 [ 499.534470][ T9832] Node 0 active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8000kB pagetables:1116kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 499.534495][ T9832] Node 1 active_anon:4212kB inactive_anon:5772kB active_file:32120kB inactive_file:48548kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:92524kB dirty:1980kB writeback:0kB shmem:3848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6356kB pagetables:4140kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 499.534523][ T9832] Node 0 DMA free:2824kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:48kB free_cma:0kB [ 499.534552][ T9832] lowmem_reserve[]: 0 256 256 256 256 [ 499.534572][ T9832] Node 0 DMA32 free:28148kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:2048kB free_highatomic:256kB active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:1428kB present:1032196kB managed:262420kB mlocked:0kB bounce:0kB free_pcp:1452kB local_pcp:1372kB free_cma:0kB [ 499.534602][ T9832] lowmem_reserve[]: 0 0 0 0 0 [ 499.534619][ T9832] Node 1 DMA32 free:122032kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4212kB inactive_anon:5772kB active_file:32120kB inactive_file:48548kB unevictable:2000kB writepending:1980kB zspages:4640kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:35140kB local_pcp:33356kB free_cma:0kB [ 499.534647][ T9832] lowmem_reserve[]: 0 0 0 0 0 [ 499.534663][ T9832] Node 0 DMA: 118*4kB (UM) 12*8kB (UM) 7*16kB (UM) 17*32kB (U) 3*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2824kB [ 499.534744][ T9832] Node 0 DMA32: 309*4kB (UMEH) 164*8kB (UMEH) 68*16kB (UMEH) 148*32kB (UMEH) 53*64kB (UME) 18*128kB (UME) 7*256kB (U) 8*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 28148kB [ 499.534825][ T9832] Node 1 DMA32: 2652*4kB (UM) 1512*8kB (UME) 886*16kB (UME) 539*32kB (UME) 270*64kB (UME) 87*128kB (UME) 44*256kB (UME) 13*512kB (M) 11*1024kB (UM) 3*2048kB (UM) 1*4096kB (U) = 121968kB [ 499.534911][ T9832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 499.534920][ T9832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 499.534927][ T9832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 499.534935][ T9832] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 499.534942][ T9832] 22990 total pagecache pages [ 499.534946][ T9832] 1331 pages in swap cache [ 499.534949][ T9832] Free swap = 100760kB [ 499.534953][ T9832] Total swap = 124996kB [ 499.534956][ T9832] 524155 pages RAM [ 499.534960][ T9832] 0 pages HighMem/MovableOnly [ 499.534963][ T9832] 217658 pages reserved [ 499.534966][ T9832] 0 pages cma reserved [ 501.086300][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.086659][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.664854][ T9856] rxe_eth0 speed is unknown, defaulting to 1000 [ 508.778028][ T9856] lo speed is unknown, defaulting to 1000 [ 508.925775][ T42] audit: type=1800 audit(1793627022.405:27): pid=9859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.908" name="bus" dev="ramfs" ino=28924 res=0 errno=-4 [ 512.968097][ T9879] ublk2: read batch cmd buffer failed [ 512.968150][ T9879] ublk2: read batch cmd buffer failed [ 513.033353][ T9879] ublk2: read batch cmd buffer failed [ 513.033406][ T9879] ublk2: read batch cmd buffer failed [ 513.802326][ T42] audit: type=1326 audit(1793627027.285:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.3.917" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd4fbc code=0x0 [ 514.775795][ T9901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.792246][ T9901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.231936][ T9912] socket: no more sockets [ 518.770300][ T42] audit: type=1326 audit(1793627032.245:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4fbc code=0x7ffc0000 [ 518.788891][ T42] audit: type=1326 audit(1793627032.255:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4fbc code=0x7ffc0000 [ 518.832167][ T42] audit: type=1326 audit(1793627032.315:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.924" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fd4fbc code=0x7ffc0000 [ 518.832196][ T42] audit: type=1326 audit(1793627032.315:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4fbc code=0x7ffc0000 [ 518.832216][ T42] audit: type=1326 audit(1793627032.315:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4fbc code=0x7ffc0000 [ 518.893335][ T42] audit: type=1326 audit(1793627032.375:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.924" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fd4fbc code=0x7ffc0000 [ 518.893364][ T42] audit: type=1326 audit(1793627032.375:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4fbc code=0x7ffc0000 [ 518.893385][ T42] audit: type=1326 audit(1793627032.375:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4fbc code=0x7ffc0000 [ 518.896316][ T42] audit: type=1326 audit(1793627032.375:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.924" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fd4fbc code=0x7ffc0000 [ 518.896342][ T42] audit: type=1326 audit(1793627032.375:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.924" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd4fbc code=0x7ffc0000 [ 519.239419][ T9928] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 520.002220][ T9928] 8021q: adding VLAN 0 to HW filter on device bond5 [ 520.421006][ T9930] 8021q: adding VLAN 0 to HW filter on device bond5 [ 520.421848][ T9930] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 520.427824][ T9930] bond5: (slave wireguard1): Error -95 calling set_mac_address [ 522.615096][ T9946] netlink: 108 bytes leftover after parsing attributes in process `syz.4.928'. [ 522.843659][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.928'. [ 523.751348][ T9955] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 524.384613][ T9955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.467905][ T9955] dummy0: left promiscuous mode [ 524.657032][ T9957] netlink: 'syz.1.929': attribute type 10 has an invalid length. [ 524.657047][ T9957] netlink: 40 bytes leftover after parsing attributes in process `syz.1.929'. [ 524.677162][ T9955] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 524.686251][ T9957] dummy0: entered promiscuous mode [ 524.708837][ T9957] bond0: (slave dummy0): Releasing backup interface [ 529.420546][ T9995] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 529.698188][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.936'. [ 529.837326][ T9995] md/raid:md1: device ram3 operational as raid disk 1 [ 530.078350][ T9995] md/raid:md1: not enough operational devices (2/3 failed) [ 531.638701][ T9995] md/raid:md1: failed to run raid set. [ 531.638714][ T9995] md: pers->run() failed ... [ 532.988226][T10018] syz.3.943: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 532.988290][T10018] CPU: 2 UID: 0 PID: 10018 Comm: syz.3.943 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.988317][T10018] Tainted: [L]=SOFTLOCKUP [ 532.988324][T10018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 532.988334][T10018] Call Trace: [ 532.988341][T10018] [ 532.988349][T10018] dump_stack_lvl+0x100/0x190 [ 532.988382][T10018] ? do_replace+0x1c6/0x490 [ 532.988405][T10018] warn_alloc.cold+0x9e/0xb2 [ 532.988428][T10018] ? __pfx_warn_alloc+0x10/0x10 [ 532.988463][T10018] ? __lock_acquire+0x5c0/0x1f40 [ 532.988493][T10018] ? do_replace+0x1c6/0x490 [ 532.988515][T10018] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 532.988547][T10018] ? do_replace+0x1c6/0x490 [ 532.988571][T10018] ? do_raw_spin_lock+0x128/0x260 [ 532.988605][T10018] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 532.988631][T10018] ? __lock_acquire+0x5c0/0x1f40 [ 532.988654][T10018] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 532.988682][T10018] ? do_replace+0x1c6/0x490 [ 532.988705][T10018] __vmalloc_node_noprof+0xad/0xf0 [ 532.988729][T10018] ? do_replace+0x1c6/0x490 [ 532.988754][T10018] __vmalloc_noprof+0xa3/0x120 [ 532.988776][T10018] ? __pfx___vmalloc_noprof+0x10/0x10 [ 532.988808][T10018] do_replace+0x1c6/0x490 [ 532.988832][T10018] ? __pfx_do_replace+0x10/0x10 [ 532.988866][T10018] ? register_lock_class+0x3f/0x7b0 [ 532.988892][T10018] compat_do_replace+0x589/0x7a0 [ 532.988919][T10018] ? __pfx_compat_do_replace+0x10/0x10 [ 532.988946][T10018] ? hook_capable+0x1bc/0x500 [ 532.988978][T10018] ? bpf_lsm_capable+0x9/0x10 [ 532.988997][T10018] ? security_capable+0x80/0x260 [ 532.989023][T10018] do_ebt_set_ctl+0x3f4/0x4a0 [ 532.989049][T10018] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 532.989075][T10018] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 532.989102][T10018] ? futex_wake+0x4ea/0x5e0 [ 532.989245][T10018] ? nf_sockopt_find.isra.0+0x222/0x290 [ 532.989272][T10018] nf_setsockopt+0x8d/0xf0 [ 532.989296][T10018] ip_setsockopt+0xcb/0xf0 [ 532.989329][T10018] tcp_setsockopt+0xa7/0x100 [ 532.989354][T10018] smc_setsockopt+0x1b6/0xad0 [ 532.989375][T10018] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 532.989399][T10018] ? __pfx_smc_setsockopt+0x10/0x10 [ 532.989423][T10018] ? aa_sock_opt_perm+0x114/0x1e0 [ 532.989448][T10018] ? __pfx_smc_setsockopt+0x10/0x10 [ 532.989472][T10018] do_sock_setsockopt+0xf3/0x1d0 [ 532.989506][T10018] __sys_setsockopt+0x119/0x190 [ 532.989537][T10018] __ia32_sys_setsockopt+0xbc/0x160 [ 532.989561][T10018] ? __might_fault+0x111/0x140 [ 532.989586][T10018] __do_fast_syscall_32+0x14b/0x8c0 [ 532.989621][T10018] do_fast_syscall_32+0x32/0x70 [ 532.989648][T10018] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.989673][T10018] RIP: 0023:0xf7fd4fbc [ 532.989690][T10018] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 532.989707][T10018] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 532.989725][T10018] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 532.989738][T10018] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 532.989750][T10018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.989761][T10018] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 532.989772][T10018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.989799][T10018] [ 532.989807][T10018] Mem-Info: [ 532.989814][T10018] active_anon:656 inactive_anon:1483 isolated_anon:0 [ 532.989814][T10018] active_file:8134 inactive_file:10874 isolated_file:0 [ 532.989814][T10018] unevictable:1000 dirty:477 writeback:0 [ 532.989814][T10018] slab_reclaimable:6617 slab_unreclaimable:58164 [ 532.989814][T10018] mapped:22697 shmem:1036 pagetables:1300 [ 532.989814][T10018] sec_pagetables:314 bounce:0 [ 532.989814][T10018] kernel_misc_reclaimable:0 [ 532.989814][T10018] free:30732 free_pcp:10188 free_cma:0 [ 532.989859][T10018] Node 0 active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7904kB pagetables:1116kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 532.989903][T10018] Node 1 active_anon:2624kB inactive_anon:5880kB active_file:32536kB inactive_file:43496kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:90764kB dirty:1908kB writeback:0kB shmem:2144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6444kB pagetables:4084kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 533.266683][T10018] Node 0 DMA free:2824kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:84kB local_pcp:52kB free_cma:0kB [ 533.266721][T10018] lowmem_reserve[]: 0 256 256 256 256 [ 533.266740][T10018] Node 0 DMA32 free:28148kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:2048kB free_highatomic:256kB active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:1428kB present:1032196kB managed:262420kB mlocked:0kB bounce:0kB free_pcp:1380kB local_pcp:1300kB free_cma:0kB [ 533.266770][T10018] lowmem_reserve[]: 0 0 0 0 0 [ 533.266789][T10018] Node 1 DMA32 free:91764kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2828kB inactive_anon:5880kB active_file:32536kB inactive_file:43496kB unevictable:2000kB writepending:1908kB zspages:4640kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:39068kB local_pcp:38216kB free_cma:0kB [ 533.266820][T10018] lowmem_reserve[]: 0 0 0 0 0 [ 533.266838][T10018] Node 0 DMA: 118*4kB (UM) 12*8kB (UM) 7*16kB (UM) 17*32kB (U) 3*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2824kB [ 533.266908][T10018] Node 0 DMA32: 309*4kB (UMEH) 164*8kB (UMEH) 68*16kB (UMEH) 148*32kB (UMEH) 53*64kB (UME) 18*128kB (UME) 7*256kB (U) 8*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 28148kB [ 533.266983][T10018] Node 1 DMA32: 2559*4kB (UM) 837*8kB (UME) 68*16kB (UME) 209*32kB (UME) 126*64kB (UME) 151*128kB (UME) 47*256kB (UME) 12*512kB (M) 11*1024kB (UM) 5*2048kB (UM) 0*4096kB = 91780kB [ 533.267059][T10018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.267068][T10018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 533.267075][T10018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.267083][T10018] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 533.267095][T10018] 21483 total pagecache pages [ 533.267099][T10018] 1375 pages in swap cache [ 533.267103][T10018] Free swap = 100764kB [ 533.267106][T10018] Total swap = 124996kB [ 533.267110][T10018] 524155 pages RAM [ 533.267114][T10018] 0 pages HighMem/MovableOnly [ 533.267118][T10018] 217658 pages reserved [ 533.267121][T10018] 0 pages cma reserved [ 533.442049][T10020] rxe_eth0 speed is unknown, defaulting to 1000 [ 536.786112][T10027] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 537.175780][T10026] rxe_eth0 speed is unknown, defaulting to 1000 [ 537.219667][T10020] lo speed is unknown, defaulting to 1000 [ 537.861235][T10037] Invalid ELF header magic: != ELF [ 538.332740][T10036] overlay: Unknown parameter '/' [ 538.855167][T10026] lo speed is unknown, defaulting to 1000 [ 540.168168][T10048] 9pnet_virtio: no channels available for device syz [ 542.135914][T10055] ublk0: read batch cmd buffer failed [ 542.135969][T10055] ublk0: read batch cmd buffer failed [ 542.142540][T10055] ublk0: read batch cmd buffer failed [ 542.142589][T10055] ublk0: read batch cmd buffer failed [ 542.858961][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.953'. [ 542.913076][ T5800] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 542.919722][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.954'. [ 543.178829][T10066] netlink: 'syz.1.954': attribute type 10 has an invalid length. [ 543.178845][T10066] netlink: 40 bytes leftover after parsing attributes in process `syz.1.954'. [ 543.276191][T10064] dummy0: left promiscuous mode [ 543.283555][T10066] dummy0: entered promiscuous mode [ 545.044993][T10075] bridge0: entered promiscuous mode [ 545.045335][T10075] bridge0: entered allmulticast mode [ 545.433381][T10077] dummy0: left promiscuous mode [ 545.556028][T10077] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 547.868969][ T42] kauditd_printk_skb: 579 callbacks suppressed [ 547.868987][ T42] audit: type=1800 audit(1793627061.345:618): pid=10089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.960" name="file0" dev="overlay" ino=1310 res=0 errno=-22 [ 547.892153][T10090] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 547.938879][T10082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.995687][T10082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.000585][T10082] bond0 (unregistering): Released all slaves [ 548.447673][T10090] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 548.448232][T10090] block device autoloading is deprecated and will be removed. [ 548.951238][T10090] md: md4 stopped. [ 551.080076][T10101] syz.4.963: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 551.080121][T10101] CPU: 2 UID: 0 PID: 10101 Comm: syz.4.963 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.080136][T10101] Tainted: [L]=SOFTLOCKUP [ 551.080141][T10101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 551.080148][T10101] Call Trace: [ 551.080153][T10101] [ 551.080158][T10101] dump_stack_lvl+0x100/0x190 [ 551.080178][T10101] ? do_replace+0x1c6/0x490 [ 551.080191][T10101] warn_alloc.cold+0x9e/0xb2 [ 551.080205][T10101] ? __pfx_warn_alloc+0x10/0x10 [ 551.080231][T10101] ? do_replace+0x1c6/0x490 [ 551.080243][T10101] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 551.080261][T10101] ? do_replace+0x1c6/0x490 [ 551.080274][T10101] ? do_raw_spin_lock+0x128/0x260 [ 551.080290][T10101] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 551.080303][T10101] ? __lock_acquire+0x5c0/0x1f40 [ 551.080315][T10101] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 551.080330][T10101] ? do_replace+0x1c6/0x490 [ 551.080342][T10101] __vmalloc_node_noprof+0xad/0xf0 [ 551.080354][T10101] ? do_replace+0x1c6/0x490 [ 551.080367][T10101] __vmalloc_noprof+0xa3/0x120 [ 551.080379][T10101] ? __pfx___vmalloc_noprof+0x10/0x10 [ 551.080400][T10101] do_replace+0x1c6/0x490 [ 551.080413][T10101] ? __pfx_do_replace+0x10/0x10 [ 551.080431][T10101] ? register_lock_class+0x3f/0x7b0 [ 551.080447][T10101] compat_do_replace+0x589/0x7a0 [ 551.080462][T10101] ? __pfx_compat_do_replace+0x10/0x10 [ 551.080478][T10101] ? hook_capable+0x1bc/0x500 [ 551.080497][T10101] ? bpf_lsm_capable+0x9/0x10 [ 551.080509][T10101] ? security_capable+0x80/0x260 [ 551.080524][T10101] do_ebt_set_ctl+0x3f4/0x4a0 [ 551.080539][T10101] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 551.080554][T10101] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 551.080569][T10101] ? futex_wake+0x4ea/0x5e0 [ 551.080582][T10101] ? nf_sockopt_find.isra.0+0x222/0x290 [ 551.080595][T10101] nf_setsockopt+0x8d/0xf0 [ 551.080608][T10101] ip_setsockopt+0xcb/0xf0 [ 551.080625][T10101] tcp_setsockopt+0xa7/0x100 [ 551.080638][T10101] smc_setsockopt+0x1b6/0xad0 [ 551.080650][T10101] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 551.080663][T10101] ? __pfx_smc_setsockopt+0x10/0x10 [ 551.080676][T10101] ? aa_sock_opt_perm+0x114/0x1e0 [ 551.080689][T10101] ? __pfx_smc_setsockopt+0x10/0x10 [ 551.080701][T10101] do_sock_setsockopt+0xf3/0x1d0 [ 551.080719][T10101] __sys_setsockopt+0x119/0x190 [ 551.080736][T10101] __ia32_sys_setsockopt+0xbc/0x160 [ 551.080750][T10101] ? __might_fault+0x111/0x140 [ 551.080763][T10101] __do_fast_syscall_32+0x14b/0x8c0 [ 551.080780][T10101] do_fast_syscall_32+0x32/0x70 [ 551.080794][T10101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 551.080808][T10101] RIP: 0023:0xf7f32fbc [ 551.080818][T10101] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 551.080827][T10101] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 551.080855][T10101] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 551.080862][T10101] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 551.080870][T10101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 551.080877][T10101] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 551.080885][T10101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.080900][T10101] [ 551.085622][T10101] Mem-Info: [ 551.085632][T10101] active_anon:5437 inactive_anon:1502 isolated_anon:0 [ 551.085632][T10101] active_file:8134 inactive_file:10875 isolated_file:0 [ 551.085632][T10101] unevictable:1000 dirty:445 writeback:0 [ 551.085632][T10101] slab_reclaimable:6631 slab_unreclaimable:59140 [ 551.085632][T10101] mapped:25562 shmem:5804 pagetables:1304 [ 551.085632][T10101] sec_pagetables:315 bounce:0 [ 551.085632][T10101] kernel_misc_reclaimable:0 [ 551.085632][T10101] free:25708 free_pcp:9335 free_cma:0 [ 551.085659][T10101] Node 0 active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7904kB pagetables:1116kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 551.085687][T10101] Node 1 active_anon:21748kB inactive_anon:5956kB active_file:32536kB inactive_file:43500kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:102224kB dirty:1780kB writeback:0kB shmem:21216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6292kB pagetables:4100kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 551.085715][T10101] Node 0 DMA free:2824kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:84kB local_pcp:52kB free_cma:0kB [ 551.085746][T10101] lowmem_reserve[]: 0 256 256 256 256 [ 551.085765][T10101] Node 0 DMA32 free:28148kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:2048kB free_highatomic:256kB active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:1428kB present:1032196kB managed:262420kB mlocked:0kB bounce:0kB free_pcp:1656kB local_pcp:1544kB free_cma:0kB [ 551.085794][T10101] lowmem_reserve[]: 0 0 0 0 0 [ 551.085812][T10101] Node 1 DMA32 free:71860kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21748kB inactive_anon:5956kB active_file:32536kB inactive_file:43500kB unevictable:2000kB writepending:1780kB zspages:4640kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:35600kB local_pcp:34472kB free_cma:0kB [ 551.085840][T10101] lowmem_reserve[]: 0 0 0 0 0 [ 551.085856][T10101] Node 0 DMA: 118*4kB (UM) 12*8kB (UM) 7*16kB (UM) 17*32kB (U) 3*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2824kB [ 551.085923][T10101] Node 0 DMA32: 309*4kB (UMEH) 164*8kB (UMEH) 68*16kB (UMEH) 148*32kB (UMEH) 53*64kB (UME) 18*128kB (UME) 7*256kB (U) 8*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 28148kB [ 551.085995][T10101] Node 1 DMA32: 125*4kB (UM) 156*8kB (UME) 60*16kB (UE) 309*32kB (UME) 133*64kB (UE) 84*128kB (UME) 48*256kB (UME) 12*512kB (M) 11*1024kB (UM) 5*2048kB (UM) 0*4096kB = 71796kB [ 551.086069][T10101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.086076][T10101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 551.086084][T10101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.086091][T10101] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 551.086099][T10101] 26201 total pagecache pages [ 551.086102][T10101] 1397 pages in swap cache [ 551.086106][T10101] Free swap = 100780kB [ 551.086110][T10101] Total swap = 124996kB [ 551.086114][T10101] 524155 pages RAM [ 551.086117][T10101] 0 pages HighMem/MovableOnly [ 551.086120][T10101] 217658 pages reserved [ 551.086124][T10101] 0 pages cma reserved [ 551.219180][T10102] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.224722][T10102] dummy0: left promiscuous mode [ 551.247888][T10102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.812787][T10102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.830076][T10102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.878237][T10102] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 551.878253][T10102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.906572][T10102] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 555.053354][T10107] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 555.207568][T10107] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.678888][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.969'. [ 555.892097][T10109] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.899933][T10109] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address [ 555.907758][T10109] bond7: (slave wireguard1): Error -95 calling set_mac_address [ 560.358970][T10145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.974'. [ 560.779226][T10145] netlink: 'syz.4.974': attribute type 10 has an invalid length. [ 560.779241][T10145] netlink: 40 bytes leftover after parsing attributes in process `syz.4.974'. [ 561.037197][T10152] netlink: 64 bytes leftover after parsing attributes in process `syz.1.975'. [ 561.196534][T10154] syz.2.976: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 561.196578][T10154] CPU: 2 UID: 0 PID: 10154 Comm: syz.2.976 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.196593][T10154] Tainted: [L]=SOFTLOCKUP [ 561.196598][T10154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 561.196605][T10154] Call Trace: [ 561.196610][T10154] [ 561.196616][T10154] dump_stack_lvl+0x100/0x190 [ 561.196637][T10154] ? do_replace+0x1c6/0x490 [ 561.196650][T10154] warn_alloc.cold+0x9e/0xb2 [ 561.196664][T10154] ? __pfx_warn_alloc+0x10/0x10 [ 561.196689][T10154] ? do_replace+0x1c6/0x490 [ 561.196701][T10154] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 561.196717][T10154] ? __lock_acquire+0x5c0/0x1f40 [ 561.196732][T10154] ? do_replace+0x1c6/0x490 [ 561.196744][T10154] ? do_raw_spin_lock+0x128/0x260 [ 561.196759][T10154] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 561.196772][T10154] ? __lock_acquire+0x5c0/0x1f40 [ 561.196784][T10154] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 561.196799][T10154] ? do_replace+0x1c6/0x490 [ 561.196810][T10154] __vmalloc_node_noprof+0xad/0xf0 [ 561.196822][T10154] ? do_replace+0x1c6/0x490 [ 561.196836][T10154] __vmalloc_noprof+0xa3/0x120 [ 561.196847][T10154] ? __pfx___vmalloc_noprof+0x10/0x10 [ 561.196864][T10154] do_replace+0x1c6/0x490 [ 561.196884][T10154] ? __pfx_do_replace+0x10/0x10 [ 561.196902][T10154] ? register_lock_class+0x3f/0x7b0 [ 561.196917][T10154] compat_do_replace+0x589/0x7a0 [ 561.196933][T10154] ? __pfx_compat_do_replace+0x10/0x10 [ 561.196949][T10154] ? hook_capable+0x1bc/0x500 [ 561.196966][T10154] ? bpf_lsm_capable+0x9/0x10 [ 561.196978][T10154] ? security_capable+0x80/0x260 [ 561.196993][T10154] do_ebt_set_ctl+0x3f4/0x4a0 [ 561.197007][T10154] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 561.197021][T10154] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 561.197036][T10154] ? futex_wake+0x4ea/0x5e0 [ 561.197051][T10154] ? nf_sockopt_find.isra.0+0x222/0x290 [ 561.197064][T10154] nf_setsockopt+0x8d/0xf0 [ 561.197077][T10154] ip_setsockopt+0xcb/0xf0 [ 561.197093][T10154] tcp_setsockopt+0xa7/0x100 [ 561.197106][T10154] smc_setsockopt+0x1b6/0xad0 [ 561.197117][T10154] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 561.197131][T10154] ? __pfx_smc_setsockopt+0x10/0x10 [ 561.197143][T10154] ? aa_sock_opt_perm+0x114/0x1e0 [ 561.197156][T10154] ? __pfx_smc_setsockopt+0x10/0x10 [ 561.197168][T10154] do_sock_setsockopt+0xf3/0x1d0 [ 561.197186][T10154] __sys_setsockopt+0x119/0x190 [ 561.197203][T10154] __ia32_sys_setsockopt+0xbc/0x160 [ 561.197216][T10154] ? __might_fault+0x111/0x140 [ 561.197229][T10154] __do_fast_syscall_32+0x14b/0x8c0 [ 561.197246][T10154] do_fast_syscall_32+0x32/0x70 [ 561.197260][T10154] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 561.197273][T10154] RIP: 0023:0xf73cefbc [ 561.197282][T10154] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 561.197292][T10154] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 561.197303][T10154] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 561.197309][T10154] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 561.197315][T10154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.197321][T10154] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 561.197327][T10154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.197341][T10154] [ 561.197346][T10154] Mem-Info: [ 561.197353][T10154] active_anon:704 inactive_anon:1509 isolated_anon:0 [ 561.197353][T10154] active_file:8134 inactive_file:11869 isolated_file:0 [ 561.197353][T10154] unevictable:1000 dirty:674 writeback:0 [ 561.197353][T10154] slab_reclaimable:6616 slab_unreclaimable:58583 [ 561.197353][T10154] mapped:23050 shmem:1006 pagetables:1316 [ 561.197353][T10154] sec_pagetables:315 bounce:0 [ 561.197353][T10154] kernel_misc_reclaimable:0 [ 561.197353][T10154] free:29824 free_pcp:9377 free_cma:0 [ 561.197378][T10154] Node 0 active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7904kB pagetables:1116kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 561.197403][T10154] Node 1 active_anon:2816kB inactive_anon:5984kB active_file:32536kB inactive_file:47476kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:92176kB dirty:2696kB writeback:0kB shmem:2024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6384kB pagetables:4148kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 561.197432][T10154] Node 0 DMA free:2824kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:84kB local_pcp:52kB free_cma:0kB [ 561.197466][T10154] lowmem_reserve[]: 0 256 256 256 256 [ 561.197484][T10154] Node 0 DMA32 free:28148kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:2048kB free_highatomic:256kB active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:1428kB present:1032196kB managed:262420kB mlocked:0kB bounce:0kB free_pcp:1656kB local_pcp:1544kB free_cma:0kB [ 561.197513][T10154] lowmem_reserve[]: 0 0 0 0 0 [ 561.197532][T10154] Node 1 DMA32 free:88324kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2816kB inactive_anon:5984kB active_file:32536kB inactive_file:47476kB unevictable:2000kB writepending:2696kB zspages:4640kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:35768kB local_pcp:34624kB free_cma:0kB [ 561.197559][T10154] lowmem_reserve[]: 0 0 0 0 0 [ 561.197576][T10154] Node 0 DMA: 118*4kB (UM) 12*8kB (UM) 7*16kB (UM) 17*32kB (U) 3*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2824kB [ 561.197647][T10154] Node 0 DMA32: 309*4kB (UMEH) 164*8kB (UMEH) 68*16kB (UMEH) 148*32kB (UMEH) 53*64kB (UME) 18*128kB (UME) 7*256kB (U) 8*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 28148kB [ 561.234603][T10154] Node 1 DMA32: 1099*4kB (UM) 243*8kB (UME) 164*16kB (UME) 452*32kB (UME) 232*64kB (UME) 77*128kB (UME) 48*256kB (UME) 12*512kB (M) 11*1024kB (UM) 5*2048kB (UM) 0*4096kB = 88068kB [ 561.234691][T10154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 561.234699][T10154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 561.234707][T10154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 561.234715][T10154] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 561.234723][T10154] 22434 total pagecache pages [ 561.234726][T10154] 1402 pages in swap cache [ 561.234730][T10154] Free swap = 100788kB [ 561.234734][T10154] Total swap = 124996kB [ 561.234738][T10154] 524155 pages RAM [ 561.234741][T10154] 0 pages HighMem/MovableOnly [ 561.234745][T10154] 217658 pages reserved [ 561.234750][T10154] 0 pages cma reserved [ 562.358969][T10157] FAULT_INJECTION: forcing a failure. [ 562.358969][T10157] name fail_futex, interval 1, probability 0, space 0, times 0 [ 562.358989][T10157] CPU: 2 UID: 0 PID: 10157 Comm: syz.4.977 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.359006][T10157] Tainted: [L]=SOFTLOCKUP [ 562.359011][T10157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 562.359018][T10157] Call Trace: [ 562.359023][T10157] [ 562.359028][T10157] dump_stack_lvl+0x100/0x190 [ 562.359049][T10157] should_fail_ex.cold+0x5/0xa [ 562.359068][T10157] get_futex_key+0x1c9/0x13e0 [ 562.359086][T10157] ? __pfx_get_futex_key+0x10/0x10 [ 562.359100][T10157] ? wakeup_preempt_fair+0x4fc/0xf60 [ 562.359115][T10157] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 562.359133][T10157] futex_wait_setup+0x91/0x540 [ 562.359148][T10157] __futex_wait+0x19f/0x360 [ 562.359160][T10157] ? __pfx___futex_wait+0x10/0x10 [ 562.359170][T10157] ? __pfx_try_to_wake_up+0x10/0x10 [ 562.359180][T10157] ? futex_hash+0x311/0x400 [ 562.359195][T10157] ? __pfx_futex_wake_mark+0x10/0x10 [ 562.359208][T10157] ? find_held_lock+0x2b/0x80 [ 562.359222][T10157] ? futex_wake+0x4ea/0x5e0 [ 562.359236][T10157] futex_wait+0xe6/0x370 [ 562.359247][T10157] ? __pfx_futex_wait+0x10/0x10 [ 562.359262][T10157] ? do_vfs_ioctl+0x226/0x13e0 [ 562.359281][T10157] do_futex+0x265/0x440 [ 562.359296][T10157] ? __pfx_do_futex+0x10/0x10 [ 562.359312][T10157] ? find_held_lock+0x2b/0x80 [ 562.359326][T10157] ? __fget_files+0x215/0x3d0 [ 562.359339][T10157] __ia32_sys_futex_time32+0x2f4/0x470 [ 562.359364][T10157] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 562.359383][T10157] ? __might_fault+0xc5/0x140 [ 562.359401][T10157] __do_fast_syscall_32+0x14b/0x8c0 [ 562.359416][T10157] ? lockdep_hardirqs_on+0x7d/0x110 [ 562.359432][T10157] do_fast_syscall_32+0x32/0x70 [ 562.359447][T10157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.359461][T10157] RIP: 0023:0xf7f32fbc [ 562.359470][T10157] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 562.359480][T10157] RSP: 002b:00000000f53e65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 562.359491][T10157] RAX: ffffffffffffffda RBX: 00000000f73f4f88 RCX: 0000000000000080 [ 562.359498][T10157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73f4f8c [ 562.359504][T10157] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 562.359511][T10157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.359517][T10157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 562.359531][T10157] [ 562.495998][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.496366][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.398185][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.981'. [ 565.138649][T10180] netlink: 'syz.3.981': attribute type 10 has an invalid length. [ 565.138664][T10180] netlink: 40 bytes leftover after parsing attributes in process `syz.3.981'. [ 565.139414][T10180] dummy0: entered promiscuous mode [ 568.072314][T10196] netlink: 14 bytes leftover after parsing attributes in process `syz.2.983'. [ 568.787011][T10213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.985'. [ 569.163437][T10213] netlink: 'syz.4.985': attribute type 10 has an invalid length. [ 569.163452][T10213] netlink: 40 bytes leftover after parsing attributes in process `syz.4.985'. [ 569.895607][ C0] sched: DL replenish lagged too much [ 571.773005][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 578.775573][T10268] rxe_eth0 speed is unknown, defaulting to 1000 [ 579.600576][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 579.987069][T10286] netlink: 'syz.4.995': attribute type 10 has an invalid length. [ 579.987086][T10286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.995'. [ 580.199993][T10289] kAFS: bad VL server IP address [ 580.289026][T10268] lo speed is unknown, defaulting to 1000 [ 580.911797][T10295] syz.3.996: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 580.911847][T10295] CPU: 2 UID: 0 PID: 10295 Comm: syz.3.996 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.911868][T10295] Tainted: [L]=SOFTLOCKUP [ 580.911873][T10295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 580.911880][T10295] Call Trace: [ 580.911885][T10295] [ 580.911891][T10295] dump_stack_lvl+0x100/0x190 [ 580.911914][T10295] ? do_replace+0x1c6/0x490 [ 580.911930][T10295] warn_alloc.cold+0x9e/0xb2 [ 580.911945][T10295] ? __pfx_warn_alloc+0x10/0x10 [ 580.911962][T10295] ? do_raw_spin_lock+0x128/0x260 [ 580.911986][T10295] ? do_replace+0x1c6/0x490 [ 580.911999][T10295] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 580.912014][T10295] ? __lock_acquire+0x5c0/0x1f40 [ 580.912027][T10295] ? do_replace+0x1c6/0x490 [ 580.912041][T10295] ? do_raw_spin_lock+0x128/0x260 [ 580.912057][T10295] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 580.912072][T10295] ? __lock_acquire+0x5c0/0x1f40 [ 580.912084][T10295] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 580.912099][T10295] ? do_replace+0x1c6/0x490 [ 580.912111][T10295] __vmalloc_node_noprof+0xad/0xf0 [ 580.912122][T10295] ? do_replace+0x1c6/0x490 [ 580.912136][T10295] __vmalloc_noprof+0xa3/0x120 [ 580.912147][T10295] ? __pfx___vmalloc_noprof+0x10/0x10 [ 580.912164][T10295] do_replace+0x1c6/0x490 [ 580.912178][T10295] ? __pfx_do_replace+0x10/0x10 [ 580.912196][T10295] ? register_lock_class+0x3f/0x7b0 [ 580.912210][T10295] compat_do_replace+0x589/0x7a0 [ 580.912225][T10295] ? __pfx_compat_do_replace+0x10/0x10 [ 580.912241][T10295] ? hook_capable+0x1bc/0x500 [ 580.912260][T10295] ? bpf_lsm_capable+0x9/0x10 [ 580.912271][T10295] ? security_capable+0x80/0x260 [ 580.912285][T10295] do_ebt_set_ctl+0x3f4/0x4a0 [ 580.912299][T10295] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 580.912313][T10295] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 580.912330][T10295] ? futex_wake+0x4ea/0x5e0 [ 580.912343][T10295] ? nf_sockopt_find.isra.0+0x222/0x290 [ 580.912357][T10295] nf_setsockopt+0x8d/0xf0 [ 580.912370][T10295] ip_setsockopt+0xcb/0xf0 [ 580.912386][T10295] tcp_setsockopt+0xa7/0x100 [ 580.912399][T10295] smc_setsockopt+0x1b6/0xad0 [ 580.912413][T10295] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 580.912426][T10295] ? __pfx_smc_setsockopt+0x10/0x10 [ 580.912439][T10295] ? aa_sock_opt_perm+0x114/0x1e0 [ 580.912451][T10295] ? __pfx_smc_setsockopt+0x10/0x10 [ 580.912464][T10295] do_sock_setsockopt+0xf3/0x1d0 [ 580.912482][T10295] __sys_setsockopt+0x119/0x190 [ 580.912499][T10295] __ia32_sys_setsockopt+0xbc/0x160 [ 580.912513][T10295] ? __might_fault+0x111/0x140 [ 580.912526][T10295] __do_fast_syscall_32+0x14b/0x8c0 [ 580.912542][T10295] do_fast_syscall_32+0x32/0x70 [ 580.912557][T10295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 580.912571][T10295] RIP: 0023:0xf7fd4fbc [ 580.912581][T10295] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 580.912591][T10295] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 580.912602][T10295] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 580.912608][T10295] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 580.912615][T10295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.912621][T10295] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 580.912627][T10295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.912640][T10295] [ 580.912645][T10295] Mem-Info: [ 580.912652][T10295] active_anon:687 inactive_anon:1517 isolated_anon:0 [ 580.912652][T10295] active_file:8249 inactive_file:10668 isolated_file:0 [ 580.912652][T10295] unevictable:1000 dirty:184 writeback:0 [ 580.912652][T10295] slab_reclaimable:6687 slab_unreclaimable:59305 [ 580.912652][T10295] mapped:22915 shmem:1002 pagetables:1313 [ 580.912652][T10295] sec_pagetables:315 bounce:0 [ 580.912652][T10295] kernel_misc_reclaimable:0 [ 580.912652][T10295] free:33643 free_pcp:5694 free_cma:0 [ 580.912677][T10295] Node 0 active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7840kB pagetables:1064kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 580.912702][T10295] Node 1 active_anon:2748kB inactive_anon:6016kB active_file:32996kB inactive_file:42672kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:91636kB dirty:736kB writeback:0kB shmem:2008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6224kB pagetables:4188kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 580.912729][T10295] Node 0 DMA free:2824kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:84kB free_cma:0kB [ 580.912762][T10295] lowmem_reserve[]: 0 256 256 256 256 [ 580.912782][T10295] Node 0 DMA32 free:28148kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:2048kB free_highatomic:256kB active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:1428kB present:1032196kB managed:262420kB mlocked:0kB bounce:0kB free_pcp:1768kB local_pcp:1656kB free_cma:0kB [ 580.912813][T10295] lowmem_reserve[]: 0 0 0 0 0 [ 580.912830][T10295] Node 1 DMA32 free:103600kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2748kB inactive_anon:6016kB active_file:32996kB inactive_file:42672kB unevictable:2000kB writepending:736kB zspages:4640kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:20892kB local_pcp:19892kB free_cma:0kB [ 580.912859][T10295] lowmem_reserve[]: 0 0 0 0 0 [ 580.912886][T10295] Node 0 DMA: 118*4kB (UM) 12*8kB (UM) 7*16kB (UM) 17*32kB (U) 3*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2824kB [ 580.912966][T10295] Node 0 DMA32: 309*4kB (UMEH) 164*8kB (UMEH) 68*16kB (UMEH) 148*32kB (UMEH) 53*64kB (UME) 18*128kB (UME) 7*256kB (U) 8*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 28148kB [ 580.913049][T10295] Node 1 DMA32: 62*4kB (U) 73*8kB (UM) 302*16kB (UME) 482*32kB (UME) 379*64kB (UME) 109*128kB (UME) 47*256kB (UME) 15*512kB (M) 10*1024kB (UM) 5*2048kB (UM) 1*4096kB (U) = 103584kB [ 580.913133][T10295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.913141][T10295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 580.913149][T10295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.913156][T10295] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 580.913164][T10295] 21333 total pagecache pages [ 580.913168][T10295] 1424 pages in swap cache [ 580.913172][T10295] Free swap = 101020kB [ 580.913176][T10295] Total swap = 124996kB [ 580.913180][T10295] 524155 pages RAM [ 580.913183][T10295] 0 pages HighMem/MovableOnly [ 580.913187][T10295] 217658 pages reserved [ 580.913190][T10295] 0 pages cma reserved [ 586.520731][T10317] rxe_eth0 speed is unknown, defaulting to 1000 [ 589.416412][T10317] lo speed is unknown, defaulting to 1000 [ 589.703458][T10331] netlink: 'syz.1.1005': attribute type 10 has an invalid length. [ 589.703474][T10331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1005'. [ 589.774779][T10331] dummy0: entered promiscuous mode [ 591.961144][T10338] kAFS: bad VL server IP address [ 592.161086][ T7199] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 592.313518][ T7199] usb 8-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 592.314345][ T7199] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 592.314360][ T7199] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 592.314370][ T7199] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 592.314386][ T7199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.425916][T10337] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 592.427144][ T7199] cyberjack 8-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 592.559581][ T7199] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 592.776261][ T7199] usb 8-1: USB disconnect, device number 20 [ 592.811598][ T7199] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 592.812623][ T7199] cyberjack 8-1:1.0: device disconnected [ 603.224930][T10373] bridge0: port 1(netdevsim0) entered blocking state [ 603.225651][T10373] bridge0: port 1(netdevsim0) entered disabled state [ 603.226080][T10373] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 603.230496][T10373] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 603.847679][T10381] kAFS: bad VL server IP address [ 604.450669][T10389] input: syz1 as /devices/virtual/input/input11 [ 604.831246][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1021'. [ 605.011693][ T7199] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 605.172938][ T7199] usb 7-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 605.178393][ T7199] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 605.178410][ T7199] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 605.178420][ T7199] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 605.178437][ T7199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.779971][T10387] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 606.067965][ T7199] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 606.598400][ T7199] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 606.665987][ T7199] usb 7-1: USB disconnect, device number 11 [ 606.737399][ T7199] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 606.744939][ T7199] cyberjack 7-1:1.0: device disconnected [ 608.568087][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 612.665014][ T5800] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 613.210198][T10424] netlink: 'syz.3.1029': attribute type 1 has an invalid length. [ 613.348321][T10424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.637851][T10429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.639368][T10429] bond0: (slave wireguard2): The slave device specified does not support setting the MAC address [ 613.687151][T10429] bond0: (slave wireguard2): Error -95 calling set_mac_address [ 613.738659][ T6078] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 614.041518][ T6078] usb 6-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 614.042321][ T6078] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 614.042334][ T6078] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 614.042351][ T6078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.047175][ T6078] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 614.106281][ T6078] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 614.592354][T10428] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 614.592886][T10428] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 614.594256][T10428] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 614.962802][T10428] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 615.855037][T10427] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 615.924481][ T6063] usb 6-1: USB disconnect, device number 9 [ 615.985434][ T6063] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 615.986433][ T6063] spcp8x5 6-1:1.0: device disconnected [ 617.784726][T10447] rxe_eth0 speed is unknown, defaulting to 1000 [ 619.296436][T10452] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.679806][T10448] socket: no more sockets [ 622.001036][T10467] Invalid ELF header magic: != ELF [ 622.199920][T10452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 622.199936][T10452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.257036][T10452] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 622.871004][ T6078] lo speed is unknown, defaulting to 1000 [ 622.949335][ T6078] syz2: Port: 1 Link ACTIVE [ 623.935159][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.935537][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.673633][T10447] lo speed is unknown, defaulting to 1000 [ 628.453901][T10478] dummy0: left promiscuous mode [ 628.831369][T10478] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 628.994925][T10482] rxe_eth0 speed is unknown, defaulting to 1000 [ 631.531206][T10482] lo speed is unknown, defaulting to 1000 [ 632.159455][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1047'. [ 632.396722][ T5800] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 633.405856][T10517] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 639.795496][T10544] dummy0: left promiscuous mode [ 639.874645][T10548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1057'. [ 640.121904][T10544] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 640.186632][T10543] rxe_eth0 speed is unknown, defaulting to 1000 [ 641.745182][T10543] lo speed is unknown, defaulting to 1000 [ 643.442660][T10569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.456923][T10571] netlink: 'syz.2.1060': attribute type 10 has an invalid length. [ 643.456936][T10571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1060'. [ 643.881781][T10576] syz.4.1069: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 643.881823][T10576] CPU: 2 UID: 0 PID: 10576 Comm: syz.4.1069 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.881838][T10576] Tainted: [L]=SOFTLOCKUP [ 643.881843][T10576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 643.881850][T10576] Call Trace: [ 643.881854][T10576] [ 643.881859][T10576] dump_stack_lvl+0x100/0x190 [ 643.881879][T10576] ? do_replace+0x1c6/0x490 [ 643.881893][T10576] warn_alloc.cold+0x9e/0xb2 [ 643.881909][T10576] ? __pfx_warn_alloc+0x10/0x10 [ 643.881932][T10576] ? do_replace+0x1c6/0x490 [ 643.881944][T10576] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 643.881959][T10576] ? debug_object_activate+0x343/0x4b0 [ 643.881980][T10576] ? do_replace+0x1c6/0x490 [ 643.881993][T10576] ? do_raw_spin_lock+0x128/0x260 [ 643.882010][T10576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 643.882023][T10576] ? __lock_acquire+0x5c0/0x1f40 [ 643.882037][T10576] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 643.882052][T10576] ? do_replace+0x1c6/0x490 [ 643.882063][T10576] __vmalloc_node_noprof+0xad/0xf0 [ 643.882075][T10576] ? do_replace+0x1c6/0x490 [ 643.882088][T10576] __vmalloc_noprof+0xa3/0x120 [ 643.882100][T10576] ? __pfx___vmalloc_noprof+0x10/0x10 [ 643.882116][T10576] do_replace+0x1c6/0x490 [ 643.882129][T10576] ? __pfx_do_replace+0x10/0x10 [ 643.882147][T10576] ? register_lock_class+0x3f/0x7b0 [ 643.882162][T10576] compat_do_replace+0x589/0x7a0 [ 643.882176][T10576] ? __pfx_compat_do_replace+0x10/0x10 [ 643.882190][T10576] ? hook_capable+0x1bc/0x500 [ 643.882207][T10576] ? bpf_lsm_capable+0x9/0x10 [ 643.882218][T10576] ? security_capable+0x80/0x260 [ 643.882232][T10576] do_ebt_set_ctl+0x3f4/0x4a0 [ 643.882245][T10576] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 643.882260][T10576] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 643.882275][T10576] ? futex_wake+0x4ea/0x5e0 [ 643.882287][T10576] ? nf_sockopt_find.isra.0+0x222/0x290 [ 643.882300][T10576] nf_setsockopt+0x8d/0xf0 [ 643.882313][T10576] ip_setsockopt+0xcb/0xf0 [ 643.882329][T10576] tcp_setsockopt+0xa7/0x100 [ 643.882342][T10576] smc_setsockopt+0x1b6/0xad0 [ 643.882354][T10576] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 643.882367][T10576] ? __pfx_smc_setsockopt+0x10/0x10 [ 643.882380][T10576] ? aa_sock_opt_perm+0x114/0x1e0 [ 643.882393][T10576] ? __pfx_smc_setsockopt+0x10/0x10 [ 643.882405][T10576] do_sock_setsockopt+0xf3/0x1d0 [ 643.882423][T10576] __sys_setsockopt+0x119/0x190 [ 643.882440][T10576] __ia32_sys_setsockopt+0xbc/0x160 [ 643.882454][T10576] ? __might_fault+0x111/0x140 [ 643.882467][T10576] __do_fast_syscall_32+0x14b/0x8c0 [ 643.882484][T10576] do_fast_syscall_32+0x32/0x70 [ 643.882498][T10576] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 643.882511][T10576] RIP: 0023:0xf7f32fbc [ 643.882520][T10576] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 643.882530][T10576] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 643.882541][T10576] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 643.882547][T10576] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 643.882554][T10576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.882560][T10576] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 643.882566][T10576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.882580][T10576] [ 643.882584][T10576] Mem-Info: [ 643.882590][T10576] active_anon:689 inactive_anon:1548 isolated_anon:6 [ 643.882590][T10576] active_file:7461 inactive_file:13036 isolated_file:0 [ 643.882590][T10576] unevictable:1000 dirty:169 writeback:0 [ 643.882590][T10576] slab_reclaimable:6760 slab_unreclaimable:59334 [ 643.882590][T10576] mapped:23736 shmem:1003 pagetables:1265 [ 643.882590][T10576] sec_pagetables:317 bounce:0 [ 643.882590][T10576] kernel_misc_reclaimable:0 [ 643.882590][T10576] free:34394 free_pcp:11347 free_cma:0 [ 643.882615][T10576] Node 0 active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7808kB pagetables:1064kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 643.882640][T10576] Node 1 active_anon:2756kB inactive_anon:6140kB active_file:29844kB inactive_file:52144kB unevictable:2000kB isolated(anon):24kB isolated(file):0kB mapped:94920kB dirty:676kB writeback:0kB shmem:2012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6360kB pagetables:3996kB sec_pagetables:116kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 643.882668][T10576] Node 0 DMA free:2944kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 643.882697][T10576] lowmem_reserve[]: 0 256 256 256 256 [ 643.882716][T10576] Node 0 DMA32 free:17832kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:2048kB free_highatomic:368kB active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:1428kB present:1032196kB managed:262420kB mlocked:0kB bounce:0kB free_pcp:12232kB local_pcp:12232kB free_cma:0kB [ 643.882745][T10576] lowmem_reserve[]: 0 0 0 0 0 [ 643.882762][T10576] Node 1 DMA32 free:116800kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2756kB inactive_anon:6140kB active_file:29844kB inactive_file:52144kB unevictable:2000kB writepending:676kB zspages:4636kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:33156kB local_pcp:31988kB free_cma:0kB [ 643.882789][T10576] lowmem_reserve[]: 0 0 0 0 0 [ 643.882806][T10576] Node 0 DMA: 120*4kB (UM) 12*8kB (UM) 8*16kB (UM) 20*32kB (U) 3*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2944kB [ 643.882876][T10576] Node 0 DMA32: 552*4kB (UMEH) 175*8kB (UMEH) 81*16kB (UMEH) 132*32kB (UMEH) 30*64kB (UMEH) 11*128kB (UME) 1*256kB (U) 0*512kB 1*1024kB (U) 2*2048kB (UM) 0*4096kB = 17832kB [ 643.882948][T10576] Node 1 DMA32: 2500*4kB (UME) 718*8kB (UME) 610*16kB (UME) 269*32kB (UME) 364*64kB (UME) 104*128kB (UME) 40*256kB (UME) 14*512kB (UM) 6*1024kB (M) 5*2048kB (M) 3*4096kB (UM) = 116800kB [ 643.883038][T10576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 643.883048][T10576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 643.883056][T10576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 643.883065][T10576] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 643.883073][T10576] 22957 total pagecache pages [ 643.883077][T10576] 1468 pages in swap cache [ 643.883082][T10576] Free swap = 101112kB [ 643.883086][T10576] Total swap = 124996kB [ 643.883091][T10576] 524155 pages RAM [ 643.883095][T10576] 0 pages HighMem/MovableOnly [ 643.883099][T10576] 217658 pages reserved [ 643.883103][T10576] 0 pages cma reserved [ 648.091913][ T5800] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 659.471905][T10631] syz.1.1073: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 659.471949][T10631] CPU: 2 UID: 0 PID: 10631 Comm: syz.1.1073 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.471964][T10631] Tainted: [L]=SOFTLOCKUP [ 659.471969][T10631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 659.471976][T10631] Call Trace: [ 659.471981][T10631] [ 659.471986][T10631] dump_stack_lvl+0x100/0x190 [ 659.472005][T10631] ? do_replace+0x1c6/0x490 [ 659.472018][T10631] warn_alloc.cold+0x9e/0xb2 [ 659.472032][T10631] ? __pfx_warn_alloc+0x10/0x10 [ 659.472047][T10631] ? find_held_lock+0x2b/0x80 [ 659.472063][T10631] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 659.472085][T10631] ? do_replace+0x1c6/0x490 [ 659.472097][T10631] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 659.472115][T10631] ? do_replace+0x1c6/0x490 [ 659.472129][T10631] ? do_raw_spin_lock+0x128/0x260 [ 659.472143][T10631] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 659.472157][T10631] ? __lock_acquire+0x5c0/0x1f40 [ 659.472169][T10631] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 659.472183][T10631] ? do_replace+0x1c6/0x490 [ 659.472194][T10631] __vmalloc_node_noprof+0xad/0xf0 [ 659.472206][T10631] ? do_replace+0x1c6/0x490 [ 659.472219][T10631] __vmalloc_noprof+0xa3/0x120 [ 659.472230][T10631] ? __pfx___vmalloc_noprof+0x10/0x10 [ 659.472247][T10631] do_replace+0x1c6/0x490 [ 659.472260][T10631] ? __pfx_do_replace+0x10/0x10 [ 659.472277][T10631] ? register_lock_class+0x3f/0x7b0 [ 659.472291][T10631] compat_do_replace+0x589/0x7a0 [ 659.472305][T10631] ? __pfx_compat_do_replace+0x10/0x10 [ 659.472320][T10631] ? hook_capable+0x1bc/0x500 [ 659.472336][T10631] ? bpf_lsm_capable+0x9/0x10 [ 659.472347][T10631] ? security_capable+0x80/0x260 [ 659.472360][T10631] do_ebt_set_ctl+0x3f4/0x4a0 [ 659.472374][T10631] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 659.472389][T10631] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 659.472403][T10631] ? futex_wake+0x4ea/0x5e0 [ 659.472416][T10631] ? nf_sockopt_find.isra.0+0x222/0x290 [ 659.472429][T10631] nf_setsockopt+0x8d/0xf0 [ 659.472442][T10631] ip_setsockopt+0xcb/0xf0 [ 659.472458][T10631] tcp_setsockopt+0xa7/0x100 [ 659.472471][T10631] smc_setsockopt+0x1b6/0xad0 [ 659.472484][T10631] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 659.472497][T10631] ? __pfx_smc_setsockopt+0x10/0x10 [ 659.472510][T10631] ? aa_sock_opt_perm+0x114/0x1e0 [ 659.472522][T10631] ? __pfx_smc_setsockopt+0x10/0x10 [ 659.472535][T10631] do_sock_setsockopt+0xf3/0x1d0 [ 659.472554][T10631] __sys_setsockopt+0x119/0x190 [ 659.472571][T10631] __ia32_sys_setsockopt+0xbc/0x160 [ 659.472584][T10631] ? __might_fault+0x111/0x140 [ 659.472598][T10631] __do_fast_syscall_32+0x14b/0x8c0 [ 659.472614][T10631] do_fast_syscall_32+0x32/0x70 [ 659.472628][T10631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 659.472641][T10631] RIP: 0023:0xf73defbc [ 659.472651][T10631] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 659.472660][T10631] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 659.472670][T10631] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 659.472677][T10631] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 659.472684][T10631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 659.472689][T10631] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 659.472696][T10631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 659.472710][T10631] [ 659.472715][T10631] Mem-Info: [ 659.472720][T10631] active_anon:3549 inactive_anon:1556 isolated_anon:0 [ 659.472720][T10631] active_file:7461 inactive_file:10832 isolated_file:0 [ 659.472720][T10631] unevictable:1000 dirty:221 writeback:0 [ 659.472720][T10631] slab_reclaimable:6619 slab_unreclaimable:59397 [ 659.472720][T10631] mapped:25602 shmem:3873 pagetables:1271 [ 659.472720][T10631] sec_pagetables:317 bounce:0 [ 659.472720][T10631] kernel_misc_reclaimable:0 [ 659.472720][T10631] free:34639 free_pcp:10424 free_cma:0 [ 659.472746][T10631] Node 0 active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7776kB pagetables:1064kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 659.472772][T10631] Node 1 active_anon:14196kB inactive_anon:6172kB active_file:29844kB inactive_file:43328kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:102384kB dirty:884kB writeback:0kB shmem:13492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6324kB pagetables:4020kB sec_pagetables:116kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 659.472802][T10631] Node 0 DMA free:2944kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.472833][T10631] lowmem_reserve[]: 0 256 256 256 256 [ 659.472852][T10631] Node 0 DMA32 free:17832kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:2048kB free_highatomic:368kB active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:1428kB present:1032196kB managed:262420kB mlocked:0kB bounce:0kB free_pcp:12272kB local_pcp:12272kB free_cma:0kB [ 659.472890][T10631] lowmem_reserve[]: 0 0 0 0 0 [ 659.472908][T10631] Node 1 DMA32 free:117780kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:14196kB inactive_anon:6172kB active_file:29844kB inactive_file:43328kB unevictable:2000kB writepending:884kB zspages:4636kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:29424kB local_pcp:27556kB free_cma:0kB [ 659.472939][T10631] lowmem_reserve[]: 0 0 0 0 0 [ 659.476410][T10631] Node 0 DMA: 120*4kB (UM) 12*8kB (UM) 8*16kB (UM) 20*32kB (U) 3*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2944kB [ 659.476487][T10631] Node 0 DMA32: 552*4kB (UMEH) 175*8kB (UMEH) 81*16kB (UMEH) 132*32kB (UMEH) 30*64kB (UMEH) 11*128kB (UME) 1*256kB (U) 0*512kB 1*1024kB (U) 2*2048kB (UM) 0*4096kB = 17832kB [ 659.476567][T10631] Node 1 DMA32: 1861*4kB (UME) 1056*8kB (UME) 674*16kB (UME) 188*32kB (UME) 367*64kB (UME) 153*128kB (UME) 40*256kB (UME) 14*512kB (UM) 6*1024kB (M) 3*2048kB (M) 3*4096kB (UM) = 117748kB [ 659.476650][T10631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.476658][T10631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 659.476666][T10631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.476674][T10631] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 659.476681][T10631] 23634 total pagecache pages [ 659.476685][T10631] 1479 pages in swap cache [ 659.476689][T10631] Free swap = 101120kB [ 659.476693][T10631] Total swap = 124996kB [ 659.476697][T10631] 524155 pages RAM [ 659.476700][T10631] 0 pages HighMem/MovableOnly [ 659.476704][T10631] 217658 pages reserved [ 659.476708][T10631] 0 pages cma reserved [ 664.730625][T10654] xt_REDIRECT: bad MAP_IPS. [ 664.881336][T10654] syzkaller0: entered promiscuous mode [ 664.881679][T10654] syzkaller0: entered allmulticast mode [ 666.676526][T10667] input: syz1 as /devices/virtual/input/input12 [ 669.929198][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 670.566563][ T6078] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 670.722205][ T6078] usb 8-1: Using ep0 maxpacket: 32 [ 670.723917][ T6078] usb 8-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 670.724920][ T6078] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.724932][ T6078] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 670.727266][ T6078] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.727296][ T6078] usb 8-1: Product: syz [ 670.727305][ T6078] usb 8-1: Manufacturer: syz [ 670.727312][ T6078] usb 8-1: SerialNumber: syz [ 671.179005][ T6078] usb 8-1: config 0 descriptor?? [ 673.385916][ T6063] usb 8-1: USB disconnect, device number 21 [ 674.501035][ T6063] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 674.645693][ T36] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fccbf36-b838-4fa4-a9dc-d1d06e0b7980. [ 674.674326][ T6063] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 674.675195][ T6063] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.675217][ T6063] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.708621][ T6063] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 674.708723][ T6063] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 674.708751][ T6063] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 674.735833][ T6063] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 674.735871][ T6063] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 674.741333][ T6063] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 674.767431][ T6063] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 674.767469][ T6063] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 674.780758][ T6063] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 675.891400][T10687] nvme nvme0: creating 2 I/O queues. [ 676.005531][T10687] nvme nvme0: new ctrl: "testsubsys" [ 676.173220][T10702] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 676.173233][T10702] PKCS7: Only support pkcs7_signedData type [ 676.925126][ T6063] usb 8-1: USB disconnect, device number 22 [ 677.001060][ T6063] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 677.026093][ T6063] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 677.027127][ T6063] keyspan 8-1:1.0: device disconnected [ 678.715056][T10721] warn_alloc: 1 callbacks suppressed [ 678.715070][T10721] syz.1.1094: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 678.715106][T10721] CPU: 2 UID: 0 PID: 10721 Comm: syz.1.1094 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.715121][T10721] Tainted: [L]=SOFTLOCKUP [ 678.715126][T10721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 678.715134][T10721] Call Trace: [ 678.715139][T10721] [ 678.715144][T10721] dump_stack_lvl+0x100/0x190 [ 678.715165][T10721] ? do_replace+0x1c6/0x490 [ 678.715178][T10721] warn_alloc.cold+0x9e/0xb2 [ 678.715192][T10721] ? __pfx_warn_alloc+0x10/0x10 [ 678.715207][T10721] ? __update_page_owner_handle+0x390/0x530 [ 678.715233][T10721] ? do_replace+0x1c6/0x490 [ 678.715265][T10721] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 678.715283][T10721] ? __lock_acquire+0x5c0/0x1f40 [ 678.715299][T10721] ? do_replace+0x1c6/0x490 [ 678.715312][T10721] ? do_raw_spin_lock+0x128/0x260 [ 678.715329][T10721] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 678.715343][T10721] ? __lock_acquire+0x5c0/0x1f40 [ 678.715357][T10721] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 678.715371][T10721] ? do_replace+0x1c6/0x490 [ 678.715382][T10721] __vmalloc_node_noprof+0xad/0xf0 [ 678.715394][T10721] ? do_replace+0x1c6/0x490 [ 678.715407][T10721] __vmalloc_noprof+0xa3/0x120 [ 678.715419][T10721] ? __pfx___vmalloc_noprof+0x10/0x10 [ 678.715436][T10721] do_replace+0x1c6/0x490 [ 678.715450][T10721] ? __pfx_do_replace+0x10/0x10 [ 678.715468][T10721] ? register_lock_class+0x3f/0x7b0 [ 678.715482][T10721] compat_do_replace+0x589/0x7a0 [ 678.715496][T10721] ? __pfx_compat_do_replace+0x10/0x10 [ 678.715511][T10721] ? hook_capable+0x1bc/0x500 [ 678.715527][T10721] ? bpf_lsm_capable+0x9/0x10 [ 678.715538][T10721] ? security_capable+0x80/0x260 [ 678.715552][T10721] do_ebt_set_ctl+0x3f4/0x4a0 [ 678.715565][T10721] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 678.715580][T10721] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 678.715594][T10721] ? futex_wake+0x4ea/0x5e0 [ 678.715608][T10721] ? nf_sockopt_find.isra.0+0x222/0x290 [ 678.715622][T10721] nf_setsockopt+0x8d/0xf0 [ 678.715634][T10721] ip_setsockopt+0xcb/0xf0 [ 678.715651][T10721] tcp_setsockopt+0xa7/0x100 [ 678.715664][T10721] smc_setsockopt+0x1b6/0xad0 [ 678.715675][T10721] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 678.715689][T10721] ? __pfx_smc_setsockopt+0x10/0x10 [ 678.715702][T10721] ? aa_sock_opt_perm+0x114/0x1e0 [ 678.715714][T10721] ? __pfx_smc_setsockopt+0x10/0x10 [ 678.715727][T10721] do_sock_setsockopt+0xf3/0x1d0 [ 678.715745][T10721] __sys_setsockopt+0x119/0x190 [ 678.715763][T10721] __ia32_sys_setsockopt+0xbc/0x160 [ 678.715777][T10721] ? __might_fault+0x111/0x140 [ 678.715790][T10721] __do_fast_syscall_32+0x14b/0x8c0 [ 678.715806][T10721] do_fast_syscall_32+0x32/0x70 [ 678.715820][T10721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 678.715834][T10721] RIP: 0023:0xf73defbc [ 678.715843][T10721] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 678.715853][T10721] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 678.715869][T10721] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 678.715877][T10721] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 678.715883][T10721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 678.715891][T10721] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 678.715898][T10721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 678.715913][T10721] [ 678.715918][T10721] Mem-Info: [ 678.715924][T10721] active_anon:2966 inactive_anon:1563 isolated_anon:0 [ 678.715924][T10721] active_file:7461 inactive_file:10838 isolated_file:0 [ 678.715924][T10721] unevictable:1000 dirty:390 writeback:0 [ 678.715924][T10721] slab_reclaimable:6660 slab_unreclaimable:59672 [ 678.715924][T10721] mapped:24586 shmem:3000 pagetables:1368 [ 678.715924][T10721] sec_pagetables:317 bounce:0 [ 678.715924][T10721] kernel_misc_reclaimable:0 [ 678.715924][T10721] free:32957 free_pcp:11579 free_cma:0 [ 678.715949][T10721] Node 0 active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7776kB pagetables:1064kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 678.715974][T10721] Node 1 active_anon:11864kB inactive_anon:6200kB active_file:29844kB inactive_file:43352kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:98320kB dirty:1560kB writeback:0kB shmem:10000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6548kB pagetables:4408kB sec_pagetables:116kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 678.716002][T10721] Node 0 DMA free:2944kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 678.716032][T10721] lowmem_reserve[]: 0 256 256 256 256 [ 678.716051][T10721] Node 0 DMA32 free:17832kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:2048kB free_highatomic:368kB active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:1428kB present:1032196kB managed:262420kB mlocked:0kB bounce:0kB free_pcp:12272kB local_pcp:12272kB free_cma:0kB [ 678.716082][T10721] lowmem_reserve[]: 0 0 0 0 0 [ 678.716098][T10721] Node 1 DMA32 free:111052kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:11864kB inactive_anon:6200kB active_file:29844kB inactive_file:43352kB unevictable:2000kB writepending:1560kB zspages:4632kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:34044kB local_pcp:32216kB free_cma:0kB [ 678.716126][T10721] lowmem_reserve[]: 0 0 0 0 0 [ 678.716142][T10721] Node 0 DMA: 120*4kB (UM) 12*8kB (UM) 8*16kB (UM) 20*32kB (U) 3*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2944kB [ 678.716212][T10721] Node 0 DMA32: 552*4kB (UMEH) 175*8kB (UMEH) 81*16kB (UMEH) 132*32kB (UMEH) 30*64kB (UMEH) 11*128kB (UME) 1*256kB (U) 0*512kB 1*1024kB (U) 2*2048kB (UM) 0*4096kB = 17832kB [ 678.719384][T10721] Node 1 DMA32: 2454*4kB (UME) 940*8kB (UME) 659*16kB (UME) 315*32kB (UME) 272*64kB (UME) 159*128kB (UME) 32*256kB (UME) 13*512kB (M) 6*1024kB (M) 3*2048kB (UM) 2*4096kB (U) = 111048kB [ 678.763334][T10721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 678.763344][T10721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 678.763353][T10721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 678.763361][T10721] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 678.763370][T10721] 22846 total pagecache pages [ 678.763374][T10721] 1488 pages in swap cache [ 678.763379][T10721] Free swap = 101136kB [ 678.763383][T10721] Total swap = 124996kB [ 678.763388][T10721] 524155 pages RAM [ 678.763392][T10721] 0 pages HighMem/MovableOnly [ 678.763396][T10721] 217658 pages reserved [ 678.763399][T10721] 0 pages cma reserved [ 679.377442][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 681.987537][ T42] audit: type=1326 audit(1793627195.455:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.4.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 681.990875][ T42] audit: type=1326 audit(1793627195.465:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.4.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 681.990904][ T42] audit: type=1326 audit(1793627195.465:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.4.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 682.016344][ T42] audit: type=1326 audit(1793627195.495:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.4.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 682.016370][ T42] audit: type=1326 audit(1793627195.495:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.4.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 682.043940][ T42] audit: type=1326 audit(1793627195.525:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.4.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 682.045169][ T42] audit: type=1326 audit(1793627195.525:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.4.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 682.045605][ T42] audit: type=1326 audit(1793627195.525:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.4.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 682.093029][ T42] audit: type=1326 audit(1793627195.575:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.4.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7127f6b code=0x7ffc0000 [ 682.093618][ T42] audit: type=1326 audit(1793627195.575:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.4.1096" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 682.132506][T10730] input: syz1 as /devices/virtual/input/input13 [ 682.285139][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1095'. [ 682.330979][ T7199] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 682.547747][ T7199] usb 9-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 682.590406][ T7199] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.590422][ T7199] usb 9-1: Product: syz [ 682.590429][ T7199] usb 9-1: Manufacturer: syz [ 682.590819][ T7199] usb 9-1: SerialNumber: syz [ 682.769781][ T7199] usb 9-1: USB2VGA dongle found at address 11 [ 682.830091][ T7199] usb 9-1: Allocated 8 output buffers [ 685.181144][T10751] Invalid ELF header magic: != ELF [ 685.664363][T10750] overlay: Unknown parameter '/' [ 685.668104][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.668478][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.964191][ T7199] usb 9-1: Failed to early initialize device [ 686.018502][ T7199] usb 9-1: USB disconnect, device number 11 [ 690.588451][T10772] bond0: (slave gretap0): Opening slave failed [ 690.771239][ T6078] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 690.863499][T10779] netlink: 'syz.1.1113': attribute type 3 has an invalid length. [ 690.863514][T10779] netlink: 'syz.1.1113': attribute type 1 has an invalid length. [ 690.863520][T10779] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1113'. [ 690.889397][T10779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1113'. [ 690.970975][ T6078] usb 9-1: Using ep0 maxpacket: 8 [ 690.975830][ T6078] usb 9-1: New USB device found: idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 690.986202][ T6078] usb 9-1: config 0 has no interfaces? [ 690.986221][ T6078] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.990338][ T6078] usb 9-1: config 0 descriptor?? [ 691.235978][T10773] sd 0:0:0:0: PR command failed: 1026 [ 691.236013][T10773] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 691.236034][T10773] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 691.338332][ T6078] usb 9-1: USB disconnect, device number 12 [ 691.685365][T10784] syz.3.1106: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 691.685407][T10784] CPU: 2 UID: 0 PID: 10784 Comm: syz.3.1106 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.685423][T10784] Tainted: [L]=SOFTLOCKUP [ 691.685428][T10784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 691.685435][T10784] Call Trace: [ 691.685439][T10784] [ 691.685445][T10784] dump_stack_lvl+0x100/0x190 [ 691.685465][T10784] ? do_replace+0x1c6/0x490 [ 691.685478][T10784] warn_alloc.cold+0x9e/0xb2 [ 691.685492][T10784] ? __pfx_warn_alloc+0x10/0x10 [ 691.685516][T10784] ? do_replace+0x1c6/0x490 [ 691.685527][T10784] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 691.685543][T10784] ? do_raw_spin_lock+0x128/0x260 [ 691.685558][T10784] ? do_replace+0x1c6/0x490 [ 691.685570][T10784] ? do_raw_spin_lock+0x128/0x260 [ 691.685585][T10784] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 691.685599][T10784] ? __lock_acquire+0x5c0/0x1f40 [ 691.685611][T10784] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 691.685625][T10784] ? do_replace+0x1c6/0x490 [ 691.685637][T10784] __vmalloc_node_noprof+0xad/0xf0 [ 691.685649][T10784] ? do_replace+0x1c6/0x490 [ 691.685663][T10784] __vmalloc_noprof+0xa3/0x120 [ 691.685675][T10784] ? __pfx___vmalloc_noprof+0x10/0x10 [ 691.685691][T10784] do_replace+0x1c6/0x490 [ 691.685704][T10784] ? __pfx_do_replace+0x10/0x10 [ 691.685727][T10784] ? register_lock_class+0x3f/0x7b0 [ 691.685741][T10784] compat_do_replace+0x589/0x7a0 [ 691.685756][T10784] ? __pfx_compat_do_replace+0x10/0x10 [ 691.685771][T10784] ? hook_capable+0x1bc/0x500 [ 691.685790][T10784] ? bpf_lsm_capable+0x9/0x10 [ 691.685801][T10784] ? security_capable+0x80/0x260 [ 691.685816][T10784] do_ebt_set_ctl+0x3f4/0x4a0 [ 691.685845][T10784] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 691.685859][T10784] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 691.685875][T10784] ? futex_wake+0x4ea/0x5e0 [ 691.685889][T10784] ? nf_sockopt_find.isra.0+0x222/0x290 [ 691.685903][T10784] nf_setsockopt+0x8d/0xf0 [ 691.685916][T10784] ip_setsockopt+0xcb/0xf0 [ 691.685933][T10784] tcp_setsockopt+0xa7/0x100 [ 691.685945][T10784] smc_setsockopt+0x1b6/0xad0 [ 691.685958][T10784] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 691.685972][T10784] ? __pfx_smc_setsockopt+0x10/0x10 [ 691.685985][T10784] ? aa_sock_opt_perm+0x114/0x1e0 [ 691.685998][T10784] ? __pfx_smc_setsockopt+0x10/0x10 [ 691.686010][T10784] do_sock_setsockopt+0xf3/0x1d0 [ 691.686029][T10784] __sys_setsockopt+0x119/0x190 [ 691.686046][T10784] __ia32_sys_setsockopt+0xbc/0x160 [ 691.686060][T10784] ? __might_fault+0x111/0x140 [ 691.686073][T10784] __do_fast_syscall_32+0x14b/0x8c0 [ 691.686089][T10784] do_fast_syscall_32+0x32/0x70 [ 691.686103][T10784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 691.686117][T10784] RIP: 0023:0xf7fd4fbc [ 691.686126][T10784] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 691.686136][T10784] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 691.686147][T10784] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 691.686153][T10784] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 691.686160][T10784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 691.686166][T10784] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 691.686172][T10784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 691.686186][T10784] [ 691.686517][T10784] Mem-Info: [ 691.686524][T10784] active_anon:5272 inactive_anon:10183 isolated_anon:0 [ 691.686524][T10784] active_file:10088 inactive_file:7792 isolated_file:0 [ 691.686524][T10784] unevictable:1000 dirty:48 writeback:14 [ 691.686524][T10784] slab_reclaimable:6672 slab_unreclaimable:59027 [ 691.686524][T10784] mapped:33204 shmem:13879 pagetables:1387 [ 691.686524][T10784] sec_pagetables:317 bounce:0 [ 691.686524][T10784] kernel_misc_reclaimable:0 [ 691.686524][T10784] free:28628 free_pcp:6055 free_cma:0 [ 691.686551][T10784] Node 0 active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7744kB pagetables:1064kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 691.686579][T10784] Node 1 active_anon:21088kB inactive_anon:40680kB active_file:40352kB inactive_file:31168kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:132792kB dirty:192kB writeback:56kB shmem:53516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6520kB pagetables:4484kB sec_pagetables:116kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 691.686606][T10784] Node 0 DMA free:2944kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 691.686636][T10784] lowmem_reserve[]: 0 256 256 256 256 [ 691.686655][T10784] Node 0 DMA32 free:17832kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:2048kB free_highatomic:368kB active_anon:0kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:1428kB present:1032196kB managed:262420kB mlocked:0kB bounce:0kB free_pcp:12304kB local_pcp:12304kB free_cma:0kB [ 691.686685][T10784] lowmem_reserve[]: 0 0 0 0 0 [ 691.686701][T10784] Node 1 DMA32 free:93736kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21088kB inactive_anon:40680kB active_file:40352kB inactive_file:31168kB unevictable:2000kB writepending:180kB zspages:4628kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:11916kB local_pcp:11172kB free_cma:0kB [ 691.686735][T10784] lowmem_reserve[]: 0 0 0 0 0 [ 691.686753][T10784] Node 0 DMA: 120*4kB (UM) 12*8kB (UM) 8*16kB (UM) 20*32kB (U) 3*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2944kB [ 691.686832][T10784] Node 0 DMA32: 552*4kB (UMEH) 175*8kB (UMEH) 81*16kB (UMEH) 132*32kB (UMEH) 30*64kB (UMEH) 11*128kB (UME) 1*256kB (U) 0*512kB 1*1024kB (U) 2*2048kB (UM) 0*4096kB = 17832kB [ 691.686911][T10784] Node 1 DMA32: 129*4kB (UME) 927*8kB (UE) 555*16kB (UME) 487*32kB (UME) 275*64kB (UME) 109*128kB (UME) 18*256kB (UE) 3*512kB (U) 1*1024kB (U) 5*2048kB (UM) 3*4096kB (UM) = 93644kB [ 691.686991][T10784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 691.686999][T10784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 691.687007][T10784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 691.687015][T10784] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 691.687022][T10784] 33256 total pagecache pages [ 691.687026][T10784] 1497 pages in swap cache [ 691.687029][T10784] Free swap = 101140kB [ 691.687033][T10784] Total swap = 124996kB [ 691.687037][T10784] 524155 pages RAM [ 691.687041][T10784] 0 pages HighMem/MovableOnly [ 691.687044][T10784] 217658 pages reserved [ 691.687048][T10784] 0 pages cma reserved [ 692.305387][T10786] batman_adv: batadv0: Adding interface: ipvlan2 [ 692.305400][T10786] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.305415][T10786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.305424][T10786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.305430][T10786] batman_adv: batadv0: Interface activated: ipvlan2 [ 697.732206][ T6078] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 697.881838][ T6078] usb 7-1: Using ep0 maxpacket: 8 [ 697.907258][ T6078] usb 7-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 698.136864][ T6078] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 698.136882][ T6078] usb 7-1: config 179 has no interface number 0 [ 698.136902][ T6078] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 698.136914][ T6078] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 698.136926][ T6078] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 698.136938][ T6078] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 698.136951][ T6078] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 698.136970][ T6078] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.558118][T10814] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 700.905907][ T6078] usb 7-1: USB disconnect, device number 12 [ 700.907445][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 701.981943][T10823] netlink: 'syz.3.1115': attribute type 3 has an invalid length. [ 701.981959][T10823] netlink: 'syz.3.1115': attribute type 1 has an invalid length. [ 701.981966][T10823] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1115'. [ 702.028384][T10823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1115'. [ 702.930004][T10830] batadv_slave_1: entered promiscuous mode [ 704.838674][T10828] batadv_slave_1: left promiscuous mode [ 704.941732][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 704.941746][ T42] audit: type=1800 audit(1793627218.425:679): pid=10831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1118" name="bus" dev="ramfs" ino=33437 res=0 errno=-4 [ 705.292064][T10836] device-mapper: ioctl: Target type does not support messages [ 705.649544][T10849] bond0: (slave gretap0): Opening slave failed [ 706.085070][T10852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1123'. [ 706.313047][T10852] FAULT_INJECTION: forcing a failure. [ 706.313047][T10852] name failslab, interval 1, probability 0, space 0, times 0 [ 706.313068][T10852] CPU: 2 UID: 0 PID: 10852 Comm: syz.4.1123 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.313084][T10852] Tainted: [L]=SOFTLOCKUP [ 706.313089][T10852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 706.313096][T10852] Call Trace: [ 706.313101][T10852] [ 706.313105][T10852] dump_stack_lvl+0x100/0x190 [ 706.313126][T10852] should_fail_ex.cold+0x5/0xa [ 706.313144][T10852] should_failslab+0xc2/0x120 [ 706.313160][T10852] __kmalloc_cache_node_noprof+0x94/0x710 [ 706.313173][T10852] ? kfree+0x22b/0x6d0 [ 706.313186][T10852] ? blk_mq_init_tags+0x8c/0x300 [ 706.313201][T10852] blk_mq_init_tags+0x8c/0x300 [ 706.313213][T10852] blk_mq_alloc_map_and_rqs+0x244/0xe20 [ 706.313232][T10852] ? blk_mq_update_queue_map+0x227/0x3a0 [ 706.313245][T10852] blk_mq_alloc_tag_set+0x7ff/0x1320 [ 706.313266][T10852] loop_add+0x3b7/0xb60 [ 706.313282][T10852] ? __pfx_loop_add+0x10/0x10 [ 706.313303][T10852] ? __fget_files+0x34/0x3d0 [ 706.313316][T10852] ? find_held_lock+0x2b/0x80 [ 706.313330][T10852] ? __fget_files+0x215/0x3d0 [ 706.313343][T10852] loop_control_ioctl+0xae/0x620 [ 706.313358][T10852] ? __pfx_loop_control_ioctl+0x10/0x10 [ 706.313375][T10852] ? __pfx_loop_control_ioctl+0x10/0x10 [ 706.313389][T10852] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 706.313408][T10852] __do_fast_syscall_32+0x14b/0x8c0 [ 706.313423][T10852] ? lockdep_hardirqs_on+0x7d/0x110 [ 706.313437][T10852] do_fast_syscall_32+0x32/0x70 [ 706.313451][T10852] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 706.313464][T10852] RIP: 0023:0xf7f32fbc [ 706.313473][T10852] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 706.313483][T10852] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 706.313494][T10852] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000004c80 [ 706.313502][T10852] RDX: 00000000ffffffe4 RSI: 0000000000000000 RDI: 0000000000000000 [ 706.313508][T10852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 706.313515][T10852] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 706.313522][T10852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 706.313536][T10852] [ 706.313619][T10852] blk-mq: reduced tag depth (128 -> 64) [ 709.996501][ T42] audit: type=1800 audit(1793627223.475:680): pid=10855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1125" name="file1" dev="sda1" ino=2039 res=0 errno=-22 [ 711.788388][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 711.896892][T10869] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 712.201227][ T42] audit: type=1326 audit(1793627225.675:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.1.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 712.201258][ T42] audit: type=1326 audit(1793627225.675:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.1.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 712.202738][ T42] audit: type=1326 audit(1793627225.685:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.1.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 712.202772][ T42] audit: type=1326 audit(1793627225.685:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.1.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 712.204631][ T42] audit: type=1326 audit(1793627225.685:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.1.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 712.204655][ T42] audit: type=1326 audit(1793627225.685:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.1.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 712.204674][ T42] audit: type=1326 audit(1793627225.685:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.1.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 712.296610][ T42] audit: type=1326 audit(1793627225.775:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.1.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 712.296637][ T42] audit: type=1326 audit(1793627225.775:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.1.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 715.590347][T10881] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.430589][T10904] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 723.571217][T10753] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 723.731524][T10753] usb 9-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 723.732338][T10753] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 723.732361][T10753] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.117785][T10753] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 724.117884][T10753] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 724.117912][T10753] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 724.118755][T10753] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 724.118788][T10753] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 724.189835][ T36] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8fccbf36-b838-4fa4-a9dc-d1d06e0b7980. [ 724.190644][T10753] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 724.191915][T10753] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 724.191949][T10753] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 724.207447][T10753] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 724.451323][T10904] nvme nvme1: creating 2 I/O queues. [ 724.690941][T10904] nvme nvme1: new ctrl: "testsubsys" [ 727.021376][T10910] usb 9-1: USB disconnect, device number 13 [ 727.027695][T10910] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 727.037825][T10910] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 727.038761][T10910] keyspan 9-1:1.0: device disconnected [ 728.745585][ T5624] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.745608][ T5624] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 728.745628][ T5624] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.745641][ T5624] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 728.745658][ T5624] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.745671][ T5624] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 728.745688][ T5624] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.745700][ T5624] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 728.790877][T10889] bond0: (slave gretap0): Opening slave failed [ 729.058609][T10926] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 730.495109][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 730.616843][T10933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 730.632039][T10933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 730.634256][T10933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 730.666368][T10933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 730.681010][T10933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 731.094151][T10943] pim6reg: entered allmulticast mode [ 731.443025][T10932] rxe_eth0 speed is unknown, defaulting to 1000 [ 731.960527][T10949] tipc: Cannot configure node identity twice [ 731.985475][T10930] pim6reg: left allmulticast mode [ 732.202702][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 732.715096][ T6078] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 732.958873][ T5800] Bluetooth: hci4: command tx timeout [ 733.031128][ T6078] usb 9-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00 [ 733.063733][ T6078] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.063760][ T6078] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 733.134274][ T6078] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 733.134290][ T6078] usb 9-1: Product: syz [ 733.134297][ T6078] usb 9-1: Manufacturer: syz [ 733.788292][T10953] hsr_slave_1 (unregistering): left promiscuous mode [ 734.206583][T10932] lo speed is unknown, defaulting to 1000 [ 734.981617][ T5800] Bluetooth: hci4: command tx timeout [ 736.418092][ T7199] usb 9-1: USB disconnect, device number 14 [ 736.940987][ T5889] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 20004 - 0 [ 736.941014][ T5889] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 20004 - 0 [ 737.050950][ T5800] Bluetooth: hci4: command tx timeout [ 737.326790][T10932] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.329774][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.330177][T10932] bridge_slave_0: entered allmulticast mode [ 737.354411][T10932] bridge_slave_0: entered promiscuous mode [ 737.478440][ T5624] bridge_slave_1: left allmulticast mode [ 737.485160][ T5624] bridge_slave_1: left promiscuous mode [ 737.487560][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.196851][T10993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1151'. [ 739.131130][ T5800] Bluetooth: hci4: command tx timeout [ 740.224929][ T5624] bond1 (unregistering): Released all slaves [ 740.344684][ T5624] bond2 (unregistering): Released all slaves [ 740.479551][ T5624] bond3 (unregistering): Released all slaves [ 740.600439][ T5624] bond4 (unregistering): Released all slaves [ 740.725353][ T5624] bond5 (unregistering): Released all slaves [ 740.840807][ T5624] bond6 (unregistering): Released all slaves [ 740.949732][ T5624] bond7 (unregistering): Released all slaves [ 741.061952][ T5624] bond8 (unregistering): Released all slaves [ 741.216667][ T5624] bond9 (unregistering): (slave veth3): Releasing active interface [ 741.270941][ T5624] bond9 (unregistering): (slave macvlan0): Releasing active interface [ 741.275930][ T5624] bond9 (unregistering): Released all slaves [ 741.402107][ T5624] bond10 (unregistering): Released all slaves [ 741.520029][ T5624] bond0 (unregistering): Released all slaves [ 741.654149][T10932] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.654858][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.655291][T10932] bridge_slave_1: entered allmulticast mode [ 741.657112][T10932] bridge_slave_1: entered promiscuous mode [ 741.840274][T10988] erspan0: left allmulticast mode [ 741.840876][T10988] erspan0: left promiscuous mode [ 741.846125][T10988] bridge1: port 1(erspan0) entered disabled state [ 742.650876][T10988] team0: Port device team_slave_0 removed [ 742.785296][T10988] team0: Port device team_slave_1 removed [ 742.809398][T10988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 742.811062][ T8853] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 20004 - 0 [ 742.811099][ T8853] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 20004 - 0 [ 742.919821][ T5501] 8021q: adding VLAN 0 to HW filter on device eth7 [ 742.949405][T10991] team0: Mode changed to "loadbalance" [ 743.101659][ T5624] tipc: Disabling bearer [ 743.204159][ T5624] tipc: Left network mode [ 743.238316][T10932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.280477][T10932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.528624][T10932] team0: Port device team_slave_0 added [ 743.566154][T10932] team0: Port device team_slave_1 added [ 743.723212][T10932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.723307][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.723321][T10932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.763300][T10932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.763311][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.763324][T10932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.037849][T10932] hsr_slave_0: entered promiscuous mode [ 744.050186][T10932] hsr_slave_1: entered promiscuous mode [ 744.057776][T10932] debugfs: 'hsr0' already exists in 'hsr' [ 744.057788][T10932] Cannot create hsr debugfs directory [ 744.160977][ T6078] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 744.615600][T11022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1156'. [ 744.707551][T11023] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1156'. [ 744.707567][T11023] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1156'. [ 744.770573][ T42] kauditd_printk_skb: 77 callbacks suppressed [ 744.770586][ T42] audit: type=1326 audit(1793627258.245:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.4.1156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 744.770610][ T42] audit: type=1326 audit(1793627258.245:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.4.1156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 744.790705][ T42] audit: type=1326 audit(1793627258.265:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.4.1156" exe="/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 744.790733][ T42] audit: type=1326 audit(1793627258.265:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.4.1156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 744.790753][ T42] audit: type=1326 audit(1793627258.265:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.4.1156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 744.854364][ T42] audit: type=1326 audit(1793627258.335:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.4.1156" exe="/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 744.854396][ T42] audit: type=1326 audit(1793627258.335:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.4.1156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 744.854791][ T42] audit: type=1326 audit(1793627258.335:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.4.1156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 744.885738][ T42] audit: type=1326 audit(1793627258.365:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.4.1156" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f32fbc code=0x7ffc0000 [ 745.469202][T11012] jffs2: notice: (11012) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 5 orphan) and 6 of xref (1 dead, 4 orphan) found. [ 745.794489][T11022] ================================================================== [ 745.794501][T11022] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 745.794522][T11022] Read of size 1 at addr ffff8880226a4480 by task syz.4.1156/11022 [ 745.794532][T11022] [ 745.794540][T11022] CPU: 2 UID: 0 PID: 11022 Comm: syz.4.1156 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.794556][T11022] Tainted: [L]=SOFTLOCKUP [ 745.794561][T11022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 745.794575][T11022] Call Trace: [ 745.794579][T11022] [ 745.794584][T11022] dump_stack_lvl+0x100/0x190 [ 745.794602][T11022] print_report+0x13d/0x4b0 [ 745.794620][T11022] ? __virt_addr_valid+0x239/0x430 [ 745.794658][T11022] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 745.794670][T11022] kasan_report+0xdf/0x1c0 [ 745.794684][T11022] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 745.794698][T11022] acpi_ns_get_attached_object+0x148/0x1b0 [ 745.794712][T11022] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 745.794724][T11022] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 745.794735][T11022] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 745.794748][T11022] ? acpi_ds_create_operand+0x267/0xc20 [ 745.794767][T11022] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 745.794779][T11022] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 745.794790][T11022] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 745.794805][T11022] ? __asan_memset+0x23/0x50 [ 745.794819][T11022] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 745.794830][T11022] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 745.794844][T11022] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 745.794859][T11022] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 745.794873][T11022] ? acpi_ut_trace_ptr+0x191/0x2a0 [ 745.794883][T11022] acpi_ds_exec_end_op+0xb78/0x1e60 [ 745.794898][T11022] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 745.794912][T11022] acpi_ps_parse_loop+0x5e1/0x26e0 [ 745.794927][T11022] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 745.794964][T11022] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 745.794981][T11022] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 745.794992][T11022] ? acpi_ut_create_thread_state+0x6d/0x170 [ 745.795010][T11022] acpi_ps_parse_aml+0x81e/0x1120 [ 745.795028][T11022] acpi_ps_execute_method+0x5c4/0xe90 [ 745.795041][T11022] acpi_ns_evaluate+0x640/0x1670 [ 745.795054][T11022] acpi_ut_evaluate_object+0xf7/0x610 [ 745.795067][T11022] acpi_rs_get_prt_method_data+0xa0/0x150 [ 745.795079][T11022] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 745.795090][T11022] ? acpi_ut_status_exit+0x111/0x1c0 [ 745.795106][T11022] ? acpi_rs_validate_parameters+0x104/0x210 [ 745.795118][T11022] acpi_get_irq_routing_table+0xb8/0x140 [ 745.795130][T11022] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 745.795143][T11022] ? __lock_acquire+0x5c0/0x1f40 [ 745.795155][T11022] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 745.795166][T11022] ? __kernfs_remove+0x58a/0xbc0 [ 745.795183][T11022] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 745.795196][T11022] ? __lock_acquire+0x5c0/0x1f40 [ 745.795207][T11022] acpi_pci_irq_lookup+0x8e/0x6b0 [ 745.795219][T11022] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 745.795231][T11022] ? pci_rcec_exit+0x32/0x70 [ 745.795244][T11022] ? rcu_is_watching+0x13/0xc0 [ 745.795260][T11022] acpi_pci_irq_disable+0x1a8/0x360 [ 745.795271][T11022] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 745.795282][T11022] pcibios_release_device+0xc7/0xf0 [ 745.795295][T11022] pci_release_dev+0x45/0x100 [ 745.795309][T11022] ? __pfx_pci_release_dev+0x10/0x10 [ 745.795322][T11022] device_release+0xd2/0x270 [ 745.795335][T11022] kobject_put+0x1f7/0x640 [ 745.795351][T11022] put_device+0x1f/0x30 [ 745.795363][T11022] pci_remove_bus_device+0x305/0x3b0 [ 745.795375][T11022] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 745.795386][T11022] remove_store+0x123/0x140 [ 745.795398][T11022] ? __pfx_remove_store+0x10/0x10 [ 745.795409][T11022] ? find_held_lock+0x2b/0x80 [ 745.795423][T11022] ? sysfs_file_kobj+0xe4/0x290 [ 745.795434][T11022] ? sysfs_file_kobj+0xe4/0x290 [ 745.795446][T11022] ? __pfx_remove_store+0x10/0x10 [ 745.795456][T11022] dev_attr_store+0x58/0x80 [ 745.795466][T11022] ? __pfx_dev_attr_store+0x10/0x10 [ 745.795476][T11022] sysfs_kf_write+0xf2/0x150 [ 745.795488][T11022] kernfs_fop_write_iter+0x3e0/0x5f0 [ 745.795498][T11022] ? __pfx_sysfs_kf_write+0x10/0x10 [ 745.795511][T11022] vfs_write+0x6af/0x1050 [ 745.795522][T11022] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 745.795533][T11022] ? __pfx_vfs_write+0x10/0x10 [ 745.795542][T11022] ? find_held_lock+0x2b/0x80 [ 745.795559][T11022] ksys_write+0x12a/0x250 [ 745.795575][T11022] ? __pfx_ksys_write+0x10/0x10 [ 745.795588][T11022] __do_fast_syscall_32+0x14b/0x8c0 [ 745.795604][T11022] do_fast_syscall_32+0x32/0x70 [ 745.795618][T11022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 745.795634][T11022] RIP: 0023:0xf7f32fbc [ 745.795645][T11022] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 745.795656][T11022] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 745.795667][T11022] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000800 [ 745.795673][T11022] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 745.795679][T11022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 745.795685][T11022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 745.795691][T11022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.795701][T11022] [ 745.795705][T11022] [ 745.795707][T11022] Allocated by task 1: [ 745.795713][T11022] kasan_save_stack+0x30/0x50 [ 745.795723][T11022] kasan_save_track+0x14/0x30 [ 745.795733][T11022] __kasan_slab_alloc+0x89/0x90 [ 745.795743][T11022] kmem_cache_alloc_noprof+0x269/0x6a0 [ 745.795757][T11022] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 745.795770][T11022] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 745.795783][T11022] acpi_ds_build_internal_object+0x173/0x790 [ 745.795797][T11022] acpi_ds_create_node+0xe3/0x280 [ 745.795809][T11022] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 745.795823][T11022] acpi_ps_parse_loop+0x5e1/0x26e0 [ 745.795838][T11022] acpi_ps_parse_aml+0x81e/0x1120 [ 745.795853][T11022] acpi_ps_execute_table+0x393/0x500 [ 745.795862][T11022] acpi_ns_execute_table+0x596/0x970 [ 745.795872][T11022] acpi_ns_parse_table+0xcb/0x160 [ 745.795882][T11022] acpi_ns_load_table+0xc9/0x490 [ 745.795892][T11022] acpi_tb_load_namespace+0x2b0/0x8f0 [ 745.795905][T11022] acpi_load_tables+0x89/0x160 [ 745.795949][T11022] acpi_init+0x146/0x840 [ 745.795958][T11022] do_one_initcall+0x11c/0x6f0 [ 745.795969][T11022] kernel_init_freeable+0x6ea/0x7b0 [ 745.795989][T11022] kernel_init+0x21/0x1e0 [ 745.796002][T11022] ret_from_fork+0x730/0xd60 [ 745.796023][T11022] ret_from_fork_asm+0x1a/0x30 [ 745.796033][T11022] [ 745.796036][T11022] Freed by task 6899: [ 745.796042][T11022] kasan_save_stack+0x30/0x50 [ 745.796051][T11022] kasan_save_track+0x14/0x30 [ 745.796060][T11022] kasan_save_free_info+0x3b/0x70 [ 745.796074][T11022] __kasan_slab_free+0x5f/0x80 [ 745.796084][T11022] kmem_cache_free+0x127/0x6c0 [ 745.796098][T11022] acpi_os_release_object+0x1c/0x30 [ 745.796107][T11022] acpi_ut_delete_object_desc+0xea/0x130 [ 745.796120][T11022] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 745.796131][T11022] acpi_ut_update_object_reference+0x5f9/0x800 [ 745.796141][T11022] acpi_ut_remove_reference+0x192/0x1d0 [ 745.796151][T11022] acpi_rs_get_prt_method_data+0xcd/0x150 [ 745.796161][T11022] acpi_get_irq_routing_table+0xb8/0x140 [ 745.796172][T11022] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 745.796184][T11022] acpi_pci_irq_lookup+0x8e/0x6b0 [ 745.796195][T11022] acpi_pci_irq_disable+0x1a8/0x360 [ 745.796205][T11022] pcibios_disable_device+0x89/0xb0 [ 745.796215][T11022] do_pci_disable_device+0x9f/0x100 [ 745.796224][T11022] pci_disable_device+0x130/0x270 [ 745.796233][T11022] virtio_pci_remove+0xcf/0x110 [ 745.796243][T11022] pci_device_remove+0xb2/0x1d0 [ 745.796256][T11022] device_remove+0xcb/0x180 [ 745.796269][T11022] device_release_driver_internal+0x441/0x610 [ 745.796283][T11022] pci_stop_bus_device+0x120/0x160 [ 745.796292][T11022] pci_stop_and_remove_bus_device+0x58/0xa0 [ 745.796302][T11022] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 745.796312][T11022] remove_store+0x123/0x140 [ 745.796322][T11022] dev_attr_store+0x58/0x80 [ 745.796330][T11022] sysfs_kf_write+0xf2/0x150 [ 745.796341][T11022] kernfs_fop_write_iter+0x3e0/0x5f0 [ 745.796350][T11022] vfs_write+0x6af/0x1050 [ 745.796359][T11022] ksys_write+0x12a/0x250 [ 745.796367][T11022] __do_fast_syscall_32+0x14b/0x8c0 [ 745.796380][T11022] do_fast_syscall_32+0x32/0x70 [ 745.796392][T11022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 745.796404][T11022] [ 745.796406][T11022] The buggy address belongs to the object at ffff8880226a4478 [ 745.796406][T11022] which belongs to the cache Acpi-Operand of size 72 [ 745.796414][T11022] The buggy address is located 8 bytes inside of [ 745.796414][T11022] freed 72-byte region [ffff8880226a4478, ffff8880226a44c0) [ 745.796424][T11022] [ 745.796426][T11022] The buggy address belongs to the physical page: [ 745.796431][T11022] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880226a4f08 pfn:0x226a4 [ 745.796441][T11022] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 745.796451][T11022] page_type: f5(slab) [ 745.796460][T11022] raw: 00fff00000000200 ffff88801d44da40 ffffea000089bcd0 ffffea000089b590 [ 745.796468][T11022] raw: ffff8880226a4f08 0000000200270006 00000000f5000000 0000000000000000 [ 745.796474][T11022] page dumped because: kasan: bad access detected [ 745.796479][T11022] page_owner tracks the page as allocated [ 745.796482][T11022] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2602613524 [ 745.796498][T11022] post_alloc_hook+0xfd/0x120 [ 745.796510][T11022] get_page_from_freelist+0x1113/0x35e0 [ 745.796523][T11022] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 745.796537][T11022] new_slab+0xb1/0x6d0 [ 745.796549][T11022] refill_objects+0xe3/0x410 [ 745.796561][T11022] __pcs_replace_empty_main+0x35e/0x650 [ 745.796579][T11022] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 745.796594][T11022] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 745.796608][T11022] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 745.796622][T11022] acpi_ds_create_operand+0x6be/0xc20 [ 745.796636][T11022] acpi_ds_eval_data_object_operands+0x125/0x640 [ 745.796650][T11022] acpi_ds_exec_end_op+0xe41/0x1e60 [ 745.796664][T11022] acpi_ps_parse_loop+0x5e1/0x26e0 [ 745.796679][T11022] acpi_ps_parse_aml+0x81e/0x1120 [ 745.796694][T11022] acpi_ps_execute_table+0x393/0x500 [ 745.796703][T11022] acpi_ns_execute_table+0x596/0x970 [ 745.796715][T11022] page_owner free stack trace missing [ 745.796718][T11022] [ 745.796721][T11022] Memory state around the buggy address: [ 745.796726][T11022] ffff8880226a4380: 00 fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc [ 745.796733][T11022] ffff8880226a4400: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa [ 745.796739][T11022] >ffff8880226a4480: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 745.796745][T11022] ^ [ 745.796750][T11022] ffff8880226a4500: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb [ 745.796756][T11022] ffff8880226a4580: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc [ 745.796761][T11022] ================================================================== [ 746.323232][T11022] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 746.325477][T11022] CPU: 2 UID: 0 PID: 11022 Comm: syz.4.1156 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.328790][T11022] Tainted: [L]=SOFTLOCKUP [ 746.330129][T11022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 746.333229][T11022] Call Trace: [ 746.334275][T11022] [ 746.335211][T11022] dump_stack_lvl+0x100/0x190 [ 746.336685][T11022] vpanic+0x2dc/0x6f8 [ 746.337936][T11022] panic+0xd1/0xe0 [ 746.339126][T11022] ? __pfx_panic+0x10/0x10 [ 746.340534][T11022] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 746.342392][T11022] ? preempt_schedule+0x57/0xd0 [ 746.343925][T11022] check_panic_on_warn.cold+0x19/0x34 [ 746.345590][T11022] end_report.part.0+0x3a/0x90 [ 746.347089][T11022] kasan_report.cold+0xe/0x18 [ 746.348795][T11022] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 746.350690][T11022] acpi_ns_get_attached_object+0x148/0x1b0 [ 746.352503][T11022] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 746.354336][T11022] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 746.355939][T11022] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 746.357944][T11022] ? acpi_ds_create_operand+0x267/0xc20 [ 746.359697][T11022] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 746.361411][T11022] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 746.363366][T11022] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 746.364993][T11022] ? __asan_memset+0x23/0x50 [ 746.366437][T11022] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 746.368602][T11022] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 746.370776][T11022] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 746.372730][T11022] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 746.374532][T11022] ? acpi_ut_trace_ptr+0x191/0x2a0 [ 746.376124][T11022] acpi_ds_exec_end_op+0xb78/0x1e60 [ 746.377742][T11022] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 746.379494][T11022] acpi_ps_parse_loop+0x5e1/0x26e0 [ 746.381092][T11022] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 746.382809][T11022] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 746.384553][T11022] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 746.386406][T11022] ? acpi_ut_create_thread_state+0x6d/0x170 [ 746.388251][T11022] acpi_ps_parse_aml+0x81e/0x1120 [ 746.389842][T11022] acpi_ps_execute_method+0x5c4/0xe90 [ 746.391522][T11022] acpi_ns_evaluate+0x640/0x1670 [ 746.393107][T11022] acpi_ut_evaluate_object+0xf7/0x610 [ 746.394778][T11022] acpi_rs_get_prt_method_data+0xa0/0x150 [ 746.396551][T11022] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 746.398505][T11022] ? acpi_ut_status_exit+0x111/0x1c0 [ 746.400179][T11022] ? acpi_rs_validate_parameters+0x104/0x210 [ 746.402043][T11022] acpi_get_irq_routing_table+0xb8/0x140 [ 746.403786][T11022] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 746.405705][T11022] ? __lock_acquire+0x5c0/0x1f40 [ 746.407247][T11022] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 746.409047][T11022] ? __kernfs_remove+0x58a/0xbc0 [ 746.410598][T11022] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 746.412544][T11022] ? __lock_acquire+0x5c0/0x1f40 [ 746.414074][T11022] acpi_pci_irq_lookup+0x8e/0x6b0 [ 746.415646][T11022] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 746.417343][T11022] ? pci_rcec_exit+0x32/0x70 [ 746.418627][T11022] ? rcu_is_watching+0x13/0xc0 [ 746.420121][T11022] acpi_pci_irq_disable+0x1a8/0x360 [ 746.421727][T11022] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 746.423484][T11022] pcibios_release_device+0xc7/0xf0 [ 746.425108][T11022] pci_release_dev+0x45/0x100 [ 746.426578][T11022] ? __pfx_pci_release_dev+0x10/0x10 [ 746.428217][T11022] device_release+0xd2/0x270 [ 746.429656][T11022] kobject_put+0x1f7/0x640 [ 746.431072][T11022] put_device+0x1f/0x30 [ 746.432370][T11022] pci_remove_bus_device+0x305/0x3b0 [ 746.434004][T11022] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 746.436019][T11022] remove_store+0x123/0x140 [ 746.437433][T11022] ? __pfx_remove_store+0x10/0x10 [ 746.439003][T11022] ? find_held_lock+0x2b/0x80 [ 746.440469][T11022] ? sysfs_file_kobj+0xe4/0x290 [ 746.441997][T11022] ? sysfs_file_kobj+0xe4/0x290 [ 746.443523][T11022] ? __pfx_remove_store+0x10/0x10 [ 746.445097][T11022] dev_attr_store+0x58/0x80 [ 746.446510][T11022] ? __pfx_dev_attr_store+0x10/0x10 [ 746.448188][T11022] sysfs_kf_write+0xf2/0x150 [ 746.450012][T11022] kernfs_fop_write_iter+0x3e0/0x5f0 [ 746.451963][T11022] ? __pfx_sysfs_kf_write+0x10/0x10 [ 746.453837][T11022] vfs_write+0x6af/0x1050 [ 746.455507][T11022] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 746.457736][T11022] ? __pfx_vfs_write+0x10/0x10 [ 746.459515][T11022] ? find_held_lock+0x2b/0x80 [ 746.460989][T11022] ksys_write+0x12a/0x250 [ 746.462343][T11022] ? __pfx_ksys_write+0x10/0x10 [ 746.463881][T11022] __do_fast_syscall_32+0x14b/0x8c0 [ 746.465500][T11022] do_fast_syscall_32+0x32/0x70 [ 746.467029][T11022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.468980][T11022] RIP: 0023:0xf7f32fbc [ 746.470271][T11022] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 746.476187][T11022] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 746.478750][T11022] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000800 [ 746.481192][T11022] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 746.483632][T11022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 746.486063][T11022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 746.488493][T11022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.490943][T11022] [ 746.492737][T11022] Kernel Offset: disabled [ 746.494095][T11022] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:47:39 Registers: info registers vcpu 0 CPU#0 RAX=000001c4c0f1a5c1 RBX=ffff88802ae24040 RCX=00000000000006e0 RDX=00000000000001c4 RSI=ffffffff81fd2945 RDI=0000000000000001 RBP=000000ad9f1cefc3 RSP=ffffc90000007db0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=1ffff92000000fc0 R13=0000000000000001 R14=0000000000000001 R15=ffff88802ae24080 RIP=ffffffff81fd2958 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095281000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2a6bdffe9c CR3=000000000fd96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 831778474b1ebc4f 5b401793b11497dc ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c43297087043d3c 7bd2c1a3d3708f66 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a124836e3362388 241b46280c4b8bbc ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2804d0c7329a8eca ce07e6ea6d580d78 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000008480 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001c4000001c4 00800100000001c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 66b0639c66b314fc 671315c6000001c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010066b1fe6c 000001c400800100 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6711edf600800100 0080010066a60c82 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d4af15b3831f613 61d75e6245b52aa9 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bcb976322cfaff73 26b068ce7e97c882 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75006465696669 63657073206e6f69 74706f20676e6f6c 207974706d65000a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636572696420746f 6f722065676e6168 632074276e616300 7269646863660027 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4640574c4105514a 4a570540424b444d 460551024b444600 574c414d46430002 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801df6a580 RSI=ffffffff81b7fe9e RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000003 R9 =0000000000000006 R10=ffff88802af243fb R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b7fe9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095381000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f52175fa CR3=000000000fd96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c08375 RDI=ffffffff9cf3a5e0 RBP=ffffffff9cf3a5a0 RSP=ffffc900006af9d8 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3230383838666666 R12=0000000000000000 R13=0000000000000036 R14=0000000000000008 R15=ffffc900006afda8 RIP=ffffffff85c0839f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095481000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffec79cd7e8 CR3=000000004ec5f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000022080800 Opmask04=00000000ff7fffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559e2e5de3e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559e2e5cad40 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326ed5d13d2d3 737326ed5d13d2d3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c00840c5113 737326ed5d13d2d3 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 332e66313a30303a 303030302f30303a 303030306963702f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559b77bf528a 0000000000000021 0000000000000031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73f77f0031 3931303033313936 0000000000000021 0000000000003161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c4b534944 445241483032785c 554d45513d434e45 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801e31a580 RSI=ffffffff81b7fe9e RDI=0000000000000001 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000003 R9 =0000000000000006 R10=ffff88802b1243fb R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b7fe9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095581000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7fca190 CR3=000000000fd96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000101 Opmask01=00000000ff800000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ff7fffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559e2e760e00 0000559e2e760e00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559e2e5ea0a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f73f77f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffff0000ff0000ff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326ed5d2c9e53 737326ed5d0318c3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373730652 737326ed730a0773 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6166303030306e 65762c3638783a65 7079743a75706300 5341494c41444f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 505c5b0d0d0d0d53 584b110b05450758 4d444907484d5e00 5341494c41444f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c333431302c32 3431302c31343130 2c303431302c4633 31302c453331302c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4131302c43413130 2c423731302c3137 31302c453631302c 353631302c343631 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000