last executing test programs: 4m17.431686261s ago: executing program 2 (id=1503): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x406, r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) r2 = syz_io_uring_setup(0x5842, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x1b, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r3}, 0x10) io_uring_setup(0x17ba, &(0x7f00000004c0)) close_range(r0, 0xffffffffffffffff, 0x0) 4m14.501796678s ago: executing program 2 (id=1519): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x8, 0xfe19, &(0x7f0000000140)=""/179, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) tkill(r0, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0xfeffff07, 0x0, 0x0}, 0x9e0) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x3052, &(0x7f0000000740)={0x0, 0x0, 0x2, 0x3, 0x3}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x7d000000, @empty, 0xffffffff}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_io_uring_setup(0x20239, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) r6 = syz_io_uring_setup(0x807924, &(0x7f0000000500)={0x0, 0xb91b, 0x0, 0x800, 0x53}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x60, 0x2000, @fd=r1, 0x2, &(0x7f0000000540), 0x0, 0xd, 0x0, {0x0, r9}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x6}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)="29e80dbd3d", 0x5, 0x4810, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4m13.612358585s ago: executing program 2 (id=1524): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) socket$kcm(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 4m13.611986271s ago: executing program 2 (id=1525): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffcb8}]}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') move_mount(r0, &(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', r0, &(0x7f0000000080)='\x00', 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0xfff, 0x4, 0xe, 0x6, 0x2, 0xc0, 0x3}, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000300)={0x6, 'bridge_slave_1\x00'}) 4m13.55201324s ago: executing program 2 (id=1526): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x7fa6, &(0x7f0000000040)={0x0, 0x9f3, 0x1000, 0x0, 0x4}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r1, &(0x7f00000004c0)=@rc={0x1f, @any, 0x4}, 0x80) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r2, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x8}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000d1618c983b90fd84682afa343bfc64db32b411bf15e3610f32eedcda52d55df469c63ad8934d91839e1db65a13ab0a9f3f4948981e0dd3b3c01c3949d62e92eb26eb742cc322dfe0d1e2e2b0734aeea9a4f9ba0beb5ca088d5c1f9aae6edc7e1bae7627faaf2debf700428cb60171d39c23e3e9f9c73af84200b78d2cc0596b62fe55168f19d629060", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000020000008520000003000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x80, 0xc, &(0x7f00000002c0)=""/12, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0xfffffffd, 0xa, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, r0], &(0x7f0000000380)=[{0x4, 0x3, 0xb, 0x9}, {0x2, 0x5, 0x0, 0xc}, {0x2, 0x2, 0xf, 0xa}, {0x5, 0x5, 0x7, 0xb}, {0x5, 0x1, 0x8}, {0x0, 0x5, 0x9, 0x1}, {0x0, 0x5, 0x7, 0x6}], 0x10, 0xfffffc00, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='ib_mad_recv_done_handler\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x0, "e0ffff13000000000000000000000000000000100000000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0383e04, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000008640), 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000020000000000000000000600ffff000000000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000105000500000000000a00000000000000fe8000000000000000000000000000aa0000000000000000050006003c4700000a00ffffac1414"], 0xa0}}, 0x0) sendto$inet6(r6, 0x0, 0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 4m13.332340513s ago: executing program 2 (id=1527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x406, r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) r2 = syz_io_uring_setup(0x5842, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x1b, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r3}, 0x10) io_uring_setup(0x17ba, &(0x7f00000004c0)) close_range(r0, 0xffffffffffffffff, 0x0) 4m13.332057007s ago: executing program 32 (id=1527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x406, r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) r2 = syz_io_uring_setup(0x5842, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x1b, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r3}, 0x10) io_uring_setup(0x17ba, &(0x7f00000004c0)) close_range(r0, 0xffffffffffffffff, 0x0) 4m3.642296967s ago: executing program 3 (id=1598): socket$kcm(0x10, 0x2, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) add_key(&(0x7f0000000080)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) connect$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x0, {0x0, 0xff}}, 0x18) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800005, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f0000000200)) r3 = openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x401, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x6) socket(0xa, 0x3, 0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x801, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) openat$sw_sync_info(0xffffff9c, &(0x7f0000000100), 0x303040, 0x0) getpgrp(0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$6lowpan_enable(r5, &(0x7f0000000040)='1', 0x1) r7 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f903, 0x0, '\x00', @p_u16=0x0}}) socket$kcm(0x10, 0x3, 0x10) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18004e00000000000000000000f653b7f5bc0000366e55b598aa4500"/41], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mq_open(&(0x7f0000001140)='rmdF\x17\x16\xbc\xec', 0x1, 0x4, 0x0) openat$cgroup_ro(r6, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) 4m3.412258973s ago: executing program 3 (id=1601): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x280000, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005800)=""/248, 0xf8}, 0x1}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) getdents64(r3, &(0x7f00000001c0)=""/49, 0x31) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) 4m2.895265434s ago: executing program 3 (id=1602): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_GET_PDEATHSIG(0x59616d61, &(0x7f0000000140)) r1 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x60000, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xecda}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0xcd, &(0x7f0000000280)=""/205, 0x40f00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x6, 0xd, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0x1, r0, 0x1, r1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x2b6, 0x7fff, 0xb6, 0x2, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x2, @void, @value, @void, @value}, 0x50) r5 = openat$autofs(0xffffff9c, &(0x7f0000000380), 0xe8980dfcf06574f6, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x12, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3b11}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0xbb1, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x1, 0x5}, 0x10, 0xffffffffffffffff, r2, 0xa, &(0x7f00000005c0)=[r3, r4, 0x1], &(0x7f0000000600)=[{0x3, 0x1, 0x10, 0x8}, {0x3, 0x4, 0xe, 0x4}, {0x4, 0x5, 0x10, 0x2}, {0x1, 0x5, 0xe, 0x6}, {0x1, 0x5, 0xc, 0x9}, {0x4, 0x2, 0x3, 0x3}, {0x3, 0x2, 0x3}, {0x3, 0x5, 0x7, 0x4}, {0x0, 0x1, 0x5, 0x3}, {0x3, 0x1, 0x3, 0x9}], 0x10, 0x8001, @void, @value}, 0x94) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000030c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r10, 0x0, 0x0, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xa, 0xa, 0x38344241, 0x0, [r11, r12], [0x1100], [], [0xfffffffffffffffd, 0x0, 0x0, 0xa2f2]}) openat$sw_sync(0xffffff9c, &(0x7f0000000000), 0x402340, 0x0) ioctl$TCXONC(r0, 0x4b63, 0x3) 4m2.85804791s ago: executing program 3 (id=1603): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) (fail_nth: 1) close_range(r0, 0xffffffffffffffff, 0x0) 4m1.632385166s ago: executing program 3 (id=1610): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) poll(&(0x7f0000000a80)=[{r1}, {r0}], 0x2, 0x0) syz_emit_vhci(0x0, 0x7) bpf$BPF_PROG_TEST_RUN(0xe, 0x0, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x29, 0x42, 0x0, 0x20000000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x0, 0x0, 0x0, 0x300}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) eventfd2(0x2, 0x0) r6 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, 0x0, 0x0) r8 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r8, 0x0, 0x0, 0x4) 4m1.582010203s ago: executing program 3 (id=1611): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x174, 0x30, 0x1, 0x0, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x114, 0x1c, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xfffffffe, 0x6, 0x72e, 0x6}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x68605511, 0x6, 0x1, 0x4c}, 0x7}}]}, {0xa9, 0x6, "b1271c79a73cf186b823df29e49cafc7dcd07ae051eccf93c4ededa95a12fa3413fa275a5bb4b87168da805c75682708aa593adfc73dd3d7eb81a61e991fecd6ab8e4dadbfbf8af3d07c1499e9f5b569591153e02b90b1fb84641227128a530911b84daa5a57ccec802edb4f5e318b1e7a52d8ec528f0a5290830a5583f82d4d9755be905ba12adaeb884b18be01d1750b65dd5e12b448de7c893996c01a5fedcdc44a4dab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xe, &(0x7f0000000000)={0x5b30, 0x7}) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="a67a2f94dccfc6ae460ca60b3a8a515712384d7806f2251ff78c69cd08be7760c435b0b397e0a545bd99b8eecf9c15e9c5edf28518d100b2", 0x38}], 0x1}}], 0x1, 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB="2373797a313a039f39115445805c6b757000"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x68}}, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x64, 0x0, 0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000180)='./file0\x00', 0x40, 0x800}) 3m46.471382036s ago: executing program 33 (id=1611): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x174, 0x30, 0x1, 0x0, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x114, 0x1c, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xfffffffe, 0x6, 0x72e, 0x6}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x68605511, 0x6, 0x1, 0x4c}, 0x7}}]}, {0xa9, 0x6, "b1271c79a73cf186b823df29e49cafc7dcd07ae051eccf93c4ededa95a12fa3413fa275a5bb4b87168da805c75682708aa593adfc73dd3d7eb81a61e991fecd6ab8e4dadbfbf8af3d07c1499e9f5b569591153e02b90b1fb84641227128a530911b84daa5a57ccec802edb4f5e318b1e7a52d8ec528f0a5290830a5583f82d4d9755be905ba12adaeb884b18be01d1750b65dd5e12b448de7c893996c01a5fedcdc44a4dab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xe, &(0x7f0000000000)={0x5b30, 0x7}) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="a67a2f94dccfc6ae460ca60b3a8a515712384d7806f2251ff78c69cd08be7760c435b0b397e0a545bd99b8eecf9c15e9c5edf28518d100b2", 0x38}], 0x1}}], 0x1, 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB="2373797a313a039f39115445805c6b757000"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x68}}, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x64, 0x0, 0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000180)='./file0\x00', 0x40, 0x800}) 2m7.698165055s ago: executing program 5 (id=2124): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x1, 0x4, 0x0, 0x3}}, 0x2e) 2m7.650749233s ago: executing program 5 (id=2125): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x177f, &(0x7f0000000140)) r2 = socket(0x2b, 0x1, 0x1) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000000) io_uring_enter(r1, 0x5e4c, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000017c0)=@newlink={0xb4, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb, 0x50}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xfffffff7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2d8, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0x80}}]}]}}}, @IFLA_LINK={0x8}]}, 0xb4}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x65, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff3}, {0xe}, {0x1, 0x9}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000004140)={'tunl0\x00', &(0x7f0000004080)={'erspan0\x00', 0x0, 0x20, 0x80, 0x3, 0x800, {{0x26, 0x4, 0x1, 0x7, 0x98, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0x1b, 0x75, [@broadcast, @rand_addr=0x64010102, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3d}]}, @cipso={0x86, 0x44, 0x0, [{0x7, 0x8, "7b58dae77e70"}, {0x5, 0x6, "51a5b29e"}, {0x5, 0x6, '0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="0076a6a231ffffffffff", @ANYRES32=r11, @ANYBLOB="0000000000000000300016802c0001802800010000000000ffffffffffff000000000000000000000000000000000000000000000000000004001400"], 0x54}}, 0x0) 2m6.78075237s ago: executing program 5 (id=2128): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2a020480) mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxselin\x05x\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc088cf2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000040)=0x5, 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r5 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x8, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r6, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) 2m5.891129065s ago: executing program 5 (id=2132): r0 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r0, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r2, &(0x7f0000000080)='./file0/file0\x00', r2, &(0x7f0000000300)='./file0/../file0\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc25c4110, &(0x7f0000000100)={0xfffffffd, [[0x1, 0xff, 0x0, 0x0, 0x0, 0xec2], [0x0, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x5], [0x7fe, 0xfffffffe, 0x0, 0x0, 0x4, 0x7fff, 0xfffffffe, 0x9]], '\x00', [{}, {0xfffffffd}, {0x0, 0x1}, {0xfffffffc, 0x1}, {}, {0x200000}, {}, {0x3}, {}, {}, {0x480001}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x21) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e20, 0x2, @private1, 0x10001}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) modify_ldt$write2(0x11, &(0x7f0000000040)={0x5, 0x20000000, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000002140)={'vcan0\x00'}) 2m5.840863254s ago: executing program 5 (id=2133): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000400)) 2m5.610751429s ago: executing program 5 (id=2136): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x177f, &(0x7f0000000140)) r2 = socket(0x2b, 0x1, 0x1) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000000) io_uring_enter(r1, 0x5e4c, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000017c0)=@newlink={0xb4, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb, 0x50}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xfffffff7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2d8, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0x80}}]}]}}}, @IFLA_LINK={0x8}]}, 0xb4}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x65, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff3}, {0xe}, {0x1, 0x9}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000004140)={'tunl0\x00', &(0x7f0000004080)={'erspan0\x00', 0x0, 0x20, 0x80, 0x3, 0x800, {{0x26, 0x4, 0x1, 0x7, 0x98, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0x1b, 0x75, [@broadcast, @rand_addr=0x64010102, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3d}]}, @cipso={0x86, 0x44, 0x0, [{0x7, 0x8, "7b58dae77e70"}, {0x5, 0x6, "51a5b29e"}, {0x5, 0x6, '0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="0076a6a231ffffffffff", @ANYRES32=r11, @ANYBLOB="0000000000000000300016802c0001802800010000000000ffffffffffff000000000000000000000000000000000000000000000000000004001400"], 0x54}}, 0x0) 2m5.587247646s ago: executing program 34 (id=2136): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x177f, &(0x7f0000000140)) r2 = socket(0x2b, 0x1, 0x1) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000000) io_uring_enter(r1, 0x5e4c, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000017c0)=@newlink={0xb4, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb, 0x50}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xfffffff7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2d8, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0x80}}]}]}}}, @IFLA_LINK={0x8}]}, 0xb4}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x65, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff3}, {0xe}, {0x1, 0x9}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000004140)={'tunl0\x00', &(0x7f0000004080)={'erspan0\x00', 0x0, 0x20, 0x80, 0x3, 0x800, {{0x26, 0x4, 0x1, 0x7, 0x98, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0x1b, 0x75, [@broadcast, @rand_addr=0x64010102, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3d}]}, @cipso={0x86, 0x44, 0x0, [{0x7, 0x8, "7b58dae77e70"}, {0x5, 0x6, "51a5b29e"}, {0x5, 0x6, '0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="0076a6a231ffffffffff", @ANYRES32=r11, @ANYBLOB="0000000000000000300016802c0001802800010000000000ffffffffffff000000000000000000000000000000000000000000000000000004001400"], 0x54}}, 0x0) 1.4485495s ago: executing program 1 (id=3264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x21, 0x4ba12, 0x200000f}, 0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 1.359985547s ago: executing program 1 (id=3265): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="826d", 0x2}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x3d, 0x0}, 0x0) 699.330934ms ago: executing program 0 (id=3269): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) 699.184386ms ago: executing program 0 (id=3271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000540)=0xfffffff5, 0x2a) 639.660841ms ago: executing program 0 (id=3273): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x20004091) 639.556126ms ago: executing program 0 (id=3274): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x5c}, 0x1, 0xba01}, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 569.206534ms ago: executing program 0 (id=3278): close(0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 569.061337ms ago: executing program 0 (id=3280): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000040)=[{r1, 0x4400}, {r1, 0x2108}], 0x2000000000000016, 0x0, 0x0, 0xffffffffffffff3c) connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 500.034676ms ago: executing program 1 (id=3282): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000007990765140eda15818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x400000}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 439.638254ms ago: executing program 1 (id=3290): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 359.757255ms ago: executing program 1 (id=3292): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 359.711527ms ago: executing program 1 (id=3293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 233.477493ms ago: executing program 4 (id=3302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 233.260195ms ago: executing program 6 (id=3303): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='1-2:5/'], 0x31) 159.11189ms ago: executing program 6 (id=3304): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 158.885703ms ago: executing program 6 (id=3305): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 158.731078ms ago: executing program 4 (id=3306): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 99.9737ms ago: executing program 6 (id=3307): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 99.807007ms ago: executing program 4 (id=3308): socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 99.710062ms ago: executing program 6 (id=3309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 99.58357ms ago: executing program 4 (id=3310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 61.001243ms ago: executing program 6 (id=3311): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 60.87374ms ago: executing program 4 (id=3312): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r0, 0x3, 0x0, 0xffffffffffffffff, @void, @value}, 0x12) 0s ago: executing program 4 (id=3313): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r0) kernel console output (not intermixed with test programs): etting 128 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 492.695616][ T57] usb 5-1: too many endpoints for config 127 interface 96 altsetting 47: 60, using maximum allowed: 30 [ 492.698455][ T57] usb 5-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xF, skipping [ 492.701233][ T57] usb 5-1: config 127 interface 96 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 492.704032][ T57] usb 5-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0x2, skipping [ 492.706881][ T57] usb 5-1: config 127 interface 96 altsetting 47 bulk endpoint 0x6 has invalid maxpacket 64 [ 492.709486][ T57] usb 5-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xE, skipping [ 492.712269][ T57] usb 5-1: config 127 interface 96 altsetting 47 has 6 endpoint descriptors, different from the interface descriptor's value: 60 [ 492.715767][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 492.718599][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 492.721445][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xC, skipping [ 492.724352][ T57] usb 5-1: config 127 interface 195 altsetting 247 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 492.727410][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 492.730310][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 492.733173][ T57] usb 5-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 492.736157][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 492.738982][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 492.741863][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x2, skipping [ 492.744787][ T57] usb 5-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 492.747661][ T57] usb 5-1: config 127 interface 70 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 492.751031][ T57] usb 5-1: config 127 interface 147 has no altsetting 0 [ 492.752818][ T57] usb 5-1: config 127 interface 246 has no altsetting 0 [ 492.754824][ T57] usb 5-1: config 127 interface 96 has no altsetting 0 [ 492.756651][ T57] usb 5-1: config 127 interface 195 has no altsetting 0 [ 492.758450][ T57] usb 5-1: config 127 interface 70 has no altsetting 0 [ 492.761683][ T57] usb 5-1: New USB device found, idVendor=2c7c, idProduct=012b, bcdDevice=31.c0 [ 492.764043][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.766209][ T57] usb 5-1: Product: 岀ﳘášåªœêž ãŒˆéˆ€é‘뼷⃜ã¶á» åœŒé¦´å‘¾â¢Žç›·ïº‡ìŒá¹²èŠ¦å“©å‘¾ì‚¼ä™â™¥ì¹ç¶‘⇙퇉蔸ꨢ촞씅èžážè¿ì˜¸ì„¾é€‘é¿è¥»ä¤¥é‡¨âœ¼ [ 492.770185][ T57] usb 5-1: Manufacturer: 蓒笜㹕蛿è«â‘ˆç„¹ï¥”腷枮刡ಅᛳ從ྀ임ïˆè±¤ç’ïšíˆ¥ëžìî¥â”¡ã«ªî‚·ä˜¤ê¹§è¡¬î–¨î•¹âå‹è‚†Òœêª¥ï±žã¥¦ï¡¿ï›ªç„½æ½¼å® ä–”഻ំ䔠鮳ꅒ䚛綪 [ 492.775072][ T57] usb 5-1: SerialNumber: 䀊 [ 492.987134][ T57] option 5-1:127.147: GSM modem (1-port) converter detected [ 492.994692][T14383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.013035][ T57] usb 5-1: USB disconnect, device number 88 [ 493.016024][ T57] option 5-1:127.147: device disconnected [ 493.208125][T14403] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 493.264884][T14386] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 493.274854][T14386] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 493.284752][T14386] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 493.344901][T14417] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 493.357075][T14417] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2213'. [ 493.359430][T14417] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2213'. [ 493.361753][T14417] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2213'. [ 493.364335][T14417] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2213'. [ 493.534700][ T57] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 493.579954][T14444] ubi0: attaching mtd0 [ 493.582152][T14444] ubi0: scanning is finished [ 493.583393][T14444] ubi0: empty MTD device detected [ 493.627606][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2217'. [ 493.629958][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2217'. [ 493.678752][T14444] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 493.681444][T14444] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 493.683684][T14444] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 493.684788][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 493.687007][T14444] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 493.687932][ T57] usb 6-1: config 0 has no interfaces? [ 493.688936][T14444] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 493.690054][T14456] bridge_slave_0: left allmulticast mode [ 493.690069][T14456] bridge_slave_0: left promiscuous mode [ 493.690139][T14456] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.690392][ T57] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 493.693780][T14444] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 493.696854][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.698053][T14444] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2818833856 [ 493.707856][T14444] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 493.708333][ T57] usb 6-1: config 0 descriptor?? [ 493.708446][T14456] bridge_slave_1: left allmulticast mode [ 493.708460][T14456] bridge_slave_1: left promiscuous mode [ 493.708528][T14456] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.713435][T14455] ubi0: background thread "ubi_bgt0d" started, PID 14455 [ 493.715532][T14450] ubi0: detaching mtd0 [ 493.728114][T14456] bond0: (slave bond_slave_0): Releasing backup interface [ 493.729406][T14450] ubi0: mtd0 is detached [ 493.737358][T14456] bond0: (slave bond_slave_1): Releasing backup interface [ 493.754937][T14456] team0: Port device team_slave_0 removed [ 493.762117][T14456] team0: Port device team_slave_1 removed [ 493.764058][T14456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.766698][T14456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.769545][T14456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.771625][T14456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.830560][ T39] audit: type=1326 audit(1732164119.748:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.6.2218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7fc00000 [ 493.830631][T14466] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 494.103780][T14483] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 494.424958][ T5967] Bluetooth: hci1: command 0x0405 tx timeout [ 494.513415][ T39] audit: type=1326 audit(1732164120.428:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.6.2218" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf749e579 code=0x7fc00000 [ 494.519286][ T39] audit: type=1326 audit(1732164120.428:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.6.2218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7fc00000 [ 494.524924][ T39] audit: type=1326 audit(1732164120.428:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.6.2218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7fc00000 [ 494.530441][ T39] audit: type=1326 audit(1732164120.428:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.6.2218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7fc00000 [ 494.536041][ T39] audit: type=1326 audit(1732164120.428:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.6.2218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7fc00000 [ 494.694692][ T5998] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 494.824539][ T6017] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 494.854549][ T5998] usb 9-1: Using ep0 maxpacket: 32 [ 494.861096][ T5998] usb 9-1: config 127 has an invalid interface number: 147 but max is 3 [ 494.863354][ T5998] usb 9-1: config 127 has an invalid interface number: 246 but max is 3 [ 494.865922][ T5998] usb 9-1: config 127 has an invalid interface number: 96 but max is 3 [ 494.868391][ T5998] usb 9-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 494.870810][ T5998] usb 9-1: config 127 has an invalid interface number: 195 but max is 3 [ 494.873062][ T5998] usb 9-1: config 127 has an invalid interface number: 70 but max is 3 [ 494.875458][ T5998] usb 9-1: config 127 has an invalid descriptor of length 18, skipping remainder of the config [ 494.878482][ T5998] usb 9-1: config 127 has 5 interfaces, different from the descriptor's value: 4 [ 494.881591][ T5998] usb 9-1: config 127 has no interface number 0 [ 494.883519][ T5998] usb 9-1: config 127 has no interface number 1 [ 494.885679][ T5998] usb 9-1: config 127 has no interface number 2 [ 494.887351][ T5998] usb 9-1: config 127 has no interface number 3 [ 494.889617][ T5998] usb 9-1: config 127 has no interface number 4 [ 494.891489][ T5998] usb 9-1: config 127 interface 147 altsetting 12 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 494.895047][ T5998] usb 9-1: config 127 interface 147 altsetting 12 endpoint 0xA has invalid wMaxPacketSize 0 [ 494.897833][ T5998] usb 9-1: config 127 interface 147 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 494.900679][ T5998] usb 9-1: config 127 interface 147 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 494.903542][ T5998] usb 9-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xA, skipping [ 494.907087][ T5998] usb 9-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 494.910830][ T5998] usb 9-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 494.913745][ T5998] usb 9-1: config 127 interface 246 altsetting 128 has an endpoint descriptor with address 0x3C, changing to 0xC [ 494.917251][ T5998] usb 9-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 494.920221][ T5998] usb 9-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 494.923134][ T5998] usb 9-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 494.926336][ T5998] usb 9-1: config 127 interface 246 altsetting 128 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 494.929974][ T5998] usb 9-1: too many endpoints for config 127 interface 96 altsetting 47: 60, using maximum allowed: 30 [ 494.932995][ T5998] usb 9-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xF, skipping [ 494.935880][ T5998] usb 9-1: config 127 interface 96 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 494.939169][ T5998] usb 9-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0x2, skipping [ 494.943036][ T5998] usb 9-1: config 127 interface 96 altsetting 47 bulk endpoint 0x6 has invalid maxpacket 64 [ 494.946736][ T5998] usb 9-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xE, skipping [ 494.949773][ T5998] usb 9-1: config 127 interface 96 altsetting 47 has 6 endpoint descriptors, different from the interface descriptor's value: 60 [ 494.953427][ T5998] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 494.957684][ T5998] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 494.961621][ T5998] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xC, skipping [ 494.965677][ T5998] usb 9-1: config 127 interface 195 altsetting 247 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 494.969605][ T5998] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 494.973560][ T5998] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 494.977700][ T5998] usb 9-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 494.981683][ T5998] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 494.985585][ T5998] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 494.988914][ T5998] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x2, skipping [ 494.992878][ T5998] usb 9-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 494.995080][ T6017] usb 11-1: Using ep0 maxpacket: 16 [ 494.996914][ T5998] usb 9-1: config 127 interface 70 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 495.001606][ T5998] usb 9-1: config 127 interface 147 has no altsetting 0 [ 495.001740][ T6017] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.003393][ T5998] usb 9-1: config 127 interface 246 has no altsetting 0 [ 495.006202][ T6017] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 495.008046][ T5998] usb 9-1: config 127 interface 96 has no altsetting 0 [ 495.010356][ T6017] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.011359][ T6017] usb 11-1: config 0 descriptor?? [ 495.012666][ T5998] usb 9-1: config 127 interface 195 has no altsetting 0 [ 495.019108][ T5998] usb 9-1: config 127 interface 70 has no altsetting 0 [ 495.019206][ T6017] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input257 [ 495.023451][ T5998] usb 9-1: New USB device found, idVendor=2c7c, idProduct=012b, bcdDevice=31.c0 [ 495.027667][ T5998] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.030567][ T5998] usb 9-1: Product: 岀ﳘášåªœêž ãŒˆéˆ€é‘뼷⃜ã¶á» åœŒé¦´å‘¾â¢Žç›·ïº‡ìŒá¹²èŠ¦å“©å‘¾ì‚¼ä™â™¥ì¹ç¶‘⇙퇉蔸ꨢ촞씅èžážè¿ì˜¸ì„¾é€‘é¿è¥»ä¤¥é‡¨âœ¼ [ 495.036217][ T5998] usb 9-1: Manufacturer: 蓒笜㹕蛿è«â‘ˆç„¹ï¥”腷枮刡ಅᛳ從ྀ임ïˆè±¤ç’ïšíˆ¥ëžìî¥â”¡ã«ªî‚·ä˜¤ê¹§è¡¬î–¨î•¹âå‹è‚†Òœêª¥ï±žã¥¦ï¡¿ï›ªç„½æ½¼å® ä–”഻ំ䔠鮳ꅒ䚛綪 [ 495.042615][ T5998] usb 9-1: SerialNumber: 䀊 [ 495.249538][T14496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.253409][ T5998] option 9-1:127.147: GSM modem (1-port) converter detected [ 495.263304][ T5998] usb 9-1: USB disconnect, device number 21 [ 495.266575][ T5998] option 9-1:127.147: device disconnected [ 495.294070][ T5360] bcm5974 11-1:0.0: could not read from device [ 495.296625][T14499] bcm5974 11-1:0.0: could not read from device [ 495.298807][ T5360] bcm5974 11-1:0.0: could not read from device [ 495.307386][ T6017] usb 11-1: USB disconnect, device number 2 [ 495.309670][ T5360] bcm5974 11-1:0.0: could not read from device [ 495.700852][ T6017] usb 6-1: USB disconnect, device number 72 [ 495.800203][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'. [ 495.895432][T14511] netlink: 'syz.6.2228': attribute type 4 has an invalid length. [ 495.914150][T14511] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2228'. [ 495.916878][T14511] netlink: 'syz.6.2228': attribute type 1 has an invalid length. [ 496.504560][ T5967] Bluetooth: hci1: command 0x0405 tx timeout [ 496.615138][T14052] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 496.685055][ T57] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 496.844818][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 496.849119][ T57] usb 6-1: config 127 has an invalid interface number: 147 but max is 3 [ 496.851310][ T57] usb 6-1: config 127 has an invalid interface number: 246 but max is 3 [ 496.853477][ T57] usb 6-1: config 127 has an invalid interface number: 96 but max is 3 [ 496.857061][ T57] usb 6-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 496.864679][ T57] usb 6-1: config 127 has an invalid interface number: 195 but max is 3 [ 496.866862][ T57] usb 6-1: config 127 has an invalid interface number: 70 but max is 3 [ 496.869051][ T57] usb 6-1: config 127 has an invalid descriptor of length 18, skipping remainder of the config [ 496.871733][ T57] usb 6-1: config 127 has 5 interfaces, different from the descriptor's value: 4 [ 496.874128][ T57] usb 6-1: config 127 has no interface number 0 [ 496.876293][ T57] usb 6-1: config 127 has no interface number 1 [ 496.877945][ T57] usb 6-1: config 127 has no interface number 2 [ 496.882237][ T57] usb 6-1: config 127 has no interface number 3 [ 496.883860][ T57] usb 6-1: config 127 has no interface number 4 [ 496.888934][ T57] usb 6-1: config 127 interface 147 altsetting 12 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 496.892323][ T57] usb 6-1: config 127 interface 147 altsetting 12 endpoint 0xA has invalid wMaxPacketSize 0 [ 496.904507][ T57] usb 6-1: config 127 interface 147 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 496.907206][ T57] usb 6-1: config 127 interface 147 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 496.911370][ T57] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xA, skipping [ 496.914127][ T57] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 496.919545][ T57] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 496.922406][ T57] usb 6-1: config 127 interface 246 altsetting 128 has an endpoint descriptor with address 0x3C, changing to 0xC [ 496.925718][ T57] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 496.928566][ T57] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 496.931384][ T57] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 496.934223][ T57] usb 6-1: config 127 interface 246 altsetting 128 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 496.938068][ T57] usb 6-1: too many endpoints for config 127 interface 96 altsetting 47: 60, using maximum allowed: 30 [ 496.940925][ T57] usb 6-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xF, skipping [ 496.943662][ T57] usb 6-1: config 127 interface 96 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 496.947048][ T57] usb 6-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0x2, skipping [ 496.949830][ T57] usb 6-1: config 127 interface 96 altsetting 47 bulk endpoint 0x6 has invalid maxpacket 64 [ 496.952419][ T57] usb 6-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xE, skipping [ 496.956226][ T57] usb 6-1: config 127 interface 96 altsetting 47 has 6 endpoint descriptors, different from the interface descriptor's value: 60 [ 496.959663][ T57] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 496.962489][ T57] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 496.965562][ T57] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xC, skipping [ 496.974531][ T57] usb 6-1: config 127 interface 195 altsetting 247 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 496.977440][ T57] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 496.980540][ T57] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 496.983366][ T57] usb 6-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 496.997375][ T57] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 497.002445][ T57] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 497.014420][ T57] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x2, skipping [ 497.017480][ T57] usb 6-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 497.020270][ T57] usb 6-1: config 127 interface 70 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 497.023551][ T57] usb 6-1: config 127 interface 147 has no altsetting 0 [ 497.025646][ T57] usb 6-1: config 127 interface 246 has no altsetting 0 [ 497.027462][ T57] usb 6-1: config 127 interface 96 has no altsetting 0 [ 497.029280][ T57] usb 6-1: config 127 interface 195 has no altsetting 0 [ 497.031086][ T57] usb 6-1: config 127 interface 70 has no altsetting 0 [ 497.034375][ T57] usb 6-1: New USB device found, idVendor=2c7c, idProduct=012b, bcdDevice=31.c0 [ 497.037112][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.039567][ T57] usb 6-1: Product: 岀ﳘášåªœêž ãŒˆéˆ€é‘뼷⃜ã¶á» åœŒé¦´å‘¾â¢Žç›·ïº‡ìŒá¹²èŠ¦å“©å‘¾ì‚¼ä™â™¥ì¹ç¶‘⇙퇉蔸ꨢ촞씅èžážè¿ì˜¸ì„¾é€‘é¿è¥»ä¤¥é‡¨âœ¼ [ 497.043860][ T57] usb 6-1: Manufacturer: 蓒笜㹕蛿è«â‘ˆç„¹ï¥”腷枮刡ಅᛳ從ྀ임ïˆè±¤ç’ïšíˆ¥ëžìî¥â”¡ã«ªî‚·ä˜¤ê¹§è¡¬î–¨î•¹âå‹è‚†Òœêª¥ï±žã¥¦ï¡¿ï›ªç„½æ½¼å® ä–”഻ំ䔠鮳ꅒ䚛綪 [ 497.048924][ T57] usb 6-1: SerialNumber: 䀊 [ 497.134703][T14568] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 497.161231][T14568] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 497.165773][T14567] veth0_To_bridg: renamed from lo [ 497.171798][T14568] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2238'. [ 497.267019][T14533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.267126][ T57] option 6-1:127.147: GSM modem (1-port) converter detected [ 497.281497][ T57] usb 6-1: USB disconnect, device number 73 [ 497.284430][ T57] option 6-1:127.147: device disconnected [ 497.773634][ T39] audit: type=1400 audit(1732164123.688:539): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14570 comm="syz.6.2241" [ 498.584878][ T5967] Bluetooth: hci1: command 0x0405 tx timeout [ 499.145070][ T5967] Bluetooth: hci0: command tx timeout [ 500.746398][ T1408] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.958064][T14589] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 507.967556][T14591] netlink: 'syz.0.2243': attribute type 12 has an invalid length. [ 507.970360][T14591] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.2243'. [ 508.254554][ T6037] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 508.415333][ T6037] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 508.420357][ T6037] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.423519][ T6037] usb 5-1: config 0 interface 0 has no altsetting 0 [ 508.429659][ T6037] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.432839][ T6037] usb 5-1: config 0 interface 0 has no altsetting 0 [ 508.436320][ T6037] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.438861][ T6037] usb 5-1: config 0 interface 0 has no altsetting 0 [ 508.441432][ T6037] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.448884][ T6037] usb 5-1: config 0 interface 0 has no altsetting 0 [ 508.453004][ T6037] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.456987][ T6037] usb 5-1: config 0 interface 0 has no altsetting 0 [ 508.461056][ T6037] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.464258][ T6037] usb 5-1: config 0 interface 0 has no altsetting 0 [ 508.468299][ T6037] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.471562][ T6037] usb 5-1: config 0 interface 0 has no altsetting 0 [ 508.476203][ T6037] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.479327][ T6037] usb 5-1: config 0 interface 0 has no altsetting 0 [ 508.484906][ T6037] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 508.488063][ T6037] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 508.490335][ T6037] usb 5-1: Product: syz [ 508.491482][ T6037] usb 5-1: Manufacturer: syz [ 508.492698][ T6037] usb 5-1: SerialNumber: syz [ 508.495618][ T6037] usb 5-1: config 0 descriptor?? [ 508.502804][ T6037] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 508.705268][ T6037] usb 5-1: USB disconnect, device number 89 [ 508.708266][ T6037] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 508.921382][T14601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.985592][T14052] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 509.591990][T14649] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 509.992354][T14659] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 515.439409][T14680] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2259'. [ 515.488220][T14686] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 515.491156][T14686] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 515.493825][T14686] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2257'. [ 516.412523][T14709] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2266'. [ 516.507423][T14713] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 516.934952][ T57] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 517.544599][ T5967] Bluetooth: hci0: command tx timeout [ 517.629314][T14759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2275'. [ 529.584216][T14785] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 529.640067][T14788] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 532.037020][T14833] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 533.791930][T14849] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2291'. [ 533.823106][T14853] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 534.104726][ T5967] Bluetooth: hci0: command tx timeout [ 534.944548][ T2288] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 535.094568][ T2288] usb 6-1: Using ep0 maxpacket: 8 [ 535.099936][ T2288] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 535.103352][ T2288] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 535.107781][ T2288] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 535.110528][ T2288] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 535.113192][ T2288] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.117890][ T2288] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 535.120343][ T2288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.329181][T14867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 535.333036][T14867] netdevsim0: mtu less than device minimum [ 535.644729][T14876] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 536.364572][ T57] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 536.514588][ T57] usb 9-1: Using ep0 maxpacket: 32 [ 536.517865][ T57] usb 9-1: config 127 has an invalid interface number: 147 but max is 3 [ 536.520047][ T57] usb 9-1: config 127 has an invalid interface number: 246 but max is 3 [ 536.522155][ T57] usb 9-1: config 127 has an invalid interface number: 96 but max is 3 [ 536.524246][ T57] usb 9-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 536.526701][ T57] usb 9-1: config 127 has an invalid interface number: 195 but max is 3 [ 536.529251][ T57] usb 9-1: config 127 has an invalid interface number: 70 but max is 3 [ 536.532167][ T57] usb 9-1: config 127 has an invalid descriptor of length 18, skipping remainder of the config [ 536.536593][ T57] usb 9-1: config 127 has 5 interfaces, different from the descriptor's value: 4 [ 536.540446][ T57] usb 9-1: config 127 has no interface number 0 [ 536.542261][ T57] usb 9-1: config 127 has no interface number 1 [ 536.544190][ T57] usb 9-1: config 127 has no interface number 2 [ 536.546536][ T57] usb 9-1: config 127 has no interface number 3 [ 536.548664][ T57] usb 9-1: config 127 has no interface number 4 [ 536.550797][ T57] usb 9-1: config 127 interface 147 altsetting 12 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 536.554610][ T57] usb 9-1: config 127 interface 147 altsetting 12 endpoint 0xA has invalid wMaxPacketSize 0 [ 536.557968][ T57] usb 9-1: config 127 interface 147 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 536.561609][ T57] usb 9-1: config 127 interface 147 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 536.565582][ T57] usb 9-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xA, skipping [ 536.569234][ T57] usb 9-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 536.572870][ T57] usb 9-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 536.576814][ T57] usb 9-1: config 127 interface 246 altsetting 128 has an endpoint descriptor with address 0x3C, changing to 0xC [ 536.580849][ T57] usb 9-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 536.586732][ T57] usb 9-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 536.590354][ T57] usb 9-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 536.594026][ T57] usb 9-1: config 127 interface 246 altsetting 128 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 536.598735][ T57] usb 9-1: too many endpoints for config 127 interface 96 altsetting 47: 60, using maximum allowed: 30 [ 536.602381][ T57] usb 9-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xF, skipping [ 536.606213][ T57] usb 9-1: config 127 interface 96 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 536.609849][ T57] usb 9-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0x2, skipping [ 536.613521][ T57] usb 9-1: config 127 interface 96 altsetting 47 bulk endpoint 0x6 has invalid maxpacket 64 [ 536.617112][ T57] usb 9-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xE, skipping [ 536.620704][ T57] usb 9-1: config 127 interface 96 altsetting 47 has 6 endpoint descriptors, different from the interface descriptor's value: 60 [ 536.625442][ T57] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 536.629052][ T57] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 536.632705][ T57] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xC, skipping [ 536.636534][ T57] usb 9-1: config 127 interface 195 altsetting 247 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 536.640192][ T57] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 536.643864][ T57] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 536.647713][ T57] usb 9-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 536.651439][ T57] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 536.655350][ T57] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 536.658976][ T57] usb 9-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x2, skipping [ 536.662660][ T57] usb 9-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 536.666561][ T57] usb 9-1: config 127 interface 70 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 536.670913][ T57] usb 9-1: config 127 interface 147 has no altsetting 0 [ 536.673257][ T57] usb 9-1: config 127 interface 246 has no altsetting 0 [ 536.675694][ T57] usb 9-1: config 127 interface 96 has no altsetting 0 [ 536.677961][ T57] usb 9-1: config 127 interface 195 has no altsetting 0 [ 536.680305][ T57] usb 9-1: config 127 interface 70 has no altsetting 0 [ 536.684088][ T57] usb 9-1: New USB device found, idVendor=2c7c, idProduct=012b, bcdDevice=31.c0 [ 536.687423][ T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.690121][ T57] usb 9-1: Product: 岀ﳘášåªœêž ãŒˆéˆ€é‘뼷⃜ã¶á» åœŒé¦´å‘¾â¢Žç›·ïº‡ìŒá¹²èŠ¦å“©å‘¾ì‚¼ä™â™¥ì¹ç¶‘⇙퇉蔸ꨢ촞씅èžážè¿ì˜¸ì„¾é€‘é¿è¥»ä¤¥é‡¨âœ¼ [ 536.695488][ T57] usb 9-1: Manufacturer: 蓒笜㹕蛿è«â‘ˆç„¹ï¥”腷枮刡ಅᛳ從ྀ임ïˆè±¤ç’ïšíˆ¥ëžìî¥â”¡ã«ªî‚·ä˜¤ê¹§è¡¬î–¨î•¹âå‹è‚†Òœêª¥ï±žã¥¦ï¡¿ï›ªç„½æ½¼å® ä–”഻ំ䔠鮳ꅒ䚛綪 [ 536.701441][ T57] usb 9-1: SerialNumber: 䀊 [ 536.911316][T14878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.915741][ T57] option 9-1:127.147: GSM modem (1-port) converter detected [ 536.930710][ T57] usb 9-1: USB disconnect, device number 22 [ 536.933887][ T57] option 9-1:127.147: device disconnected [ 537.532021][T14891] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2301'. [ 537.624224][ T2288] usb 6-1: usb_control_msg returned -71 [ 537.626911][ T2288] usbtmc 6-1:16.0: can't read capabilities [ 537.635552][ T2288] usb 6-1: USB disconnect, device number 74 [ 537.647631][T14896] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 538.828032][T14913] FAULT_INJECTION: forcing a failure. [ 538.828032][T14913] name failslab, interval 1, probability 0, space 0, times 0 [ 538.831280][T14913] CPU: 2 UID: 0 PID: 14913 Comm: syz.0.2306 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 538.834035][T14913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 538.836815][T14913] Call Trace: [ 538.837684][T14913] [ 538.838454][T14913] dump_stack_lvl+0x16c/0x1f0 [ 538.839688][T14913] should_fail_ex+0x497/0x5b0 [ 538.840932][T14913] ? fs_reclaim_acquire+0xae/0x150 [ 538.842271][T14913] should_failslab+0xc2/0x120 [ 538.843488][T14913] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 538.845305][T14913] ? skb_clone+0x190/0x3f0 [ 538.846945][T14913] skb_clone+0x190/0x3f0 [ 538.848527][T14913] nfnetlink_rcv_batch+0x1d9/0x24e0 [ 538.850047][T14913] ? kasan_quarantine_put+0x10a/0x240 [ 538.851431][T14913] ? kmem_cache_free+0x152/0x4b0 [ 538.852711][T14913] ? kfree_skbmem+0x1a4/0x1f0 [ 538.853966][T14913] ? find_held_lock+0x2d/0x110 [ 538.855227][T14913] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 538.856668][T14913] ? __pfx_lock_release+0x10/0x10 [ 538.857989][T14913] ? __dev_queue_xmit+0x872/0x4350 [ 538.859310][T14913] ? __local_bh_enable_ip+0xa4/0x120 [ 538.860671][T14913] ? lockdep_hardirqs_on+0x7c/0x110 [ 538.862023][T14913] ? __pfx___dev_queue_xmit+0x10/0x10 [ 538.863407][T14913] ? __nla_validate_parse+0x605/0x2b10 [ 538.865273][T14913] ? __pfx_aa_get_newest_label+0x10/0x10 [ 538.866927][T14913] ? __pfx___nla_validate_parse+0x10/0x10 [ 538.868395][T14913] ? apparmor_capable+0x114/0x1d0 [ 538.869694][T14913] ? __nla_parse+0x40/0x60 [ 538.870868][T14913] nfnetlink_rcv+0x3c3/0x430 [ 538.872062][T14913] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 538.873376][T14913] netlink_unicast+0x53c/0x7f0 [ 538.874683][T14913] ? __pfx_netlink_unicast+0x10/0x10 [ 538.876049][T14913] ? __phys_addr_symbol+0x30/0x80 [ 538.877354][T14913] ? __check_object_size+0x488/0x710 [ 538.878716][T14913] netlink_sendmsg+0x8b8/0xd70 [ 538.879958][T14913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.881309][T14913] ____sys_sendmsg+0x9ae/0xb40 [ 538.882546][T14913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.884116][T14913] ? get_compat_msghdr+0x11b/0x170 [ 538.885467][T14913] ___sys_sendmsg+0x135/0x1e0 [ 538.886657][T14913] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.888031][T14913] ? __pfx_lock_release+0x10/0x10 [ 538.889335][T14913] ? trace_lock_acquire+0x14a/0x1d0 [ 538.890703][T14913] ? __fget_files+0x206/0x3a0 [ 538.891939][T14913] __sys_sendmsg+0x16e/0x220 [ 538.893137][T14913] ? __pfx___sys_sendmsg+0x10/0x10 [ 538.894660][T14913] __do_fast_syscall_32+0x73/0x120 [ 538.895992][T14913] do_fast_syscall_32+0x32/0x80 [ 538.897262][T14913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.898895][T14913] RIP: 0023:0xf7fb6579 [ 538.899969][T14913] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 538.905404][T14913] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 538.907869][T14913] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 538.909889][T14913] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 538.911906][T14913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 538.914081][T14913] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 538.916116][T14913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.918143][T14913] [ 539.484889][ T57] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 539.513297][T14924] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 539.634577][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 539.637800][ T57] usb 5-1: config 127 has an invalid interface number: 147 but max is 3 [ 539.639957][ T57] usb 5-1: config 127 has an invalid interface number: 246 but max is 3 [ 539.642064][ T57] usb 5-1: config 127 has an invalid interface number: 96 but max is 3 [ 539.644170][ T57] usb 5-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 539.646615][ T57] usb 5-1: config 127 has an invalid interface number: 195 but max is 3 [ 539.648726][ T57] usb 5-1: config 127 has an invalid interface number: 70 but max is 3 [ 539.650800][ T57] usb 5-1: config 127 has an invalid descriptor of length 18, skipping remainder of the config [ 539.653406][ T57] usb 5-1: config 127 has 5 interfaces, different from the descriptor's value: 4 [ 539.655830][ T57] usb 5-1: config 127 has no interface number 0 [ 539.657423][ T57] usb 5-1: config 127 has no interface number 1 [ 539.659009][ T57] usb 5-1: config 127 has no interface number 2 [ 539.660640][ T57] usb 5-1: config 127 has no interface number 3 [ 539.662233][ T57] usb 5-1: config 127 has no interface number 4 [ 539.663868][ T57] usb 5-1: config 127 interface 147 altsetting 12 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 539.666772][ T57] usb 5-1: config 127 interface 147 altsetting 12 endpoint 0xA has invalid wMaxPacketSize 0 [ 539.669352][ T57] usb 5-1: config 127 interface 147 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 539.672144][ T57] usb 5-1: config 127 interface 147 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 539.675098][ T57] usb 5-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xA, skipping [ 539.677881][ T57] usb 5-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 539.680652][ T57] usb 5-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 539.683435][ T57] usb 5-1: config 127 interface 246 altsetting 128 has an endpoint descriptor with address 0x3C, changing to 0xC [ 539.686818][ T57] usb 5-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 539.689634][ T57] usb 5-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 539.692413][ T57] usb 5-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 539.695330][ T57] usb 5-1: config 127 interface 246 altsetting 128 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 539.698704][ T57] usb 5-1: too many endpoints for config 127 interface 96 altsetting 47: 60, using maximum allowed: 30 [ 539.701512][ T57] usb 5-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xF, skipping [ 539.704268][ T57] usb 5-1: config 127 interface 96 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 539.707425][ T57] usb 5-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0x2, skipping [ 539.710242][ T57] usb 5-1: config 127 interface 96 altsetting 47 bulk endpoint 0x6 has invalid maxpacket 64 [ 539.712764][ T57] usb 5-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xE, skipping [ 539.715551][ T57] usb 5-1: config 127 interface 96 altsetting 47 has 6 endpoint descriptors, different from the interface descriptor's value: 60 [ 539.718860][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 539.721596][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 539.724350][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xC, skipping [ 539.727136][ T57] usb 5-1: config 127 interface 195 altsetting 247 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 539.729945][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 539.732676][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 539.735716][ T57] usb 5-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 539.738553][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 539.741311][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 539.744074][ T57] usb 5-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x2, skipping [ 539.746863][ T57] usb 5-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 539.749685][ T57] usb 5-1: config 127 interface 70 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 539.752931][ T57] usb 5-1: config 127 interface 147 has no altsetting 0 [ 539.754793][ T57] usb 5-1: config 127 interface 246 has no altsetting 0 [ 539.756526][ T57] usb 5-1: config 127 interface 96 has no altsetting 0 [ 539.758230][ T57] usb 5-1: config 127 interface 195 has no altsetting 0 [ 539.759955][ T57] usb 5-1: config 127 interface 70 has no altsetting 0 [ 539.763114][ T57] usb 5-1: New USB device found, idVendor=2c7c, idProduct=012b, bcdDevice=31.c0 [ 539.765656][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.767633][ T57] usb 5-1: Product: 岀ﳘášåªœêž ãŒˆéˆ€é‘뼷⃜ã¶á» åœŒé¦´å‘¾â¢Žç›·ïº‡ìŒá¹²èŠ¦å“©å‘¾ì‚¼ä™â™¥ì¹ç¶‘⇙퇉蔸ꨢ촞씅èžážè¿ì˜¸ì„¾é€‘é¿è¥»ä¤¥é‡¨âœ¼ [ 539.771513][ T57] usb 5-1: Manufacturer: 蓒笜㹕蛿è«â‘ˆç„¹ï¥”腷枮刡ಅᛳ從ྀ임ïˆè±¤ç’ïšíˆ¥ëžìî¥â”¡ã«ªî‚·ä˜¤ê¹§è¡¬î–¨î•¹âå‹è‚†Òœêª¥ï±žã¥¦ï¡¿ï›ªç„½æ½¼å® ä–”഻ំ䔠鮳ꅒ䚛綪 [ 539.775982][ T57] usb 5-1: SerialNumber: 䀊 [ 539.845070][T14926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2311'. [ 539.881895][T14928] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 539.983249][T14917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.987837][ T57] option 5-1:127.147: GSM modem (1-port) converter detected [ 539.999931][ T57] usb 5-1: USB disconnect, device number 90 [ 540.002748][ T57] option 5-1:127.147: device disconnected [ 540.524363][T14931] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 541.524529][ T39] audit: type=1326 audit(1732164167.438:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14945 comm="syz.6.2316" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 541.544889][ T5967] Bluetooth: hci0: command tx timeout [ 541.621347][T14947] FAULT_INJECTION: forcing a failure. [ 541.621347][T14947] name failslab, interval 1, probability 0, space 0, times 0 [ 541.625345][T14947] CPU: 2 UID: 0 PID: 14947 Comm: syz.6.2316 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 541.628953][T14947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 541.632759][T14947] Call Trace: [ 541.633912][T14947] [ 541.635009][T14947] dump_stack_lvl+0x16c/0x1f0 [ 541.636584][T14947] should_fail_ex+0x497/0x5b0 [ 541.638304][T14947] ? fs_reclaim_acquire+0xae/0x150 [ 541.640184][T14947] should_failslab+0xc2/0x120 [ 541.641804][T14947] __kmalloc_noprof+0xcb/0x410 [ 541.643504][T14947] ? rcu_is_watching+0x12/0xc0 [ 541.645144][T14947] tomoyo_encode2+0x100/0x3e0 [ 541.646818][T14947] tomoyo_realpath_from_path+0x1a7/0x710 [ 541.648727][T14947] tomoyo_check_open_permission+0x2ad/0x3c0 [ 541.650828][T14947] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 541.653085][T14947] ? __pfx___lock_acquire+0x10/0x10 [ 541.654902][T14947] ? __pfx_hook_file_open+0x10/0x10 [ 541.656722][T14947] ? path_get+0x61/0x80 [ 541.658213][T14947] tomoyo_file_open+0x6b/0x90 [ 541.659883][T14947] security_file_open+0x64c/0x9d0 [ 541.661610][T14947] do_dentry_open+0x57c/0x1530 [ 541.663359][T14947] ? inode_permission+0xdd/0x5f0 [ 541.665157][T14947] vfs_open+0x82/0x3f0 [ 541.666607][T14947] ? may_open+0x1f2/0x400 [ 541.668155][T14947] path_openat+0x1e6a/0x2d60 [ 541.669783][T14947] ? __pfx_path_openat+0x10/0x10 [ 541.671471][T14947] ? __pfx___lock_acquire+0x10/0x10 [ 541.673302][T14947] do_filp_open+0x20c/0x470 [ 541.674921][T14947] ? __pfx_do_filp_open+0x10/0x10 [ 541.676670][T14947] ? find_held_lock+0x2d/0x110 [ 541.678365][T14947] ? alloc_fd+0x41f/0x760 [ 541.679868][T14947] do_sys_openat2+0x17a/0x1e0 [ 541.681518][T14947] ? __pfx_do_sys_openat2+0x10/0x10 [ 541.683330][T14947] ? __fget_files+0x206/0x3a0 [ 541.685036][T14947] __ia32_compat_sys_openat+0x16e/0x210 [ 541.687062][T14947] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 541.689285][T14947] ? ksys_write+0x1ba/0x250 [ 541.690926][T14947] __do_fast_syscall_32+0x73/0x120 [ 541.692466][T14947] do_fast_syscall_32+0x32/0x80 [ 541.693679][T14947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 541.695398][T14947] RIP: 0023:0xf749e579 [ 541.696576][T14947] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 541.701450][T14947] RSP: 002b:00000000f5165490 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 541.703556][T14947] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f51654e0 [ 541.705600][T14947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f748dff4 [ 541.707629][T14947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.709681][T14947] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 541.711790][T14947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.713845][T14947] [ 541.715434][T14947] ERROR: Out of memory at tomoyo_realpath_from_path. [ 542.328396][T14957] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 542.734875][ T6037] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 542.894588][ T6037] usb 6-1: Using ep0 maxpacket: 32 [ 542.900512][ T6037] usb 6-1: config 127 has an invalid interface number: 147 but max is 3 [ 542.902659][ T6037] usb 6-1: config 127 has an invalid interface number: 246 but max is 3 [ 542.904998][ T6037] usb 6-1: config 127 has an invalid interface number: 96 but max is 3 [ 542.907086][ T6037] usb 6-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 542.909358][ T6037] usb 6-1: config 127 has an invalid interface number: 195 but max is 3 [ 542.911482][ T6037] usb 6-1: config 127 has an invalid interface number: 70 but max is 3 [ 542.913594][ T6037] usb 6-1: config 127 has an invalid descriptor of length 18, skipping remainder of the config [ 542.916526][ T6037] usb 6-1: config 127 has 5 interfaces, different from the descriptor's value: 4 [ 542.924525][ T6037] usb 6-1: config 127 has no interface number 0 [ 542.929187][ T6037] usb 6-1: config 127 has no interface number 1 [ 542.930797][ T6037] usb 6-1: config 127 has no interface number 2 [ 542.932509][ T6037] usb 6-1: config 127 has no interface number 3 [ 542.934142][ T6037] usb 6-1: config 127 has no interface number 4 [ 542.936204][ T6037] usb 6-1: config 127 interface 147 altsetting 12 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 542.939080][ T6037] usb 6-1: config 127 interface 147 altsetting 12 endpoint 0xA has invalid wMaxPacketSize 0 [ 542.941940][ T6037] usb 6-1: config 127 interface 147 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 542.944736][ T6037] usb 6-1: config 127 interface 147 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 542.947518][ T6037] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xA, skipping [ 542.950340][ T6037] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 542.953177][ T6037] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 542.956119][ T6037] usb 6-1: config 127 interface 246 altsetting 128 has an endpoint descriptor with address 0x3C, changing to 0xC [ 542.959177][ T6037] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 542.961996][ T6037] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 542.964858][ T6037] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 542.967677][ T6037] usb 6-1: config 127 interface 246 altsetting 128 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 542.971095][ T6037] usb 6-1: too many endpoints for config 127 interface 96 altsetting 47: 60, using maximum allowed: 30 [ 542.973928][ T6037] usb 6-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xF, skipping [ 542.976999][ T6037] usb 6-1: config 127 interface 96 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 542.980042][ T6037] usb 6-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0x2, skipping [ 542.982826][ T6037] usb 6-1: config 127 interface 96 altsetting 47 bulk endpoint 0x6 has invalid maxpacket 64 [ 542.985601][ T6037] usb 6-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xE, skipping [ 542.988385][ T6037] usb 6-1: config 127 interface 96 altsetting 47 has 6 endpoint descriptors, different from the interface descriptor's value: 60 [ 542.991812][ T6037] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 542.994898][ T6037] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 542.997751][ T6037] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xC, skipping [ 543.000604][ T6037] usb 6-1: config 127 interface 195 altsetting 247 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 543.003466][ T6037] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 543.006398][ T6037] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 543.009218][ T6037] usb 6-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 543.012078][ T6037] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 543.014976][ T6037] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 543.017803][ T6037] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x2, skipping [ 543.020632][ T6037] usb 6-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 543.023611][ T6037] usb 6-1: config 127 interface 70 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 543.027022][ T6037] usb 6-1: config 127 interface 147 has no altsetting 0 [ 543.028815][ T6037] usb 6-1: config 127 interface 246 has no altsetting 0 [ 543.030623][ T6037] usb 6-1: config 127 interface 96 has no altsetting 0 [ 543.032404][ T6037] usb 6-1: config 127 interface 195 has no altsetting 0 [ 543.034217][ T6037] usb 6-1: config 127 interface 70 has no altsetting 0 [ 543.038396][ T6037] usb 6-1: New USB device found, idVendor=2c7c, idProduct=012b, bcdDevice=31.c0 [ 543.040803][ T6037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.042876][ T6037] usb 6-1: Product: 岀ﳘášåªœêž ãŒˆéˆ€é‘뼷⃜ã¶á» åœŒé¦´å‘¾â¢Žç›·ïº‡ìŒá¹²èŠ¦å“©å‘¾ì‚¼ä™â™¥ì¹ç¶‘⇙퇉蔸ꨢ촞씅èžážè¿ì˜¸ì„¾é€‘é¿è¥»ä¤¥é‡¨âœ¼ [ 543.047087][ T6037] usb 6-1: Manufacturer: 蓒笜㹕蛿è«â‘ˆç„¹ï¥”腷枮刡ಅᛳ從ྀ임ïˆè±¤ç’ïšíˆ¥ëžìî¥â”¡ã«ªî‚·ä˜¤ê¹§è¡¬î–¨î•¹âå‹è‚†Òœêª¥ï±žã¥¦ï¡¿ï›ªç„½æ½¼å® ä–”഻ំ䔠鮳ꅒ䚛綪 [ 543.051671][ T6037] usb 6-1: SerialNumber: 䀊 [ 543.258514][T14962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.263066][ T6037] option 6-1:127.147: GSM modem (1-port) converter detected [ 543.273393][ T6037] usb 6-1: USB disconnect, device number 75 [ 543.276740][ T6037] option 6-1:127.147: device disconnected [ 543.448451][ T39] audit: type=1326 audit(1732164169.368:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7fc00000 [ 543.453969][ T39] audit: type=1326 audit(1732164169.368:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb6579 code=0x7fc00000 [ 543.461311][ T39] audit: type=1326 audit(1732164169.368:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7fc00000 [ 543.467178][ T39] audit: type=1326 audit(1732164169.368:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7fc00000 [ 543.472677][ T39] audit: type=1326 audit(1732164169.368:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7fc00000 [ 543.479126][ T39] audit: type=1326 audit(1732164169.368:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7fc00000 [ 543.484861][ T39] audit: type=1326 audit(1732164169.368:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7fc00000 [ 543.490373][ T39] audit: type=1326 audit(1732164169.368:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.2323" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7fc00000 [ 543.627719][T14978] veth0_To_bridg: entered allmulticast mode [ 543.630118][T14978] tunl0: entered allmulticast mode [ 543.633202][T14978] gre0: entered allmulticast mode [ 543.638277][T14978] gretap0: entered allmulticast mode [ 543.641411][T14978] erspan0: entered allmulticast mode [ 543.645733][T14978] ip_vti0: entered allmulticast mode [ 543.649045][T14978] ip6_vti0: entered allmulticast mode [ 543.652313][T14978] sit0: entered allmulticast mode [ 543.655596][T14978] ip6tnl0: entered allmulticast mode [ 543.658296][T14978] ip6gre0: entered allmulticast mode [ 543.663363][T14978] syz_tun: entered allmulticast mode [ 543.667050][T14978] ip6gretap0: entered allmulticast mode [ 543.670341][T14978] bridge0: entered allmulticast mode [ 543.675143][T14978] vcan0: entered allmulticast mode [ 543.677735][T14978] bond0: entered allmulticast mode [ 543.684428][T14978] team0: entered allmulticast mode [ 543.689856][T14978] dummy0: entered allmulticast mode [ 543.693242][T14978] nlmon0: entered allmulticast mode [ 543.695705][T14978] caif0: entered allmulticast mode [ 543.697522][T14978] batadv0: entered allmulticast mode [ 543.700603][T14978] vxcan0: entered allmulticast mode [ 543.702702][T14978] vxcan1: entered allmulticast mode [ 543.707146][T14978] veth0: entered allmulticast mode [ 543.712995][T14978] veth1: entered allmulticast mode [ 543.724410][T14978] wg0: entered allmulticast mode [ 543.728957][T14978] wg1: entered allmulticast mode [ 543.731789][T14978] wg2: entered allmulticast mode [ 543.737504][T14978] veth0_to_bridge: entered allmulticast mode [ 543.742277][T14978] bridge_slave_0: entered allmulticast mode [ 543.747174][T14978] veth1_to_bridge: entered allmulticast mode [ 543.751027][T14978] bridge_slave_1: entered allmulticast mode [ 543.753940][T14978] veth0_to_bond: entered allmulticast mode [ 543.759334][T14978] bond_slave_0: entered allmulticast mode [ 543.765546][T14978] veth1_to_bond: entered allmulticast mode [ 543.768943][T14978] bond_slave_1: entered allmulticast mode [ 543.771050][T14978] veth0_to_team: entered allmulticast mode [ 543.773577][T14978] team_slave_0: entered allmulticast mode [ 543.778773][T14978] veth1_to_team: entered allmulticast mode [ 543.781868][T14978] team_slave_1: entered allmulticast mode [ 543.785616][T14978] veth0_to_batadv: entered allmulticast mode [ 543.789758][T14978] batadv_slave_0: entered allmulticast mode [ 543.793718][T14978] veth1_to_batadv: entered allmulticast mode [ 543.806383][T14978] batadv_slave_1: entered allmulticast mode [ 543.809691][T14978] xfrm0: entered allmulticast mode [ 543.813013][T14978] veth0_to_hsr: entered allmulticast mode [ 543.817278][T14978] hsr_slave_0: entered allmulticast mode [ 543.820563][T14978] veth1_to_hsr: entered allmulticast mode [ 543.824012][T14978] hsr_slave_1: entered allmulticast mode [ 543.829488][T14978] hsr0: entered allmulticast mode [ 543.833387][T14978] veth1_virt_wifi: entered allmulticast mode [ 543.837825][T14978] veth0_virt_wifi: entered allmulticast mode [ 543.840392][T14978] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 543.843308][T14978] veth1_macvtap: entered allmulticast mode [ 543.848860][T14978] veth0_macvtap: entered allmulticast mode [ 543.852861][T14978] macvtap0: entered allmulticast mode [ 543.858370][T14978] macsec0: entered allmulticast mode [ 543.861456][T14978] geneve0: entered allmulticast mode [ 543.864369][T14978] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.867940][T14978] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.870819][T14978] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.873457][T14978] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.877919][T14978] geneve1: entered allmulticast mode [ 543.888036][T14978] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 543.891501][T14978] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 543.895840][T14978] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 543.902643][T14978] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 543.914126][T14978] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 543.919989][T14978] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 543.923400][T14978] vxcan2: entered allmulticast mode [ 543.925418][T14978] vxcan3: entered allmulticast mode [ 544.010252][ T5838] hid-generic 0000:0000:0000.00A7: hidraw1: HID v0.00 Device [syz1] on syz1 [ 544.056171][T14994] input: syz1 as /devices/virtual/input/input258 [ 544.172836][T15003] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 544.841805][T15028] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 544.928526][T15031] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 544.974533][T14052] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 545.124621][T14052] usb 6-1: Using ep0 maxpacket: 32 [ 545.128282][T14052] usb 6-1: config 127 has an invalid interface number: 147 but max is 3 [ 545.130429][T14052] usb 6-1: config 127 has an invalid interface number: 246 but max is 3 [ 545.132564][T14052] usb 6-1: config 127 has an invalid interface number: 96 but max is 3 [ 545.135337][T14052] usb 6-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 545.137880][T14052] usb 6-1: config 127 has an invalid interface number: 195 but max is 3 [ 545.140636][T14052] usb 6-1: config 127 has an invalid interface number: 70 but max is 3 [ 545.142805][T14052] usb 6-1: config 127 has an invalid descriptor of length 18, skipping remainder of the config [ 545.145943][T14052] usb 6-1: config 127 has 5 interfaces, different from the descriptor's value: 4 [ 545.148382][T14052] usb 6-1: config 127 has no interface number 0 [ 545.150008][T14052] usb 6-1: config 127 has no interface number 1 [ 545.151637][T14052] usb 6-1: config 127 has no interface number 2 [ 545.153268][T14052] usb 6-1: config 127 has no interface number 3 [ 545.155327][T14052] usb 6-1: config 127 has no interface number 4 [ 545.156984][T14052] usb 6-1: config 127 interface 147 altsetting 12 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 545.159781][T14052] usb 6-1: config 127 interface 147 altsetting 12 endpoint 0xA has invalid wMaxPacketSize 0 [ 545.162378][T14052] usb 6-1: config 127 interface 147 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 545.165639][T14052] usb 6-1: config 127 interface 147 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 545.168441][T14052] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xA, skipping [ 545.171240][T14052] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 545.174074][T14052] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 545.177212][T14052] usb 6-1: config 127 interface 246 altsetting 128 has an endpoint descriptor with address 0x3C, changing to 0xC [ 545.180258][T14052] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 545.183082][T14052] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 545.186243][T14052] usb 6-1: config 127 interface 246 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 545.189083][T14052] usb 6-1: config 127 interface 246 altsetting 128 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 545.192516][T14052] usb 6-1: too many endpoints for config 127 interface 96 altsetting 47: 60, using maximum allowed: 30 [ 545.196171][T14052] usb 6-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xF, skipping [ 545.199122][T14052] usb 6-1: config 127 interface 96 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 545.201966][T14052] usb 6-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0x2, skipping [ 545.204815][T14052] usb 6-1: config 127 interface 96 altsetting 47 bulk endpoint 0x6 has invalid maxpacket 64 [ 545.207411][T14052] usb 6-1: config 127 interface 96 altsetting 47 has a duplicate endpoint with address 0xE, skipping [ 545.210197][T14052] usb 6-1: config 127 interface 96 altsetting 47 has 6 endpoint descriptors, different from the interface descriptor's value: 60 [ 545.213622][T14052] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 545.216564][T14052] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 545.219374][T14052] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xC, skipping [ 545.222202][T14052] usb 6-1: config 127 interface 195 altsetting 247 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 545.225350][T14052] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 545.228163][T14052] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 545.230962][T14052] usb 6-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 545.233798][T14052] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 545.236810][T14052] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 545.239643][T14052] usb 6-1: config 127 interface 195 altsetting 247 has a duplicate endpoint with address 0x2, skipping [ 545.242333][T14052] usb 6-1: config 127 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 545.245358][T14052] usb 6-1: config 127 interface 70 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 545.248759][T14052] usb 6-1: config 127 interface 147 has no altsetting 0 [ 545.250794][T14052] usb 6-1: config 127 interface 246 has no altsetting 0 [ 545.252618][T14052] usb 6-1: config 127 interface 96 has no altsetting 0 [ 545.254409][T14052] usb 6-1: config 127 interface 195 has no altsetting 0 [ 545.257073][T14052] usb 6-1: config 127 interface 70 has no altsetting 0 [ 545.260375][T14052] usb 6-1: New USB device found, idVendor=2c7c, idProduct=012b, bcdDevice=31.c0 [ 545.262701][T14052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.265053][T14052] usb 6-1: Product: 岀ﳘášåªœêž ãŒˆéˆ€é‘뼷⃜ã¶á» åœŒé¦´å‘¾â¢Žç›·ïº‡ìŒá¹²èŠ¦å“©å‘¾ì‚¼ä™â™¥ì¹ç¶‘⇙퇉蔸ꨢ촞씅èžážè¿ì˜¸ì„¾é€‘é¿è¥»ä¤¥é‡¨âœ¼ [ 545.269152][T14052] usb 6-1: Manufacturer: 蓒笜㹕蛿è«â‘ˆç„¹ï¥”腷枮刡ಅᛳ從ྀ임ïˆè±¤ç’ïšíˆ¥ëžìî¥â”¡ã«ªî‚·ä˜¤ê¹§è¡¬î–¨î•¹âå‹è‚†Òœêª¥ï±žã¥¦ï¡¿ï›ªç„½æ½¼å® ä–”഻ំ䔠鮳ꅒ䚛綪 [ 545.273768][T14052] usb 6-1: SerialNumber: 䀊 [ 545.482093][T14052] option 6-1:127.147: GSM modem (1-port) converter detected [ 545.484075][T15025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.497709][T14052] usb 6-1: USB disconnect, device number 76 [ 545.500459][T14052] option 6-1:127.147: device disconnected [ 546.142188][T15043] ptrace attach of "/syz-executor exec"[5965] was attempted by "/syz-executor exec"[15043] [ 546.393355][T14052] libceph: connect (1)[c::]:6789 error -101 [ 546.395831][T14052] libceph: mon0 (1)[c::]:6789 connect error [ 546.401761][T14052] libceph: connect (1)[c::]:6789 error -101 [ 546.403465][T14052] libceph: mon0 (1)[c::]:6789 connect error [ 546.474146][T15049] ceph: No mds server is up or the cluster is laggy [ 546.979077][T15059] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.984698][ T5967] Bluetooth: hci0: command tx timeout [ 547.044727][T14052] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 547.075031][T15059] Bluetooth: MGMT ver 1.23 [ 547.151062][T15070] vlan0: entered promiscuous mode [ 547.152476][T15070] gretap0: entered promiscuous mode [ 547.194752][T14052] usb 9-1: Using ep0 maxpacket: 32 [ 547.197911][T14052] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 547.203229][T14052] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 547.209283][T14052] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 547.211423][T14052] usb 9-1: Product: syz [ 547.212510][T14052] usb 9-1: Manufacturer: syz [ 547.213702][T14052] usb 9-1: SerialNumber: syz [ 547.216134][T14052] usb 9-1: config 0 descriptor?? [ 547.224591][T15057] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 547.385499][T14052] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 547.699885][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2352'. [ 547.719802][T15083] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼ [ 547.897414][T15094] syzkaller0: entered promiscuous mode [ 547.899077][T15094] syzkaller0: entered allmulticast mode [ 547.906907][ T12] syzkaller0: tun_net_xmit 48 [ 547.965849][T15094] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 547.967470][T15094] syzkaller0: Linktype set failed because interface is up [ 548.110130][ T35] IPVS: starting estimator thread 0... [ 548.194554][T15113] IPVS: using max 39 ests per chain, 93600 per kthread [ 549.424552][ T35] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 549.544691][T14000] Bluetooth: hci1: command 0x0405 tx timeout [ 549.575462][ T35] usb 5-1: not running at top speed; connect to a high speed hub [ 549.579160][ T35] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 549.581968][ T35] usb 5-1: config 1 interface 0 has no altsetting 0 [ 549.606034][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 549.608427][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.610494][ T35] usb 5-1: Product: 俣킩ᴗ魱켰ᜧᡕ몑贎핉↨⌆ζ㊸ꀓ뮷♗〈㢩摸⭠㮒ᧈ罂志ï„⊢饞ো轥ࠥ녢釔ầ [ 549.614262][ T35] usb 5-1: Manufacturer: ÑŠ [ 549.616839][ T35] usb 5-1: SerialNumber: 䊂裕î›æŸªåŠä œá–¼ã¦€ã–šã²¹â™¸ìº¯â¼“ﱲ㭋崵㛴稪ä±äŒªî®´éˆ½å©’鋃í›â·„à³¹í™¾ïŒµâ“ƒå´¹ìœ…îš‹ì‘›Å‡é¯˜ë½ [ 549.618210][T15136] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 549.760880][ T5838] usb 9-1: USB disconnect, device number 23 [ 550.033810][T15136] fuse: Bad value for 'user_id' [ 550.035354][T15136] fuse: Bad value for 'user_id' [ 550.038862][ T35] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 550.042792][ T35] usb 5-1: USB disconnect, device number 91 [ 550.063238][T15143] fuse: Bad value for 'fd' [ 550.234595][ T8485] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 550.384416][T15155] ptrace attach of "/syz-executor exec"[5965] was attempted by "/syz-executor exec"[15155] [ 550.387821][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'. [ 550.464588][ T8485] usb 9-1: Using ep0 maxpacket: 32 [ 550.467111][ T8485] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 550.471128][ T8485] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 550.473487][ T8485] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 550.475682][ T8485] usb 9-1: Product: syz [ 550.476776][ T8485] usb 9-1: Manufacturer: syz [ 550.477995][ T8485] usb 9-1: SerialNumber: syz [ 550.480454][ T8485] usb 9-1: config 0 descriptor?? [ 550.482176][T15139] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 550.814770][ T8485] usb 9-1: USB disconnect, device number 24 [ 550.830888][T15166] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 550.831744][T15165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2371'. [ 550.837505][T15165] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 550.988058][T15174] vivid-001: disconnect [ 550.991241][T15173] vivid-001: reconnect [ 551.087830][T15180] blktrace: Concurrent blktraces are not allowed on nbd6 [ 551.241695][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2378'. [ 551.241884][T14000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 551.244043][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2378'. [ 551.247980][T14000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 551.254752][T14000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 551.257200][T14000] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 551.259406][T14000] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 551.261498][T14000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 551.331385][T15187] chnl_net:caif_netlink_parms(): no params data found [ 551.399456][T15187] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.401347][T15187] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.403210][T15187] bridge_slave_0: entered allmulticast mode [ 551.405659][T15187] bridge_slave_0: entered promiscuous mode [ 551.410088][T15187] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.411963][T15187] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.413827][T15187] bridge_slave_1: entered allmulticast mode [ 551.416306][T15187] bridge_slave_1: entered promiscuous mode [ 551.440290][T15187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.444004][T15187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.468384][T15187] team0: Port device team_slave_0 added [ 551.468667][ T39] audit: type=1326 audit(1732164177.388:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15201 comm="syz.6.2381" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 551.477017][T15187] team0: Port device team_slave_1 added [ 551.497456][T15187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.499308][T15187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.508565][T15187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.512224][T15187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.514045][T15187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.521769][T15187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.547240][T15187] hsr_slave_0: entered promiscuous mode [ 551.551789][T15187] hsr_slave_1: entered promiscuous mode [ 551.553676][T15187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.556091][T15187] Cannot create hsr debugfs directory [ 551.637484][T15187] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.741713][T15187] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.798964][T15187] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.850667][T15187] bridge0: port 1(netdevsim0) entered disabled state [ 551.864648][T15187] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 551.866953][T15187] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 551.869979][T15187] bridge0: port 1(netdevsim0) entered disabled state [ 551.873709][T15187] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.963317][T15187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 551.967554][T15187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 551.971919][T15187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 551.979313][T15187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 551.993631][T15187] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.996170][T15187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.998731][T15187] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.001223][T15187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.032935][T15187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.044061][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.048925][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.066340][T15187] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.072963][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.074887][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.080685][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.082607][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.161619][T15187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.181607][T15187] veth0_vlan: entered promiscuous mode [ 552.186191][T15187] veth1_vlan: entered promiscuous mode [ 552.198899][T15187] veth0_macvtap: entered promiscuous mode [ 552.202245][T15187] veth1_macvtap: entered promiscuous mode [ 552.208735][T15187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.211547][T15187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.215425][T15187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.223514][T15187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.226374][T15187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.229776][T15187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.234107][T15187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.236498][T15187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.238802][T15187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.241156][T15187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.267769][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.271028][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.285642][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.287678][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.356589][T15217] No source specified [ 552.597566][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2388'. [ 552.599961][T15228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2388'. [ 552.602328][T15228] netlink: 'syz.6.2388': attribute type 11 has an invalid length. [ 552.686382][T15235] kAFS: unparsable volume name [ 552.878922][T15254] blktrace: Concurrent blktraces are not allowed on nbd0 [ 552.920593][T15251] infiniband syz1: set down [ 552.922061][T15251] infiniband syz1: added bond_slave_1 [ 552.960748][T15251] RDS/IB: syz1: added [ 552.962188][T15251] smc: adding ib device syz1 with port count 1 [ 552.964005][T15251] smc: ib device syz1 port 1 has pnetid [ 553.304897][ T5967] Bluetooth: hci2: command tx timeout [ 553.641610][T15277] FAULT_INJECTION: forcing a failure. [ 553.641610][T15277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.645305][T15277] CPU: 3 UID: 0 PID: 15277 Comm: syz.0.2402 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 553.648058][T15277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 553.650921][T15277] Call Trace: [ 553.651833][T15277] [ 553.652638][T15277] dump_stack_lvl+0x16c/0x1f0 [ 553.653920][T15277] should_fail_ex+0x497/0x5b0 [ 553.655196][T15277] __kvm_read_guest_page+0x16b/0x210 [ 553.656630][T15277] kvm_fetch_guest_virt+0x128/0x1a0 [ 553.658027][T15277] __do_insn_fetch_bytes+0x506/0x730 [ 553.659449][T15277] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 553.661035][T15277] ? lock_acquire+0x2f/0xb0 [ 553.662264][T15277] ? kvm_pfn_to_refcounted_page+0x10a/0x5e0 [ 553.663866][T15277] x86_decode_insn+0x1863/0x55a0 [ 553.665199][T15277] ? hlock_class+0x4e/0x130 [ 553.666432][T15277] ? __pfx_x86_decode_insn+0x10/0x10 [ 553.667861][T15277] ? init_decode_cache+0xd/0x210 [ 553.669229][T15277] ? init_emulate_ctxt+0x3a1/0x590 [ 553.670616][T15277] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 553.672093][T15277] ? kvm_get_msr_common+0x2a9/0x24e0 [ 553.673515][T15277] x86_emulate_instruction+0x975/0x1b10 [ 553.675032][T15277] handle_ud+0x104/0x3f0 [ 553.676189][T15277] ? __pfx_handle_ud+0x10/0x10 [ 553.677784][T15277] handle_exception_nmi+0x613/0x1120 [ 553.679207][T15277] ? __pfx_handle_exception_nmi+0x10/0x10 [ 553.680745][T15277] vmx_handle_exit+0x733/0x1ed0 [ 553.682057][T15277] vcpu_run+0x2ab2/0x4ca0 [ 553.683229][T15277] ? __pfx_vcpu_run+0x10/0x10 [ 553.684526][T15277] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 553.686042][T15277] ? rcu_watching_snap_stopped_since+0x60/0x110 [ 553.687718][T15277] ? trace_lock_acquire+0x14a/0x1d0 [ 553.689111][T15277] ? __local_bh_enable_ip+0xa4/0x120 [ 553.690527][T15277] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 553.692061][T15277] ? lock_acquire+0x2f/0xb0 [ 553.693288][T15277] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 553.694819][T15277] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 553.696318][T15277] kvm_vcpu_ioctl+0x6c7/0x1520 [ 553.697609][T15277] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 553.699113][T15277] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 553.700518][T15277] ? tomoyo_path_number_perm+0x190/0x5b0 [ 553.702024][T15277] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 553.703635][T15277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 553.705221][T15277] ? do_vfs_ioctl+0x513/0x1950 [ 553.706517][T15277] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 553.707884][T15277] ? __pfx_lock_release+0x10/0x10 [ 553.709241][T15277] ? trace_lock_acquire+0x14a/0x1d0 [ 553.710646][T15277] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 553.712078][T15277] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 553.713636][T15277] ? __fget_files+0x206/0x3a0 [ 553.714915][T15277] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 553.716479][T15277] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 553.717896][T15277] __do_fast_syscall_32+0x73/0x120 [ 553.719564][T15277] do_fast_syscall_32+0x32/0x80 [ 553.720876][T15277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 553.722581][T15277] RIP: 0023:0xf7f54579 [ 553.723694][T15277] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 553.728800][T15277] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 553.731026][T15277] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000000ae80 [ 553.733139][T15277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 553.735280][T15277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 553.737395][T15277] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 553.739511][T15277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 553.741631][T15277] [ 553.742525][ C3] vkms_vblank_simulate: vblank timer overrun [ 553.893907][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'. [ 553.911286][T15284] IPVS: Unknown mcast interface: ipvlan1 [ 554.061791][T15287] FAULT_INJECTION: forcing a failure. [ 554.061791][T15287] name failslab, interval 1, probability 0, space 0, times 0 [ 554.065802][T15287] CPU: 0 UID: 0 PID: 15287 Comm: syz.0.2406 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 554.068475][T15287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 554.071223][T15287] Call Trace: [ 554.072114][T15287] [ 554.072911][T15287] dump_stack_lvl+0x16c/0x1f0 [ 554.074310][T15287] should_fail_ex+0x497/0x5b0 [ 554.075551][T15287] ? fs_reclaim_acquire+0xae/0x150 [ 554.077304][T15287] should_failslab+0xc2/0x120 [ 554.078912][T15287] __kmalloc_noprof+0xcb/0x410 [ 554.080602][T15287] ? __pfx___debug_object_init+0x10/0x10 [ 554.082560][T15287] bio_kmalloc+0x41/0x70 [ 554.084062][T15287] blk_rq_map_kern+0x3ea/0x760 [ 554.085784][T15287] scsi_execute_cmd+0x379/0xff0 [ 554.087222][T15287] ? kasan_save_stack+0x42/0x60 [ 554.088514][T15287] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 554.089903][T15287] ? __do_fast_syscall_32+0x73/0x120 [ 554.091518][T15287] ? do_fast_syscall_32+0x32/0x80 [ 554.092829][T15287] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 554.094525][T15287] sr_do_ioctl+0x21c/0x830 [ 554.095691][T15287] ? __pfx_sr_do_ioctl+0x10/0x10 [ 554.097120][T15287] sr_read_tocentry.isra.0+0x174/0x530 [ 554.098530][T15287] ? __pfx_sr_read_tocentry.isra.0+0x10/0x10 [ 554.100123][T15287] ? __pfx_sr_read_tochdr.isra.0+0x10/0x10 [ 554.101641][T15287] ? hlock_class+0x4e/0x130 [ 554.102829][T15287] sr_audio_ioctl+0x277/0x2e0 [ 554.104062][T15287] ? __pfx_sr_audio_ioctl+0x10/0x10 [ 554.105406][T15287] ? __pfx_scsi_test_unit_ready+0x10/0x10 [ 554.106881][T15287] ? hlock_class+0x4e/0x130 [ 554.108078][T15287] ? __lock_acquire+0x15a9/0x3c40 [ 554.109392][T15287] cdrom_count_tracks+0x3df/0x7e0 [ 554.110702][T15287] ? __pfx_cdrom_count_tracks+0x10/0x10 [ 554.112140][T15287] ? __pfx_sr_drive_status+0x10/0x10 [ 554.113556][T15287] ? lock_acquire.part.0+0x11b/0x380 [ 554.115063][T15287] cdrom_open+0x73a/0x2680 [ 554.116414][T15287] ? __pfx_cdrom_open+0x10/0x10 [ 554.118115][T15287] ? sr_block_open+0x167/0x270 [ 554.119807][T15287] ? trace_contention_end+0xea/0x140 [ 554.121653][T15287] ? __mutex_lock+0x1cc/0xa60 [ 554.123324][T15287] ? __pfx_lock_release+0x10/0x10 [ 554.125265][T15287] ? sr_block_open+0x167/0x270 [ 554.126912][T15287] ? __pfx___mutex_lock+0x10/0x10 [ 554.128642][T15287] ? lockdep_hardirqs_on+0x7c/0x110 [ 554.129989][T15287] ? __pfx_disk_check_media_change+0x10/0x10 [ 554.131541][T15287] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 554.133043][T15287] sr_block_open+0x174/0x270 [ 554.134262][T15287] ? __pfx_sr_block_open+0x10/0x10 [ 554.135588][T15287] ? __pfx_sr_block_open+0x10/0x10 [ 554.136947][T15287] blkdev_get_whole+0x96/0x290 [ 554.138207][T15287] bdev_open+0x2c7/0xe20 [ 554.139318][T15287] blkdev_open+0x329/0x400 [ 554.140497][T15287] do_dentry_open+0x6ca/0x1530 [ 554.141743][T15287] ? __pfx_blkdev_open+0x10/0x10 [ 554.143028][T15287] vfs_open+0x82/0x3f0 [ 554.144103][T15287] ? may_open+0x1f2/0x400 [ 554.145255][T15287] path_openat+0x1e6a/0x2d60 [ 554.146470][T15287] ? __pfx_path_openat+0x10/0x10 [ 554.147772][T15287] ? __pfx___lock_acquire+0x10/0x10 [ 554.149133][T15287] do_filp_open+0x20c/0x470 [ 554.150318][T15287] ? __pfx_do_filp_open+0x10/0x10 [ 554.151655][T15287] ? find_held_lock+0x2d/0x110 [ 554.152881][T15287] ? alloc_fd+0x41f/0x760 [ 554.153989][T15287] do_sys_openat2+0x17a/0x1e0 [ 554.155217][T15287] ? __pfx_do_sys_openat2+0x10/0x10 [ 554.156568][T15287] ? __pfx___schedule+0x10/0x10 [ 554.157828][T15287] __ia32_compat_sys_openat+0x16e/0x210 [ 554.159259][T15287] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 554.160824][T15287] ? ksys_write+0x1ba/0x250 [ 554.161999][T15287] __do_fast_syscall_32+0x73/0x120 [ 554.163317][T15287] do_fast_syscall_32+0x32/0x80 [ 554.164585][T15287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 554.166212][T15287] RIP: 0023:0xf7f54579 [ 554.167268][T15287] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 554.172448][T15287] RSP: 002b:00000000f50b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 554.174869][T15287] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000040 [ 554.176944][T15287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.179047][T15287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.181007][T15287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 554.183088][T15287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.185152][T15287] [ 554.485894][T15295] input input259: cannot allocate more than FF_MAX_EFFECTS effects [ 554.557154][T15300] FAULT_INJECTION: forcing a failure. [ 554.557154][T15300] name failslab, interval 1, probability 0, space 0, times 0 [ 554.560586][T15300] CPU: 3 UID: 0 PID: 15300 Comm: syz.4.2410 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 554.563293][T15300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 554.566296][T15300] Call Trace: [ 554.567178][T15300] [ 554.567973][T15300] dump_stack_lvl+0x16c/0x1f0 [ 554.569209][T15300] should_fail_ex+0x497/0x5b0 [ 554.570448][T15300] ? fs_reclaim_acquire+0xae/0x150 [ 554.571796][T15300] should_failslab+0xc2/0x120 [ 554.573036][T15300] __kmalloc_noprof+0xcb/0x410 [ 554.574304][T15300] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 554.575768][T15300] tomoyo_realpath_from_path+0xbf/0x710 [ 554.577200][T15300] ? tomoyo_path_number_perm+0x235/0x5b0 [ 554.578673][T15300] tomoyo_path_number_perm+0x248/0x5b0 [ 554.580109][T15300] ? tomoyo_path_number_perm+0x235/0x5b0 [ 554.581580][T15300] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 554.583155][T15300] ? __pfx_lock_release+0x10/0x10 [ 554.584514][T15300] ? trace_lock_acquire+0x14a/0x1d0 [ 554.585882][T15300] ? lock_acquire+0x2f/0xb0 [ 554.587078][T15300] ? __fget_files+0x40/0x3a0 [ 554.588302][T15300] ? __fget_files+0x206/0x3a0 [ 554.589535][T15300] security_file_ioctl_compat+0x9b/0x240 [ 554.590980][T15300] __do_compat_sys_ioctl+0x4e/0x2c0 [ 554.592351][T15300] __do_fast_syscall_32+0x73/0x120 [ 554.593697][T15300] do_fast_syscall_32+0x32/0x80 [ 554.595006][T15300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 554.596676][T15300] RIP: 0023:0xf7f62579 [ 554.597764][T15300] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 554.602741][T15300] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 554.604928][T15300] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000004070aea0 [ 554.606989][T15300] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.609096][T15300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.611157][T15300] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 554.613234][T15300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.615309][T15300] [ 554.616237][ C3] vkms_vblank_simulate: vblank timer overrun [ 554.618362][T15300] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.056805][T15312] ceph: No mds server is up or the cluster is laggy [ 555.059774][ T8485] libceph: connect (1)[c::]:6789 error -101 [ 555.061638][ T8485] libceph: mon0 (1)[c::]:6789 connect error [ 555.237991][T15321] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 555.384615][ T5967] Bluetooth: hci2: command tx timeout [ 555.844984][ T1011] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 556.445032][T14052] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 556.742081][ T58] hid-generic 0000:0000:0000.00A8: hidraw1: HID v0.00 Device [syz1] on syz1 [ 556.748382][T15373] input: syz1 as /devices/virtual/input/input260 [ 556.806551][T15376] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 557.474535][ T5967] Bluetooth: hci2: command tx timeout [ 559.545129][ T5967] Bluetooth: hci2: command tx timeout [ 562.186221][ T1408] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.513854][T15411] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 568.540267][T15411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2431'. [ 568.828503][T15422] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 569.452285][T15427] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 569.787218][ T39] audit: type=1326 audit(1732164195.708:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15433 comm="syz.1.2435" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x0 [ 570.091204][T15439] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2437'. [ 570.116645][T15440] overlay: ./file0 is not a directory [ 570.120594][T15439] netfs: Duplicate cookie detected [ 570.121974][T15439] netfs: O-cookie c=00000008 [fl=4000 na=0 nA=0 s=-] [ 570.123708][T15439] netfs: O-cookie V=0000000a [9p,syz,] [ 570.125302][T15439] netfs: O-key=[8] '6327340200000000' [ 570.126705][T15439] netfs: N-cookie c=0000000a [fl=8 na=0 nA=0 s=-] [ 570.128340][T15439] netfs: N-cookie V=0000000a [9p,syz,] [ 570.129724][T15439] netfs: N-key=[8] '6327340200000000' [ 570.258354][T15437] /dev/sr0: Can't open blockdev [ 570.847643][T15451] netlink: 'syz.4.2439': attribute type 10 has an invalid length. [ 570.889016][T15451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.900729][T15451] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 570.904610][ T5967] Bluetooth: hci0: command tx timeout [ 570.921289][T15452] netlink: 'syz.1.2440': attribute type 4 has an invalid length. [ 570.937452][T15452] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2440'. [ 570.940523][T15452] netlink: 'syz.1.2440': attribute type 1 has an invalid length. [ 571.310309][T15467] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 572.004542][ T5998] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 572.166607][T15483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2450'. [ 572.169042][T15483] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2450'. [ 572.174628][ T5998] usb 9-1: Using ep0 maxpacket: 8 [ 572.183483][ T5998] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 572.186393][ T5998] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 572.188852][ T5998] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 572.191261][ T5998] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 572.195919][ T5998] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.199477][ T5998] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 572.201739][ T5998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.255012][T15493] syzkaller0: entered allmulticast mode [ 572.257700][T15491] syzkaller0: left allmulticast mode [ 572.408527][T15472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.411369][T15472] netdevsim0: mtu less than device minimum [ 572.528484][T15516] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 572.676735][T15524] trusted_key: syz.0.2467 sent an empty control message without MSG_MORE. [ 573.267428][T15535] vlan0: entered promiscuous mode [ 573.386528][T15540] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2473'. [ 573.389062][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2473'. [ 573.429364][ T5998] usb 9-1: usb_control_msg returned -71 [ 573.430876][ T5998] usbtmc 9-1:16.0: can't read capabilities [ 573.437071][ T5998] usb 9-1: USB disconnect, device number 25 [ 573.462934][T14000] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 573.467959][T14000] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 573.477572][T14000] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 573.490145][T14000] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 573.492362][T14000] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 573.494358][T14000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 573.586836][T15561] netlink: 'syz.6.2481': attribute type 39 has an invalid length. [ 573.599137][T15543] chnl_net:caif_netlink_parms(): no params data found [ 573.643362][T15543] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.645375][T15543] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.647250][T15543] bridge_slave_0: entered allmulticast mode [ 573.649232][T15543] bridge_slave_0: entered promiscuous mode [ 573.651619][T15543] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.653501][T15543] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.655482][T15543] bridge_slave_1: entered allmulticast mode [ 573.657440][T15543] bridge_slave_1: entered promiscuous mode [ 573.678829][T15543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.682999][T15543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.704373][T15543] team0: Port device team_slave_0 added [ 573.709574][T15543] team0: Port device team_slave_1 added [ 573.738005][T15543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.740334][T15543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.749930][T15543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.754775][T15543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.757092][T15543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.766535][T15543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.789637][T15543] hsr_slave_0: entered promiscuous mode [ 573.792136][T15543] hsr_slave_1: entered promiscuous mode [ 573.792597][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2484'. [ 573.797740][T15543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.801011][T15543] Cannot create hsr debugfs directory [ 573.875907][T15543] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.974214][T15543] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.043380][T15543] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.213051][T15543] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 574.216669][T15543] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 574.220198][T15543] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 574.223589][T15543] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 574.239872][T15543] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.242250][T15543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.244867][T15543] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.247208][T15543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.272313][T15543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.280378][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.284164][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.301951][T15543] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.314129][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.316658][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.329733][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.331519][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.367896][T15609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2492'. [ 574.428881][T15543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.445711][T15543] veth0_vlan: entered promiscuous mode [ 574.450984][T15543] veth1_vlan: entered promiscuous mode [ 574.463412][T15543] veth0_macvtap: entered promiscuous mode [ 574.467705][T15543] veth1_macvtap: entered promiscuous mode [ 574.473558][T15543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.477903][T15543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.481132][T15543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.484794][T15543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.489026][T15543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.494866][T15543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.498244][T15543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.501478][T15543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.505819][T15543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.510048][T15543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.515346][T15543] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.518272][T15543] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.521192][T15543] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.524077][T15543] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.551162][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.553276][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.561887][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.563992][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.102512][T15677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2513'. [ 575.252859][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'. [ 575.402982][T15697] netlink: 'syz.4.2520': attribute type 1 has an invalid length. [ 575.544752][T14000] Bluetooth: hci3: command tx timeout [ 575.642217][T15721] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 575.643347][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 575.645406][T15721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2532'. [ 575.696341][T15726] netlink: 'syz.0.2532': attribute type 4 has an invalid length. [ 575.812872][T15741] netlink: 'syz.6.2540': attribute type 3 has an invalid length. [ 575.815384][T15741] netlink: 'syz.6.2540': attribute type 7 has an invalid length. [ 575.817382][T15741] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2540'. [ 576.793392][T15780] Bluetooth: MGMT ver 1.23 [ 576.849218][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2559'. [ 576.914624][T15792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2561'. [ 576.943460][T15800] netlink: 'syz.0.2563': attribute type 10 has an invalid length. [ 576.987630][T15803] dccp_close: ABORT with 1 bytes unread [ 577.006052][T15807] syzkaller1: entered promiscuous mode [ 577.007506][T15807] syzkaller1: entered allmulticast mode [ 577.170154][T15820] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2571'. [ 577.220019][ T39] audit: type=1107 audit(1732164203.138:551): pid=15824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 577.307893][T15841] bridge_slave_1: left allmulticast mode [ 577.332236][T15841] bridge_slave_1: left promiscuous mode [ 577.333753][T15841] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.338489][T15841] bridge1: port 1(bridge_slave_1) entered blocking state [ 577.340811][T15841] bridge1: port 1(bridge_slave_1) entered disabled state [ 577.342737][T15841] bridge_slave_1: entered allmulticast mode [ 577.348494][T15841] bridge_slave_1: entered promiscuous mode [ 577.448167][T15851] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 577.450499][T15851] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 577.492022][T15861] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 577.634630][T14000] Bluetooth: hci3: command tx timeout [ 577.704735][T14000] Bluetooth: hci0: command tx timeout [ 577.725352][T15887] netlink: 'syz.0.2602': attribute type 1 has an invalid length. [ 577.727333][T15887] netlink: 'syz.0.2602': attribute type 4 has an invalid length. [ 579.714581][T14000] Bluetooth: hci3: command tx timeout [ 581.252562][T15985] __nla_validate_parse: 4 callbacks suppressed [ 581.252573][T15985] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2641'. [ 581.315615][T15997] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2647'. [ 581.337218][T16001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2648'. [ 581.342247][T16001] dummy0: entered promiscuous mode [ 581.345169][T16001] dummy0: left promiscuous mode [ 581.368597][T16005] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2651'. [ 581.429548][T16016] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2656'. [ 581.431741][T16016] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2656'. [ 581.433863][T16016] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2656'. [ 581.436272][T16016] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2656'. [ 581.653427][T16032] netlink: 'syz.4.2662': attribute type 1 has an invalid length. [ 581.794647][T14000] Bluetooth: hci3: command tx timeout [ 582.020477][T16064] netlink: 'syz.6.2677': attribute type 11 has an invalid length. [ 582.151292][T16073] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2680'. [ 582.226357][T16081] netlink: 'syz.6.2684': attribute type 3 has an invalid length. [ 582.389710][T16098] netlink: 468 bytes leftover after parsing attributes in process `syz.6.2692'. [ 582.679410][T16107] hsr_slave_0: left promiscuous mode [ 582.681690][T16107] hsr_slave_1: left promiscuous mode [ 582.812881][T16109] IPVS: Unknown mcast interface: hsr0 [ 582.909942][T16117] netlink: 'syz.4.2700': attribute type 27 has an invalid length. [ 583.096012][T16131] Bluetooth: MGMT ver 1.23 [ 583.127623][T16133] netlink: 'syz.4.2708': attribute type 1 has an invalid length. [ 583.448158][T16160] netlink: 'syz.4.2720': attribute type 21 has an invalid length. [ 583.450231][T16160] IPv6: NLM_F_CREATE should be specified when creating new route [ 583.452360][T16160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 583.454254][T16160] IPv6: NLM_F_CREATE should be set when creating new route [ 583.456252][T16160] IPv6: NLM_F_CREATE should be set when creating new route [ 583.458143][T16160] IPv6: NLM_F_CREATE should be set when creating new route [ 583.593274][T16170] netlink: 'syz.4.2725': attribute type 1 has an invalid length. [ 584.669108][T16209] x_tables: ip_tables: DNAT.2 target: invalid size 48 (kernel) != (user) 56 [ 584.709268][T16215] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 584.927452][T16229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.931919][T16229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.936700][T16229] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 584.940383][T16229] bond0 (unregistering): Released all slaves [ 584.945637][T16230] netlink: 'syz.4.2753': attribute type 10 has an invalid length. [ 584.984770][T16238] tipc: Failed to remove unknown binding: 66,1,1/0:824077371/824077372 [ 585.026749][T16242] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 585.029030][T16242] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 585.542136][T16275] netlink: 'syz.0.2774': attribute type 24 has an invalid length. [ 586.300674][T16290] Set syz1 is full, maxelem 65536 reached [ 586.363897][T16323] bridge2: entered promiscuous mode [ 586.365413][T16323] bridge2: entered allmulticast mode [ 586.400915][T16327] netlink: 'syz.1.2795': attribute type 10 has an invalid length. [ 586.423888][T16327] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 586.498896][T16339] __nla_validate_parse: 9 callbacks suppressed [ 586.498907][T16339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2800'. [ 586.603440][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'. [ 586.663625][T16356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2807'. [ 586.667873][T16356] bridge0: entered promiscuous mode [ 586.670655][T16356] bridge0: left promiscuous mode [ 586.808953][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2813'. [ 586.859629][T16377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2816'. [ 586.956255][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2819'. [ 586.981285][T16387] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 587.038743][T16391] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2821'. [ 587.967684][T16433] sch_fq: defrate 7 ignored. [ 588.085750][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'. [ 588.088239][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'. [ 588.547044][T16453] IPv6: sit1: Disabled Multicast RS [ 588.588566][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2846'. [ 588.747472][ T39] audit: type=1107 audit(1732164214.668:552): pid=16460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 588.952054][T16476] ipvlan2: entered promiscuous mode [ 588.981208][T16476] ipvlan2: entered allmulticast mode [ 588.982592][T16476] vlan0: entered allmulticast mode [ 588.983937][T16476] veth0_vlan: entered allmulticast mode [ 589.051351][T16480] netlink: 'syz.1.2858': attribute type 1 has an invalid length. [ 589.300232][T16502] dvmrp0: entered allmulticast mode [ 589.387018][T16510] IPVS: length: 154 != 24 [ 589.906668][T16538] bridge0: port 3(vlan2) entered blocking state [ 589.908451][T16538] bridge0: port 3(vlan2) entered disabled state [ 589.910273][T16538] vlan2: entered allmulticast mode [ 589.912395][T16538] vlan2: left allmulticast mode [ 590.083646][T16547] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 590.089824][T16547] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 590.322279][T16561] netlink: 'syz.0.2894': attribute type 12 has an invalid length. [ 591.326643][T16601] netlink: 'syz.1.2911': attribute type 5 has an invalid length. [ 591.340897][T16606] netlink: 'syz.6.2913': attribute type 10 has an invalid length. [ 591.529013][T16637] netlink: 'syz.1.2924': attribute type 10 has an invalid length. [ 591.535586][T16637] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.538443][T16637] bond0: (slave team0): Enslaving as an active interface with an up link [ 591.543796][T16637] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 591.547645][T16637] Bluetooth: MGMT ver 1.23 [ 591.740546][T16663] __nla_validate_parse: 11 callbacks suppressed [ 591.740557][T16663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2935'. [ 591.859211][T16666] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.313292][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2937'. [ 592.346355][T16673] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2938'. [ 592.348782][T16673] block nbd0: not configured, cannot reconfigure [ 592.627244][T16709] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2955'. [ 592.629718][T16709] netlink: 264 bytes leftover after parsing attributes in process `syz.6.2955'. [ 592.698312][T16724] syz.1.2961[16724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 592.698362][T16724] syz.1.2961[16724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 592.701474][T16724] syz.1.2961[16724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.179536][T16764] siw: device registration error -23 [ 593.662649][T16774] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2982'. [ 593.804313][T16796] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 593.807952][T16796] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 593.899612][T16817] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2999'. [ 593.959904][T16828] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 593.993235][T16834] tipc: Started in network mode [ 593.994640][T16834] tipc: Node identity 00000000000000002e2d00001b, cluster identity 4711 [ 594.269683][ T39] audit: type=1107 audit(1732164220.188:553): pid=16867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 594.596816][T16913] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3034'. [ 594.859331][T16949] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3044'. [ 595.288882][T16989] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3060'. [ 595.414731][T17001] netlink: 'syz.6.3066': attribute type 39 has an invalid length. [ 595.607466][T17011] netlink: 'syz.1.3070': attribute type 1 has an invalid length. [ 595.821164][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.823129][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.534043][T17060] netlink: 'syz.1.3085': attribute type 1 has an invalid length. [ 596.548348][T17060] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 596.554709][ T1130] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 596.555056][T17060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 596.665678][ T69] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 596.895606][T17084] tipc: Failed to remove unknown binding: 66,1,1/0:3050954182/3050954184 [ 596.898592][T17084] tipc: Failed to remove unknown binding: 66,1,1/0:3050954182/3050954184 [ 596.902069][T17084] tipc: Failed to remove unknown binding: 66,1,1/0:3050954182/3050954184 [ 597.449903][T17108] __nla_validate_parse: 6 callbacks suppressed [ 597.449914][T17108] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3107'. [ 597.520612][T17113] netlink: 'syz.0.3110': attribute type 1 has an invalid length. [ 597.524635][T17113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3110'. [ 597.595013][T17120] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3113'. [ 597.620878][T17122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3114'. [ 597.647537][T17124] GUP no longer grows the stack in syz.6.3115 (17124): 20006000-2000a000 (20005000) [ 597.650456][T17124] CPU: 2 UID: 0 PID: 17124 Comm: syz.6.3115 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 597.653213][T17124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 597.656061][T17124] Call Trace: [ 597.656959][T17124] [ 597.657751][T17124] dump_stack_lvl+0x16c/0x1f0 [ 597.659016][T17124] gup_vma_lookup+0x1d2/0x220 [ 597.660289][T17124] __get_user_pages+0x236/0x3b50 [ 597.661624][T17124] ? hlock_class+0x4e/0x130 [ 597.662849][T17124] ? __lock_acquire+0x15a9/0x3c40 [ 597.664225][T17124] ? __pfx___get_user_pages+0x10/0x10 [ 597.665655][T17124] __gup_longterm_locked+0x5ff/0x1870 [ 597.667101][T17124] ? __pfx___gup_longterm_locked+0x10/0x10 [ 597.668665][T17124] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 597.670184][T17124] ? rwsem_read_trylock+0x12d/0x250 [ 597.671578][T17124] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 597.673042][T17124] ? xdp_umem_create+0x6c8/0x1270 [ 597.674414][T17124] pin_user_pages+0x13f/0x160 [ 597.675846][T17124] ? __pfx_pin_user_pages+0x10/0x10 [ 597.677236][T17124] ? down_read+0xc9/0x330 [ 597.678395][T17124] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 597.679849][T17124] xdp_umem_create+0x73c/0x1270 [ 597.681158][T17124] xsk_setsockopt+0x7e7/0xac0 [ 597.682416][T17124] ? __pfx_xsk_setsockopt+0x10/0x10 [ 597.684131][T17124] ? find_held_lock+0x2d/0x110 [ 597.685751][T17124] ? __pfx_xsk_setsockopt+0x10/0x10 [ 597.687326][T17124] do_sock_setsockopt+0x222/0x480 [ 597.688809][T17124] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 597.690267][T17124] ? lock_acquire+0x2f/0xb0 [ 597.691503][T17124] __sys_setsockopt+0x1a0/0x230 [ 597.692805][T17124] __ia32_sys_setsockopt+0xbc/0x160 [ 597.694196][T17124] ? lockdep_hardirqs_on+0x7c/0x110 [ 597.695591][T17124] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 597.697339][T17124] __do_fast_syscall_32+0x73/0x120 [ 597.698706][T17124] do_fast_syscall_32+0x32/0x80 [ 597.700017][T17124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 597.701793][T17124] RIP: 0023:0xf749e579 [ 597.702945][T17124] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 597.708033][T17124] RSP: 002b:00000000f518655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 597.710219][T17124] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 597.712292][T17124] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000020 [ 597.714373][T17124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 597.716491][T17124] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 597.718554][T17124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 597.720639][T17124] [ 597.887675][T17132] netlink: 'syz.6.3119': attribute type 12 has an invalid length. [ 598.258642][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3131'. [ 598.283488][T17165] netlink: 'syz.4.3132': attribute type 1 has an invalid length. [ 598.309664][T17167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3133'. [ 598.458089][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3137'. [ 598.513752][T17178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3137'. [ 598.603344][T17177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.609285][T17177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.614410][T17177] bond0 (unregistering): Released all slaves [ 598.760484][T17195] tipc: Failed to remove unknown binding: 66,1,1/0:2154467410/2154467412 [ 598.763005][T17195] tipc: Failed to remove unknown binding: 66,1,1/0:2154467410/2154467412 [ 598.766251][T17195] tipc: Failed to remove unknown binding: 66,1,1/0:2154467410/2154467412 [ 598.846792][T17201] syzkaller1: entered promiscuous mode [ 598.848553][T17201] syzkaller1: entered allmulticast mode [ 599.066111][T17226] pim6reg: entered allmulticast mode [ 599.147500][T17225] pim6reg: left allmulticast mode [ 599.274133][T17229] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3160'. [ 599.414851][T17239] netlink: 688 bytes leftover after parsing attributes in process `syz.6.3165'. [ 599.443624][T17241] tipc: Enabling of bearer rejected, failed to enable media [ 599.828146][T17269] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 599.870173][T17274] netlink: 'syz.6.3182': attribute type 10 has an invalid length. [ 599.872305][T17269] netlink: 'syz.1.3179': attribute type 10 has an invalid length. [ 599.875262][T17269] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.877416][T17269] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.883436][T17269] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.886015][T17269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.888507][T17269] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.890408][T17269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.901606][T17269] team0: Port device bridge0 added [ 600.032824][T17298] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 600.916117][T17327] tipc: Can't bind to reserved service type 1 [ 601.082372][T17358] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 601.084275][T17358] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 601.478020][T17380] syzkaller1: entered promiscuous mode [ 601.479559][T17380] syzkaller1: entered allmulticast mode [ 601.531165][T17388] siw: device registration error -23 [ 601.683044][T17408] nicvf0: tun_chr_ioctl cmd 1074025676 [ 601.684601][T17408] nicvf0: owner set to 0 [ 602.182062][T17440] sctp: [Deprecated]: syz.6.3254 (pid 17440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.182062][T17440] Use struct sctp_sack_info instead [ 602.625186][ T57] IPVS: starting estimator thread 0... [ 602.627814][T17462] tipc: Started in network mode [ 602.629148][T17462] tipc: Node identity ac1414aa, cluster identity 4711 [ 602.631163][T17462] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 602.633228][T17462] tipc: Enabled bearer , priority 1 [ 602.714524][T17463] IPVS: using max 39 ests per chain, 93600 per kthread [ 602.764886][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 602.904612][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 603.044506][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 603.184533][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 603.324503][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 603.385049][T17482] batman_adv: batadv0: Adding interface: gretap2 [ 603.386741][T17482] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.393262][T17482] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 603.464588][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 603.576123][T17517] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 603.604528][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 603.746417][ T58] tipc: Node number set to 2886997162 [ 604.091482][ T0] [ 604.092155][ T0] ============================= [ 604.093437][ T0] [ BUG: Invalid wait context ] [ 604.094746][ T0] 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 Not tainted [ 604.097424][ T0] ----------------------------- [ 604.099604][ T0] swapper/0/0 is trying to lock: [ 604.101053][ T0] ffff888073904200 (&trie->lock){..-.}-{3:3}, at: trie_delete_elem+0xb0/0x820 [ 604.103395][ T0] other info that might help us debug this: [ 604.104978][ T0] context-{5:5} [ 604.105899][ T0] 2 locks held by swapper/0/0: [ 604.107170][ T0] #0: ffff88802b43ef18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 604.109765][ T0] #1: ffffffff8ddba680 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d6/0x5a0 [ 604.112293][ T0] stack backtrace: [ 604.113276][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 604.115882][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 604.118655][ T0] Call Trace: [ 604.119558][ T0] [ 604.120457][ T0] dump_stack_lvl+0x116/0x1f0 [ 604.121711][ T0] __lock_acquire+0x878/0x3c40 [ 604.122974][ T0] ? __pfx___lock_acquire+0x10/0x10 [ 604.124361][ T0] ? __lock_acquire+0xcc5/0x3c40 [ 604.125669][ T0] lock_acquire.part.0+0x11b/0x380 [ 604.127028][ T0] ? trie_delete_elem+0xb0/0x820 [ 604.128349][ T0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 604.129846][ T0] ? rcu_is_watching+0x12/0xc0 [ 604.131163][ T0] ? trace_lock_acquire+0x14a/0x1d0 [ 604.132634][ T0] ? trie_delete_elem+0xb0/0x820 [ 604.133964][ T0] ? lock_acquire+0x2f/0xb0 [ 604.135198][ T0] ? trie_delete_elem+0xb0/0x820 [ 604.136508][ T0] _raw_spin_lock_irqsave+0x3a/0x60 [ 604.137878][ T0] ? trie_delete_elem+0xb0/0x820 [ 604.139202][ T0] trie_delete_elem+0xb0/0x820 [ 604.140492][ T0] ? psi_task_switch+0x54b/0x8e0 [ 604.141788][ T0] ? bpf_trace_run4+0x1d6/0x5a0 [ 604.143080][ T0] bpf_prog_5186c38a4019a4cb+0x4b/0x4f [ 604.144507][ T0] bpf_trace_run4+0x245/0x5a0 [ 604.145803][ T0] ? __pfx_bpf_trace_run4+0x10/0x10 [ 604.147173][ T0] ? psi_group_change+0x6dc/0xd20 [ 604.148493][ T0] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 604.150275][ T0] __traceiter_sched_switch+0x6c/0xc0 [ 604.151692][ T0] __schedule+0x1b72/0x5ae0 [ 604.152891][ T0] ? get_jiffies_update+0x14f/0x250 [ 604.154270][ T0] ? tick_nohz_next_event+0x231/0x410 [ 604.155696][ T0] ? __pfx_tick_nohz_next_event+0x10/0x10 [ 604.157190][ T0] ? find_held_lock+0x2d/0x110 [ 604.158452][ T0] ? __pfx___schedule+0x10/0x10 [ 604.159741][ T0] ? asm_sysvec_call_function+0x1a/0x20 [ 604.161215][ T0] ? lockdep_hardirqs_on+0x7c/0x110 [ 604.162588][ T0] schedule_idle+0x5c/0x90 [ 604.163779][ T0] do_idle+0x284/0x3f0 [ 604.164881][ T0] ? __pfx_do_idle+0x10/0x10 [ 604.166112][ T0] cpu_startup_entry+0x4f/0x60 [ 604.167385][ T0] rest_init+0x16b/0x2b0 [ 604.168504][ T0] ? acpi_subsystem_init+0x133/0x180 [ 604.169943][ T0] ? __pfx_x86_late_time_init+0x10/0x10 [ 604.171414][ T0] start_kernel+0x3e4/0x4d0 [ 604.172625][ T0] x86_64_start_reservations+0x18/0x30 [ 604.174084][ T0] x86_64_start_kernel+0xb2/0xc0 [ 604.175411][ T0] common_startup_64+0x13e/0x148 [ 604.176719][ T0] [ 605.714619][ C1] net_ratelimit: 3 callbacks suppressed [ 605.714632][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 606.754531][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 607.794500][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 608.834493][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 609.874493][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 610.904607][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 611.944557][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 612.984557][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 614.024792][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 04:43:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8506cf05 RDI=ffffffff9a667b20 RBP=ffffffff9a667ae0 RSP=ffffffff8da073b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e32312e36 R12=0000000000000000 R13=0000000000000064 R14=ffffffff8506cea0 R15=0000000000000000 RIP=ffffffff8506cf2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72c2290 CR3=000000005df4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000002 RCX=ffffffff8b0b83c0 RDX=ffff8880617f8000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffffffff8cabb860 RSP=ffffc90024b772a8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=00000000000a201e R12=0000000000000000 R13=0000000000000001 R14=0000000000000008 R15=0000000000000000 RIP=ffffffff818d31d2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2d4c4b CR3=0000000052cd6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b4468a0 RCX=ffffffff81812d0c RDX=ffff888051758000 RSI=ffffffff81812ce6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90004db7858 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=00000000000a201e R12=ffffed1005688d15 R13=0000000000000001 R14=ffff88802b4468a8 R15=ffff88802b640180 RIP=ffffffff81812ced RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c38a5f7 CR3=0000000076974000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b740100 RCX=ffffffff81815334 RDX=ffff88801bb88000 RSI=ffffffff8181530f RDI=0000000000000005 RBP=ffffc90000457d78 RSP=ffffc90000457ca0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1bb8b16 R12=1ffff9200008af98 R13=0000000000000001 R14=0000000000000003 R15=ffffed10056e8021 RIP=ffffffff81815311 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffffffffff CR3=0000000076974000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000